last executing test programs: 3m25.012420526s ago: executing program 4 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="f9", 0x1}], 0x1}}], 0x1, 0x402c809) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00'/20, @ANYRESOCT=r0, @ANYBLOB="000000000000000008001300", @ANYRES32=r0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3m24.087724061s ago: executing program 4 (id=1248): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000180)="10000000000000000100000002000000", 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7e, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT], 0x9a}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES8], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r0) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3m23.944301519s ago: executing program 4 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x102, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x2, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x7c, 0x6a}}]}, 0x50}}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0x6, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x9, 0x7, 0x10, 0x2, 0xa, 0x2, 0xf, 0x6, 0x0, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m23.374281968s ago: executing program 4 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r6, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000000", 0x40}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68020000060a0b040000000000000000020000003c020480380201800a0001006d617463680000002802028008000240000000011402030000000027f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8ab11abc465b891aab80dcbb971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcff831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a32"], 0x290}}, 0x4048010) 3m22.852677177s ago: executing program 4 (id=1274): r0 = socket(0x23, 0x80000, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x858, 0x1, 0x4}]}, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'wg2\x00', 0x800}) socket$unix(0x1, 0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@int=0x80000000, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xbfb}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={r5, 0x4, 0x2, [0x7, 0xe6a7]}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x4, 0x6, 0x9, r5}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000480)=0x9) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x3}, 0x1c) (async) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @empty}, 0x10) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000540)=[@timestamp, @sack_perm, @mss={0x2, 0x5}, @window={0x3, 0x4, 0x1}, @sack_perm, @mss={0x2, 0x2}, @window={0x3, 0x7f, 0x9}], 0x7) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000580)) (async) close(r3) r7 = openat$cgroup_ro(r2, &(0x7f00000005c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'sit0\x00', r8, 0x7, 0x7860, 0x40, 0x0, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x67, 0x0, 0x42, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xd3, [@multicast2, @rand_addr=0x64010100]}, @end, @lsrr={0x83, 0x1b, 0x6e, [@remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1b}]}, @timestamp={0x44, 0x18, 0xfe, 0x0, 0x3, [0x2, 0x20, 0xfffffff8, 0xfff, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x63, 0x3, 0x0, [{@loopback, 0x9}]}]}}}}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000700)={0x1, 0x6}) (async) r10 = socket(0x2a, 0x6, 0x80000000) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x17986446}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x7, 0x0, 0x101, 0xd5aa, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6c, 0x30, 0x12, 0x6, 0x12, 0x48, 0x60, 0x18, 0x24, 0x1, 0x6c, 0x6, 0x6e, 0xb, 0xb, 0xc, 0x18, 0x6c, 0x0]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@getchain={0x54, 0x66, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff6}, {0x8, 0xd}, {0x4, 0xfff1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) 3m22.759313868s ago: executing program 4 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b0000000e0001"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xdd12ca1c232f5653}, 0x0) 3m7.083885147s ago: executing program 32 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b0000000e0001"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xdd12ca1c232f5653}, 0x0) 2m38.069003263s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x40, 0x29, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xfff1}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xe}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040894) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000580)="0087fd9d7106b31b30fb4b62a79a1b5bde", 0x11}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x173d, 0x629e}, &(0x7f0000000040)=0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x1, @empty, 0x10}}, 0x5, 0x7fff}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}}, 0x48010) 2m37.847710602s ago: executing program 5 (id=2042): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x80000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m36.903295099s ago: executing program 5 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0x0, 0xfff1}, {0x12, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x49, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fdff0000000000000000000018011200202070250000000000212020fb1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002dca546a94667600000095ee1ba27655455d068a9767c97bbd009b9f506ad2576979f8a4c078f24eb99b6c890e11af07880fa473f58380485fd8b507a9089eae49bba90b1ce295b431874d50f09b460c5e2eb494d04b069feedba3784745f5a0456e0545de692041819f6bce4b6f27ee9bfed4ad0f7145b8adf7ca228a31571ee6a9352e6de697fad98efea2376d714e393a48808add97a6404b914040db68c17d6457bddae35f"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m36.758087699s ago: executing program 5 (id=2050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x4000080) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xba0, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x78}}}}, [@NL80211_ATTR_IE={0x222, 0x2a, [@perr={0x84, 0x15, {0x2, 0x1, [{{0x0, 0x1}, @device_b, 0x8f7, @value=@device_b, 0x37}]}}, @measure_req={0x26, 0xfc, {0x1, 0x7, 0x7, "6e3ca7cc00afec9dd320f18416b5f374e225fed9137d08091c65733a0ba98fe27c27ca6082427da06a357916f53d1fc338aaca1eab1ad3b0d0ad9ea4b46953dd4efada0e64d7e3bd436e0bb93b1694672d794da630eb3776239cefdee30d33653953eeb62a693c85d15c1c917d9106495c4adcccf008ba76840e6db704f8fb85bc44acaf262256380bf695607e19f8fca82afcd12c147e58db59cf55f18f5abab4f5c5d517fd43fb641709677892a806702792bb96f322b593e1b3394e381b26dd2af49629698b2f40b2ad497db2cd855631da9b86e32e697a607d7bdacc70956ad73ff608df34038f4866fa7db2cef5a54820d4d8961e67bd"}}, @prep={0x83, 0x1f, {{}, 0x9, 0xfd, @broadcast, 0x8, @void, 0x3, 0xf, @broadcast, 0x2}}, @peer_mgmt={0x75, 0x16, {0x0, 0x2, @void, @val, @val="b2a2c71df33dea5603025949834b7d22"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0xc7, {0x2, 0x4b, 0x8, "755947cd70cda4e4c9614560b1383ccb8f40546092a78afb9f2418425792e060fa3358c74f63c62470de13c068b9bd568e3945323043298325ae8c02fa86cf4d2c82e24161af6166be0117191fd29096786968720efa2d9abb37c48e01b373858aed22dd25f6e3ee9bf7154de6f5b97441043ea23c967fecd1715f219b2afa7eebc61ece0c5fe7072c474b3da06d15fe806700aa753a258b40c28a70090696ade0a0c371a598fe3b8489ed0cbe95e264994de612d08b1970088ac60e01a17331206ecfb2"}}, @ibss={0x6, 0x2, 0x1400}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @tim={0x5, 0x55, {0x5, 0x93, 0xcc, "6dac9059a0856b08b674930d975939f445ba8bf7f180122df20f21853497be76a7755c8ec8eb1e7f3dc15eab6fd2b7e70cfb333e482e33d6b33ba9e2b34c1f7aa3d052bebcb293d9612f61fa484b7be1de93"}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xbd, 0x6, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x9, 0x1, @broadcast, 0x0, 0x4, 0x3d1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x215, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x8, 0xb9, "e9f07ec1ad576f48d983eb438adc6de4c68a460ea8967ca698b8fc15d9a7ec2129fab33e025a60d2abcdbeec31656e5c7033d52c72c2e366c64d940e9d18f4f8f7028fc8428d1974999fa5907d17784dab47ab8ad98d885a90d2b20536cca6be0e4758394022851da965b70b2528493d798205d57582401aa72fbb50d9c2c3c08a9489cb6b6638128bc330a41616898eb32beb55896464aa55c002858cddf2095cfa33469d9d71e20030f1106ce768f3d8343546ecc9fba20d"}, @ibss={0x6, 0x2, 0x7}, @dsss={0x3, 0x1, 0xaf}, @measure_req={0x26, 0xb3, {0x5, 0x6, 0x7c, "c5b446dae6d71be11d93058a1b2c19aa7e2735af78286d629c8d93a6e97e0562a5f11ddec89ff69bf0aeebbc9d818012229110b189b32892ba572d4341b938a4876e845a59aae559526e909da9eee3f59c82efa66c882aa4287927e5a194363dc7f3c7134efc33a47ac570fe67f0b45a52a37f7c8e45de1560535cfe22ff5fada631f14999bb7afa39284b22b10e40b2dc3f8900fb292b75da03f36795b839fff77d8e448986710389a68fbb9047e922"}}, @challenge={0x10, 0x1, 0x27}, @random_vendor={0xdd, 0x63, "963312c2a6e32f3996f30bfdf87141aefaf6ca4769eafbdc0d6138adbef61797ef67b7e143f6bbc353b484ad27a612dfe169aabe59a5eed097e5366dfc533c6459e0f935be7a5a9e4bf5c0aefee718f84d91a348498d4dadebdaaaaba376ac8a4d551c"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x6, @broadcast, 0x200, @value=@broadcast, 0x7d, 0x7, @device_a, 0x2}}, @random_vendor={0xdd, 0x6, "88ee84661b14"}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@ibss={0x6, 0x2, 0x8001}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x6, 0x7, @device_a, 0x6, 0x0, 0xb2}}, @cf={0x4, 0x6, {0x80, 0x43, 0x9, 0x9}}, @supported_rates={0x1, 0x1, [{0x24, 