last executing test programs: 3m11.880036674s ago: executing program 3 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c014) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m11.513464304s ago: executing program 3 (id=1224): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x30, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x41) recvmmsg(r2, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/14, 0xe}, 0x8}], 0x1, 0x12141, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaafb86dd60f7d8ff009c3c00fe8000000000000000000000000000aaff02000000000000000000000000000100000000009c90780100000001000000abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e94001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a32a5086dc9c6a843b8d6344cf5225f857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc07840a612fe1a814c065cd1094fa8ac8923a6cc482526163958fa4d52fc2d8623"], 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000010c0)=0xde4, &(0x7f0000001100)=0x2) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, 0x0, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) close(r1) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4044800) 3m11.056538868s ago: executing program 3 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e3072dbd7000fedbdf2502000000050004000200000014003585c9cc9f1c5ed3009300000000000000000900030073797a32000000020900010073797a3100000000050004000100000046bdc89145132fb0667ea7e526ce75fd37750f46d2b6afd456a46587800f9bfb43a868247b91c11b55f76e"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'macvlan0\x00', @multicast}) (async) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="20010000000000000032000000ff0000000000ee0000000000000001000000005c3017e1ff80f2b06b2a1c7a44f515440c384d4734d53e0a96edf4aa901fb458bd561e310fe5b737baa65800418b5b0070aa72d976ae73fd7030c457102092b5c4df1e485b35f96d5b54c19157f8b7081f684ecc1c5661af0e1e52b7bec730d616221da654328447c1c149385b5ebbf0fb0cf896", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}], 0x1, 0x8000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x546}, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000010004b04feffffff000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028014000300"/48], 0x48}}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000040), &(0x7f0000000080)) 3m10.713150789s ago: executing program 3 (id=1237): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 3m10.560775483s ago: executing program 3 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xab1bce535b4d3189}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc}, 0x50) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xab1bce535b4d3189}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 3m10.354135157s ago: executing program 3 (id=1242): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@generic="5839c3c709"]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404cc05}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m55.302523s ago: executing program 32 (id=1242): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@generic="5839c3c709"]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404cc05}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m38.73131425s ago: executing program 1 (id=1768): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x1000000, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r5, 0x89eb, 0x0) listen(r4, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1750}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') preadv(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x400}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a40)="bb1f7b933c09a7429118cae1fac4c7f0874e68044c268a665ddfdd75608b64cf6b223f720319ce56f92868049d818e3ddfad880f9fc59414c0d91a167344266c6f8b899e16c72cdff8c36ad540795e611aeaab44600eb775e98ab843d2cf6a059e", 0x61}, {&(0x7f0000001ac0)="bdb6efce52148bdda0b4bb25952c684dbd3b0ac231a1716d7820bfdb62b7cc5d564e2ef4b771b1cda5799eb898eadd87f0f638a5299ad62a71e34c6d7b9d559d330ca6ef4d17b5ac7d10d8ee072498537fa631700392931007a09ca497565d4fd6487f2f0024dd043aded10a23e55c2539919fd4a7cd41c004a19d2656e357d47fb5fffd89b6c1be37333281ba91823ce04c5ea77d0030fd617053b9ae8644a1e1b8a0ac5f8247cf0a44028796c522c4474a8b21a79fe9df2f69b8901cfef7c0b3ec8169d01a89a02cb741de44572a3c99f26e83308954053efbef188778ff4cae054e0016", 0xe5}, {&(0x7f0000001bc0)="46202bd2e6d03e7b1645a588e4518b71ea6458acb2007da0032c6091552e52631d8bca3677bca81fcf3c76a7eaf1eac2b32c5c321fe91e23f4824fa3c0154dbf369849824aebdbba6deae3ffe42327d7e7dc38b82c804da3db7a14a73acc0b3e71a79b81a96eebb32c", 0x69}, {&(0x7f0000001c40)="7001105fb7a6659356da0fc5f965639cb184716d17beef936cf38fa7b38d0bcf1d4e7e57b000e9ab60a16646a6177f555e205b8ffb532bf9e8343e6800f7dd3e4b158e60fad20047fbf0d469572e4b570e6cbae2fa513a88", 0x58}, {&(0x7f0000001cc0)="eacfde85119ab84b688e3e9ae94d2bb78f287091beddecd2c286ac4d4631f078153064ecc62000804274fe9a1afdb00004f14e3042d18d03f4428bfa0c6c85dcb4bc9594684ebc64ee65af82e6f162637b84be8837a0ae328535b155e0fb1a04c9c68d93bd7033a3b3ef815b3658b72eac389d936fcf53f5884441693bdfa8f9bde88997107cda2cc1045d05b90dd38af1819ac9db", 0x95}], 0x5, &(0x7f0000001e00)}}, {{&(0x7f0000001e40)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x2, 0x4, 0x4, 0x4}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001ec0)="943e22f2e98dd69a514a3850e6f5e181c240ce1c23d04fb882963d28563cdebda8f0344bcd7347c1", 0x28}], 0x1}}], 0x2, 0x20000000) 2m38.663692656s ago: executing program 1 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xfffffffffffffc1f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) 2m38.564011847s ago: executing program 1 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m38.487404949s ago: executing program 1 (id=1772): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x2, 0xfff, 0x8000000000000001, 0x4, 0x8, 0xb7be, 0x3, 0x4, 0x5, 0x1, 0x100, 0x3, 0x7, 0x5, 0x1d79c6ed]}, &(0x7f0000000000)=0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={r2, 0x9}, 0x8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="8aa7a229d6272494bd5c6406ccae69bfc04aaa04bb7d10ad823c58524a122536e9d556c882bc2d73ffd7f6e7a3efb492ae54e593bdde448fb0e0a41463cda340ee1fbff58cedc2ae7e51916e4e8ab1f8a06e26f8f157fa318f"], 0x38}}, 0x0) 2m38.388831194s ago: executing program 1 (id=1774): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)={0xbc, 0x0, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1bc7}]}, 0xbc}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m38.314565431s ago: executing program 1 (id=1776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) unshare(0x20000400) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x12, 0x0, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r6, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 2m23.225422703s ago: executing program 33 (id=1776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) unshare(0x20000400) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x12, 0x0, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r6, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 1m31.186554767s ago: executing program 5 (id=2886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xfffffffffffffffb, 0x7, 0x0, 0x55cc2325, 0x1, 0x0, [{0x9, 0x1, 0xe2b, '\x00', 0x8}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800014000000014080002400000001208000340000000040c000480080001006eee7e00040005c00900010073797a30"], 0x110}}, 0x0) 1m31.042649166s ago: executing program 5 (id=2890): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'tunl0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'bridge_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'ip_vti0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x26}}, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa) r3 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'a', ' *:* ', 'rwm\x00'}, 0xa) 1m30.822963947s ago: executing program 5 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40) 1m30.560196341s ago: executing program 5 (id=2896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES64=r6, @ANYRESOCT=0x0], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000000000000080000000200000081000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000020000000200000000000000000000c08c000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r11, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r10}, 0x18) r14 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r14, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000780)={r13, 0x7, 0x5, 0x9}) setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f00000008c0)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff1c4, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0xe, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @jmp={0x5, 0x1, 0x0, 0x1, 0x8, 0xc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2854a17d, 0x0, 0x0, 0x40f00, 0xc, '\x00', r4, @flow_dissector=0x11, r11, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r12, r8, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0xffffffff}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001c3c0000000000000000000000ffffac14140efe8000000000000000000000000000aa3300"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0585b8e22e4a4f8bba9ae4f256b7648aecdcac76a38be1f66669ce6a0600000000000000f7"], 0x0) 1m30.103193144s ago: executing program 5 (id=2902): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000003c0)={0x1008}) ppoll(&(0x7f0000000040)=[{r3, 0x8060}], 0x1, &(0x7f0000000180), &(0x7f0000000200)={[0x38]}, 0x8) 1m29.143408831s ago: executing program 5 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r2, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 1m14.087222583s ago: executing program 34 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r2, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 2.195717669s ago: executing program 6 (id=4288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0x100}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.893757497s ago: executing program 2 (id=4290): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000040)={r11, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a1771970137a5545751bb2649a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0xc, 0x8, 0x20c, 0x2b6, 0x5, 0x1, 0x7, 0x7, r11}, &(0x7f0000000200)=0x20) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.877994178s ago: executing program 6 (id=4296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8940}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x310}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) 1.751195748s ago: executing program 4 (id=4298): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x397e}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3a, 0x3, "e9ffe8a0fba6a50ca56f436694eb30353af0f88f5e607c32dd4b54eee89a56f5fcd697cdd31e71e4e5d84964defb67cbb3dc75725adf"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e253371a30114e535763471fb5286654aa5a4cb2b976bd639156"}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8054}, 0x8041) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x80) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x296}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe9, 0x3, "b8d7ee28e98eae4b3898d0ed1e4d5193c50d6e375aa045f3ce238b961915d9bf8c20312cecf27a97586f7def6ff0c41e75a9ea554591675e492c638ad9bad36beca81791cd70ba189fa0de05c004162c460d06f385d84dc874196ab13d5b4fbbbd47a6aeee4db362ead4db39fad8bf401fbc9fe77f7731628a60088fb1328c7e1e630da7b5be3c6967c0076b15ecc178bd9e9827c2cadbf581ef4371fe35b410e415cd986bd8787c6769033ec78dfc22974728e7a78fbc506bbd87f2c8266de4260cf0efca98632f221d943e6e4316f9ef34fc8bbb0c0089197803156ba2731dd053fd572c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "9a87efbef4c64e4f0bc81575015c7c89490c1fe30c262e030990831ae3b0a1399c093512992336fd506e037f59dcad420762e57cbc3119f68bcc1e40a8ed5946e03360f90c7d76d9ee6e2510ed6d89e3345a475386591d2f17462437b90b5a05085490b7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb7dd}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4c011}, 0x20048010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2080040}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x134, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "83d5c2407b993a8d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22d3adb841ca6bcb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4df2ad44345479a5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "49afcc205a1dbb39"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c163c2b4ea807615"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d00c750ffc68003414514f10c89b51c5f80d27deee07e2476ae7715e2d0f3ca0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2df1e33f029a81a5a06644ab94f3f91f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc32}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa1}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f4e21d99a744c5c817578da412fa6489"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c155bb4795884f88"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b4d1a92004e7118f38f242cc1aca603882864574f96bc780473f7247b70b2292"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c848ec34dbb9e052"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf0a38c2c8c2f70f"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f2f7102e6435f877f059e0710a50d3bbd7d3502544433efe"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = socket(0x3, 0x6, 0x1) bind$inet(r1, &(0x7f0000000900)={0x2, 0x4e23, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000c40)=[@window={0x3, 0x5, 0x400}, @sack_perm], 0x2) bind$rxrpc(r3, &(0x7f0000000c80)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/185, 0xb9}, {&(0x7f0000000f80)=""/109, 0x6d}, {&(0x7f0000001000)=""/78, 0x4e}, {&(0x7f0000001080)=""/66, 0x42}], 0x4, &(0x7f0000001140)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x4e102fbcfbbd8a17) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r3) getsockopt$PNPIPE_IFINDEX(r14, 0x113, 0x2, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000001400)={'sit0\x00', &(0x7f0000001340)={'gretap0\x00', 0x0, 0x1, 0x10, 0x401, 0x9, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x1b, 0x87, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101, @empty, @rand_addr]}, @ssrr={0x89, 0x7, 0x50, [@broadcast]}, @lsrr={0x83, 0xb, 0x94, [@broadcast, @empty]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x26, [@empty, @local, @empty]}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x1}, {@local, 0x7}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0x17}}, {@private=0xa010100, 0x10000}, {@loopback, 0x5}, {@private=0xa010100, 0xfffffffa}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x6c, r15, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x80) ioctl$sock_netdev_private(r13, 0x89f9, &(0x7f0000001540)="6b356aafdd939ef0f45729d0c7ece1ad68936cdc") sendmsg$TIPC_NL_BEARER_SET(r14, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xe0, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x12}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffc87}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x53bd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff15fd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) socket(0x23, 0x6, 0xa2d) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x5881e000) 1.627903759s ago: executing program 6 (id=4301): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r4, 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.35968423s ago: executing program 4 (id=4304): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x0, 0x8, 0xc17, 0x7d5, 0x1, 0x8, 0x10000000, [0x1, 0x3]}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x4a, 0x6, 0xc5, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="307772462d00f5248ef839dc93a9ceafb26d74cd67b751cd422b6a969f737ec21f72a2a23446c84de10ad1ea31bdc71862cf5eae7eebf85b9fdf97da6a5d4584efef1e3629ed1dfcd6cfc39da372ed59173559306e89267e8ef472d8a55ade141ef50f195fd7c3a349bcb672f2139bcf66b1f4eee5c481e9981a8186306fee6f96b5f936df773965e50a175aebb1c5e620271985d32b1eb986d3fcbb688be533ba77046541cae59abaf4b2602c281f8b4f", 0xb1}, {&(0x7f0000000140)="9856ddbb2c3edaa5184db8cbce494a838d13d8ba57700906213aeab1049bfe02cd9c04b951ff922f49154f87e41dcaf556d640e19ac01671ba616d88298e043edd5a5b5252f3f997a152efef6d11e986275c24a59ff24f0713a3622a4651d272b665d22c339dcc0690d564699c2bc3c734545ab82a3173aa3293c4260a7352fdb4f0310a504b52ee357d84edd3631312f6198a6c788c47e9e1a8819cfc0dbe25787e638532e8ca251a1b3a1e0b3ec8cf9efa265391fce1e6359bcc3e98dd7fe071a96571d5014205487239e3afff72928650cb377347d3b620680f289f79c647da93", 0xe2}, {&(0x7f0000000240)="4314cc425dd222083cd0d0c0ee35503a49a2e71ce22d5429acbccfaa23330a1e29baf1a444c82f0d9baa3ff505d57c6b4f40bae6c0d2037068434fb429521010e3a7f35e7e85ee0975e359f219759769b3acfe8e59e1559b616cc1c01b016a96616cc04b06cb4430fdc3c51beb5bc032080dcbb8e11eb06f0bfb41dd1b21e3f78e3dde41cb311fdf38a46dccfb650b41b08364e87ee19a87be703d0200cfa864f38c7162ecc7f4ca251132772336d25736a17f18198f5ab2136e53ec266da2f27d6cc45ecfe8cbed8b7f0c2f86f0c8687efc92815ab35decb13a80b3273af7477ba7ec74c3108b9bb30daef17e7eab6b170a213e1465ecfe18bdb0f035f790124a5f82a541a092b4961e8057eba29bd009b5ed729d3be640fe4be92f97b1d89af7ff15da2f7efdbadba0abb46fa41ca338aa4022143238c6c294e01e6c3e3b6175679aa59786b9249882c922e0480b97e3df635bea64b9a9817a499abdfe0f515e650d2bb6796ca4f8b74f5916f8bc97d53b12d899be97137a4746532ec31617a21114edf3cbd0b50a09fe0e7a1fda34f6216c27561ab804fd0299c3a23c47a602c6f41f4aeb69c415c3ae1a5d5c21fa58ec2312b4dbb661db0e9859d347dc714a86a892bb7cbaa003e6e00a51f89ad68f49725533345268184f474184e1a9f399f2a6c5151eda6860033834a459444792ce9622f147fe5effc720a50a08ea24f75ef303e79602e80bd7e2286e987cc2fa15859dc17bbe9ef25eee1f5111f52ccceb9c220d6a7a7f1d7d2c5bd9fd22ae9c3a055e4c6962acba4e3331053adc8fea0c61618a235bd74089dcbab2a8b9d64776354dde34e77e7580e4443f225d4eacb021c02d0c6cf679513a37d00e3958f44682ef580aa31961c861728d2016e651c6e056a0c9cc32beb93c4b29aa2f66585cf7d5bff63b38f859be28608b2fbddcea7feaad44242ee856f5b3393aa5fa5201544d009f87ca30d783c91cc8f38267183829ddf90cb325a12a83b59479e47f153f89b16cebc69c44c4fb2b34f029136e8b3d8653138b0c861b42a790235976fedb25a6afa698d89d0639034cbe37d3033082e9e5122370313e44dbdd6020c577760d93414816565fc30996118afa2fbf7354868c684a1eff8e7410197a74285e6df6d66b562bba9e315395d0449e5588aec86fd70515ba683fb1afb0a6f39a0b4b76c777217494f07911b142ba0336c91c77ed71e87d9df6d8d0e7daf267049a22bffb144d6b426381d2e9a9a831580a20b26d55c57eb90d7dd017aac34f9092e8f489d98f8ec79ed8a989640ca5cdf3028f5b781bd3bac17c9e706c22139c3f456a4e66eda5a932f1b2b2488c03605f2c0bc66d44808180319ac2d95fc8be79f0d1e8740d86fb6bf45847cbab1cf5930232558121f6d09b533e1b0668e74a8095e1583f58108ea649be7fee3625206b1d25111073bb5b86b7639625471624f616e55e9f47ee32088a128cb84eaaa76d0a32894de24cfc3769140231e71a44a115a788d9f5819a65411256b90d1466cf238215b0d3b62ff2d3d5acda17d76debaaa0106d3604dcda0d4aba9ad59e528e0e320cc9602d4b7719e8aa2e05b519bb66ddf2ac0fdbdc8b1529e2dc06bf53a0bd302975936be86ebf5acf0c57456c5e696d1cd00180ccec3e820bf33aae5cf2f47317e4b0cf18a3598a51433b531c0340e1c442f790549f06bbc0cdbacfc4beff7377bb5c67f7e369c2c0eba18149e34f84156986a549e3f2bebbd9bfb18f9ed0919bb4a7cb4037b61d0376310379ed68c22991b91a4f8ec3b4ca4bc344d1ca6a43267c6e4067835a82f924e9892674b91ec498dba493de50d42c89a7af2f5c20f4de6b536c905c8c40a6069dcec0e6f7bb9e75147e91c0339549f25afb88cfdf9cfa9c640207b6a8e8a27913841342f4ca31bb48ab53352cd6226b12ebda9d6e94862390a7351b1fe9271abb9a15c99ca17455dfb68d0f81b0f9352834748c0fed695af72ddb6a0025435c512f1ec096939b80a14e091ac2552a13abadcd1a27d84521e5bbe90c9eee33b1e7d4b9a769bbea395945c091b50bcc0b46711d387a2e52adc094862c6fed96b335be69e67dfb88c4269ecb79b5536b691dfa8c6a95bdd9dbe840b3c6b40a697f2850447892596b2a436e6918e14082101cfff67b7dc43a446574dccc2d3320ec5f60841734b9aa1322177259350ccb852849e95380808c08195d24c47912ad8c526528202e0868ebf24ed884b4d30b52229362c2184d3dc06be419e4ff4f9bb1daa57b1eb138dc53acf3a8517527d6d89f34ef316705dba477a3320b99c2fc698136e2f183cd34ce11c3b0c02daba276c4620820fb26ef56a2dceef72483e1e04f6dd68a3498c65fdc91921c7d56df5071b8fe4242ac436f36d040dcef6f2f42ea189978bb37467c25c196f656588908503963c8da75854a67a5bdda7a6039d2c15f2c84156ddb62899c1f9c5651ca9d72885f2616a7711b2f0f0d8ad38560c3ae8958f5d8b18ddb5bb52df248bffea32d854238ebaa3e1cfa5b12c3a33283be633803375d410731d5ba13e288ee01dbbc231e848aac74077b1afbdc1bf6f76d06722c38d795ea12ae6240178234ec6c3de204f9b1c9bd10b732868ea2b74a3d569b80ca8441def7dbbb73dd99c99a5ff6ab6fe662d7b44a93147602d36e4bbf62c6a9a84f2c9db6480a8282dfc54ca318b09302e56138883ba11f3c00d3b13f448448ffdc9a9b03d5339c218c6d763bdcd83cb6262f352a61e3473a041fd0f3d484faf20c73688b1b8a056db311da422dc5b6080c415ad7235bdcb5e07e7244a26603ff6a4ecb6501f4b43e8a7395620735ec3c717fc7d28f64071fc29aae1ccc9148f5b9b22712693929cfdffe990b707ca47fce1dd3729744c1cbe17c71e578e62cabf