0x1}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @NL80211_ATTR_IE={0xfe, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x8e, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x9, @device_a, 0xc8, @value=@broadcast, 0xf902, 0x2, 0xa, [{{0x1}, @broadcast, 0x6}, {{}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x8fa6}, {{0x1}, @broadcast, 0xf9a7}, {{}, @device_a, 0xff56}, {{}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0xd}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0xb09}]}}, @measure_req={0x26, 0x39, {0x0, 0x2, 0x7, "382e9a3f5b9084ba8ae33a2f22a5c6dca70a50049323cbcc2514ecbba34566c9f6d1f3bac36c2fa3a62e1941eb5483a25bc520a2d489"}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x7, 0x0, {0x15072352, 0x40, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x10, 0xf}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x319, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x8, 0x3, "008ea1768abfc5eabe9a4d25840290a2", "a730ed64aa7d5c5d9bb52f08a5779471073be7ec9df247b1ca614fdb1a93bab2", "0392e80aeba3d0f463bde8a7ec15ffd7828463e7c4f217a2f91b84f2e2766486", [{0x2, 0x1e, "0c8a2dd7f95c5b28d6f64a12a43b8a0f417a93be885e4a735748aed30d20"}, {0x2, 0xc, "0e475a4d9bfdd4f94bb17fdf"}, {0x3, 0xa, "91ad5daf711e82551f65"}]}}, @mic={0x8c, 0x10, {0x67b, "f9c88d220d8d", @short="f398c94e7433ecaf"}}, @mesh_chsw={0x76, 0x6, {0x1, 0x6, 0x21, 0xbacd}}, @measure_req={0x26, 0x99, {0x73, 0x3, 0xf4, "51ba3df4fc01de6e6d14601413987d4279380bf1a89ce74ff8e60017fcabe58241895c63e041fadd28e8f7a1054d819f84b54f06dd51252c4a96491d320cc1786c6a42b5cad467cbe70da37467145d4f9c46c235293f9b4ba1b4fa0551b1a62b1bc2333e7706d5bbb3cbf2de912c92c675494622cd6c1a7cccabd5c670f938cac055feeeb6fe5c42161bfd6d5271258e5d458c34f066"}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xe5, "6268aafdfb50511fc6513e960132099523919b6be85b98c4214efb51e08dfc0e18f7fd80b89942fb13f0bf7e8361485737e28692487470a6d830dae3bb35ab6c1a4af7cfcfc3a6e0d923cf532ee4866aab85c57fca0dbdb5e35b675ed891a3d25faa8d962455f358cfb225533f8540c939ff4c6bdb606c7147413661c225180da7d57e5259ab0ebdb5a23e7dc12517c49dc61720a77d079f1a40cc2fc082f9441695a2780403d19cbf7d5c625b3c85b3375e5cf8e7a5aacc017cb35d25530c377d2017775477c21a2ec901c4a2439c7bdb706b15d95d8064fb09655eacb6c286c21af670f2"}, @mic={0x8c, 0x10, {0xff8, "e02568b39db0", @short="5caad6b0d0d3fc29"}}, @perr={0x84, 0xcf, {0x8, 0xd, [{{0x0, 0x1}, @device_b, 0xd2, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_a, 0xd, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x32}, {{}, @device_a, 0x100, @void, 0x9}, {{}, @device_b, 0x2, @void, 0x30}, {{}, @broadcast, 0x1, @void, 0x2b}, {{}, @broadcast, 0x45e0, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x33}, {{}, @device_b, 0x8, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x18}, {{}, @device_b, 0x0, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x32}, {{}, @broadcast, 0x2, @void, 0x31}]}}]}, @NL80211_ATTR_IE={0x156, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x1f, {{}, 0x6, 0x80, @broadcast, 0x1, @void, 0x400, 0x6, @device_b, 0x5}}, @cf={0x4, 0x6, {0x3e, 0x5, 0x9, 0x5}}, @mesh_chsw={0x76, 0x6, {0x40, 0x5, 0x15, 0x8}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x3, 0x40, @device_a, 0x2, 0xfffffff8, 0x200}}, @mic={0x8c, 0x18, {0xcac, "8e9a4eb7ebdd", @long="c63a6a3ec2c6ba81622c11beeae381e4"}}, @fast_bss_trans={0x37, 0xe5, {0x0, 0x5, "ee73d149083767cfed2fd1b333ac89ae", "a580711fbc0f731ba57aa7e34193ea62aa398a77a34ee8ede1d1acedd5480e7b", "fb9103d50240fb840edc7ddd0e797f5a7278dd58022b09f2d04f91d2a5aadaa3", [{0x3, 0x23, "15a9b1eb1d343555346a01d3405a990d56bae5469aede7a595a78174d09ec9f88f626c"}, {0x4, 0x14, "50c8cc0f80485d093011b91bbe2b4b94dcfcfc05"}, {0x3, 0x20, "7c31e93e106d7dfe2463568f39c1fff642e384ba2c1e64e994e3862e36aecd27"}, {0x4, 0x17, "81383d1215e9756176395c8c9e8f0c798c2f711b21c66d"}, {0x1, 0x1b, "71a87a32c5fa59a002b4b803e1247cc18de4bdee3ad087d4d6b538"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x70, 0xd9}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "ddb3c8f866a7a3fe9c0e298ff251a19c8860bc2e9c2408d52802667bd39092beee292dd623138ee1ffa8bbf273a35a54fa1469db9e110ba654737761025411d601dfdaeb9cfd94ffb20c7a7e961e3407059725445d9557083ff1c01fbb0f6c48a4622e58cda515871f88aafcb5f00a3b10a1d9314e485d6e5881ade1c2e550ae5a1e5f662f3e2fab422d47fcc672b43bb76a4edf0a1740a560431c383490d607e9402557b1121f9b2fe9c880768d81e1ed84d0a232209b160f9970c4b59ed19454cd032c04d29f02eace9c418b5ff768fa5bd251af158fd8ac"}]]}, 0xba0}, 0x1, 0x0, 0x0, 0x40}, 0x4000091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m36.407997053s ago: executing program 5 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000540)) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r7}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) close(r7) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5d, r3, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c}]}, 0x158}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110300000002110000000802110000002000010000000100010882848b960c121824"], 0x28) 2m35.554195404s ago: executing program 5 (id=2073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @rand_addr, @multicast2}, &(0x7f0000000640)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xc4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) socket$kcm(0x29, 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'wg1\x00', @local}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x800}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffff9}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x13c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) epoll_create(0x1) epoll_create(0x4) socket$nl_route(0x10, 0x3, 0x0) 2m20.528328628s ago: executing program 33 (id=2073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @rand_addr, @multicast2}, &(0x7f0000000640)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xc4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) socket$kcm(0x29, 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'wg1\x00', @local}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x800}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffff9}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x13c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) epoll_create(0x1) epoll_create(0x4) socket$nl_route(0x10, 0x3, 0x0) 38.52575122s ago: executing program 3 (id=3510): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x8800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110ae0000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r10}, &(0x7f0000000300)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000004c0)={@mcast1, r7}, 0x14) 38.281083604s ago: executing program 3 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r1, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082}}, 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r12, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2a}, @void, @val={0xc, 0x99, {0x8, 0x63}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, &(0x7f0000000140)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 37.446068528s ago: executing program 3 (id=3523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 37.21327112s ago: executing program 3 (id=3525): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x33, 0x0, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2800000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff00}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x140}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x76}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x44810}, 0x8884) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100bf000000fcdbdf255200000008000300", @ANYRES64=r4, @ANYBLOB="050b000000"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x800) 35.282773777s ago: executing program 3 (id=3534): r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0xd3, 0x6, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x20, 0x700, 0x5, 0x9d}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0xffffffff) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 32) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @null, @netrom={'nr', 0x0}, 0x8, [@null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}) listen(r3, 0x3ff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 35.120332948s ago: executing program 3 (id=3537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)="480000001400190d0d004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffffd7e07ccdbb0f9409d3f438d0206900c7e5ed5e0097c6a4e812646ca58bb4b506fa37825fa5dfc1a7e813e2a44917cb", 0x6b}], 0x1) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) poll(&(0x7f0000000040), 0x55, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c20000000000950000120000000025bd6fd6d5d59f809d8564d01145218836f0f57e26d0704cfe57a72dfcf91050100e2c5b2bb57f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2004400d}, 0x20048000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r8 = socket(0x18, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r8}, 0x20) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4048800}, 0x88805) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000e5c48cdaa9d0000c00008f3e4a00020000000000000000000d0000000000000000"], 0x0, 0x26}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r12, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 19.492300572s ago: executing program 34 (id=3537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)="480000001400190d0d004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffffd7e07ccdbb0f9409d3f438d0206900c7e5ed5e0097c6a4e812646ca58bb4b506fa37825fa5dfc1a7e813e2a44917cb", 0x6b}], 0x1) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) poll(&(0x7f0000000040), 0x55, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c20000000000950000120000000025bd6fd6d5d59f809d8564d01145218836f0f57e26d0704cfe57a72dfcf91050100e2c5b2bb57f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2004400d}, 0x20048000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r8 = socket(0x18, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r8}, 0x20) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4048800}, 0x88805) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000e5c48cdaa9d0000c00008f3e4a00020000000000000000000d0000000000000000"], 0x0, 0x26}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r12, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.30091088s ago: executing program 2 (id=4005): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x0, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000001640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000007eedabcf410ec8f598e341c8207e79ef9fcb670d214164e9ade349f9d233c9e8fba352f26fcc67153b3ae0f00087e2e16139c71722b5833db9ff028775226d37c5c1b3b08587d0e6851c499c659100000000d51b7a26ec45300fa47c0a4476f22a4e18c1ca600c825df57984bc44286bc026b9c4c4e46ebdd479ad47030280be6ebc8f2b7eab5fb65fe97395bc6934d32cc0a04d5a9945764431302fdf3aa499f1a6724256ce7f193f68b9e058647cb0942489b808211b1b0475805f2d65e2", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40) 2.069028842s ago: executing program 1 (id=4007): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x7, 0x4000, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000300)={r2}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000540)=0x27, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x611e65be, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000a1000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018220000", @ANYRES32=r1, @ANYBLOB="000000000700000018420000faffffff00000000000000007d3a92eff1ffffff85000000ff7f00000000000000000000b7020000010000008500000085000000b700edffffff000095000000000000002a83e5f3bcab6a8469079a8bb1e022b62608267517e183e37ccaf55edde959"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x27, '\x00', r5, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xffffff81, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r10], &(0x7f0000000440)=[{0x3, 0x4, 0x5, 0xa}, {0x5, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x5}, {0x3, 0x4, 0xe, 0x2}], 0x10, 0x4}, 0x94) 2.020780645s ago: executing program 2 (id=4009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0xa6, "2c621afc610e062e66695b146a8cea986c3b4db07c67c355b90eaaeb496e9a4486f11513ad03d8fc3a82a8bdf7000b096eb398926e8136e2d4abd76578740ee8bb45a46ca6ef4d63b7eb6808b89b4ce2d49426332f0b818a957900050449b8be6204bdb31dc5ca9b61aeccf12d0cb2f2c4328f3f34d8deee3a1e1894d6498233b6f72dd8e70a09fe84f4721a1024e5d083aceb536ba56a7db809ca1ffe02da509cd5f32478b2"}, &(0x7f0000000100)=0xca) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}}, 0x0) 1.693161453s ago: executing program 2 (id=4013): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x24000000) 1.687591029s ago: executing program 1 (id=4015): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ifreq(r3, 0x8921, &(0x7f00000003c0)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000380)="7fe62486781377d310ffc667d74cc0b17880626efc827bc0371eee0f6a6e1a43"}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006800e9782cbd7000dfdbdf250a0000000400000008000500", @ANYRES32=r5, @ANYBLOB="1400060000000000000000000000000000000001"], 0x34}}, 0x4000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400040000000007040000f0ffffffb702000003c2df0000000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001900000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="280329bd7000fddbdf250d000000050018000000000005001b0001000000060008000000000005001d001d0018010000050008000000050017000700"/78], 0x54}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0xa}, {0xffe0, 0xfff3}, {0xb, 0xffe0}}, [{0x8, 0xb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)) 1.612796907s ago: executing program 0 (id=4017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_names='bridge_slave_1\x00'}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0), 0x4d) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r8 = socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r10) (async, rerun: 64) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0x0, 0xcc00}, 0x80d1) (async, rerun: 64) close(0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000000000000000000000000000006050001"], 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x0) 1.457111058s ago: executing program 6 (id=4018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="420000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="400064070a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) r2 = socket$inet6(0xa, 0x80002, 0x6a8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r5], 0x1c}}, 0x24044080) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) 1.45046293s ago: executing program 0 (id=4020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x1e, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r0, r1, 0x10, 0x202e, r2, @void, @void, @value=r4, @void, r3}, 0x20) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 1.445349058s ago: executing program 2 (id=4021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 1.306176419s ago: executing program 6 (id=4022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) 1.305327848s ago: executing program 0 (id=4023): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x15) getpeername(r1, 0x0, &(0x7f00000009c0)) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)}, 0x20) 1.304242357s ago: executing program 1 (id=4024): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x3f3e, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWNSID={0x44, 0x58, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000180)={'ip6erspan0\x00', 0x9}) (async, rerun: 64) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)=0x1) (rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$inet6_int(r7, 0x29, 0x5, 0x0, &(0x7f00000002c0)) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x1, 0xa8, 0x0, 0x2, 0x4557f]}, &(0x7f0000000140)=0x54) (async) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000000)) 1.144180675s ago: executing program 0 (id=4026): syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x800, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.035082197s ago: executing program 6 (id=4028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) 1.023099232s ago: executing program 1 (id=4029): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x17c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x56d7}, {0x6, 0x11, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe9c5}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb9ec}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}]}, 0x17c}, 0x1, 0x0, 0x0, 0xe01ed646bdbf34fa}, 0x20000001) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) 973.26224ms ago: executing program 2 (id=4030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0xfffffffe, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) (async) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0xfffffffe, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) (async) 942.836538ms ago: executing program 0 (id=4031): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="505204070000000014001a80100004800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x60040140) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x9, 0x1, 0xa, 0xa, 0x80000000}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) 890.909851ms ago: executing program 1 (id=4032): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="b31654f65e", 0x5}], 0x1}, 0x81) socket(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r5, 0x29, 0x14, 0x0, 0xfff3) (async) setsockopt$inet6_int(r5, 0x29, 0x14, 0x0, 0xfff3) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff000) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000400)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000400)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$IMGETDEVINFO(r3, 0x80044942, 0xfffffffffffffffe) 840.91125ms ago: executing program 2 (id=4033): socket$packet(0x11, 0x4000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200c300000000b703000000000000850000000600000085000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000858f96a818426f440000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48045) socketpair(0x15, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r12, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 839.269436ms ago: executing program 7 (id=4034): r0 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000200)=0x748) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @broadcast, 0x0}, &(0x7f0000000040)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$FITHAW(r0, 0xc0045878) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x24, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x1, 0x4, 0x5, 0x2, 0x18, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @jmp={0x5, 0x0, 0x4, 0x9, 0x1, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1cb99ac20736fa1a}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1a, 