3d6e49762bbedc8ce703eca3081707d66afefc7c55be783d01ea1369a25099c8012709ba64693b130865f156793dcc2f6b171d2536128f421ecb315bc825a97521df4007f204b67cf25c7663d4c17fe8fbf86446bb788a011b9b6f9c07bc3a49f0cebd762066dac0f9ff374094b192928db34b7136dcffb958d529f0941d0c20b4e4d2ad61326d30f0c25d3d2a747614c195b07e8ef179c70281f50e057f7edee0282e21d0a35bc62dbf87027c4b662f7e718e02f4d959f30af7b5b780fb73ad5410f6c9ad31c0a6083f437a7ab86ff255aa56d41efebd9c26b54e5cfddc021d537dea46422818576a2eb1fd4cad38ba2fd215de3aa15193e0f40842409f45fb71499f8342d3b18236a84c11fdbaf062179214c3c1f9567280842ff295d0686ea41127864e5f83dd49abb14bff94c2043f22ea0abb3d1673690490d9ebf88b474838dcc88805371b41f90e09affba46429139ee5b91e4ef9a52e32b9e4084743f96f15bfe7f9a108e1295721ddfff4d50141366f15de389a2060cfae63684f1be13eee3195484522f81f990820d3a828bc85e045d5da2c98b5a4a7b6f5371cca22b1036c35bccb0650b8816fb503e59c5a34d16f6940d082bae9b5a37d16d058e959e61eab1d075657c52940c0c119c9c0dc94b0eb9101dde12c239bcefaa6299c05e7aa0de11784738a730be0c94e7500a624088ac5d85a54696c0a4cfbddfff0a893ce8e818c92a18516d49db1101a112ebbc5411e31c9696af272722da1a55edde2340f15e1fdabe6a493516997806b214a1dd6c04bad782b688a508ef06d26b0498d9d483b165cf9cba89423e56d247f62411494c34ed250508c7c6abae1d26289ba9495ab25fd81c13ad0fbeeb242f5eb7b6e5026a2f30492f98277b7f60c1b0baad850e1310011b738dc2f87aa330e542454148a63ee296b612dca48d9f80c8dd25a9c571ee53c087c88651008b286f7ced4bfcdd6a1c054891bef4dd65b07aaf1c64411ca71f22a4a651fa96e1c34cb1cebaac6503b71c5cd6dcce1deae938a05e358d1f2903e595e00451f77bf5c84669b87a82a066888788b5fa82ead3ed804abd69bf619db7be845a31b5c717eab8897e884878a674ca7d0115e742b17e8590701b449f8bce56d2ae210074fa5b1f132ccb208a2ea43a27f5376fafe55779c45ef17b5dc2a28b5378939103f3c9e843eeedc2c0a653c1c47ea1f66b6b402b524c62709f72e724e477cdcd273f7365bb3fb082baa2d74670b396a92d36a7c29caf23d705eb450828e547bf718f615b6d7fec45a35a0fba3316776dfd30fd6ec298b3fcc5cec330b5cc23e71ed96e246f0a985fc4d27f5fc74dfb91977c836dfc885c8af0ff8f2227910c45f279176c0dffede322b41908da2a42b9a9d0a66605520cdce7fc479e69115f5ae549ee96fd00fe187a747f55e852d0f3228c2b8ca23569e08d297d84d8c60fbf2637e9e31557c6946dfcf8ee8ff160bf4a6578d5695af4edc5cb3b80d68f9db1f40bfc8d3ea08ef95662c48a467d10bbc0d375fbfd24a41258315f6247bbdc887a1225df2522e496c1f382475a1058929b8c30b1d05cb818db12149d9cd57f43085628943c3569f8064e9a0e46bf9123ba0562b357195e8b4125eb0c5d0a2b9c5c41d8842fa169fb5abc73ea1017eb1a2b76283a30f1315215401498fc726d49b5f4540eb70fcda122cbd68af7617b410d4774186dc9bcf838e1e52c6f85381fc0f5333a53fff28bbb392f2749a3116d06a233c5f21c13fde53e27a7cbd3a4e5e98f12eba84ef94abf7eb35a7b0e9fffdaae26143fc372ed6c3afb48dc3a535c1c910819d79e13d4fc92710f43cda47470a1e7054856736db38fa09f3f898742829717478f16c0f7a5e227125da5ac889b2dac5ac2ccc0b8fd3cf7a58f97748cb0891adeb478a74579e1b9e718413ec65b67936f9c8ee1453479b107a28cc520a98645b92f59a430bf4fdc919eb2bcc2f486dcb905587a0984d5a46dbc67bf061e152576e02239e8b9e55f1302957adb82b3ba9ce3211cc7befc48c763a4a8ef0ef45e6c291eb3f2f86901d8169e68d8b5f51fa65b1a7f6c1309efbb01c52ea28081ad2f571e4c779a0f2756e0062e665567b8d0ea76d6f8760042570d916383fd68fea145df62b657f4f95abd4340a216e6fdd5845b4bbf1882af68279ff5bdd849d3961ed82236bfeb9ac296d7cbead9a0fe05a1342903d38bb599a04f1296ee880ef505353a9622cd987ac98242311229fd1c9a9bf2a7f3ec809123bdff92d18ac3a95bc1e53a2c7d92e0f75f8b9618dc15bc141e58346ff66592ae270165fe444ba8c662234f412d6740f8024b1085225baf1423476afcfbd0b3203c64b1cef0141b599451d06b485febeacd2280d99311239b8534921a1947a6cfdf1df4eea792e0bfc7b7deba4044a2d7bc36447c3ea52fc8e1368e040c079eae96e1702fdd8a5cdcc41286baad18357a93e8e9a8e2350449b5a98e9d851c85610ca28aa72eece771547131b5eaeb536ff9ab8ef926a22e92763177f76c8df5cc2a8df5976af4b5e451fc6d8aef0ca6caa2e003054d614160dbd05a17a5170948cff78bdf0ddb520494bfe43c02b3fe3db1bd1939224e001118331fd54974644e6e682bc02515a56b93e5b125a647fca0c3bdd940f89f036ccdae517527c66e1a4abca72821f5ed5b27f254c7e005a85f529c7206e54a93fe39d0d7dfe1cca6c98045cea89d69eac5d41aec4c240d2e58ccc400df7a4ad7e71a4c4f0d63eeef825e59d309f371c59b42cbad73d40060e80ea6785b81162f6fa00dec576b48e62e9ddde0cac1f8d5896d12f6dee19da6506a58d5f70c9790b456cd965b5f1ad59d39", 0x1000}], 0x3, 0x0, 0x0, 0x7400}, 0x40) 1.244663361s ago: executing program 7 (id=4306): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x40c0}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async) syz_emit_ethernet(0x130, &(0x7f0000000240)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0xcf}, {0x759}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x961, 0x0, 0x1}, {0x8000}, {0x0, 0x0, 0x1}, {0xf, 0x0, 0x1}], @ipv4=@igmp={{0x1e, 0x4, 0x1, 0x2d, 0xfa, 0x64, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x24, 0xd9, 0x0, 0x4, [0x1, 0x2, 0x7, 0x8634, 0xa, 0x200, 0x7, 0x3]}, @timestamp_addr={0x44, 0x1c, 0x9, 0x1, 0x1, [{@remote, 0xfffffffa}, {@multicast2, 0x7}, {@private=0xa010102}]}, @rr={0x7, 0xb, 0x64, [@local, @multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "8625926ef375995da92639f0eb"}]}, @noop]}}, {0x22, 0xa9, 0x0, @rand_addr=0x64010102, "7a496456ccc52693b634b15d93006ee590373df0fd31436d294e702a49b832f3ca230af9d5af22fc56f6a42dc19edca30d7a26e7c7c7b2aacd60e41f4b2fc3b926add4175af95c1cabfc86057fba92312b506c472d85f5ce608aac0100b9b572bf213ba25b84d50597b4de71a709ef211d666d43017face1c922"}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0xdd7, 0xf6c, 0xd31, 0xb13]}) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) (async, rerun: 32) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.192815777s ago: executing program 4 (id=4307): syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) 1.19174437s ago: executing program 0 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.166444985s ago: executing program 2 (id=4309): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xf}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffc73, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x3ff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1.121346962s ago: executing program 4 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r10 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r10, 0x110, 0x9, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.04871573s ago: executing program 7 (id=4311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) 881.448789ms ago: executing program 2 (id=4312): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x8, 0x70bd28, 0x4, {0x0, 0x0, 0x300, 0x0, 0x150, 0x280}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8ca7fdf9f2101b03) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 873.860367ms ago: executing program 0 (id=4313): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bind$alg(r0, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f00000000c0)=0x1000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) (async) sendmsg$nl_route(r1, 0x0, 0x20000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0xc194) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25434c810008000300", @ANYRES32=r6, @ANYBLOB="0c0058001c00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x6000800}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) sendmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000c9"], 0x10}, 0x80) (async) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r10, 0x29, 0x1a, 0x0, 0xfdb7) 807.703843ms ago: executing program 7 (id=4314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4040084) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008811}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) 760.945595ms ago: executing program 2 (id=4315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000000002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a3000"], 0xc8}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000440)={0x1, 0x2, 0x1e}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x118, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xffffffff}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="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"], 0x1bc}}, 0x4c082) 756.712762ms ago: executing program 0 (id=4316): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000480)={0xb}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 663.216232ms ago: executing program 6 (id=4317): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x11, 0x200000000000003, 0x300) (async) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xffff, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xffff, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 597.86536ms ago: executing program 7 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 595.981074ms ago: executing program 2 (id=4319): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r5 = socket$inet6(0xa, 0x80003, 0x6) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x31, 0x80000, 0xfffffffe) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180000005e00250e000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="764c797d85081e550b79f8cca7db90dae29807eadb4eedd7ab8665b9d31cfb529a1f1873e5a5cef59416890b92083d5e5a8ec76dd4d392433c10b0e487f4901ddea8c8983b"], 0x18}], 0x1}, 0x0) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3e, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x3, 0x1, 0x5}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES8=r0], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) (async) socket$key(0xf, 0x3, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 593.357336ms ago: executing program 0 (id=4320): accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) (async) sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000000000000031300947f74da4d1", @ANYRES32=r5, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a000100"], 0x40}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000fc4100f0e8e1d08eb8077e799147b8baa6f72cdcdc36ecb88767d688bc1847f5992031d29ebc59f810c0e8d569fc27e10e0dd2613cad5ccd1149398b753edcaaff1f91d83df7b190efc0d18cdc7e8f1e5ffd26d8aa2f9d580b8260780ab1df0968e5839200e2e396e9d7cfb5d27b926cceeb5ce89da86206c6809c1a6e9f4af8e4c1520011494005b8ffc2aa8fff3715d164ac6304785f81c488b8b87dbf733a4964618b6edb7e46c7b85364c447c8def2", @ANYRES16=r7, @ANYBLOB="02002bbd7000fcdbdf25050000000400068008000200080000000800030001000000080002000300000005000500400000000c0006800800060002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000080) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000fc4100f0e8e1d08eb8077e799147b8baa6f72cdcdc36ecb88767d688bc1847f5992031d29ebc59f810c0e8d569fc27e10e0dd2613cad5ccd1149398b753edcaaff1f91d83df7b190efc0d18cdc7e8f1e5ffd26d8aa2f9d580b8260780ab1df0968e5839200e2e396e9d7cfb5d27b926cceeb5ce89da86206c6809c1a6e9f4af8e4c1520011494005b8ffc2aa8fff3715d164ac6304785f81c488b8b87dbf733a4964618b6edb7e46c7b85364c447c8def2", @ANYRES16=r7, @ANYBLOB="02002bbd7000fcdbdf25050000000400068008000200080000000800030001000000080002000300000005000500400000000c0006800800060002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000080) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) (async) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000005c0)={0xc73, 0x9, 0x5d0, 0x8000006, 0x6}) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000080)={0x1d, r11}, 0xb) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) connect$802154_dgram(r9, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000200010000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000cb30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000200010000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000cb30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$802154_dgram(r9, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000380)={&(0x7f0000000600)="7c5fa46f0efe3a68c877d744e5786ba993cb642201d0d480d05f38b5f1ae7f603c6b1a9929143bb74d99a78b903523ff918e1048411a98ed455ed1275f85122e0c7e6beb3767ab47c12812c4336367d8aa84dff94eb9d00d1f1f040d73d072277ef40906b306426d45ca639b62f9d33ecc387c2f632f1d131060b8f0f885f1f5aa07c52d767f1651fcf6fadb45eb59cc8aa518e3865b4cf2286f6fd44fcb9abf8aafd1d4778f828ecfbd00e9b1a1f88d361e9cff20d18fd0796dbf7c7c8cbbd526b35af6c9d13312d20ffb85f62d2aff473ae1b399111f2c7db62927c734b4eb35321608a7fdf8ca72473d845be7822cab474ff4444cd2ecd68751a6f5b0d5ba6336ef639dd83b850a275c4a2b8514c82bd4201ed1a8e2e703770436e5bf60861c40468e21f1d6bb5d2fd72a749b3e4e27c9ff651aaf66f119621370e83300194b52fec0f56da38cabd83fcc29eb565b997537f9e4a6d240759d43ce1db9738c9d20a989b5a108088120b35b9830241c27b7c5234f4523913fa03b259367be43225730614d06ee20d380b3cfa990b34aee0754a42601d3a159c17bca3226949d59c597633cb930b181650311d7dca90548610d0ea9cceb4c9629c6100fee12b7a2d59c9cebdd57f488dfe66250e147dfea89ffdff063df3733e7eb53bf168a0de946dfb4371dd42c540fcb7c592fdd61f27575c818d5feac2bc158a5ba7ef7e8e8b45d4ccbc34b981ff48704c0a8cd0e5baf01b0ce919cde29051b9e7d1c40291508baea983174f12532222083130c42214ffbc6b3a4ec80501fb1cfbbb633a63034a46f6130709b839567ff6d6872dee0473075fa8dcba4b83231a692a605d2bb3ee445f81e0f9ab74de22946886207570142ab5a8a21d968b9d6a40a179161874251ee378afc712ae72bcb5ab66750d2329f717ce6f4337fa4a71354bbbebfc959f38b0bd14995ca6b85ae2e99ff3e2238bfe51c0cc64fd0867376e2490328f95268c015eb3a3017f9c52909e22cdeef1f0400cc08f0675441cfdee841d7f1e6afb6755e07b4dc2e2dc2313f18e215b3012a650f840ffd9cc3e31b48f3ee6711c44aec579a64ce6a2caa0946b30b2d0684b37e1e5b93c406df7104917b7ef4c1b6a5cb8101a46fee248a12cca81c8764f7bc53fbb75ef1a74f5aea5538ff42743758a3c3ac6f5fc88ea30db73ee3deed8029e9bc331d4622d43c5cb04222d515d0abcd4d3613d5cc157d5d2ca76e31a6dc5cb6eeda061312bb83c8e9a70e7f479e90639c31457f083fe44a404865b82b86a86b9d9e7b16d33d5814ff5bd0b3a3d0f295de20729f0cbe71d1ffaa1757350053d731dd11bf330e3aa267a1269d5fccc274872515477084e10ba707662ae0bf75b705397d7ad0521f5890c8264e351f805206ba29c4e70810786e9b8bc5f93a53dd7732a90e9ea9f8f557d3b63bda4a65661e403591639fd5baf7f1f837c91ed3f4b943e7faf8313cb9f7596aae03a3209f5b754f1ca3ec41c1e5d95a687dc095962e6139d756d978492956b605cd43acf370d0e4b20073cbb3193299f1b8e9ff7078c2599a2020335e8bae27cb934bccf4ac07cc3d3aa9d9fc047d507e851680795fea143cdae8b3fa796cd0843a61c6f4e762cb2b4634dc07dbf5ea2fcf4264440889b1969eba0fa00173ee96edd0f6099c0d3affac3b3dc67c713ab1fad445ed23aac42bd23d650478057cd2961a464bf64078c80c1537802acaa87d9fa1771cffa9fe7e004629eb233868ed6d31adad4202aaa762fc1e790ff719f881d591fd38fbeda8698e1c64342c5b541fecc55faec1c8737a2358278e5711d87499308173e48f0617d715b704fb19f28931dee8dff373fff4bd5a459c233759cd08a3eca74cdca45e72cb2a02bcca41173436f49de33e6805190bb7610c6b6907f8a8bc7780ce8076e38e13a6089aabb603d6570bdd90c3c6cb297a1197dc2e4f47c9ea4f40cbd21cacad6b78837111342ae1027b0459026164fa7fa396f3357cf6b5c2ac4654737aa01f323fdb385e6727e628f077e87a2442c7c7dee452dc1616b9b23dba535cd4e897ed089f474f81a6a29323367f91404f9b91abe73622aef2d03426fc538b8490dd20283949f01b2f05144d442807bde491693488f19374159c4b4cbe187de5ba101dd5e0abbcc9736a701dab9bf967db601c0f4b84905473c4f73cbf80fb81b4c6bfc9b5f471a4360eb7a7882b008af8e2bcbe6a26f9b1fee9e4215d6e44521315eb0ec2726d794e5aaaa7d111c3ad6eeb39c58d82c47b6b11ae2746f1dc11fe0e628a184746b46c5ec7fcad11311f4b9e86059f3f63c989f7909af3d789f4038521d37b45dfd16fe625609f5d6fbe5e6d9344d3ebefd2cac10f63b5dcafdcd9ae23d65a9cc17828e9269290f854e646533864d9ccf04867975eea4912089a58a0537506b0e527e30b66b909f78e06aee59c6a591dcc65021f017e37725a79f44a14fd7c6b708475e6b797f2289ac06097b916126918337f730d9dffdbc6c1cd8492dd221fde636a1f395886bdc4b922808c8f0f91a5900f618d1ae2d76d37ccdfd8218b1e1aaa9bbfba38b5878d11b835f18a713293121c520d60a6062c46b4e405f52757932a5fac2ce6cc05d040708d25e327bbf3420a4b93a595797a52cad31f6620e2a2b141cbc070efba6b0069259db99cf0bbdfe5eed1ab8bb329083503a2821e92c895a872d7840ef2cc464f4821440bd512e7755c8e713c44bbe28a88704f0f14032409be5ef3a21de1c9e7910f3041c4a3b921e460a661106e38755afa40ff8483f31fbfa33b7b0dd9d4c4d3b1ea5134ff2df0cd5ba685dc133ab4195d1fdc6b52f647049b06d73ad4bf7473eeabf1b1e866393793feeb66a23adf92d7944e71d04019a864858579ff08899463772fff35f51d1c5df3ace291ad5010892bd65e134c32a284c3997317bcd35e8abf57aecd0d7ad0e6b68c400c1deed95d2bd4624ec318309f5289adc410d81d198ee6bbcba9c7aaf8eaff4aea8b508e62058ee48467ac7a683f408ee055b3e6e26bebb137157538087ff0ea3b20c729ee52ae0d95f2ed9c965ad78c3e22ebf2c20da81844c77e8c9434f25244df5c3a56e4b7784e61421f035f8200f12acec34efdd2d4906f36b7e5a5e47e2ee0d74a1b287887781017e8e00db8922fbad7fc5f9980624e0ceaaf5a96130502dc59e5a62c3031066f13162efb03f49b72a8475e310bcc3d1cb7576850e28716ae6d98494847b229104f5fca23f6404de98d18f7b1613fb938d87893ae988e1357a9dc0969271526180183d567ea3ae93f92ed7ae249a2c4156c3421bc36f3ec0b07e75c072bc83242f43267d8de26016cb5a8ef7094ec95cd3726ce9f2d506e91956bfb3caec41f36c901037ea7c4030d0bdc1d7297347493c83a954a16aec6ad358b076e89065bd2d42f70bd077efbf455b8b360844120b144fbfd3c6003d2f206f1e7ea653c43a373aa736039c293b56d811d7e9fabba59acd5c598d8fd53bcfded2a6fe07485d13af628d45f507e98057404b81833675dffe9946cc1e19b65be797e7e2c49f7f67fc2346888df4b51257a29b20143197bcba2876a3fbfd725fb18976e450ef147da164a0a6ec350fd3f7dc88b0cea6b4bf5b0052c336579c3438759f735e432d9f77bb40ebb7162d72a5ac75b9d274217e65c2a5a43fe759d59f00c574e9b990c1a073af8f60ab2607ff5934db8142e6b7a8730533f8160e0ff8c3d3ee1652cae769bac54182c59f725f8e22b3be3ba3c5226f4af613971531d9508f4d1ab80a7364dfd2ebd2d6b990cbf4b5f1d5613d5a3bbe6fcfe139ceacdb3e487c3d20439e1e44d87e92414aa102080cda530e50a4d6b9573aa244de343cf87ab62241267d415140627b95306a2e0591520178afb0a427518bf9b7145c1f4c7b2c5ae2655fa95436cf8ff038657818727967010768313f626bbcdbfa88c7c5fe12a50a45b9bcf010a6b31e9a5e949166a42d57e27ffbfbc2f899da428475aa5401385fb8334d6bebebe632050bfa321d95984f11d895111c714be4ebcbdd186f78da396562d14572e4fdf711de5b82118248bb7516382581c800cb81ff9c93dda00e2247eca45aa27948c6bedf8f73d9e7d9b9e0526094944e22c8402d42f620a4161fcbbc0288edfea4a7904419878519696c0ecdc57093422aa39728168c677274f9907070a93c522ff805193bd24797458a03b5faf837ad758b6aa150b5c2e92c467af0c51ea3c37ad3259c061421fdfd7b7daa169602ab4ee668892aa4fe31b7bea5f2b7a007d97bb8fc6fe75554cf3e65f6a50f8d1a46fcbf20a783e6bec63d9138421f67330e94e822c2aa9faff8ce5aa50306068da08beede79313b9f6dfc8a7b81e27941c7f0735aa9c4c13bd747ae2fa6dc8437fa05ac8dfca3e224d22517a70dfbdba9aa75f107336e683883ba61f62f9b57f97ed26046c367d26662615d39167ad8cc6e0d00af89dc1544ac56c2d1a2fd071de8d0d4fae7552ee7383b0759580da1805b64503af5c9b8b00318478e317ea83d1de60e8d2f44ef0c6ec2fa2dbf31750003fd50bb96714b67f8b56bb148f385ed34783e07fddd0fc06dfa10717d70c049ba73050dca2f83697124d01b9d501004b76a90150efc85513ca5f7fed279f981e581f887347de096c392f518d1a1177fe9033a65d7ae3fd181ff81f414f9e7fbbc98476022af80c101d48e461f0b66a1e553732c6fcb1555d239e4c7f6645678f935bc590c7ec28d90e69c3b1fa934053b7f04df79e64fed96b9acfdd8fb0343c7fa3e11f605165b8bd33c7fd84d6e4756767089cf096c8aed9df01ba31fabfeac8d6cbedb64ce7693ca43dd25124dd156485f95253420167cfc0ef62f0ee8f3041ad5e0f52972b48f775cdfee792a22cc40401c080e39318a3c7daa5f86f18d2b1507ece8b15661452a380055d4c34d10df8f50482a5efb761b0d585593a5ff260b271d9771b6f79a17da62e202150e6c82c32240b050377f90e08c2e264e0eb96efad42e8671aeca98b4c5b4531d4bac892920adc0e5531bbd3365898aed79afe1085391b9e5c7171bf337ff1d21956137f2e8c0e87269fd584f7f0b2daf3a1cc8791f2273ed13534da79eee8c6701b7efae3573a16cf4455f9c8ee2cfa11d70f47b74c6df4b0f2bfcb0520d56155a40872ae595ecb3dc892d1b8e8f4f807cdc4ea943246ea9554948330321a99d4c8a9b6bd5e007043c632e45d5bf9e6415c1d9a2f959e660076e1b2bb5d2a346d2f8a0a8d294e74e44e9972e5adbca12c4a8cd47838a7046bcebec329d35a780606f9b5bcb44bb27c8d2a2535e8b3ea1314a217f092c5d7efb4238fcb0456cb18ecffb060e62b668ef229171327093826072ccbdb8ebf970534fb72f220ac6535bf4b7ec2a190d92e061b4c663f7296311390d44bf91f928ee18876e7c690f6811e1dde90620a17a53b1378d70b8bf56ec086635bd185451f38ecd73ecdf1b326694bcdd780bb7d529b95b3c8a18d81e4c93b076d2b3544830973a686e200a3f9a10bb5a5322f6a0dcfeadf0c54be541c1e297e74d9526bdb5a117732a89e5e165c05f6b090e49c47b8f3e0029678812968236e46854b294a5130f59557ef393af84d6b91cefa9d3f6c10b18f4b0e5f70edd26b2aed7bb42da282616f6984a01794b2947168ce70b345adc07d5bce1a62cfdcc4a37300331cb93268f8870d900077999b6a43d4c73ebe7413f1bbf3e5fb5a9a5ebfb37d57ae8567f715fab9ab65eb0b2e8c5c7153b0a9fcd617", 0x1000}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) (async) sendmsg$802154_dgram(r9, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000380)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) socket$inet6_mptcp(0xa, 0x1, 0x106) 592.776486ms ago: executing program 4 (id=4321): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r6, 0xffffffffffffffff, 0x15, 0x2004, 0x0, @value=r6}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x3c07, 0x1, "0c3df8", 0x5, [0x8, 0x2, 0x0, 0x1, 0x29b148af, 0x0, 0x1, 0x10001, 0x9]}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRESHEX=r1, @ANYRES64=r6, @ANYBLOB="3d437cb350ec99fd5d1b80c6b224a20b100fc33778a6c7c761ca72b6bf714e7b20652b8b38deda1428f5df57ee16217dfd3388d47430a445b3211779c33301aa41c0eb6004239d62d526e1aae9de29f48443f9f9ce0f39a2006a1b67cdba9d4f9bccdafdbc8a9b93419ab6688ae3f93f0878a1eb1a42ef2adb0b0ff6953c1dc5db9df00cd42e927d5b9259d8db78fad94e52b4c121a6eb2025b647392152d32eefe6da2a9c7dfd249674e3a8725f99b62683fe5175c29a3106ee6cf58e"], 