0x0, &(0x7f0000000580)="25a2723a66f3981b9ec65af2f2ae5282bafa5a2c000000000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe26a4a62bb202fcf}, 0x50) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xc, r4, 0x32, r6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001a00010000000000000000000a002000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8800000000000000e0ff967ad2f332efb193dbcea63f56"], 0x30}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x690, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) 838.904605ms ago: executing program 6 (id=4035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000010003704000020000000000000000000", @ANYRES32=0x0, @ANYRES32=r0], 0x40}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000080)=0x8, 0x4) 679.05633ms ago: executing program 6 (id=4036): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24000850}, 0x200008c0) 675.955869ms ago: executing program 7 (id=4037): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0xfffffeb5) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1e, 0x5, 0x0) getsockname$packet(r4, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000000c0)=0x1) (async, rerun: 32) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000003c0)="fd2ff17131d638d1429dbef013f41b0787c8e28415b152ab98ca7e9c62731ef2bb86ce8be129a6bbc8002c3b6774ee64f4a02c924c423d1259740b42de7d58f628e0761864e067d8cc31e887a4e79f1d20ec7fd4518054900049915936444921262665a5f00755c7aac1938d3e575a484e7d92a72e4f6d81dc5c5da0887e2820cdf47c31720f0585cf7b5a4ffbfc3e17b4801c4ad23043e41a3ad4d1b670186eac526b045625e2b150a60e8f675b8046cf4a1016f00e8d5af9f998a1f8e77f836451762b37f294ffe717ec50c4b3b25d793d40de9dff646c7eb0e155db6edcfe412b5e90e35f5b5571b24f7dea", 0xed) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r5, 0xba7ab000) (async) getsockopt$packet_int(r6, 0x107, 0xe, 0x0, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3d00000010000003e40000000013000000000000", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb060008003e000000"], 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x4008040) 533.159577ms ago: executing program 1 (id=4038): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 490.55418ms ago: executing program 0 (id=4039): mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r3], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000340)='^'}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x40}}, 0x4000002) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x2, 0x0, &(0x7f0000000000)) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) ioctl$PPPIOCUNBRIDGECHAN(r9, 0x7434) 449.033596ms ago: executing program 6 (id=4040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000000000000e0ffc07b76080c00000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000000000000e0ffc07b76080c00000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) (async) pipe(&(0x7f0000000000)) (async) 242.579101ms ago: executing program 7 (id=4041): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x15, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r2, r0, 0x11, 0x30, 0x0, @void, @void, @void, @value=r3, r1}, 0x20) r4 = accept4(r0, 0x0, &(0x7f0000000280), 0x800) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x140d, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x1d, 0x0, @val=@perf_event={0x6}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'geneve0\x00', {0xff}, {}, 0x73, 0x2, 0x1}, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xd, 0xfffffff7, 0x7f, 0xc, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x4, 0x0, 0xa, 0x5], 0x6, 0x5}, {0xffffffffffffffff, [0x1, 0x2, 0x6, 0x4, 0x1], 0x3, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x81, 0xb, [0xa, 0x1c, 0x33, 0x1b, 0x1b, 0x20, 0x39, 0x3b, 0x19, 0x2c, 0x38, 0x33, 0x22, 0x13, 0x24, 0x15], 0x1, 0x8, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x2, 0x7, 0x1, 0x6], 0x6}, {0x2, [0x5, 0x2, 0x2, 0x4, 0x3, 0x1], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x19, &(0x7f0000000bc0)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f2a000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f0000000cc0)='GPL\x00', 0x7, 0x73, &(0x7f0000000d00)=""/115, 0x41000, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x0, 0xa, 0xa, 0x9045}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[r2, r2], &(0x7f0000000e40)=[{0x4, 0x1, 0x1, 0x3}, {0x1, 0x4, 0x5, 0x9}], 0x10, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={r0, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x1000, 0x20}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1e, 0x1b, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0xffff428f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x0, 0x0, 0x7, 0xc, 0xbb443f662842bc79, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0xf7, &(0x7f0000000a00)=""/247, 0x40f00, 0x10, '\x00', r6, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x0, 0x6}, 0x10, 0x0, r7, 0x3, &(0x7f0000000fc0)=[r8, r2, r0, r2, r0, r9], &(0x7f0000001000)=[{0x3, 0x2, 0xd, 0x8}, {0x5, 0x5, 0xf, 0x5}, {0x1, 0x1, 0xa}]}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000001340), &(0x7f0000001380)=0x4) getsockname$packet(r0, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001400)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001440)={0x0, 0x6}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000014c0)={r12, 0x5}, &(0x7f0000001500)=0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x58, 0x1409, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4085}, 0x40005) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001680)={@rand_addr=0x64010101, @multicast2, r11}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000016c0)=@assoc_value={r12, 0x5}, &(0x7f0000001700)=0x8) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000017c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r0, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001800)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0], 0x0, 0x73, &(0x7f00000018c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0x62, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001d00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x1b8, r13, 0x300, 0x70bd2d, 0x2, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r16, 0x8) 219.107682ms ago: executing program 7 (id=4042): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0xfffffff8, [{0x10, 0x3, 0x5}, {0x1, 0x0, 0x7}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @union={0xa, 0xa, 0x0, 0x5, 0x0, 0x5, [{0x1, 0x5, 0x9}, {0x1, 0x2, 0x7}, {0x1, 0x3, 0x800}, {0x0, 0x0, 0x10000}, {0xe, 0x3, 0x2}, {0x4, 0x0, 0xa7}, {0xa, 0x1, 0x1}, {0x0, 0x0, 0xe}, {0xe, 0x2, 0x7}, {0x10, 0x5, 0xe8}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000300)=""/184, 0xdf, 0xb8, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000200)}, 0x20) 144.206459ms ago: executing program 7 (id=4043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0x12, "ff6ca8903c02af00000000000000668b"}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x58}}], 0x1, 0x804) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) socket(0x23, 0x2, 0x53f0800) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000000801042dbd70000000000000000000ef5d7dcad59d9f70101bca00496a", @ANYRES64=r5, @ANYRES64=r6], 0x50}}, 0x44090) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000080), &(0x7f0000000340)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x25, r9}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 0s ago: executing program 7 (id=4044): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): T13572] syzkaller0: entered allmulticast mode [ 272.671281][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2238'. [ 272.687168][T13572] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.721906][T13566] geneve3: entered promiscuous mode [ 272.727132][T13566] geneve3: entered allmulticast mode [ 272.734958][T13578] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2240'. [ 272.735205][T13573] netlink: 416 bytes leftover after parsing attributes in process `syz.3.2239'. [ 272.744759][T13578] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2240'. [ 272.773467][ T1084] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 272.835504][ T1084] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 272.843864][ T1084] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 272.853220][ T1084] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 272.926273][T13585] netlink: 'syz.1.2244': attribute type 1 has an invalid length. [ 272.962071][T13585] bond6: entered promiscuous mode [ 272.967552][T13585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.104851][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2247'. [ 273.183137][T13604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2251'. [ 273.194350][T13605] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2251'. [ 273.363803][T13617] openvswitch: netlink: Flow key attr not present in new flow. [ 273.449785][T13623] netlink: 'syz.0.2256': attribute type 1 has an invalid length. [ 273.476098][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 273.485978][T13627] netlink: 'syz.2.2259': attribute type 2 has an invalid length. [ 273.492650][T13623] 8021q: adding VLAN 0 to HW filter on device bond12 [ 273.497418][T13629] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 273.719760][T13647] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2263'. [ 273.731282][T13647] 1{X: renamed from 30{X (while UP) [ 273.756349][T13647] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 274.017200][T13673] xt_HMARK: proto mask must be zero with L3 mode [ 274.154534][T13681] tipc: Enabled bearer , priority 0 [ 274.163004][T13681] syzkaller0: entered promiscuous mode [ 274.168490][T13681] syzkaller0: entered allmulticast mode [ 274.199989][T13679] tipc: Resetting bearer [ 274.223050][T13679] tipc: Disabling bearer [ 274.528416][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.538623][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.547209][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.557586][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.566639][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.604674][T13703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 274.617474][T13695] lo speed is unknown, defaulting to 1000 [ 275.319476][T13744] lo: left promiscuous mode [ 275.336625][T13744] tipc: Resetting bearer [ 275.530285][ T5832] Bluetooth: hci0: command tx timeout [ 275.581975][T13744] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.611754][ T5913] syz1: Port: 1 Link DOWN [ 275.963402][T13695] chnl_net:caif_netlink_parms(): no params data found [ 276.273533][T13806] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 276.304406][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.320511][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.328420][T13695] bridge_slave_0: entered allmulticast mode [ 276.349721][T13695] bridge_slave_0: entered promiscuous mode [ 276.369552][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.387472][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.394880][T13695] bridge_slave_1: entered allmulticast mode [ 276.404869][T13695] bridge_slave_1: entered promiscuous mode [ 276.503763][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.547121][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.651199][ T5843] Bluetooth: hci6: command tx timeout [ 276.660604][T13695] team0: Port device team_slave_0 added [ 276.685965][T13695] team0: Port device team_slave_1 added [ 276.743235][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.751280][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.778199][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.792146][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.799419][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.826817][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.844246][T13842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.984998][T13844] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 277.014986][T13695] hsr_slave_0: entered promiscuous mode [ 277.044251][T13695] hsr_slave_1: entered promiscuous mode [ 277.064162][T13695] debugfs: 'hsr0' already exists in 'hsr' [ 277.083178][T13695] Cannot create hsr debugfs directory [ 277.730127][T13883] vlan0: entered promiscuous mode [ 277.742803][T13883] bridge0: entered promiscuous mode [ 277.766813][T13885] bridge8: entered allmulticast mode [ 277.929491][T13695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.938184][T13892] __nla_validate_parse: 10 callbacks suppressed [ 277.938204][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 277.960773][T13695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.056722][T13695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.094784][T13695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.221828][T13910] tipc: Enabled bearer , priority 0 [ 278.261597][T13910] syzkaller0: entered promiscuous mode [ 278.267101][T13910] syzkaller0: entered allmulticast mode [ 278.315069][T13910] tipc: Resetting bearer [ 278.332807][T13907] tipc: Resetting bearer [ 278.361604][T13907] tipc: Disabling bearer [ 278.409083][T13925] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 278.445706][T13925] syzkaller0: entered promiscuous mode [ 278.454392][T13925] syzkaller0: entered allmulticast mode [ 278.468460][T13695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.577479][T13695] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.613934][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.621166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.682898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.690106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.732944][ T5843] Bluetooth: hci6: command tx timeout [ 278.765796][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 279.098891][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 279.305265][T13980] ip6t_srh: unknown srh match flags 4000 [ 279.321991][T13695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.673601][T13999] netlink: 'syz.0.2366': attribute type 32 has an invalid length. [ 279.699992][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 279.776671][T13999] bond13: Setting coupled_control to off (0) [ 280.017414][T14018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2370'. [ 280.045083][T13695] veth0_vlan: entered promiscuous mode [ 280.077138][T14018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2370'. [ 280.096416][T13695] veth1_vlan: entered promiscuous mode [ 280.162600][T14027] netlink: 'syz.3.2373': attribute type 29 has an invalid length. [ 280.203439][T14025] Cannot find set identified by id 65534 to match [ 280.218425][T13695] veth0_macvtap: entered promiscuous mode [ 280.227219][T14027] erspan0: entered allmulticast mode [ 280.249671][T13695] veth1_macvtap: entered promiscuous mode [ 280.326958][T13695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.363986][T13695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.408610][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.424496][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.470208][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.490293][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.525947][T14037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2376'. [ 280.674882][T14042] tipc: Enabled bearer , priority 0 [ 280.681624][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.690534][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.692651][T14042] syzkaller0: entered promiscuous mode [ 280.710848][T14042] syzkaller0: entered allmulticast mode [ 280.746871][T14042] tipc: Resetting bearer [ 280.810946][ T5843] Bluetooth: hci6: command tx timeout [ 280.811550][T14041] tipc: Resetting bearer [ 280.878304][T14041] tipc: Disabling bearer [ 280.962573][T14049] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2380'. [ 280.989672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.015390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.215083][T14074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.284087][T14083] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A [ 281.392765][T14091] bond5: option resend_igmp: invalid value (32767) [ 281.400187][T14091] bond5: option resend_igmp: allowed values 0 - 255 [ 281.410673][T14091] bond5 (unregistering): Released all slaves [ 281.456088][T14098] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 281.541356][T14101] Cannot find add_set index 1 as target [ 281.554019][T14101] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 281.564328][T14101] syzkaller0: entered promiscuous mode [ 281.570105][T14101] syzkaller0: entered allmulticast mode [ 281.583325][T14101] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.822515][T14116] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 281.834655][T14116] syzkaller0: entered promiscuous mode [ 281.842413][T14116] syzkaller0: entered allmulticast mode [ 281.855555][T14116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.260419][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'. [ 282.338421][T14142] bond14: option xmit_hash_policy: invalid value (64) [ 282.348343][T14142] bond14 (unregistering): Released all slaves [ 282.415430][T14150] pim6reg527: entered allmulticast mode [ 282.453028][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 282.756599][T14171] sctp: [Deprecated]: syz.6.2420 (pid 14171) Use of int in max_burst socket option. [ 282.756599][T14171] Use struct sctp_assoc_value instead [ 282.890228][ T5843] Bluetooth: hci6: command tx timeout [ 283.116500][T14189] netlink: 'syz.2.2427': attribute type 12 has an invalid length. [ 283.208037][T14193] __nla_validate_parse: 4 callbacks suppressed [ 283.208065][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 283.819464][T14241] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 283.833049][T14236] vlan2: entered promiscuous mode [ 283.838133][T14236] bridge0: entered promiscuous mode [ 283.930530][T14244] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2443'. [ 284.062693][T14255] tls_set_device_offload_rx: netdev not found [ 284.191066][T14265] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2451'. [ 284.203694][T14265] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2451'. [ 284.222688][T14265] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2451'. [ 284.430672][T14276] veth13: entered allmulticast mode [ 284.574936][T14285] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 284.593503][T14285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2457'. [ 284.956620][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 285.028496][T14306] bridge0: entered promiscuous mode [ 285.053368][T14306] macsec1: entered promiscuous mode [ 285.067129][T14306] macsec1: entered allmulticast mode [ 285.080036][T14306] bridge0: entered allmulticast mode [ 285.091235][T14306] bridge0: port 1(macsec1) entered blocking state [ 