0x68}}, 0x0) r8 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 384.845088ms ago: executing program 0 (id=4322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 363.50125ms ago: executing program 7 (id=4323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x1e) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@remote}, 0xff2f) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003e007d362dbd7000fedbdf250a0000003394daadf6330f69b47883e7296ac2efb6175f7cb9f688c04ac62d461be7567eec7707fbbfa19d96dd43176783"], 0x14}}, 0x240400c0) 342.83892ms ago: executing program 4 (id=4324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000101d00ab55a282615a5cae000800459e003d0064000007069078ac1414bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0080087907800e71312e51161d5a2292c95be8610d511f7dd050000c5"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, 0x0, 0x840) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x138) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x14, 0x2, 0x4) 288.604896ms ago: executing program 6 (id=4325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80f514e10c300148) r1 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0xe7, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x104, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xc3, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x56}, 0x3, 0x0, @device_b, 0xfff, 0x9, 0x3ff}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x0, 0x0, {0x1, 0x9, 0x0, 0x11f, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x9, 0x4}}, @preq={0x82, 0x78, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x3, 0xfc, 0x2, @device_b, 0xa, @value, 0x200, 0x2, 0x8, [{{0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x6f3}, {{0x1}, @device_a, 0xcf3}, {{0x1}, @device_a, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_a, 0xa38}]}}, @mic={0x8c, 0x10, {0xeda, "b5057b1c49ef", @short="d7b88a4f55261cf8"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x104}}, 0x64000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000007c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r9) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x3}], 0x1) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) r11 = openat$cgroup_devices(r4, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x20044814}, 0x800) 287.908341ms ago: executing program 2 (id=4326): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x10000, 0x4) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x44, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xb, 0x7}, {0x3, 0xfff1}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 198.471551ms ago: executing program 7 (id=4327): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) (rerun: 64) 160.78136ms ago: executing program 0 (id=4328): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000016c0)={0x10, 0x26, 0x1}, 0x10}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0xa8, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4884) close(0x3) 0s ago: executing program 6 (id=4329): syz_emit_ethernet(0x32, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002400000002001190780000000000000000000000000010907802000000000000006956fe4399"], 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0xd0, 0x1a, 0x10, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x20, 0x0, 0xff, 0x1, 0x0, 0x1, 0x200}, [@RTA_METRICS={0x9e, 0x8, 0x0, 0x1, "460de25684f6fcb9c1d4e1838558e38e8ed47a5d163ff1babcfb163ff6b67148980f674c6f91a8b539db5b616e3785eb6bcc631f7afd67a51b7ec1b70d17227cc59e644d13dc4fec586a758046e8e79da827932b5b25ad66189633890ce7fd8cafce434fb87c8251ab6c67c96746cfdfd8a0e0c141da1282a4efab2e2eed1bc3325fc06334417b63ae488103948f2934618eee2fb39bf228f8c6"}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) preadv(r0, &(0x7f0000002080)=[{&(0x7f0000000cc0)=""/244, 0xf4}, {&(0x7f0000000dc0)=""/3, 0x3}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/174, 0xae}, {&(0x7f0000001ec0)=""/10, 0xa}, {&(0x7f0000001f00)=""/45, 0x2d}, {&(0x7f0000002140)=""/26, 0x1a}, {&(0x7f0000001f80)=""/175, 0xaf}, {&(0x7f0000002040)=""/56, 0x38}], 0x9, 0x1, 0xd48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="5e61efb7485b3d1cd124cad6ce66a72096a904c75ce9b258bbec26347b51ee93e5eb6779", 0x24}, {&(0x7f0000000740)="0cbc8e7cb9016b77ac99480207a1da51dda017645a306dd4b4809cd0799502621d5ed842e886d8c14fe6b130750408b837309b9a8624d4b4fc46787b0ca3b13ec0dd67f0d49857c2064ec94f5c26d158c3ceb4f38b98d049e9a3c6942594b0a10b513daf66c17cac0cf92678576c0b95faecf1416a4c775eb154adc1a992ed226d8e0c", 0x83}, {&(0x7f00000008c0)="556066970e18208f0fd66f7508d28bd82f8c5e192f9fb37635bb24d72b4882018fa8eebee8bd1bacf730f6c49a4b7370d035f1ba1adec5cffe43bb4ff18ffad84420720a0ae97e1f9960142c38a3837877a95433be44b3b201fd665a5b3c21b05406cc041fa2cac9cbff2cc70053b8f2919806e1f9de4542c098fbd9be80b65eb0b37c82159f036cab4c494db9d7046cf16a8837be4a9ec73ba60266402426b4183b24b2604a20f0b4378206", 0xac}, {&(0x7f0000000980)="5b196d272d4afb7fcdf3199a79b3116b31539d74d81bac16b1449db6740a04975b0dcb4c140b82efb47267ad574cd2478a2ad43cae25d7a97a05c18b41613bec0aea1856ccbf69cf15fcde8105550dbb05f7b8bc2cf2405742a64a86633579c720900c7f11aa1563daf6ea1a0e915c0b3cf17862bec9d6e2540a3be1fd3212a7cca1886195908bcd930c7f9f4aae4e288a14428d2e6db1122667abcd632db957cb6961d173eb", 0xa6}, {&(0x7f0000000a40)="94f828ef019f8977c7288b83558cc434fa7dc740a5d7e05ed2afcf0f2265f4df41cee26a234ea82844e865d1ca79f03094990944ebae282da9269209db87d24ae9a4fce0e935c2fef2e1d9146eeefaf0c12e39d841219954e03c9985a217937b2dd008a7d1df690d033903d132115769804bd486a0e78cbd20e682603f952f6a34505a44f0c40603d3ba6595161223c9055007c4bca702", 0x97}, {&(0x7f0000000b00)="54d97e9e6cacdc221f63834ac2c5cc3aff08fd346dd8ce340f1d9fdb318fb9f4fe35a7fee308816628ee5409111fe3975a4960063c3433bab9ce021cf5dc85da1b2853ee6a92f6158d1fac98d32379ad82880de7f8d828066b918c189aa0e8c6963af01744ff49d439da916366ad2ccff8e08c0c384c6d036e31c18c77b8042542bb230903faef1f54f28928d86f07c16eb8cc3e12eb1037937db696be785e36a380af8f48ef7450e9fad4e5866c4d1b309cf359a66baafdd135836dae39a74615985822a0fced2889951463d1ed5aad41b9286ce15f7a599809fb89d2fb", 0xde}, {&(0x7f0000000800)="fcaf775417017b25930757463c709c6997004201dab77e9e141c", 0x1a}], 0x7, &(0x7f0000002180)=ANY=[@ANYBLOB="18000000000000003a00000009000000b748e8e25c1bf08470538156ef5a99a3be3bcf7941f1ddfdf4b7aa0bc09e481d9258a5f2887a475aea4ad0386f535884f7b9ace1a2f6efe72f"], 0x18}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r6, 0x200, 0xa, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) kernel console output (not intermixed with test programs): 5] x_tables: duplicate underflow at hook 1 [ 248.483705][T15276] netlink: 'syz.5.2662': attribute type 1 has an invalid length. [ 248.604003][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2666'. [ 248.654885][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2662'. [ 248.665522][T15271] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2662'. [ 248.681940][T15271] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2662'. [ 248.702187][T15271] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2662'. [ 249.098206][T15317] xt_l2tp: v2 sid > 0xffff: 1114112 [ 249.156016][T15319] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 250.428676][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 250.642067][T15347] tipc: Enabling of bearer rejected, failed to enable media [ 250.710998][T15349] sctp: [Deprecated]: syz.2.2683 (pid 15349) Use of int in max_burst socket option. [ 250.710998][T15349] Use struct sctp_assoc_value instead [ 250.817667][T15358] IPVS: ip_vs_add_dest(): server weight less than zero [ 251.062376][T15372] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 251.184406][T15378] team1: entered promiscuous mode [ 251.189721][T15378] team1: entered allmulticast mode [ 251.308069][T15390] netlink: 'syz.0.2696': attribute type 5 has an invalid length. [ 251.440376][T15401] sctp: Trying to GSO but underlying device doesn't support it. [ 251.738520][T15416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.861684][T15426] syzkaller1: entered promiscuous mode [ 251.872123][T15426] syzkaller1: entered allmulticast mode [ 251.914315][T15428] netlink: 'syz.4.2710': attribute type 21 has an invalid length. [ 251.922893][T15428] __nla_validate_parse: 13 callbacks suppressed [ 251.922910][T15428] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2710'. [ 251.938924][T15428] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2710'. [ 252.076278][T15440] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 252.102502][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 252.673442][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.684380][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.697035][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.707883][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.715675][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.773333][T15461] wg1 speed is unknown, defaulting to 1000 [ 252.812546][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.868222][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.988852][T15478] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2726'. [ 253.046637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 253.054728][ C1] lec:lec_tx_timeout: lec0 [ 253.060190][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.069059][T15461] chnl_net:caif_netlink_parms(): no params data found [ 253.378379][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.386442][T15461] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.409719][T15461] bridge_slave_0: entered allmulticast mode [ 253.418945][T15461] bridge_slave_0: entered promiscuous mode [ 253.427957][T15501] erspan0: entered promiscuous mode [ 253.435591][T15501] erspan0: entered allmulticast mode [ 253.462043][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.473994][T15461] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.481596][T15461] bridge_slave_1: entered allmulticast mode [ 253.489582][T15461] bridge_slave_1: entered promiscuous mode [ 253.505205][T15505] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2732'. [ 253.592552][T15461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.628401][T15461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.709502][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2734'. [ 253.776096][T15461] team0: Port device team_slave_0 added [ 253.801783][T15461] team0: Port device team_slave_1 added [ 253.895650][T15461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.905523][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2737'. [ 253.914575][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.914607][T15461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.917116][T15461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.964137][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.974643][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2738'. [ 253.991819][T15461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.138883][T15537] sctp: [Deprecated]: syz.2.2739 (pid 15537) Use of int in maxseg socket option. [ 254.138883][T15537] Use struct sctp_assoc_value instead [ 254.160132][T15537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2739'. [ 254.176847][T15537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 254.190074][T15461] hsr_slave_0: entered promiscuous mode [ 254.196983][T15461] hsr_slave_1: entered promiscuous mode [ 254.203453][T15461] debugfs: 'hsr0' already exists in 'hsr' [ 254.240709][T15461] Cannot create hsr debugfs directory [ 254.381988][T15549] netlink: 'syz.6.2741': attribute type 13 has an invalid length. [ 254.664888][T15461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.676366][T15461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.689841][T15461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 254.710460][T15556] netlink: 'syz.5.2745': attribute type 11 has an invalid length. [ 254.748192][ T5831] Bluetooth: hci1: command tx timeout [ 254.767652][T15461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.778954][T15461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.789922][T15461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 254.863928][T15461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.877925][T15461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.888884][T15461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 254.970035][T15461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.980816][T15461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.992522][T15461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 255.224523][T15461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.273204][T15461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.298362][T15461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.310900][T15461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.449906][T15461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.483480][T15461] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.511039][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.518243][T13956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.542936][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.550226][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.968103][T15609] vlan6: entered allmulticast mode [ 256.002223][T15461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.828108][ T5831] Bluetooth: hci1: command tx timeout [ 257.460349][T15621] lo: Caught tx_queue_len zero misconfig [ 257.826480][T15660] __nla_validate_parse: 2 callbacks suppressed [ 257.826497][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 257.835106][T15461] veth0_vlan: entered promiscuous mode [ 257.901962][T15660] veth0_to_bridge: left allmulticast mode [ 257.917424][T15660] veth0_to_bridge: left promiscuous mode [ 257.924610][T15660] bridge0: port 3(veth0_to_bridge) entered disabled state [ 257.953264][T15660] bridge_slave_1: left allmulticast mode [ 257.961498][T15660] bridge_slave_1: left promiscuous mode [ 257.972323][T15660] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.004568][T15660] bridge_slave_0: left promiscuous mode [ 258.010880][T15660] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.176206][T15677] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2774'. [ 258.229219][T15461] veth1_vlan: entered promiscuous mode [ 258.284133][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 258.345390][T15461] veth0_macvtap: entered promiscuous mode [ 258.375156][T15461] veth1_macvtap: entered promiscuous mode [ 258.434598][T15691] netlink: 'syz.0.2779': attribute type 15 has an invalid length. [ 258.444664][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 258.475170][T15691] netlink: 'syz.0.2779': attribute type 15 has an invalid length. [ 258.479757][T13960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 258.484102][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 258.495409][T13960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 258.510559][T13960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 258.541187][T15461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.561068][T15461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.578125][T13960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.588868][T13960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.650359][T13960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.714382][T13960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.732898][T15698] ip6tnl0: mtu less than device minimum [ 258.741591][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2783'. [ 258.839349][T15702] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2784'. [ 258.848646][T15702] netlink: 'syz.2.2784': attribute type 4 has an invalid length. [ 258.906593][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 258.914659][ C1] lec:lec_tx_timeout: lec0 [ 258.920139][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.935245][ T5831] Bluetooth: hci1: command tx timeout [ 259.025227][T13959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.046178][T13959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.109874][T15721] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2788'. [ 259.122038][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2788'. [ 259.133422][T15723] bond9: option lp_interval: invalid value (0) [ 259.139973][T15723] bond9: option lp_interval: allowed values 1 - 2147483647 [ 259.151499][T15723] bond9 (unregistering): Released all slaves [ 259.180870][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.189342][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.442845][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 259.610217][T15750] netlink: 'syz.6.2799': attribute type 4 has an invalid length. [ 259.633825][T15750] gre0: entered promiscuous mode [ 260.024285][T15775] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 260.661394][T15816] netlink: 'syz.2.2825': attribute type 19 has an invalid length. [ 260.689173][T15819] netlink: 'syz.2.2825': attribute type 19 has an invalid length. [ 260.947551][T15837] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 260.995415][ T5831] Bluetooth: hci1: command tx timeout [ 261.044735][T15837] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.098992][T15843] veth9: entered promiscuous mode [ 261.143448][T15843] bond9: (slave veth9): Enslaving as an active interface with a down link [ 261.449191][T15853] netlink: 'syz.0.2834': attribute type 2 has an invalid length. [ 261.502189][T15853] 9: entered promiscuous mode [ 261.661727][T15862] erspan0: entered promiscuous mode [ 261.686866][T15862] erspan0: entered allmulticast mode [ 261.959589][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.985022][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.005045][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.016076][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.037673][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.150599][T15872] wg1 speed is unknown, defaulting to 1000 [ 262.500108][T15900] team0: Device gtp1 is of different type [ 262.693330][T15872] chnl_net:caif_netlink_parms(): no params data found [ 262.996132][T15933] __nla_validate_parse: 6 callbacks suppressed [ 262.996149][T15933] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2862'. [ 263.017087][T15933] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2862'. [ 263.027978][T15934] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2862'. [ 263.054109][T15934] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2862'. [ 263.132767][T15941] syzkaller0: entered promiscuous mode [ 263.142223][T15941] syzkaller0: entered allmulticast mode [ 263.203367][T15872] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.217898][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 263.222670][T15872] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.238986][T15872] bridge_slave_0: entered allmulticast mode [ 263.249598][T15872] bridge_slave_0: entered promiscuous mode [ 263.262997][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2867'. [ 263.280162][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2867'. [ 263.305034][T15946] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2868'. [ 263.319493][T15872] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.327073][T15872] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.346808][T15872] bridge_slave_1: entered allmulticast mode [ 263.361288][T15872] bridge_slave_1: entered promiscuous mode [ 263.512946][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2871'. [ 263.542382][T15872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.580656][T15872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.638245][T15967] nbd1: detected capacity change from 0 to 127 [ 263.712081][T15872] team0: Port device team_slave_0 added [ 263.741779][T15872] team0: Port device team_slave_1 added [ 263.814529][ T51] block nbd1: Receive control failed (result -32) [ 263.881741][T15872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.889077][T15987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2878'. [ 263.910216][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.936311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 263.936338][ C1] lec:lec_tx_timeout: lec0 [ 263.936387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.964683][T15872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.999098][T15872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.006070][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.103972][T15872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.115533][ T51] Bluetooth: hci7: command tx timeout [ 264.368437][T15872] hsr_slave_0: entered promiscuous mode [ 264.377789][T15872] hsr_slave_1: entered promiscuous mode [ 264.398767][T15872] debugfs: 'hsr0' already exists in 'hsr' [ 264.404527][T15872] Cannot create hsr debugfs directory [ 264.530952][T13957] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 264.532642][T16021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.843639][T15872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.867562][T15872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.060348][T15872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.080993][T15872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.222376][T15872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.246697][T15872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.294069][T16065] sctp: [Deprecated]: syz.4.2899 (pid 16065) Use of int in max_burst socket option. [ 265.294069][T16065] Use struct sctp_assoc_value instead [ 265.347759][T15872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.358953][T15872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.698428][T15872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.714620][T15872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.752920][T15872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.778771][T15872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.863255][T16098] netlink: 'syz.6.2906': attribute type 14 has an invalid length. [ 265.890875][T16098] netlink: 'syz.6.2906': attribute type 14 has an invalid length. [ 265.935543][T15872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.959887][T15872] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.992154][T13958] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.999423][T13958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.025809][T16102] SET target dimension over the limit! [ 266.054227][T13958] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.061452][T13958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.186993][ T51] Bluetooth: hci7: command tx timeout [ 266.720905][T15872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.859516][T15872] veth0_vlan: entered promiscuous mode [ 266.896158][T15872] veth1_vlan: entered promiscuous mode [ 266.985352][T15872] veth0_macvtap: entered promiscuous mode [ 267.032103][T15872] veth1_macvtap: entered promiscuous mode [ 267.080794][T15872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.101240][T15872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.140910][T13957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.159924][T13957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.184732][T13957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.208023][T13957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.399351][T13959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.410055][T13959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.512162][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.528426][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.732922][T16188] netlink: 'syz.0.2931': attribute type 16 has an invalid length. [ 267.821081][T16188] netlink: 'syz.0.2931': attribute type 17 has an invalid length. [ 267.841723][T16188] C: left promiscuous mode [ 267.862084][T16188] : left promiscuous mode [ 267.906376][T16188] erspan0: left promiscuous mode [ 267.932187][T16188] erspan0: left allmulticast mode [ 267.968676][T16188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.093602][T16195] delete_channel: no stack [ 268.145738][T16195] delete_channel: no stack [ 268.222283][T16198] bridge_slave_1: entered promiscuous mode [ 268.266941][ T51] Bluetooth: hci7: command tx timeout [ 268.273572][T16210] netlink: 'syz.2.2941': attribute type 2 has an invalid length. [ 268.357262][T16214] __nla_validate_parse: 13 callbacks suppressed [ 268.357279][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 268.485583][T16219] bond0: (slave rose0): Error: Device can not be enslaved while up [ 268.936746][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.944816][ C1] lec:lec_tx_timeout: lec0 [ 268.950477][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.025381][T16231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2950'. [ 269.216463][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.229920][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.248405][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.258150][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.269490][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.281651][T16243] netlink: 'syz.6.2953': attribute type 21 has an invalid length. [ 269.290717][T16243] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2953'. [ 269.361657][T16249] x_tables: ip_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 269.404328][T16236] wg1 speed is unknown, defaulting to 1000 [ 269.410531][T16251] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 269.542250][T16257] lo: entered promiscuous mode [ 269.553270][T16257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.687635][T16270] netlink: 'syz.6.2962': attribute type 10 has an invalid length. [ 269.694298][T16268] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2961'. [ 269.754589][T16236] chnl_net:caif_netlink_parms(): no params data found [ 269.796013][ T2154] IPVS: starting estimator thread 0... [ 269.893899][T16236] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.903469][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.907131][T16276] IPVS: using max 33 ests per chain, 79200 per kthread [ 269.911602][T16236] bridge_slave_0: entered allmulticast mode [ 269.925427][T16236] bridge_slave_0: entered promiscuous mode [ 269.934211][T16236] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.942349][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.950901][T16236] bridge_slave_1: entered allmulticast mode [ 269.958807][T16236] bridge_slave_1: entered promiscuous mode [ 270.004333][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.024032][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.030235][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 270.085177][T16236] team0: Port device team_slave_0 added [ 270.095076][T16286] netlink: 'syz.4.2966': attribute type 13 has an invalid length. [ 270.104003][T16286] netlink: 'syz.4.2966': attribute type 58 has an invalid length. [ 270.117669][T16236] team0: Port device team_slave_1 added [ 270.121214][T16286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2966'. [ 270.196976][T16292] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2969'. [ 270.202051][T16293] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2969'. [ 270.218595][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.225553][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.252764][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.265817][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.274492][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.306860][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.358436][ T5831] Bluetooth: hci7: command tx timeout [ 270.409520][T16299] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2971'. [ 270.462058][T16236] hsr_slave_0: entered promiscuous mode [ 270.480018][T16236] hsr_slave_1: entered promiscuous mode [ 270.489436][T16236] debugfs: 'hsr0' already exists in 'hsr' [ 270.504829][T16236] Cannot create hsr debugfs directory [ 270.514817][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2973'. [ 270.728314][T16309] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 271.011725][T16236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.053130][T16236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.205995][T16236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.222439][T16236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.299566][T16236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.319661][T16236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.391686][ T5831] Bluetooth: hci2: command tx timeout [ 271.664928][T16236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.711656][T16236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.748337][T16236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.765724][T16236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.805666][T16347] bridge1: entered promiscuous mode [ 271.811605][T16347] bridge1: entered allmulticast mode [ 271.923841][T16362] netlink: 'syz.2.2989': attribute type 9 has an invalid length. [ 272.093327][T16236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.140983][T16236] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.179069][T13957] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.186220][T13957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.228956][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.236202][T13960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.560426][T16236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.624799][T16236] veth0_vlan: entered promiscuous mode [ 272.642757][T16236] veth1_vlan: entered promiscuous mode [ 272.689760][T16236] veth0_macvtap: entered promiscuous mode [ 272.699447][T16236] veth1_macvtap: entered promiscuous mode [ 272.717810][T16236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.732031][T16236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.751500][T13958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.771851][T13958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.788133][T13958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.817843][T13958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.880025][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.897965][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.945593][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.955616][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.051942][T16404] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 273.065067][T16404] bond3 (unregistering): Released all slaves [ 273.411741][T16426] __nla_validate_parse: 12 callbacks suppressed [ 273.411764][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 273.468124][ T5831] Bluetooth: hci2: command tx timeout [ 273.606050][T16427] syzkaller1: entered promiscuous mode [ 273.612725][T16427] syzkaller1: entered allmulticast mode [ 273.768656][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3014'. [ 273.785665][T16450] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3015'. [ 273.956556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 273.964594][ C1] lec:lec_tx_timeout: lec0 [ 273.969536][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.022429][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3021'. [ 274.177156][T16462] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3020'. [ 274.231766][T16478] tipc: Started in network mode [ 274.241184][T16478] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 274.249442][T16478] tipc: Enabled bearer , priority 10 [ 274.256311][T16479] tipc: Enabling of bearer rejected, already enabled [ 274.500500][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3030'. [ 274.537361][T16494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3030'. [ 274.547888][T16494] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3030'. [ 274.558378][T16494] netlink: 'syz.0.3030': attribute type 5 has an invalid length. [ 274.566264][T16494] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3030'. [ 274.678954][T16504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3033'. [ 274.832725][ T30] audit: type=1107 audit(1761194522.034:4): pid=16512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 275.023757][ T5884] IPVS: starting estimator thread 0... [ 275.084026][T16532] syzkaller0: entered promiscuous mode [ 275.094040][T16532] syzkaller0: entered allmulticast mode [ 275.118761][T16530] IPVS: using max 30 ests per chain, 72000 per kthread [ 275.160930][T16542] netlink: 'syz.0.3048': attribute type 21 has an invalid length. [ 275.193507][T16542] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 275.210139][T16542] bond1 (unregistering): Released all slaves [ 275.248350][ T5973] tipc: Node number set to 10005162 [ 275.508455][T16556] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 275.549501][ T5831] Bluetooth: hci2: command tx timeout [ 275.554982][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049ea4800: rx timeout, send abort [ 275.935308][T16584] xt_hashlimit: size too large, truncated to 1048576 [ 276.052321][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049ea5000: rx timeout, send abort [ 276.061839][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049ea4800: abort rx timeout. Force session deactivation [ 276.560962][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049ea5000: abort rx timeout. Force session deactivation [ 276.628577][T16614] netlink: 'syz.4.3069': attribute type 1 has an invalid length. [ 276.705337][T16617] syzkaller0: entered promiscuous mode [ 276.712718][T16617] syzkaller0: entered allmulticast mode [ 276.753645][T16621] delete_channel: no stack [ 276.943064][T16634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.250478][T16653] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 277.627426][ T5831] Bluetooth: hci2: command tx timeout [ 277.642730][T16675] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 277.805429][T16684] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 277.814888][T16684] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 277.823983][T16684] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 277.846570][T16687] tipc: Started in network mode [ 277.851572][T16687] tipc: Node identity , cluster identity 4711 [ 277.857873][T16687] tipc: Failed to obtain node identity [ 277.863467][T16687] tipc: Enabling of bearer rejected, failed to enable media [ 277.883188][T16687] geneve2: entered promiscuous mode [ 277.888637][T16687] geneve2: entered allmulticast mode [ 277.895510][T13956] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.905093][T13956] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.914275][T13956] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.923383][T13956] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 278.270742][T16694] tipc: Started in network mode [ 278.277560][T16694] tipc: Node identity 4295a889db1e, cluster identity 4711 [ 278.288246][T16694] tipc: Enabled bearer , priority 0 [ 278.307598][T16694] tipc: Disabling bearer [ 278.653183][T16707] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 278.766072][T16713] tipc: Started in network mode [ 278.781646][T16713] tipc: Node identity 7613b39b91ad, cluster identity 4711 [ 278.799051][T16713] tipc: Enabled bearer , priority 0 [ 278.875980][T16713] tipc: Resetting bearer [ 278.913832][T16722] tipc: Enabled bearer , priority 0 [ 278.928540][T16722] syzkaller0: entered promiscuous mode [ 278.934177][T16722] syzkaller0: entered allmulticast mode [ 278.959070][T16723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 278.970427][T16711] tipc: Disabling bearer [ 278.976637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 278.984682][ C1] lec:lec_tx_timeout: lec0 [ 278.991746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.008888][T16722] tipc: Resetting bearer [ 279.039198][T16722] tipc: Resetting bearer [ 279.062452][T16722] tipc: Disabling bearer [ 279.093622][T16726] __nla_validate_parse: 11 callbacks suppressed [ 279.093635][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 279.152641][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 279.246278][T16741] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 279.469511][T16754] tipc: Enabling of bearer rejected, failed to enable media [ 279.704795][T16770] sctp: [Deprecated]: syz.4.3116 (pid 16770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.704795][T16770] Use struct sctp_sack_info instead [ 279.839976][T16776] netlink: 'syz.6.3118': attribute type 1 has an invalid length. [ 279.863489][T16776] netlink: 'syz.6.3118': attribute type 4 has an invalid length. [ 279.885138][T16776] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3118'. [ 279.910201][T16780] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3118'. [ 280.009112][T16785] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3122'. [ 280.086330][T16793] netlink: 'syz.2.3124': attribute type 10 has an invalid length. [ 280.133719][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.144611][T16793] bond0: (slave team0): Enslaving as an active interface with an up link [ 280.220958][T16801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3127'. [ 280.231521][T16796] tipc: Enabled bearer , priority 0 [ 280.236234][T16796] syzkaller0: entered promiscuous mode [ 280.245975][T16796] syzkaller0: entered allmulticast mode [ 280.249508][T16801] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 280.297809][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3128'. [ 280.308271][T16801] team0: Port device dummy0 added [ 280.323009][T16803] netlink: 'syz.6.3128': attribute type 1 has an invalid length. [ 280.332197][T16803] netlink: 'syz.6.3128': attribute type 2 has an invalid length. [ 280.344264][T16807] tipc: Resetting bearer [ 280.411404][T16810] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 280.432550][T16809] team0: Port device team_slave_0 removed [ 280.442944][T16795] tipc: Resetting bearer [ 280.459284][T16795] tipc: Disabling bearer [ 280.469411][T16803] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3128'. [ 280.470533][T16810] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.500823][T16810] team0: Failed to send options change via netlink (err -105) [ 280.508812][T16810] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.518963][T16810] team0: Port device dummy0 removed [ 280.529488][T16810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.629504][T16823] sit0: Caught tx_queue_len zero misconfig [ 280.777447][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3136'. [ 280.910536][T16839] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3138'. [ 281.285235][T16865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.294690][T16865] batadv_slave_0: entered promiscuous mode [ 281.309843][T16865] batadv_slave_0: entered allmulticast mode [ 281.455393][T16860] wg1 speed is unknown, defaulting to 1000 [ 281.731333][T16884] FAULT_INJECTION: forcing a failure. [ 281.731333][T16884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.765425][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.6.3151 Not tainted syzkaller #0 PREEMPT(full) [ 281.765452][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.765463][T16884] Call Trace: [ 281.765471][T16884] [ 281.765479][T16884] dump_stack_lvl+0x189/0x250 [ 281.765507][T16884] ? __pfx____ratelimit+0x10/0x10 [ 281.765528][T16884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.765551][T16884] ? __pfx__printk+0x10/0x10 [ 281.765570][T16884] ? __might_fault+0xb0/0x130 [ 281.765605][T16884] should_fail_ex+0x414/0x560 [ 281.765634][T16884] _copy_from_user+0x2d/0xb0 [ 281.765657][T16884] ___sys_sendmsg+0x158/0x2a0 [ 281.765678][T16884] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.765732][T16884] ? __fget_files+0x2a/0x420 [ 281.765748][T16884] ? __fget_files+0x3a0/0x420 [ 281.765775][T16884] __x64_sys_sendmsg+0x19b/0x260 [ 281.765796][T16884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.765823][T16884] ? __pfx_ksys_write+0x10/0x10 [ 281.765850][T16884] ? do_syscall_64+0xbe/0xfa0 [ 281.765876][T16884] do_syscall_64+0xfa/0xfa0 [ 281.765894][T16884] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.765915][T16884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.765933][T16884] ? clear_bhb_loop+0x60/0xb0 [ 281.765955][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.765971][T16884] RIP: 0033:0x7f18af98efc9 [ 281.765988][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.766003][T16884] RSP: 002b:00007f18b0908038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.766022][T16884] RAX: ffffffffffffffda RBX: 00007f18afbe5fa0 RCX: 00007f18af98efc9 [ 281.766035][T16884] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 281.766047][T16884] RBP: 00007f18b0908090 R08: 0000000000000000 R09: 0000000000000000 [ 281.766058][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.766069][T16884] R13: 00007f18afbe6038 R14: 00007f18afbe5fa0 R15: 00007ffc46cbb688 [ 281.766106][T16884] [ 281.996419][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.010631][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.026497][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.047117][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.054839][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.106461][T16892] tipc: Enabled bearer , priority 0 [ 282.124191][T16889] wg1 speed is unknown, defaulting to 1000 [ 282.154027][T16893] syzkaller0: entered promiscuous mode [ 282.160434][T16893] syzkaller0: entered allmulticast mode [ 282.213040][T16892] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.313697][T16892] tipc: Resetting bearer [ 282.364427][T16892] tipc: Disabling bearer [ 282.406249][T16908] syzkaller1: entered promiscuous mode [ 282.415506][T16908] syzkaller1: entered allmulticast mode [ 282.693974][T16889] chnl_net:caif_netlink_parms(): no params data found [ 282.717709][T16931] FAULT_INJECTION: forcing a failure. [ 282.717709][T16931] name failslab, interval 1, probability 0, space 0, times 1 [ 282.738534][T16931] CPU: 1 UID: 0 PID: 16931 Comm: syz.0.3166 Not tainted syzkaller #0 PREEMPT(full) [ 282.738558][T16931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.738569][T16931] Call Trace: [ 282.738575][T16931] [ 282.738583][T16931] dump_stack_lvl+0x189/0x250 [ 282.738610][T16931] ? __pfx____ratelimit+0x10/0x10 [ 282.738629][T16931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.738651][T16931] ? __pfx__printk+0x10/0x10 [ 282.738675][T16931] ? __pfx___might_resched+0x10/0x10 [ 282.738693][T16931] ? fs_reclaim_acquire+0x7d/0x100 [ 282.738723][T16931] should_fail_ex+0x414/0x560 [ 282.738750][T16931] should_failslab+0xa8/0x100 [ 282.738768][T16931] kmem_cache_alloc_node_noprof+0x77/0x710 [ 282.738792][T16931] ? __alloc_skb+0x112/0x2d0 [ 282.738815][T16931] ? netlink_autobind+0xdb/0x300 [ 282.738836][T16931] __alloc_skb+0x112/0x2d0 [ 282.738863][T16931] netlink_sendmsg+0x5c6/0xb30 [ 282.738895][T16931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.738921][T16931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.738946][T16931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.738962][T16931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.738985][T16931] __sock_sendmsg+0x21c/0x270 [ 282.739005][T16931] ____sys_sendmsg+0x505/0x830 [ 282.739023][T16931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.739046][T16931] ? import_iovec+0x74/0xa0 [ 282.739070][T16931] ___sys_sendmsg+0x21f/0x2a0 [ 282.739089][T16931] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.739141][T16931] ? __fget_files+0x2a/0x420 [ 282.739162][T16931] ? __fget_files+0x3a0/0x420 [ 282.739188][T16931] __x64_sys_sendmsg+0x19b/0x260 [ 282.739208][T16931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.739237][T16931] ? __pfx_ksys_write+0x10/0x10 [ 282.739264][T16931] ? do_syscall_64+0xbe/0xfa0 [ 282.739297][T16931] do_syscall_64+0xfa/0xfa0 [ 282.739316][T16931] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.739337][T16931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.739355][T16931] ? clear_bhb_loop+0x60/0xb0 [ 282.739377][T16931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.739394][T16931] RIP: 0033:0x7feabfd8efc9 [ 282.739411][T16931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.739427][T16931] RSP: 002b:00007feac0bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.739447][T16931] RAX: ffffffffffffffda RBX: 00007feabffe5fa0 RCX: 00007feabfd8efc9 [ 282.739460][T16931] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 282.739471][T16931] RBP: 00007feac0bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 282.739482][T16931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.739493][T16931] R13: 00007feabffe6038 R14: 00007feabffe5fa0 R15: 00007fffc29fbe98 [ 282.739525][T16931] [ 283.150107][T16940] netlink: 'syz.0.3168': attribute type 14 has an invalid length. [ 283.172247][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.178027][T16942] netlink: 'syz.6.3170': attribute type 21 has an invalid length. [ 283.179775][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.195978][T16889] bridge_slave_0: entered allmulticast mode [ 283.204316][T16889] bridge_slave_0: entered promiscuous mode [ 283.213244][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.222032][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.232786][T16889] bridge_slave_1: entered allmulticast mode [ 283.241041][T16889] bridge_slave_1: entered promiscuous mode [ 283.333928][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.390607][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.492800][T16889] team0: Port device team_slave_0 added [ 283.512652][T16889] team0: Port device team_slave_1 added [ 283.540930][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.583323][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.601040][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.645739][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.662571][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.669860][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.703690][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.773518][T16971] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 283.789205][T16971] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 283.852573][T16889] hsr_slave_0: entered promiscuous mode [ 283.859680][T16889] hsr_slave_1: entered promiscuous mode [ 283.866300][T16889] debugfs: 'hsr0' already exists in 'hsr' [ 283.884439][T16889] Cannot create hsr debugfs directory [ 284.006643][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 284.014686][ C1] lec:lec_tx_timeout: lec0 [ 284.020727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 284.052461][T16988] ip6tnl0: Caught tx_queue_len zero misconfig [ 284.108427][ T51] Bluetooth: hci4: command tx timeout [ 284.256747][T17002] FAULT_INJECTION: forcing a failure. [ 284.256747][T17002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.293374][T17002] CPU: 0 UID: 0 PID: 17002 Comm: syz.4.3190 Not tainted syzkaller #0 PREEMPT(full) [ 284.293401][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.293412][T17002] Call Trace: [ 284.293420][T17002] [ 284.293428][T17002] dump_stack_lvl+0x189/0x250 [ 284.293458][T17002] ? __pfx____ratelimit+0x10/0x10 [ 284.293480][T17002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.293503][T17002] ? __pfx__printk+0x10/0x10 [ 284.293521][T17002] ? __might_fault+0xb0/0x130 [ 284.293556][T17002] should_fail_ex+0x414/0x560 [ 284.293585][T17002] _copy_from_iter+0x1de/0x1790 [ 284.293610][T17002] ? rcu_is_watching+0x15/0xb0 [ 284.293634][T17002] ? kmalloc_reserve+0xbd/0x290 [ 284.293659][T17002] ? __pfx__copy_from_iter+0x10/0x10 [ 284.293681][T17002] ? __build_skb_around+0x262/0x3f0 [ 284.293708][T17002] ? netlink_sendmsg+0x642/0xb30 [ 284.293731][T17002] ? skb_put+0x11b/0x210 [ 284.293758][T17002] netlink_sendmsg+0x6b2/0xb30 [ 284.293789][T17002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.293817][T17002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.293844][T17002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.293861][T17002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.293894][T17002] __sock_sendmsg+0x21c/0x270 [ 284.293919][T17002] ____sys_sendmsg+0x505/0x830 [ 284.293944][T17002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.293969][T17002] ? import_iovec+0x74/0xa0 [ 284.293991][T17002] ___sys_sendmsg+0x21f/0x2a0 [ 284.294006][T17002] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.294051][T17002] ? __fget_files+0x2a/0x420 [ 284.294065][T17002] ? __fget_files+0x3a0/0x420 [ 284.294089][T17002] __x64_sys_sendmsg+0x19b/0x260 [ 284.294107][T17002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.294135][T17002] ? __pfx_ksys_write+0x10/0x10 [ 284.294161][T17002] ? do_syscall_64+0xbe/0xfa0 [ 284.294183][T17002] do_syscall_64+0xfa/0xfa0 [ 284.294200][T17002] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.294217][T17002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.294234][T17002] ? clear_bhb_loop+0x60/0xb0 [ 284.294254][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.294271][T17002] RIP: 0033:0x7fd17e78efc9 [ 284.294287][T17002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.294303][T17002] RSP: 002b:00007fd17f5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.294321][T17002] RAX: ffffffffffffffda RBX: 00007fd17e9e5fa0 RCX: 00007fd17e78efc9 [ 284.294334][T17002] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 284.294345][T17002] RBP: 00007fd17f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 284.294355][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.294365][T17002] R13: 00007fd17e9e6038 R14: 00007fd17e9e5fa0 R15: 00007ffc13bb7808 [ 284.294398][T17002] [ 284.616345][T16889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.655139][T16889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.671912][T16889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.685303][T17010] openvswitch: netlink: EtherType 53b is less than min 600 [ 284.690852][T16889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.702042][T17010] xt_hashlimit: size too large, truncated to 1048576 [ 284.998278][T16889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.075815][T16889] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.114956][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.122206][T13956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.178081][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.185304][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.504617][T17045] ip6gre1: entered promiscuous mode [ 285.547879][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.645052][T17053] FAULT_INJECTION: forcing a failure. [ 285.645052][T17053] name failslab, interval 1, probability 0, space 0, times 0 [ 285.676943][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.6.3202 Not tainted syzkaller #0 PREEMPT(full) [ 285.676969][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.676979][T17053] Call Trace: [ 285.676987][T17053] [ 285.676995][T17053] dump_stack_lvl+0x189/0x250 [ 285.677022][T17053] ? __pfx____ratelimit+0x10/0x10 [ 285.677043][T17053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.677064][T17053] ? __pfx__printk+0x10/0x10 [ 285.677088][T17053] ? __lock_acquire+0xab9/0xd20 [ 285.677111][T17053] should_fail_ex+0x414/0x560 [ 285.677142][T17053] should_failslab+0xa8/0x100 [ 285.677163][T17053] kmem_cache_alloc_noprof+0x74/0x6e0 [ 285.677187][T17053] ? skb_clone+0x212/0x3a0 [ 285.677216][T17053] skb_clone+0x212/0x3a0 [ 285.677239][T17053] __netlink_deliver_tap+0x404/0x850 [ 285.677278][T17053] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.677303][T17053] netlink_deliver_tap+0x19c/0x1b0 [ 285.677329][T17053] netlink_unicast+0x7fa/0x9e0 [ 285.677360][T17053] ? __pfx_netlink_unicast+0x10/0x10 [ 285.677384][T17053] ? netlink_sendmsg+0x642/0xb30 [ 285.677406][T17053] ? skb_put+0x11b/0x210 [ 285.677435][T17053] netlink_sendmsg+0x805/0xb30 [ 285.677469][T17053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.677497][T17053] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.677523][T17053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.677540][T17053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.677565][T17053] __sock_sendmsg+0x21c/0x270 [ 285.677591][T17053] ____sys_sendmsg+0x505/0x830 [ 285.677614][T17053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.677642][T17053] ? import_iovec+0x74/0xa0 [ 285.677668][T17053] ___sys_sendmsg+0x21f/0x2a0 [ 285.677688][T17053] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.677745][T17053] ? __fget_files+0x2a/0x420 [ 285.677761][T17053] ? __fget_files+0x3a0/0x420 [ 285.677795][T17053] __x64_sys_sendmsg+0x19b/0x260 [ 285.677816][T17053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.677845][T17053] ? __pfx_ksys_write+0x10/0x10 [ 285.677872][T17053] ? do_syscall_64+0xbe/0xfa0 [ 285.677899][T17053] do_syscall_64+0xfa/0xfa0 [ 285.677918][T17053] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.677944][T17053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.677962][T17053] ? clear_bhb_loop+0x60/0xb0 [ 285.677984][T17053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.678001][T17053] RIP: 0033:0x7f18af98efc9 [ 285.678018][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.678034][T17053] RSP: 002b:00007f18b0908038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.678054][T17053] RAX: ffffffffffffffda RBX: 00007f18afbe5fa0 RCX: 00007f18af98efc9 [ 285.678067][T17053] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 285.678078][T17053] RBP: 00007f18b0908090 R08: 0000000000000000 R09: 0000000000000000 [ 285.678089][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.678100][T17053] R13: 00007f18afbe6038 R14: 00007f18afbe5fa0 R15: 00007ffc46cbb688 [ 285.678132][T17053] [ 286.152802][T17063] __nla_validate_parse: 13 callbacks suppressed [ 286.152820][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3206'. [ 286.188956][ T51] Bluetooth: hci4: command tx timeout [ 286.206919][ T5964] IPVS: starting estimator thread 0... [ 286.296784][T17068] IPVS: using max 29 ests per chain, 69600 per kthread [ 286.342699][T17073] dvmrp0: entered allmulticast mode [ 286.351854][T17073] dvmrp0: left allmulticast mode [ 286.357059][T17073] vlan1: left allmulticast mode [ 286.362142][T17073] veth0_vlan: left allmulticast mode [ 286.513858][T17082] FAULT_INJECTION: forcing a failure. [ 286.513858][T17082] name failslab, interval 1, probability 0, space 0, times 0 [ 286.528664][T17082] CPU: 1 UID: 0 PID: 17082 Comm: syz.4.3214 Not tainted syzkaller #0 PREEMPT(full) [ 286.528687][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.528696][T17082] Call Trace: [ 286.528702][T17082] [ 286.528708][T17082] dump_stack_lvl+0x189/0x250 [ 286.528737][T17082] ? __pfx____ratelimit+0x10/0x10 [ 286.528758][T17082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.528780][T17082] ? __pfx__printk+0x10/0x10 [ 286.528805][T17082] ? __pfx___might_resched+0x10/0x10 [ 286.528823][T17082] ? fs_reclaim_acquire+0x7d/0x100 [ 286.528854][T17082] should_fail_ex+0x414/0x560 [ 286.528884][T17082] should_failslab+0xa8/0x100 [ 286.528904][T17082] __kmalloc_noprof+0xcb/0x7f0 [ 286.528938][T17082] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 286.528959][T17082] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.528991][T17082] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 286.529021][T17082] genl_family_rcv_msg_doit+0xb8/0x300 [ 286.529048][T17082] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.529078][T17082] ? apparmor_capable+0x137/0x1b0 [ 286.529099][T17082] ? bpf_lsm_capable+0x9/0x20 [ 286.529119][T17082] ? security_capable+0x7e/0x2e0 [ 286.529149][T17082] genl_rcv_msg+0x60e/0x790 [ 286.529176][T17082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.529194][T17082] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 286.529211][T17082] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 286.529231][T17082] ? __pfx_nl80211_post_doit+0x10/0x10 [ 286.529251][T17082] ? __asan_memcpy+0x40/0x70 [ 286.529273][T17082] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.529297][T17082] netlink_rcv_skb+0x208/0x470 [ 286.529319][T17082] ? __lock_acquire+0xab9/0xd20 [ 286.529337][T17082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.529359][T17082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.529403][T17082] ? down_read+0x1ad/0x2e0 [ 286.529430][T17082] genl_rcv+0x28/0x40 [ 286.529448][T17082] netlink_unicast+0x82f/0x9e0 [ 286.529480][T17082] ? __pfx_netlink_unicast+0x10/0x10 [ 286.529505][T17082] ? netlink_sendmsg+0x642/0xb30 [ 286.529527][T17082] ? skb_put+0x11b/0x210 [ 286.529556][T17082] netlink_sendmsg+0x805/0xb30 [ 286.529591][T17082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.529619][T17082] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.529645][T17082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.529662][T17082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.529688][T17082] __sock_sendmsg+0x21c/0x270 [ 286.529713][T17082] ____sys_sendmsg+0x505/0x830 [ 286.529738][T17082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.529765][T17082] ? import_iovec+0x74/0xa0 [ 286.529791][T17082] ___sys_sendmsg+0x21f/0x2a0 [ 286.529812][T17082] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.529870][T17082] ? __fget_files+0x2a/0x420 [ 286.529886][T17082] ? __fget_files+0x3a0/0x420 [ 286.529915][T17082] __x64_sys_sendmsg+0x19b/0x260 [ 286.529941][T17082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.529970][T17082] ? __pfx_ksys_write+0x10/0x10 [ 286.529999][T17082] ? do_syscall_64+0xbe/0xfa0 [ 286.530024][T17082] do_syscall_64+0xfa/0xfa0 [ 286.530043][T17082] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.530064][T17082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.530081][T17082] ? clear_bhb_loop+0x60/0xb0 [ 286.530103][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.530121][T17082] RIP: 0033:0x7fd17e78efc9 [ 286.530138][T17082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.530153][T17082] RSP: 002b:00007fd17f5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.530174][T17082] RAX: ffffffffffffffda RBX: 00007fd17e9e5fa0 RCX: 00007fd17e78efc9 [ 286.530187][T17082] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 286.530199][T17082] RBP: 00007fd17f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 286.530210][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.530221][T17082] R13: 00007fd17e9e6038 R14: 00007fd17e9e5fa0 R15: 00007ffc13bb7808 [ 286.530254][T17082] [ 287.158315][T16889] veth0_vlan: entered promiscuous mode [ 287.213044][T16889] veth1_vlan: entered promiscuous mode [ 287.260429][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3220'. [ 287.271548][T16889] veth0_macvtap: entered promiscuous mode [ 287.283820][T16889] veth1_macvtap: entered promiscuous mode [ 287.300723][T17105] netlink: 'syz.4.3221': attribute type 6 has an invalid length. [ 287.336294][T16889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.355364][T16889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.372868][ T1038] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.410648][T17112] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3221'. [ 287.424037][T13957] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.441126][T13957] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.467736][T13957] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.710910][T13958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.736653][T13958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.792898][T17126] FAULT_INJECTION: forcing a failure. [ 287.792898][T17126] name failslab, interval 1, probability 0, space 0, times 0 [ 287.794925][T13959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.824327][T17126] CPU: 0 UID: 0 PID: 17126 Comm: syz.0.3227 Not tainted syzkaller #0 PREEMPT(full) [ 287.824353][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.824364][T17126] Call Trace: [ 287.824371][T17126] [ 287.824380][T17126] dump_stack_lvl+0x189/0x250 [ 287.824407][T17126] ? __pfx____ratelimit+0x10/0x10 [ 287.824429][T17126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.824452][T17126] ? __pfx__printk+0x10/0x10 [ 287.824476][T17126] ? __pfx___might_resched+0x10/0x10 [ 287.824501][T17126] should_fail_ex+0x414/0x560 [ 287.824531][T17126] should_failslab+0xa8/0x100 [ 287.824565][T17126] kmem_cache_alloc_node_noprof+0x77/0x710 [ 287.824589][T17126] ? __alloc_skb+0x112/0x2d0 [ 287.824620][T17126] __alloc_skb+0x112/0x2d0 [ 287.824649][T17126] netlink_ack+0x146/0xa50 [ 287.824671][T17126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.824689][T17126] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 287.824707][T17126] ? __pfx_nl80211_post_doit+0x10/0x10 [ 287.824726][T17126] ? __asan_memcpy+0x40/0x70 [ 287.824747][T17126] ? __pfx_ref_tracker_free+0x10/0x10 [ 287.824770][T17126] netlink_rcv_skb+0x28c/0x470 [ 287.824791][T17126] ? __lock_acquire+0xab9/0xd20 [ 287.824809][T17126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.824829][T17126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.824872][T17126] ? down_read+0x1ad/0x2e0 [ 287.824898][T17126] genl_rcv+0x28/0x40 [ 287.824916][T17126] netlink_unicast+0x82f/0x9e0 [ 287.824947][T17126] ? __pfx_netlink_unicast+0x10/0x10 [ 287.824985][T17126] ? netlink_sendmsg+0x642/0xb30 [ 287.825019][T17126] ? skb_put+0x11b/0x210 [ 287.825050][T17126] netlink_sendmsg+0x805/0xb30 [ 287.825084][T17126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.825111][T17126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.825137][T17126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.825154][T17126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.825178][T17126] __sock_sendmsg+0x21c/0x270 [ 287.825203][T17126] ____sys_sendmsg+0x505/0x830 [ 