285.098082][T14306] bridge0: port 1(macsec1) entered disabled state [ 285.113155][T14306] bridge0: left allmulticast mode [ 285.138192][T14306] bridge0: left promiscuous mode [ 285.186262][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 285.201045][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2467'. [ 285.209070][T14308] team0: Device ip6gre1 is of different type [ 285.219481][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 285.756733][T14345] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 285.873554][T14346] bond4: (slave geneve3): making interface the new active one [ 285.897643][T14346] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 285.940470][ T1150] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.973745][ T1150] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.993241][ T1150] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 286.021441][ T1150] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 286.245535][T14369] netlink: 'syz.2.2482': attribute type 27 has an invalid length. [ 286.307750][T14377] netlink: 'syz.3.2485': attribute type 24 has an invalid length. [ 286.523031][T14395] netlink: 'syz.6.2487': attribute type 1 has an invalid length. [ 286.837391][T14401] veth3: entered promiscuous mode [ 310.131035][T14419] __nla_validate_parse: 8 callbacks suppressed [ 310.131053][T14419] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2497'. [ 310.375670][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 310.385225][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 310.505319][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2505'. [ 310.621574][T14464] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 310.700962][T14470] pimreg: entered allmulticast mode [ 310.777744][T14472] bond2: option min_links: invalid value (18446744073709551614) [ 310.785737][T14472] bond2: option min_links: allowed values 0 - 2147483647 [ 310.795687][T14472] bond2 (unregistering): Released all slaves [ 311.334034][T14500] pim6reg: entered allmulticast mode [ 311.385822][ T5906] IPVS: starting estimator thread 0... [ 311.407342][T14501] pim6reg: left allmulticast mode [ 311.489912][T14509] IPVS: using max 34 ests per chain, 81600 per kthread [ 311.628461][T14523] bridge1: entered promiscuous mode [ 311.654279][T14523] bridge1: entered allmulticast mode [ 311.893302][T14541] netlink: 'syz.6.2531': attribute type 1 has an invalid length. [ 311.913324][T14541] netlink: 'syz.6.2531': attribute type 4 has an invalid length. [ 311.941219][T14541] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2531'. [ 312.155934][T14552] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 312.164526][T14553] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 312.316931][T14568] xfrm1: entered allmulticast mode [ 312.543338][T14585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2545'. [ 312.616023][T14594] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2548'. [ 312.632462][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 312.656516][T14596] tipc: Enabling of bearer rejected, failed to enable media [ 312.676255][T14595] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.687555][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2547'. [ 312.790698][T14606] netlink: 'syz.6.2550': attribute type 15 has an invalid length. [ 313.052165][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 313.147406][T14621] netlink: 'syz.3.2554': attribute type 29 has an invalid length. [ 313.288781][T14632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.494884][T14647] syzkaller1: entered promiscuous mode [ 313.520714][T14647] syzkaller1: entered allmulticast mode [ 313.714960][T14657] netlink: 'syz.6.2569': attribute type 4 has an invalid length. [ 313.747332][T14657] `: renamed from bond0 (while UP) [ 314.635414][T14736] netlink: 'syz.3.2591': attribute type 7 has an invalid length. [ 314.662764][T14728] dvmrp0: left allmulticast mode [ 314.716632][ T1109] smc: removing ib device syz1 [ 314.935608][T14746] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 314.948672][T14746] bond7 (unregistering): Released all slaves [ 315.183590][T14751] __nla_validate_parse: 7 callbacks suppressed [ 315.183605][T14751] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2597'. [ 315.295007][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 315.616793][T14764] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2603'. [ 315.723594][T14773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.277885][T14788] "syz.3.2610" (14788) uses obsolete ecb(arc4) skcipher [ 316.547271][T14810] bridge8: entered promiscuous mode [ 316.647848][T14818] IPVS: length: 24 != 3445464 [ 316.890364][T14829] tipc: Enabled bearer , priority 0 [ 316.906326][T14829] syzkaller0: entered promiscuous mode [ 316.917812][T14829] syzkaller0: entered allmulticast mode [ 317.021200][T14829] tipc: Resetting bearer [ 317.044289][T14827] tipc: Resetting bearer [ 317.069649][T14827] tipc: Disabling bearer [ 317.143830][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.615048][T14880] syzkaller0: entered promiscuous mode [ 317.621389][T14880] syzkaller0: entered allmulticast mode [ 318.157412][T14906] erspan0: entered allmulticast mode [ 318.248634][T14911] bond5: option mode: invalid value (133) [ 318.262592][T14911] bond5 (unregistering): Released all slaves [ 318.474822][T14927] netlink: zone id is out of range [ 318.834824][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2652'. [ 318.878766][T14955] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2653'. [ 319.123966][T14979] netlink: 'syz.1.2662': attribute type 15 has an invalid length. [ 319.132706][T14979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2662'. [ 319.172169][T14977] tipc: Enabling of bearer rejected, failed to enable media [ 319.189184][T14982] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 319.420356][T14987] nbd3: detected capacity change from 0 to 127 [ 319.434666][ T5843] block nbd3: Receive control failed (result -32) [ 319.601310][T15001] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2669'. [ 319.628374][T15001] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2669'. [ 319.795863][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.805711][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.816998][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.832604][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.841070][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.971195][T15007] lo speed is unknown, defaulting to 1000 [ 320.319363][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2677'. [ 320.369984][T15032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2677'. [ 320.446919][T15033] syzkaller0: entered promiscuous mode [ 320.453590][T15033] syzkaller0: entered allmulticast mode [ 320.466581][T15040] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 320.604957][T15044] IPv6: Can't replace route, no match found [ 320.705443][T15055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 320.789092][T15007] chnl_net:caif_netlink_parms(): no params data found [ 320.817545][T15047] netlink: 'syz.6.2684': attribute type 83 has an invalid length. [ 321.006980][T15069] bond0: (slave gre0): Error: Device type is different from other slaves [ 321.120662][T15083] netlink: 'syz.2.2693': attribute type 7 has an invalid length. [ 321.128669][T15083] netlink: 'syz.2.2693': attribute type 8 has an invalid length. [ 321.149289][T15007] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.160727][T15007] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.168011][T15007] bridge_slave_0: entered allmulticast mode [ 321.199420][T15007] bridge_slave_0: entered promiscuous mode [ 321.213633][T15007] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.225434][T15007] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.233437][T15007] bridge_slave_1: entered allmulticast mode [ 321.234788][T15076] netlink: 'syz.6.2692': attribute type 1 has an invalid length. [ 321.241382][T15007] bridge_slave_1: entered promiscuous mode [ 321.258210][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2692'. [ 321.324036][T15007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.354380][T15007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.434614][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'. [ 321.457709][T15007] team0: Port device team_slave_0 added [ 321.471961][T15102] netlink: 'syz.2.2697': attribute type 3 has an invalid length. [ 321.483034][T15007] team0: Port device team_slave_1 added [ 321.559573][T15007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.581049][T15007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.635842][T15007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.651101][T15007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.658075][T15007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.689321][T15007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.858586][T15123] netlink: 'syz.2.2704': attribute type 27 has an invalid length. [ 321.859428][T15007] hsr_slave_0: entered promiscuous mode [ 321.878603][T15121] netlink: 'syz.6.2703': attribute type 1 has an invalid length. [ 321.888544][T15007] hsr_slave_1: entered promiscuous mode [ 321.902414][T15007] debugfs: 'hsr0' already exists in 'hsr' [ 321.908547][T15128] netlink: 'syz.6.2703': attribute type 1 has an invalid length. [ 321.916493][T15007] Cannot create hsr debugfs directory [ 321.931665][ T5843] Bluetooth: hci7: command tx timeout [ 322.017527][T15131] bond0: (slave gretap1): making interface the new active one [ 322.026997][T15131] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 322.418786][T15007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.563640][T15007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.597834][T15162] netlink: 'syz.2.2712': attribute type 83 has an invalid length. [ 322.618378][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2713'. [ 322.654974][T15007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.725182][T15171] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 322.764724][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 322.828395][T15007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.912934][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 322.932674][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 323.054972][T15184] syzkaller0: entered promiscuous mode [ 323.062881][T15184] syzkaller0: entered allmulticast mode [ 323.075159][T15195] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 323.135370][T15200] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2723'. [ 323.139388][T15195] syzkaller0: entered promiscuous mode [ 323.150788][T15195] syzkaller0: entered allmulticast mode [ 323.205453][T15200] gretap0: refused to change device tx_queue_len [ 323.212512][T15200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 323.342352][T15007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.358795][T15007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.396334][T15007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.430999][T15007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.446090][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 323.703138][T15007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.765202][T15237] netlink: 'syz.3.2733': attribute type 11 has an invalid length. [ 323.783080][T15007] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.790740][T15248] netlink: 'syz.3.2733': attribute type 11 has an invalid length. [ 323.857058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.864306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.912273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.919448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.010158][ T5843] Bluetooth: hci7: command tx timeout [ 324.296290][T15007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.366951][T15007] veth0_vlan: entered promiscuous mode [ 324.385786][T15007] veth1_vlan: entered promiscuous mode [ 324.426848][T15007] veth0_macvtap: entered promiscuous mode [ 324.445706][T15007] veth1_macvtap: entered promiscuous mode [ 324.473423][T15007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.498599][T15007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.846745][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.910884][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.929439][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.001376][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.113002][T15289] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.131390][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.144458][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.211411][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.229242][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.490241][ T30] audit: type=1800 audit(1761241721.984:3): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2754" name="freezer.self_freezing" dev="tmpfs" ino=2976 res=0 errno=0 [ 325.527340][T15316] __nla_validate_parse: 9 callbacks suppressed [ 325.527358][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 325.555959][T15319] netlink: 'syz.0.2665': attribute type 11 has an invalid length. [ 325.586684][T15319] netlink: 'syz.0.2665': attribute type 11 has an invalid length. [ 325.627419][T15319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2665'. [ 325.742678][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 326.090471][ T5843] Bluetooth: hci7: command tx timeout [ 326.338607][T15339] tipc: Enabling of bearer rejected, failed to enable media [ 326.583935][T15356] tipc: Started in network mode [ 326.604923][T15356] tipc: Node identity 968d8a205105, cluster identity 4711 [ 326.621008][T15356] tipc: Enabled bearer , priority 0 [ 326.655572][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 326.675527][T15356] tipc: Disabling bearer [ 326.701655][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 326.721889][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 326.872178][T15374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2768'. [ 326.885586][T15370] tipc: Enabled bearer , priority 0 [ 326.892866][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 326.903078][T15370] syzkaller0: entered allmulticast mode [ 326.916998][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 326.936700][T15368] tipc: Disabling bearer [ 326.938111][T15374] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2768'. [ 326.958582][T15374] validate_nla: 1 callbacks suppressed [ 326.958598][T15374] netlink: 'syz.2.2768': attribute type 2 has an invalid length. [ 326.982069][T15380] nbd: nbd3 already in use [ 326.988376][T15380] block nbd3: NBD_DISCONNECT [ 326.993876][T15380] block nbd3: Send disconnect failed -32 [ 327.001223][T15380] block nbd3: shutting down sockets [ 327.062051][T15383] netlink: 'syz.6.2771': attribute type 21 has an invalid length. [ 327.070777][T15383] netlink: 'syz.6.2771': attribute type 22 has an invalid length. [ 327.078686][T15383] netlink: 'syz.6.2771': attribute type 23 has an invalid length. [ 327.090164][T15383] netlink: 'syz.6.2771': attribute type 25 has an invalid length. [ 327.098128][T15383] netlink: 'syz.6.2771': attribute type 26 has an invalid length. [ 327.937381][T15426] bridge_slave_0: invalid flags given to default FDB implementation [ 327.973786][T15430] netlink: 'syz.0.2784': attribute type 4 has an invalid length. [ 328.170476][ T5843] Bluetooth: hci7: command tx timeout [ 328.552665][T15458] lo speed is unknown, defaulting to 1000 [ 329.162674][T15493] syzkaller1: entered promiscuous mode [ 329.168193][T15493] syzkaller1: entered allmulticast mode [ 329.204325][T15498] tipc: Started in network mode [ 329.209312][T15498] tipc: Node identity fe5f2793df7f, cluster identity 4711 [ 329.238981][T15498] tipc: Enabled bearer , priority 0 [ 329.261853][T15505] syzkaller0: entered promiscuous mode [ 329.275879][T15505] syzkaller0: entered allmulticast mode [ 329.284974][T15503] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 329.419136][T15503] syzkaller0: entered promiscuous mode [ 329.427992][T15503] syzkaller0: entered allmulticast mode [ 329.495533][T15498] tipc: Resetting bearer [ 329.579383][T15494] tipc: Resetting bearer [ 329.615320][T15494] tipc: Disabling bearer [ 329.852994][T15537] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 329.865858][T15537] bond5 (unregistering): Released all slaves [ 330.571496][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.590724][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.295691][T15559] geneve2: left allmulticast mode [ 331.312718][T15559] vlan1: left promiscuous mode [ 331.317525][T15559] bridge0: left promiscuous mode [ 331.347960][T15559] gtp0: left promiscuous mode [ 331.353123][T15559] gtp0: left allmulticast mode [ 331.359104][T15589] netlink: 'syz.1.2830': attribute type 2 has an invalid length. [ 331.370258][T15559] geneve3: left promiscuous mode [ 331.375232][T15559] geneve3: left allmulticast mode [ 331.493602][T15561] geneve4: entered promiscuous mode [ 331.498872][T15561] geneve4: entered allmulticast mode [ 331.506590][T15588] __nla_validate_parse: 23 callbacks suppressed [ 331.506618][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 331.591250][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.606058][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 331.649554][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.668049][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 331.693708][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.730321][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 331.738665][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.764464][ T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 331.786341][T15604] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2835'. [ 331.840370][ T8927] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.896799][T15610] netlink: 'syz.3.2838': attribute type 33 has an invalid length. [ 331.911953][T15611] netlink: 'syz.3.2838': attribute type 33 has an invalid length. [ 331.918507][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 331.921226][T15607] veth0_macvtap: left promiscuous mode [ 331.992949][T15607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2837'. [ 332.036449][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2835'. [ 332.430110][T15584] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.490081][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.578010][T15634] syzkaller0: entered promiscuous mode [ 332.594888][T15634] syzkaller0: entered allmulticast mode [ 332.740639][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 