287.825227][T17126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.825255][T17126] ? import_iovec+0x74/0xa0 [ 287.825280][T17126] ___sys_sendmsg+0x21f/0x2a0 [ 287.825300][T17126] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.825356][T17126] ? __fget_files+0x2a/0x420 [ 287.825372][T17126] ? __fget_files+0x3a0/0x420 [ 287.825397][T17126] __x64_sys_sendmsg+0x19b/0x260 [ 287.825417][T17126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.825444][T17126] ? __pfx_ksys_write+0x10/0x10 [ 287.825470][T17126] ? do_syscall_64+0xbe/0xfa0 [ 287.825495][T17126] do_syscall_64+0xfa/0xfa0 [ 287.825514][T17126] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.825535][T17126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.825559][T17126] ? clear_bhb_loop+0x60/0xb0 [ 287.825581][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.825598][T17126] RIP: 0033:0x7feabfd8efc9 [ 287.825615][T17126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.825629][T17126] RSP: 002b:00007feac0bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.825649][T17126] RAX: ffffffffffffffda RBX: 00007feabffe5fa0 RCX: 00007feabfd8efc9 [ 287.825662][T17126] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 287.825673][T17126] RBP: 00007feac0bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 287.825683][T17126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.825694][T17126] R13: 00007feabffe6038 R14: 00007feabffe5fa0 R15: 00007fffc29fbe98 [ 287.825726][T17126] [ 287.829337][T13959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.939079][T17131] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3229'. [ 287.968336][T17129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3228'. [ 287.973330][T17133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3230'. [ 288.272834][ T51] Bluetooth: hci4: command tx timeout [ 288.427031][T17149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.566591][T17159] syzkaller0: entered promiscuous mode [ 288.579021][T17159] syzkaller0: entered allmulticast mode [ 288.625854][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3236'. [ 288.645901][T17164] tipc: Enabling of bearer rejected, failed to enable media [ 288.821262][T17177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3243'. [ 288.852997][T17179] netlink: 'syz.0.3244': attribute type 14 has an invalid length. [ 288.889054][T17182] syzkaller1: left promiscuous mode [ 288.898707][T17182] syzkaller1: left allmulticast mode [ 288.906322][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3245'. [ 288.916070][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3245'. [ 289.036797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 289.044838][ C1] lec:lec_tx_timeout: lec0 [ 289.051132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 289.058209][T17193] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.551174][T17228] vlan2: entered allmulticast mode [ 289.722184][T17236] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 289.755525][T17236] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 289.755816][T17241] x_tables: duplicate entry at hook 1 [ 290.103944][T17258] : entered promiscuous mode [ 290.352128][ T51] Bluetooth: hci4: command tx timeout [ 290.521656][T17277] tipc: Cannot configure node identity twice [ 290.939422][T17300] netlink: 'syz.4.3278': attribute type 26 has an invalid length. [ 291.084234][T17311] tap0: tun_chr_ioctl cmd 2148553947 [ 291.100378][T13957] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.144483][T13957] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.164880][T13957] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.187608][T13957] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.218242][T17324] netlink: 'syz.0.3284': attribute type 10 has an invalid length. [ 291.232726][T17324] veth1_macvtap: left promiscuous mode [ 291.400748][T17331] netlink: 'syz.6.3287': attribute type 3 has an invalid length. [ 291.417507][T17331] __nla_validate_parse: 12 callbacks suppressed [ 291.417526][T17331] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3287'. [ 291.458751][T17338] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3289'. [ 291.678323][T17359] Unsupported ieee802154 address type: 0 [ 292.479359][T17370] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 292.506092][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3300'. [ 292.543377][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 292.596688][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 292.597701][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3298'. [ 292.647159][T17371] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 292.681353][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3298'. [ 292.683014][T17386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.719940][T17371] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 292.745373][T17371] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3298'. [ 292.929192][T17397] bridge0: port 3(batadv1) entered blocking state [ 292.948957][T17397] bridge0: port 3(batadv1) entered disabled state [ 292.960106][T17397] batadv1: entered allmulticast mode [ 292.975566][T17397] batadv1: entered promiscuous mode [ 293.027216][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.035026][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.042302][T17401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.162559][T17410] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 293.417621][T13956] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 293.427312][T13956] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 293.509893][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.517666][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.642261][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.657904][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.774287][ T1038] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.805059][ T1038] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.814771][ T1038] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.825314][ T1038] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.980309][T17459] syzkaller1: entered promiscuous mode [ 293.985804][T17459] syzkaller1: entered allmulticast mode [ 294.004045][T17460] netlink: 'syz.4.3321': attribute type 1 has an invalid length. [ 294.004129][T17458] netlink: 'syz.4.3321': attribute type 1 has an invalid length. [ 294.311119][T17464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 294.355744][T17464] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 294.371744][T17464] gretap1: entered promiscuous mode [ 294.377941][T17464] gretap1: entered allmulticast mode [ 294.533816][T17480] Z7nz>RA: renamed from lo (while UP) [ 294.826576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 294.834646][ C1] lec:lec_tx_timeout: lec0 [ 294.839495][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.028798][T17511] syzkaller0: entered promiscuous mode [ 295.047375][T17511] syzkaller0: entered allmulticast mode [ 296.773570][T17535] geneve2: entered promiscuous mode [ 296.779358][T17535] geneve2: entered allmulticast mode [ 296.786199][T17537] netlink: 'syz.6.3345': attribute type 29 has an invalid length. [ 296.983743][T17562] netlink: 'syz.6.3351': attribute type 11 has an invalid length. [ 297.178724][T17568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.261676][T17578] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 297.318375][T17578] bond1 (unregistering): Released all slaves [ 297.516201][T17597] x_tables: duplicate underflow at hook 1 [ 297.522128][T13960] batman_adv: batadv1: IGMP Querier appeared [ 297.548201][T17601] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 297.964552][T17631] syzkaller0: entered promiscuous mode [ 297.970410][T17631] syzkaller0: entered allmulticast mode [ 298.461843][T17658] netlink: 'syz.6.3380': attribute type 1 has an invalid length. [ 299.509308][T17659] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 299.622884][T17668] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 299.668038][T17668] __nla_validate_parse: 14 callbacks suppressed [ 299.668057][T17668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3383'. [ 299.699628][T17668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3383'. [ 299.867242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 299.875364][ C1] lec:lec_tx_timeout: lec0 [ 299.880036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.923456][T17684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.928518][T17680] tipc: Enabled bearer , priority 0 [ 300.033967][T17680] syzkaller0: entered promiscuous mode [ 300.039862][T17694] netlink: 'syz.7.3389': attribute type 83 has an invalid length. [ 300.048332][T17680] syzkaller0: entered allmulticast mode [ 300.054796][T17680] tipc: Resetting bearer [ 300.105539][T17679] tipc: Resetting bearer [ 300.124589][T17684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.163057][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.174666][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.224128][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.235370][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.341725][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.351742][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3395'. [ 300.452629][T17712] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3396'. [ 300.468622][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3396'. [ 300.946713][ T24] tipc: Node number set to 2576066697 [ 301.745594][T17679] tipc: Disabling bearer [ 302.051147][T17744] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 302.065703][T17747] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 302.090171][T17750] batadv_slave_1: entered promiscuous mode [ 302.091980][T17748] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 302.124642][T17747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.138282][T17748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.202935][T17750] batadv_slave_1: left promiscuous mode [ 302.391150][T17772] syzkaller0: entered promiscuous mode [ 302.407716][T17772] syzkaller0: entered allmulticast mode [ 302.815833][T17789] netlink: 'syz.0.3425': attribute type 1 has an invalid length. [ 302.821434][T17787] veth0: entered promiscuous mode [ 302.850828][T17786] veth0: left promiscuous mode [ 302.902543][T17793] netlink: 'syz.6.3427': attribute type 30 has an invalid length. [ 303.181135][T17814] tipc: Enabling of bearer rejected, failed to enable media [ 303.298026][T17824] wg1 speed is unknown, defaulting to 1000 [ 303.385461][T17833] unsupported nla_type 52263 [ 303.447460][T17837] netlink: 'syz.7.3439': attribute type 2 has an invalid length. [ 303.467916][T17837] 9: entered promiscuous mode [ 303.490762][T17842] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1376264, id = 0 [ 303.614465][T17844] netlink: ct family unspecified [ 303.637744][T17844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.799189][T17852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.871727][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 304.087775][T17878] netlink: 'syz.2.3450': attribute type 4 has an invalid length. [ 304.117021][T17883] macsec0: entered promiscuous mode [ 304.122448][T17883] macsec0: entered allmulticast mode [ 304.280844][T17889] syzkaller0: entered promiscuous mode [ 304.286356][T17889] syzkaller0: entered allmulticast mode [ 304.886907][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.895005][ C1] lec:lec_tx_timeout: lec0 [ 304.900849][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 306.125246][T17910] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 306.451674][T17928] __nla_validate_parse: 58 callbacks suppressed [ 306.451693][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 306.513576][T17928] netlink: 'syz.4.3466': attribute type 3 has an invalid length. [ 306.546889][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 306.583205][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.599122][T17940] nftables ruleset with unbound chain [ 306.723689][T17945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.747309][T17931] wg1 speed is unknown, defaulting to 1000 [ 306.768994][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'. [ 306.784791][T17945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.809553][T17950] netlink: 'syz.0.3472': attribute type 11 has an invalid length. [ 306.820575][T17950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3472'. [ 306.886384][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3470'. [ 306.902879][T17955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.145955][T17973] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3477'. [ 307.235758][T17977] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 307.358101][T17977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.425818][T17982] bond3: (slave veth7): Enslaving as an active interface with a down link [ 307.442481][T17983] bond3: (slave veth0_to_bond): making interface the new active one [ 307.451930][T17983] veth0_to_bond: entered promiscuous mode [ 307.458276][T17983] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 307.471331][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3478'. [ 307.535828][T17977] bond3: (slave veth9): Enslaving as an active interface with a down link [ 307.549522][T17988] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3479'. [ 307.660099][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3478'. [ 307.861282][T18007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.060877][T18036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3488'. [ 308.480566][T18059] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 308.588911][T18070] bond0: (slave rose0): Error: Device can not be enslaved while up [ 309.229586][T18117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.480561][T18131] netlink: 'syz.2.3518': attribute type 1 has an invalid length. [ 309.592489][T18132] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.604723][T18132] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 309.819912][T18149] syzkaller0: entered promiscuous mode [ 309.825425][T18149] syzkaller0: entered allmulticast mode [ 309.891392][T18156] Cannot find add_set index 0 as target [ 309.917355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 309.925420][ C1] lec:lec_tx_timeout: lec0 [ 309.930123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.615060][T18201] warn_alloc: 2 callbacks suppressed [ 310.615078][T18201] syz.4.3541: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 310.629913][T18198] netlink: 'syz.7.3540': attribute type 8 has an invalid length. [ 310.661811][T18201] ,cpuset=/,mems_allowed=0-1 [ 310.721563][T18201] CPU: 0 UID: 0 PID: 18201 Comm: syz.4.3541 Not tainted syzkaller #0 PREEMPT(full) [ 310.721589][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.721613][T18201] Call Trace: [ 310.721621][T18201] [ 310.721629][T18201] dump_stack_lvl+0x189/0x250 [ 310.721661][T18201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.721684][T18201] ? __pfx__printk+0x10/0x10 [ 310.721702][T18201] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.721726][T18201] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.721750][T18201] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 310.721777][T18201] warn_alloc+0x214/0x310 [ 310.721801][T18201] ? stack_depot_save_flags+0x40/0x860 [ 310.721825][T18201] ? __cgroup_account_cputime+0xe5/0x120 [ 310.721848][T18201] ? __pfx_warn_alloc+0x10/0x10 [ 310.721874][T18201] ? kasan_save_track+0x3e/0x80 [ 310.721895][T18201] ? __kasan_kmalloc+0x93/0xb0 [ 310.721919][T18201] ? xsk_setsockopt+0x4dc/0x8d0 [ 310.721935][T18201] ? do_sock_setsockopt+0x17c/0x1b0 [ 310.721959][T18201] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 310.721982][T18201] ? do_syscall_64+0xfa/0xfa0 [ 310.722000][T18201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.722028][T18201] __vmalloc_node_range_noprof+0x125/0x12d0 [ 310.722083][T18201] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.722112][T18201] ? __kasan_kmalloc+0x93/0xb0 [ 310.722142][T18201] vmalloc_user_noprof+0xad/0xf0 [ 310.722166][T18201] ? xskq_create+0xbf/0x170 [ 310.722186][T18201] xskq_create+0xbf/0x170 [ 310.722209][T18201] xsk_init_queue+0xb0/0x110 [ 310.722231][T18201] xsk_setsockopt+0x4dc/0x8d0 [ 310.722253][T18201] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.722271][T18201] ? __pfx_aa_sk_perm+0x10/0x10 [ 310.722292][T18201] ? aa_sock_opt_perm+0xff/0x1b0 [ 310.722313][T18201] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 310.722326][T18201] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.722341][T18201] do_sock_setsockopt+0x17c/0x1b0 [ 310.722366][T18201] __x64_sys_setsockopt+0x13f/0x1b0 [ 310.722390][T18201] do_syscall_64+0xfa/0xfa0 [ 310.722406][T18201] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.722422][T18201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.722435][T18201] ? clear_bhb_loop+0x60/0xb0 [ 310.722452][T18201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.722465][T18201] RIP: 0033:0x7fd17e78efc9 [ 310.722478][T18201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.722490][T18201] RSP: 002b:00007fd17f5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.722514][T18201] RAX: ffffffffffffffda RBX: 00007fd17e9e5fa0 RCX: 00007fd17e78efc9 [ 310.722524][T18201] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 310.722533][T18201] RBP: 00007fd17e811f91 R08: 0000000000000004 R09: 0000000000000000 [ 310.722541][T18201] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.722550][T18201] R13: 00007fd17e9e6038 R14: 00007fd17e9e5fa0 R15: 00007ffc13bb7808 [ 310.722573][T18201] [ 310.722584][T18201] Mem-Info: [ 311.056266][T18201] active_anon:4925 inactive_anon:0 isolated_anon:0 [ 311.056266][T18201] active_file:3077 inactive_file:39983 isolated_file:0 [ 311.056266][T18201] unevictable:768 dirty:82 writeback:0 [ 311.056266][T18201] slab_reclaimable:12857 slab_unreclaimable:126122 [ 311.056266][T18201] mapped:44336 shmem:1362 pagetables:1124 [ 311.056266][T18201] sec_pagetables:0 bounce:0 [ 311.056266][T18201] kernel_misc_reclaimable:0 [ 311.056266][T18201] free:1265780 free_pcp:15145 free_cma:0 [ 311.115759][T18207] netlink: 'syz.7.3543': attribute type 29 has an invalid length. [ 311.125718][T18215] netlink: 'syz.7.3543': attribute type 29 has an invalid length. [ 311.135436][T18201] Node 0 active_anon:19600kB inactive_anon:0kB active_file:12308kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177344kB dirty:328kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17592kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.216558][T18201] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.281953][T18201] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.384960][T18201] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 311.391756][T18201] Node 0 DMA32 free:1158724kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19300kB inactive_anon:0kB active_file:12308kB inactive_file:159732kB unevictable:1536kB writepending:328kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:43224kB local_pcp:20760kB free_cma:0kB [ 311.460769][T18201] lowmem_reserve[]: 0 0 0 0 0 [ 311.478699][T18201] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.479627][T18233] __nla_validate_parse: 15 callbacks suppressed [ 311.479642][T18233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3552'. [ 311.531135][T18201] lowmem_reserve[]: 0 0 0 0 0 [ 311.536172][T18201] Node 1 Normal free:3889784kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18112kB local_pcp:9728kB free_cma:0kB [ 311.573094][T18201] lowmem_reserve[]: 0 0 0 0 0 [ 311.580983][T18201] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.621849][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 311.639037][T18201] Node 0 DMA32: 553*4kB (UE) 260*8kB (UME) 86*16kB (UME) 183*32kB (UE) 26*64kB (UM) 24*128kB (UM) 16*256kB (UME) 8*512kB (ME) 4*1024kB (UM) 2*2048kB (M) 275*4096kB (UM) = 1159044kB [ 311.667807][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 311.696890][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3555'. [ 311.700943][T18245] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 311.739165][T18201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.767005][T18201] Node 1 Normal: 168*4kB (UE) 45*8kB (UME) 37*16kB (UME) 105*32kB (UME) 32*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3889784kB [ 311.781910][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 311.788929][T13960] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.824015][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3557'. [ 311.833151][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3555'. [ 311.836961][T13960] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.846643][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'. [ 311.859712][T18201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.859776][T18201] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 311.859792][T18201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.859808][T18201] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 311.859824][T18201] 44419 total pagecache pages [ 311.859834][T18201] 0 pages in swap cache [ 311.859842][T18201] Free swap = 124996kB [ 311.859850][T18201] Total swap = 124996kB [ 311.859860][T18201] 2097051 pages RAM [ 311.859868][T18201] 0 pages HighMem/MovableOnly [ 311.859876][T18201] 424107 pages reserved [ 311.859884][T18201] 0 pages cma reserved [ 311.940964][T13960] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.988715][T13960] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.215519][T18263] netlink: 'syz.2.3563': attribute type 30 has an invalid length. [ 312.238022][T18265] netlink: 57 bytes leftover after parsing attributes in process `syz.7.3561'. [ 312.244080][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3563'. [ 312.308197][T18273] sctp: [Deprecated]: syz.2.3563 (pid 18273) Use of int in max_burst socket option deprecated. [ 312.308197][T18273] Use struct sctp_assoc_value instead [ 312.359484][T18276] tipc: Trying to set illegal importance in message [ 312.505109][T18276] syzkaller0: entered promiscuous mode [ 312.512445][T18276] syzkaller0: entered allmulticast mode [ 312.725238][T18295] openvswitch: netlink: Message has 592 unknown bytes. [ 312.732688][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.149589][T18293] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 314.254653][T18317] netlink: 'syz.2.3575': attribute type 30 has an invalid length. [ 314.410880][T18321] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 314.513521][T18328] wg1 speed is unknown, defaulting to 1000 [ 314.667458][T18335] only policy match revision 0 supported [ 314.667477][T18335] unable to load match [ 314.731819][T18340] syzkaller1: entered promiscuous mode [ 314.749165][T18340] syzkaller1: entered allmulticast mode [ 314.937354][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 314.945435][ C1] lec:lec_tx_timeout: lec0 [ 314.950043][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.656854][T18403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.671155][T18403] batadv_slave_0: entered promiscuous mode [ 315.682661][T18403] batadv_slave_0: entered allmulticast mode [ 316.624116][T18459] netlink: 'syz.4.3618': attribute type 10 has an invalid length. [ 316.672654][T18459] batman_adv: batadv0: Adding interface: netdevsim0 [ 316.689473][T18459] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.723000][T18459] batman_adv: batadv0: Interface activated: netdevsim0 [ 316.953808][T18478] netlink: 'syz.6.3624': attribute type 21 has an invalid length. [ 317.232134][T18502] __nla_validate_parse: 15 callbacks suppressed [ 317.232151][T18502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3630'. [ 317.261540][T18500] tipc: Enabled bearer , priority 0 [ 317.281647][T18500] syzkaller0: entered promiscuous mode [ 317.290505][T18500] syzkaller0: entered allmulticast mode [ 317.318292][T18500] tipc: Resetting bearer [ 317.331240][T18500] syzkaller0: left promiscuous mode [ 317.336481][T18500] syzkaller0: left allmulticast mode [ 317.346715][T18499] tipc: Resetting bearer [ 317.371077][T18499] tipc: Disabling bearer [ 317.521562][T18513] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.661167][T18527] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3637'. [ 317.750591][T18513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.764538][T18513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.799231][T13960] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 317.862397][T18513] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 317.931613][T18513] geneve2: left promiscuous mode [ 317.937735][T18513] geneve2: left allmulticast mode [ 317.995695][T18513] gretap1: left promiscuous mode [ 318.002447][T18513] gretap1: left allmulticast mode [ 318.041382][T18517] IPv6: sit1: Disabled Multicast RS [ 318.054604][T18517] sit1: entered allmulticast mode [ 318.142359][ T30] audit: type=1107 audit(1761194565.344:5): pid=18547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 318.147644][ T8517] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.262641][ T8517] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.292323][ T8517] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 318.302496][ T8517] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.311484][ T8517] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.321434][ T8517] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 318.335087][T18542] syzkaller0: entered promiscuous mode [ 318.359363][T18542] syzkaller0: entered allmulticast mode [ 318.378238][ T8517] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.388432][ T8517] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.402812][ T8517] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 318.422562][ T8517] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.444707][ T8517] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.454039][ T8517] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 318.464935][T18553] netlink: 'syz.6.3641': attribute type 12 has an invalid length. [ 318.496725][T18553] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3641'. [ 318.515843][T18563] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3644'. [ 318.652470][T18565] x_tables: duplicate underflow at hook 2 [ 318.750590][T18571] syz_tun: entered allmulticast mode [ 318.784972][T18571] pimreg: entered allmulticast mode [ 318.798338][T18571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3646'. [ 318.839346][T18571] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3646'. [ 318.846021][T18580] netlink: 'syz.2.3651': attribute type 3 has an invalid length. [ 318.870612][T18582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.970657][T18582] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 318.988664][T18582] bond1 (unregistering): Released all slaves [ 319.003584][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3653'. [ 319.014817][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 319.048521][T18566] syz_tun: left allmulticast mode [ 319.053691][T18566] pimreg: left allmulticast mode [ 319.107404][T18591] veth0: entered promiscuous mode [ 319.115424][T18590] veth0: left promiscuous mode [ 319.262701][T18602] syzkaller1: entered promiscuous mode [ 319.293878][T18602] syzkaller1: entered allmulticast mode [ 319.388442][T18616] netlink: 'syz.6.3660': attribute type 1 has an invalid length. [ 319.472548][T18616] bond5 (unregistering): Released all slaves [ 319.586204][T18616] ip6tnl1: entered promiscuous mode [ 319.596780][T18616] ip6tnl1: entered allmulticast mode [ 319.643287][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 319.661600][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 319.956604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 319.964695][ C1] lec:lec_tx_timeout: lec0 [ 319.969691][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.107564][T18665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.116263][T18665] bond5: entered allmulticast mode [ 320.122602][T18665] bond0: (slave bond5): Enslaving as an active interface with an up link [ 320.136037][T18665] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 320.231370][T18671] team0: Device wireguard0 is of different type [ 320.612604][T18698] netlink: 'syz.4.3685': attribute type 64 has an invalid length. [ 320.635374][T18695] delete_channel: no stack [ 320.645021][T18702] netlink: 'syz.6.3686': attribute type 10 has an invalid length. [ 320.657547][T18698] netlink: 'syz.4.3685': attribute type 64 has an invalid length. [ 320.750272][T18704] syzkaller1: entered promiscuous mode [ 320.755806][T18704] syzkaller1: entered allmulticast mode [ 320.900240][T18712] Bluetooth: MGMT ver 1.23 [ 321.024920][T18718] wg1 speed is unknown, defaulting to 1000 [ 321.267454][ T30] audit: type=1804 audit(1761194568.464:6): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3696" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=964 res=1 errno=0 [ 321.326916][ T30] audit: type=1800 audit(1761194568.464:7): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3696" name="cgroup.controllers" dev="tmpfs" ino=964 res=0 errno=0 [ 321.760270][T18758] vlan2: entered promiscuous mode [ 321.761768][T18761] ip6t_srh: unknown srh invflags 4000 [ 321.766198][T18758] bridge0: entered promiscuous mode [ 322.277127][T18777] xt_time: unknown flags 0xf4 [ 322.358935][T18788] __nla_validate_parse: 43 callbacks suppressed [ 322.358956][T18788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3709'. [ 322.422627][T18792] team0: Device gtp0 is of different type [ 322.670337][T18805] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 322.811997][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3720'. [ 322.986683][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 322.986807][ T5831] Bluetooth: hci2: command 0x0401 tx timeout [ 323.048323][T18823] netlink: 'syz.7.3725': attribute type 3 has an invalid length. [ 323.114663][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 323.207685][T18835] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 323.244761][T18842] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 323.264140][T18842] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3727'. [ 323.622504][T18862] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3732'. [ 323.731391][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3733'. [ 324.130201][T18880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3737'. [ 324.287028][T18901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3742'. [ 324.638793][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'. [ 324.769947][T18928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.793608][T18938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3752'. [ 324.976579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.984671][ C1] lec:lec_tx_timeout: lec0 [ 324.990507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.807899][T19014] netlink: 'syz.0.3775': attribute type 7 has an invalid length. [ 327.557387][T19049] __nla_validate_parse: 3 callbacks suppressed [ 327.557406][T19049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3782'. [ 327.661055][T19053] syzkaller0: entered promiscuous mode [ 327.682163][T19053] syzkaller0: entered allmulticast mode [ 327.848740][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 327.898814][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 328.417249][T19105] netlink: 'syz.2.3795': attribute type 1 has an invalid length. [ 328.425587][T19105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3795'. [ 328.571857][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3797'. [ 328.911719][T19133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3803'. [ 329.059553][T19148] xt_bpf: check failed: parse error [ 329.119851][T19151] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 329.121211][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3809'. [ 329.140161][T19151] netlink: 'syz.4.3808': attribute type 4 has an invalid length. [ 329.149386][T19151] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.3808'. [ 329.178038][T19151] netlink: 'syz.4.3808': attribute type 4 has an invalid length. [ 329.189557][T19158] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3810'. [ 329.228925][T19159] netlink: 'syz.2.3809': attribute type 39 has an invalid length. [ 329.438594][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3813'. [ 329.997575][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 330.005643][ C1] lec:lec_tx_timeout: lec0 [ 330.142849][T19212] 0{X: renamed from gretap0 (while UP) [ 330.153308][T19212] 0{X: entered allmulticast mode [ 330.159251][T19212] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 330.192160][T19212] netlink: 'syz.6.3826': attribute type 1 has an invalid length. [ 330.861988][T19239] bond2: entered promiscuous mode [ 330.867879][T19239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.004268][T19250] chnl_net:caif_netlink_parms(): no params data found [ 331.463549][T19273] netlink: 'syz.6.3843': attribute type 1 has an invalid length. [ 331.547238][T19275] IPv6: sit1: Disabled Multicast RS [ 331.564154][T19275] sit1: entered allmulticast mode [ 331.735007][T19292] syz_tun: entered allmulticast mode [ 331.912298][T19291] syz_tun: left allmulticast mode [ 331.953381][T19306] ksmbd: Unknown IPC event: 14, ignore. [ 332.235186][T19327] netlink: 'syz.4.3860': attribute type 29 has an invalid length. [ 332.279960][T19332] netlink: 'syz.6.3862': attribute type 9 has an invalid length. [ 332.288227][T19326] netlink: 'syz.4.3860': attribute type 29 has an invalid length. [ 332.316146][T19337] netlink: 'syz.0.3859': attribute type 11 has an invalid length. [ 332.442202][T19341] team1: entered promiscuous mode [ 332.449024][T19341] team1: entered allmulticast mode [ 332.570341][T19350] __nla_validate_parse: 14 callbacks suppressed [ 332.570382][T19350] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3865'. [ 332.660254][T19350] hsr_slave_0 (unregistering): left promiscuous mode [ 332.729352][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3869'. [ 332.734808][T19362] x_tables: duplicate underflow at hook 2 [ 332.900760][T19370] netlink: 'syz.0.3872': attribute type 1 has an invalid length. [ 332.911607][T19370] netlink: 'syz.0.3872': attribute type 2 has an invalid length. [ 333.020686][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3876'. [ 333.031698][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3876'. [ 333.055835][T19381] netlink: 'syz.7.3876': attribute type 15 has an invalid length. [ 333.290647][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3880'. [ 333.327129][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3880'. [ 333.338500][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3880'. [ 333.367932][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3880'. [ 333.598765][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3885'. [ 333.748169][T19406] netlink: 'syz.7.3885': attribute type 10 has an invalid length. [ 333.772447][T19406] bridge_slave_1: left allmulticast mode [ 333.810897][T19406] bridge_slave_1: left promiscuous mode [ 333.818540][T19406] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.859196][T19406] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 333.898616][T19420] xt_l2tp: invalid flags combination: 8 [ 333.937978][T19430] tipc: Enabled bearer , priority 0 [ 334.099719][T19430] tipc: Disabling bearer [ 334.409488][T19464] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 334.432931][T19468] vlan1: entered allmulticast mode [ 334.465626][T19464] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 334.475755][T19468] veth0_vlan: entered allmulticast mode [ 334.494365][T19464] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 334.546208][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3901'. [ 334.760339][T19485] tipc: Enabled bearer , priority 0 [ 334.790919][T19484] tipc: Resetting bearer [ 334.819289][T19493] netlink: 'syz.0.3906': attribute type 1 has an invalid length. [ 334.830030][T19484] tipc: Disabling bearer [ 334.901834][T19495] xt_CONNSECMARK: invalid mode: 0 [ 334.927941][T19498] xt_CONNSECMARK: invalid mode: 0 [ 335.028181][T19506] SET target dimension over the limit! [ 335.304878][T19527] vxcan1: Master is either lo or non-ether device [ 335.371571][T19530] syzkaller0: entered promiscuous mode [ 335.386013][T19530] syzkaller0: entered allmulticast mode [ 335.441274][T19535] netlink: 'syz.6.3921': attribute type 9 has an invalid length. [ 335.462805][T19530] geneve3: entered promiscuous mode [ 335.477189][T19530] geneve3: entered allmulticast mode [ 335.824409][T19565] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 336.049875][T19569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.144004][T19575] veth13: entered promiscuous mode [ 336.210408][T19569] veth15: entered promiscuous mode [ 336.234760][T19575] bond7: entered allmulticast mode [ 336.491854][T19601] syzkaller0: entered promiscuous mode [ 336.522809][T19601] syzkaller0: entered allmulticast mode [ 336.530906][T19596] tipc: Started in network mode [ 336.535875][T19596] tipc: Node identity ca663caa67ce, cluster identity 4711 [ 336.544591][T19596] tipc: Enabled bearer , priority 0 [ 336.640336][T19596] tipc: Resetting bearer [ 336.681181][T19596] tipc: Disabling bearer [ 336.723397][T19613] validate_nla: 2 callbacks suppressed [ 336.723414][T19613] netlink: 'syz.0.3948': attribute type 4 has an invalid length. [ 336.757916][T19607] veth0_macvtap: left promiscuous mode [ 336.818041][T19611] geneve2: entered promiscuous mode [ 336.823376][T19611] geneve2: entered allmulticast mode [ 336.831694][T19620] netlink: 'syz.0.3948': attribute type 5 has an invalid length. [ 336.915787][ T8529] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 336.945846][ T8529] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 336.962592][ T8529] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 337.006845][ T8529] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 337.135686][T19644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.149278][T19644] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 337.157150][T19644] gretap1: entered promiscuous mode [ 337.164792][T19644] gretap1: entered allmulticast mode [ 337.187558][T19650] netlink: 'syz.6.3956': attribute type 12 has an invalid length. [ 337.221106][T19650] netlink: 'syz.6.3956': attribute type 11 has an invalid length. [ 337.291775][T19650] netlink: 'syz.6.3956': attribute type 4 has an invalid length. [ 337.342351][T19654] netlink: 'syz.2.3957': attribute type 4 has an invalid length. [ 337.358904][T19654] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 337.376791][T19659] sctp: [Deprecated]: syz.6.3956 (pid 19659) Use of int in max_burst socket option deprecated. [ 337.376791][T19659] Use struct sctp_assoc_value instead [ 337.509865][T19662] tunl0: entered promiscuous mode [ 337.514993][T19662] tunl0: entered allmulticast mode [ 337.709412][T19669] __nla_validate_parse: 25 callbacks suppressed [ 337.709429][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 337.882198][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3970'. [ 337.897162][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 338.013689][T19704] bridge_slave_1: left allmulticast mode [ 338.020040][T19704] bridge_slave_1: left promiscuous mode [ 338.042558][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.157768][T19710] netlink: 'syz.6.3973': attribute type 21 has an invalid length. [ 338.168081][T19704] bridge_slave_0: left allmulticast mode [ 338.182597][T19710] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3973'. [ 338.184070][T19704] bridge_slave_0: left promiscuous mode [ 338.228843][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.355897][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 338.368628][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3978'. [ 338.577553][T19736] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3981'. [ 338.590310][T19736] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3981'. [ 338.681730][T19745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.790632][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3986'. [ 338.885486][T19755] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.986612][ T5831] Bluetooth: hci2: command 0x0401 tx timeout [ 338.987405][T19755] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 339.159466][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'. [ 339.766460][T19841] SET target dimension over the limit! [ 339.969488][T19850] syzkaller0: entered promiscuous mode [ 339.974990][T19850] syzkaller0: entered allmulticast mode [ 340.007723][T19852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.059831][T19857] netlink: 'syz.7.4016': attribute type 3 has an invalid length. [ 340.322074][T19877] sctp: [Deprecated]: syz.7.4022 (pid 19877) Use of int in maxseg socket option. [ 340.322074][T19877] Use struct sctp_assoc_value instead [ 340.385074][T19879] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.394184][T19879] bond0: (slave bond4): Enslaving as an active interface with an up link [ 340.449666][T19886] tipc: Enabled bearer , priority 0 [ 340.462525][T19886] syzkaller0: entered promiscuous mode [ 340.506042][T19886] syzkaller0: entered allmulticast mode [ 340.581193][T19886] tipc: Resetting bearer [ 341.064228][T19929] netlink: 'syz.7.4038': attribute type 1 has an invalid length. [ 341.072914][T19929] netlink: 'syz.7.4038': attribute type 2 has an invalid length. [ 341.227784][T19885] tipc: Resetting bearer [ 341.261886][T19940] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 341.278441][T19885] tipc: Disabling bearer [ 341.783065][T19982] validate_nla: 1 callbacks suppressed [ 341.783082][T19982] netlink: 'syz.6.4053': attribute type 64 has an invalid length. [ 341.825930][T19989] netlink: 'syz.6.4053': attribute type 64 has an invalid length. [ 341.871509][T19996] netlink: 'syz.7.4054': attribute type 10 has an invalid length. [ 341.890353][T19996] dummy0: entered promiscuous mode [ 341.919200][T19996] bridge0: port 2(dummy0) entered blocking state [ 341.935062][T19996] bridge0: port 2(dummy0) entered disabled state [ 341.955252][T19996] dummy0: entered allmulticast mode [ 342.011172][T20005] netlink: 'syz.6.4057': attribute type 1 has an invalid length. [ 342.034575][T20005] netlink: 'syz.6.4057': attribute type 8 has an invalid length. [ 342.252269][T20025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 342.267550][T20025] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.287421][T20025] gretap1: entered promiscuous mode [ 342.295163][T20025] gretap1: entered allmulticast mode [ 342.503195][T20039] netlink: 'syz.4.4067': attribute type 30 has an invalid length. [ 342.555828][T20039] bond3: option arp_missed_max: invalid value (0) [ 342.563101][T20039] bond3: option arp_missed_max: allowed values 1 - 255 [ 342.574626][T20039] bond3 (unregistering): Released all slaves [ 342.626405][T20049] netlink: 'syz.0.4070': attribute type 1 has an invalid length. [ 342.723815][T20049] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.763196][T20049] batadv_slave_0: entered promiscuous mode [ 342.987834][T20080] __nla_validate_parse: 13 callbacks suppressed [ 342.987851][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'. [ 343.052128][T20082] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 343.138365][T20047] batadv_slave_0: left promiscuous mode [ 343.169638][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4077'. [ 343.181309][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4077'. [ 343.224409][T20089] 0{X: entered promiscuous mode [ 343.239913][T20089] 0{X: left promiscuous mode [ 343.384939][T20099] x_tables: ip_tables: osf match: only valid for protocol 6 [ 343.409772][T20099] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4081'. [ 343.574474][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4084'. [ 343.588731][T20112] netlink: 'syz.7.4084': attribute type 3 has an invalid length. [ 343.636466][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 343.850816][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4087'. [ 343.870089][T20127] netlink: 'syz.6.4087': attribute type 20 has an invalid length. [ 343.888575][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4087'. [ 344.025160][T20139] sctp: [Deprecated]: syz.4.4090 (pid 20139) Use of int in max_burst socket option. [ 344.025160][T20139] Use struct sctp_assoc_value instead [ 344.103964][T20142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'. [ 344.602802][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4099'. [ 344.707704][T20176] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 344.749948][T20188] ksmbd: Unknown IPC event: 3, ignore. [ 344.828761][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 344.916373][T20200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.432784][T20232] syzkaller0: entered promiscuous mode [ 345.449430][T20232] syzkaller0: entered allmulticast mode [ 346.002449][T20270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.251362][T20302] Bluetooth: MGMT ver 1.23 [ 346.663039][T20340] block nbd3: Unsupported socket: should be TCP or UNIX. [ 346.767893][T20340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.789078][T20340] bond1: (slave bond2): making interface the new active one [ 346.799137][T20340] bond1: (slave bond2): Enslaving as an active interface with an up link [ 346.819864][T20343] bridge0: port 1(batadv1) entered blocking state [ 346.828126][T20343] bridge0: port 1(batadv1) entered disabled state [ 346.834910][T20343] batadv1: entered allmulticast mode [ 346.843042][T20343] batadv1: entered promiscuous mode [ 346.899012][T20352] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.935427][T20352] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 346.979457][T20366] validate_nla: 4 callbacks suppressed [ 346.979474][T20366] netlink: 'syz.4.4150': attribute type 6 has an invalid length. [ 347.017185][T20366] netlink: 'syz.4.4150': attribute type 7 has an invalid length. [ 347.040794][T20366] netlink: 'syz.4.4150': attribute type 8 has an invalid length. [ 347.058444][T20365] netlink: 'syz.0.4149': attribute type 27 has an invalid length. [ 347.231866][T20373] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 347.249501][T20373] bond3 (unregistering): Released all slaves [ 347.318091][ T1038] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 347.327814][ T1038] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 347.487860][T20398] tipc: Enabled bearer , priority 0 [ 347.495373][T20398] syzkaller0: entered promiscuous mode [ 347.503774][T20398] syzkaller0: entered allmulticast mode [ 347.517304][T20398] netlink: 'syz.4.4159': attribute type 83 has an invalid length. [ 347.544627][T20398] tipc: Resetting bearer [ 347.572370][T20397] tipc: Resetting bearer [ 347.590497][T20397] tipc: Disabling bearer [ 347.841427][T20420] netlink: 'syz.2.4167': attribute type 5 has an invalid length. [ 347.864613][T20422] netlink: 'syz.2.4167': attribute type 5 has an invalid length. [ 348.014910][T20434] netlink: 'syz.2.4172': attribute type 1 has an invalid length. [ 348.084776][T20441] __nla_validate_parse: 22 callbacks suppressed [ 348.084795][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4175'. [ 348.150937][T20444] netlink: 'syz.4.4174': attribute type 1 has an invalid length. [ 348.163409][T20444] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4174'. [ 348.180044][T20438] bond5: (slave gretap1): making interface the new active one [ 348.191835][T20438] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 348.348035][T20446] netlink: 'syz.6.4176': attribute type 2 has an invalid length. [ 348.360837][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4177'. [ 348.382864][T20450] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 348.399468][T20448] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 348.408231][T20448] bond6: option packets_per_slave: allowed values 0 - 65535 [ 348.419154][T20448] bond6 (unregistering): Released all slaves [ 348.421424][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'. [ 348.710483][T20471] bond0: (slave rose0): Error: Device can not be enslaved while up [ 348.738905][T20472] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4184'. [ 348.900361][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 348.925380][T20489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4191'. [ 349.004474][T20496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4188'. [ 349.123552][T20493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.301197][T20493] dvmrp0: entered allmulticast mode [ 349.358971][T20523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4198'. [ 349.635282][T20537] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 349.660058][T20541] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 349.692696][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4205'. [ 349.750048][T20550] gretap0: entered promiscuous mode [ 349.759320][T20559] xt_NFQUEUE: number of total queues is 0 [ 349.759671][T20550] batadv_slave_1: entered promiscuous mode [ 349.842714][T20550] batadv_slave_1: left promiscuous mode [ 349.859179][T20550] gretap0: left promiscuous mode [ 350.112535][T20588] wg1 speed is unknown, defaulting to 1000 [ 350.279704][T20586] openvswitch: netlink: EtherType 53b is less than min 600 [ 350.290755][T20586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.135819][T20653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.162848][T20653] bond6: (slave gretap2): making interface the new active one [ 351.172343][T20653] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 351.327946][T20668] : renamed from vlan0 (while UP) [ 351.722884][T20705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.729987][T20696] xt_ecn: cannot match TCP bits for non-tcp packets [ 351.747713][T20705] delete_channel: no stack [ 352.694442][T20774] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 353.024087][T20793] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 353.103168][T20802] __nla_validate_parse: 14 callbacks suppressed [ 353.103189][T20802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4280'. [ 353.176013][T20806] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4284'. [ 353.212053][T20808] validate_nla: 9 callbacks suppressed [ 353.212071][T20808] netlink: 'syz.2.4282': attribute type 2 has an invalid length. [ 353.247008][T20808] netlink: 'syz.2.4282': attribute type 8 has an invalid length. [ 353.270390][T20808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4282'. [ 353.375748][T20815] tipc: Enabled bearer , priority 0 [ 353.393531][T20815] syzkaller0: entered promiscuous mode [ 353.408141][T20815] syzkaller0: entered allmulticast mode [ 353.466126][T20815] tipc: Resetting bearer [ 353.476397][T20822] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 353.490825][T20814] tipc: Resetting bearer [ 353.516130][T20814] tipc: Disabling bearer [ 353.755977][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4296'. [ 353.967827][T20860] netlink: 'syz.6.4301': attribute type 1 has an invalid length. [ 354.040240][T20860] bond7: entered promiscuous mode [ 354.045812][T20860] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.113900][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 354.134862][T20867] netlink: 'syz.0.4302': attribute type 21 has an invalid length. [ 354.143518][T20867] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4302'. [ 354.171310][T20868] bond7: (slave bridge4): making interface the new active one [ 354.189492][T20868] bridge4: entered promiscuous mode [ 354.203222][T20868] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 354.390197][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 354.482846][T20886] bond10: Unable to set down delay as MII monitoring is disabled [ 354.498977][T20886] bond10 (unregistering): Released all slaves [ 354.552631][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4309'. [ 354.557112][T20892] tipc: Enabled bearer , priority 0 [ 354.581975][T20892] syzkaller0: entered promiscuous mode [ 354.588547][T20892] syzkaller0: entered allmulticast mode [ 354.656022][T20892] tipc: Resetting bearer [ 354.684096][T20890] tipc: Resetting bearer [ 354.721783][T20890] tipc: Disabling bearer [ 354.735954][T20904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4314'. [ 354.782817][T20904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.795428][T20904] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4314'. [ 354.814662][T20912] netlink: 'syz.0.4316': attribute type 5 has an invalid length. [ 354.972551][T20927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4320'. [ 355.040253][T20914] netlink: 'syz.6.4317': attribute type 4 has an invalid length. [ 355.251742][T20943] netlink: 'syz.6.4325': attribute type 2 has an invalid length. [ 355.272607][T20943] : entered promiscuous mode [ 355.305726][T20943] tunl0: entered promiscuous mode [ 355.324720][T20943] 0{X: entered promiscuous mode [ 355.342347][T20943] 0{X: left allmulticast mode [ 355.381807][T20943] erspan0: entered promiscuous mode [ 355.397710][T20943] ip_vti0: entered promiscuous mode [ 355.558240][ T31] INFO: task syz.1.1776:12229 blocked for more than 143 seconds. [ 355.568649][ T31] Not tainted syzkaller #0 [ 355.573674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.604029][ T31] task:syz.1.1776 state:D stack:27272 pid:12229 tgid:12228 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 355.634599][ T31] Call Trace: [ 355.656800][ T31] [ 355.666766][ T31] __schedule+0x1798/0x4cc0 [ 355.685441][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.721347][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.743246][ T31] ? __pfx___schedule+0x10/0x10 [ 355.774441][ T31] ? schedule+0x91/0x360 [ 355.798700][ T31] schedule+0x165/0x360 [ 355.833302][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.859977][ T31] __mutex_lock+0x7e6/0x1350 [ 355.893224][ T31] ? __mutex_lock+0x5bb/0x1350 [ 355.917626][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 355.953971][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 355.978782][ T31] ? __nlmsg_put+0xef/0x1b0 [ 356.001347][ T31] ? genlmsg_put+0x137/0x2e0 [ 356.024130][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 356.052939][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 356.070902][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 356.083373][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 356.089848][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.096192][ T31] ? stack_trace_save+0x9c/0xe0 [ 356.103853][ T31] genl_rcv_msg+0x60e/0x790 [ 356.116005][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.121489][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 356.132821][ T31] netlink_rcv_skb+0x208/0x470 [ 356.137989][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.143224][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.148592][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.173440][ T31] ? down_read+0x1ad/0x2e0 [ 356.183699][ T31] genl_rcv+0x28/0x40 [ 356.190300][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 356.197641][ T31] netlink_unicast+0x82f/0x9e0 [ 356.202663][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 356.209689][ T31] ? netlink_sendmsg+0x642/0xb30 [ 356.214873][ T31] ? skb_put+0x11b/0x210 [ 356.220497][ T31] netlink_sendmsg+0x805/0xb30 [ 356.225514][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.231035][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.236187][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.244042][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.250612][ T31] __sock_sendmsg+0x21c/0x270 [ 356.255428][ T31] ____sys_sendmsg+0x505/0x830 [ 356.260468][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.265996][ T31] ? import_iovec+0x74/0xa0 [ 356.270877][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 356.275656][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.282140][ T31] ? __fget_files+0x2a/0x420 [ 356.287078][ T31] ? __fget_files+0x3a0/0x420 [ 356.291866][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 356.297358][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.302861][ T31] ? do_syscall_64+0xbe/0xfa0 [ 356.309214][ T31] do_syscall_64+0xfa/0xfa0 [ 356.313757][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.319144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.325226][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.330094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.335989][ T31] RIP: 0033:0x7f491538efc9 [ 356.340899][ T31] RSP: 002b:00007f4916298038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.350508][ T31] RAX: ffffffffffffffda RBX: 00007f49155e5fa0 RCX: 00007f491538efc9 [ 356.359117][ T31] RDX: 0000000020048000 RSI: 0000200000000140 RDI: 0000000000000005 [ 356.367658][ T31] RBP: 00007f4915411f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.375860][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.384100][ T31] R13: 00007f49155e6038 R14: 00007f49155e5fa0 R15: 00007fff4a14fc58 [ 356.392361][ T31] [ 356.395514][ T31] [ 356.395514][ T31] Showing all locks held in the system: [ 356.395912][T20956] kthread_run failed with err -4 [ 356.427107][ T31] 1 lock held by khungtaskd/31: [ 356.432200][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 356.448259][T20962] syzkaller0: entered promiscuous mode [ 356.453770][T20962] syzkaller0: entered allmulticast mode [ 356.474814][ T31] 2 locks held by getty/5584: [ 356.486832][ T31] #0: ffff88814db980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.497658][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 356.507952][ T31] 3 locks held by kworker/1:10/9826: [ 356.514935][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 356.524959][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 356.535524][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 356.544614][ T31] 2 locks held by syz.3.1242/10375: [ 356.549928][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.558501][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 356.569240][ T31] 2 locks held by syz.1.1776/12229: [ 356.574474][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.582747][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 356.593168][ T31] 3 locks held by syz.5.2913/16122: [ 356.598432][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.606771][ T31] #1: ffff88806f2376e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 356.618842][ T31] #2: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 356.629370][ T31] 2 locks held by syz.6.4329/20962: [ 356.634552][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 356.643639][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 356.655286][ T31] [ 356.657803][ T31] ============================================= [ 356.657803][ T31] [ 356.666252][ T31] NMI backtrace for cpu 0 [ 356.666271][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 356.666289][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.666298][ T31] Call Trace: [ 356.666305][ T31] [ 356.666313][ T31] dump_stack_lvl+0x189/0x250 [ 356.666343][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.666364][ T31] ? __pfx__printk+0x10/0x10 [ 356.666390][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 356.666415][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 356.666438][ T31] ? __pfx__printk+0x10/0x10 [ 356.666458][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 356.666489][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 356.666524][ T31] watchdog+0xf60/0xfa0 [ 356.666546][ T31] ? watchdog+0x1e2/0xfa0 [ 356.666569][ T31] kthread+0x711/0x8a0 [ 356.666594][ T31] ? __pfx_watchdog+0x10/0x10 [ 356.666610][ T31] ? __pfx_kthread+0x10/0x10 [ 356.666633][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.666652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.666670][ T31] ? __pfx_kthread+0x10/0x10 [ 356.666692][ T31] ret_from_fork+0x4bc/0x870 [ 356.666713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 356.666738][ T31] ? __switch_to_asm+0x39/0x70 [ 356.666751][ T31] ? __switch_to_asm+0x33/0x70 [ 356.666763][ T31] ? __pfx_kthread+0x10/0x10 [ 356.666784][ T31] ret_from_fork_asm+0x1a/0x30 [ 356.666814][ T31] [ 356.808467][ T31] Sending NMI from CPU 0 to CPUs 1: [ 356.814761][ C1] NMI backtrace for cpu 1 [ 356.814782][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 356.814800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.814810][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 356.814833][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a1 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 356.814847][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 356.814862][ C1] RAX: d3bbe86952872c00 RBX: ffffffff81967c07 RCX: d3bbe86952872c00 [ 356.814874][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bfbf RDI: ffffffff8bbf0860 [ 356.814886][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 356.814897][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ceb70 [ 356.814909][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003952b58 [ 356.814920][ C1] FS: 0000000000000000(0000) GS:ffff88812623f000(0000) knlGS:0000000000000000 [ 356.814933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.814944][ C1] CR2: 00007f6b30bb3ad8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 356.814959][ C1] Call Trace: [ 356.814965][ C1] [ 356.814971][ C1] default_idle+0x13/0x20 [ 356.814991][ C1] default_idle_call+0x73/0xb0 [ 356.815012][ C1] do_idle+0x1e7/0x510 [ 356.815033][ C1] ? __pfx_do_idle+0x10/0x10 [ 356.815057][ C1] cpu_startup_entry+0x44/0x60 [ 356.815073][ C1] start_secondary+0x101/0x110 [ 356.815095][ C1] common_startup_64+0x13e/0x147 [ 356.815123][ C1]