332.762163][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.771976][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.780577][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.788856][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.797788][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.893238][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 332.908310][T15657] netlink: zone id is out of range [ 332.913663][T15657] netlink: zone id is out of range [ 332.918882][T15657] netlink: zone id is out of range [ 332.925125][T15657] netlink: zone id is out of range [ 332.930303][T15657] netlink: zone id is out of range [ 332.935535][T15657] netlink: zone id is out of range [ 332.941101][T15657] netlink: zone id is out of range [ 332.949866][T15657] netlink: zone id is out of range [ 332.955035][T15657] netlink: zone id is out of range [ 332.963277][T15657] netlink: zone id is out of range [ 334.242520][T15650] lo speed is unknown, defaulting to 1000 [ 334.407986][T15669] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2851'. [ 334.427180][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2853'. [ 334.498176][T15681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2854'. [ 334.514169][T15682] netlink: 'syz.1.2854': attribute type 5 has an invalid length. [ 334.532580][T15682] geneve4: entered promiscuous mode [ 334.537907][T15682] geneve4: entered allmulticast mode [ 334.545594][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 334.567609][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 334.576605][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 334.594328][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 334.604945][T15682] netlink: 'syz.1.2854': attribute type 8 has an invalid length. [ 334.622131][T15686] netlink: 'syz.1.2854': attribute type 8 has an invalid length. [ 334.649076][T15682] bridge0: entered promiscuous mode [ 334.661677][T15686] bridge5: entered promiscuous mode [ 334.790565][T15692] netlink: 'syz.1.2856': attribute type 24 has an invalid length. [ 334.859488][T15650] chnl_net:caif_netlink_parms(): no params data found [ 334.891067][ T5843] Bluetooth: hci0: command tx timeout [ 334.895977][T15698] sctp: [Deprecated]: syz.1.2858 (pid 15698) Use of int in maxseg socket option. [ 334.895977][T15698] Use struct sctp_assoc_value instead [ 334.977482][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.988300][T15650] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.996140][T15650] bridge_slave_0: entered allmulticast mode [ 335.004883][T15650] bridge_slave_0: entered promiscuous mode [ 335.014682][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.022345][T15650] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.030231][T15650] bridge_slave_1: entered allmulticast mode [ 335.038690][T15650] bridge_slave_1: entered promiscuous mode [ 335.096317][T15650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.110730][T15650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.153448][T15650] team0: Port device team_slave_0 added [ 335.163150][T15650] team0: Port device team_slave_1 added [ 335.296501][T15650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.304449][T15713] netlink: 'syz.2.2862': attribute type 5 has an invalid length. [ 335.314379][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.341623][T15650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.357237][T15650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.358135][T15713] Bluetooth: MGMT ver 1.23 [ 335.364501][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.397867][T15650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.412313][T15719] netlink: 'syz.6.2864': attribute type 1 has an invalid length. [ 335.781716][T15650] hsr_slave_0: entered promiscuous mode [ 335.810871][T15650] hsr_slave_1: entered promiscuous mode [ 335.837840][T15650] debugfs: 'hsr0' already exists in 'hsr' [ 335.862524][T15650] Cannot create hsr debugfs directory [ 336.150411][T15753] delete_channel: no stack [ 336.381091][T15650] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.391822][T15650] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.474642][T15650] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.485753][T15650] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.593880][T15786] netlink: 'syz.1.2879': attribute type 14 has an invalid length. [ 336.639433][T15650] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.666288][T15650] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.741062][T15650] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.751886][T15650] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.838965][T15801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.971927][ T5843] Bluetooth: hci0: command tx timeout [ 337.049061][T15650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.122459][T15650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.201324][T15650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.243942][T15809] __nla_validate_parse: 7 callbacks suppressed [ 337.243960][T15809] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2886'. [ 337.265099][T15650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.292070][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 337.455412][T15832] netlink: 'syz.6.2890': attribute type 9 has an invalid length. [ 337.481262][T15833] netlink: 'syz.6.2890': attribute type 9 has an invalid length. [ 337.504071][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2890'. [ 337.534056][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2890'. [ 337.584649][ T1150] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.616693][ T1150] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.651527][ T1150] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.669971][ T1150] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.719280][T15650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.784359][T15650] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.806762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.814054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.872882][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.880128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.370931][T15650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.458348][T15858] bond1: entered allmulticast mode [ 338.464214][T15858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.525303][T15650] veth0_vlan: entered promiscuous mode [ 338.541910][T15650] veth1_vlan: entered promiscuous mode [ 338.585208][T15844] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.602975][T15844] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 338.646397][T15650] veth0_macvtap: entered promiscuous mode [ 338.761436][T15650] veth1_macvtap: entered promiscuous mode [ 338.834994][T15844] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 338.841620][T15844] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 338.919731][T15650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.930615][T15844] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 338.936824][T15844] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 338.991608][T15887] netlink: 'syz.2.2903': attribute type 3 has an invalid length. [ 339.015613][T15650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.050577][ T5843] Bluetooth: hci0: command tx timeout [ 339.058677][T15844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.076459][T15844] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 339.093496][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.107339][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.138799][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.144910][T15889] net_ratelimit: 5 callbacks suppressed [ 339.144931][T15889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.162426][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.379456][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.388609][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.463192][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.479619][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.488831][T15898] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 339.525346][T15898] syzkaller0: entered promiscuous mode [ 339.551473][T15898] syzkaller0: entered allmulticast mode [ 339.715339][T15917] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 339.924672][T15932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2919'. [ 339.978242][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2920'. [ 340.012210][T15934] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0 [ 340.481055][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2926'. [ 340.523878][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.535345][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.543997][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.553413][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.561654][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.688716][T15956] lo speed is unknown, defaulting to 1000 [ 341.133032][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 341.169087][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2934'. [ 341.188095][T15987] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 341.218686][T15991] netlink: 'syz.2.2935': attribute type 7 has an invalid length. [ 341.226664][T15991] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2935'. [ 341.264026][T15987] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 341.298698][T15993] bond2: option xmit_hash_policy: invalid value (64) [ 341.320804][T15993] bond2 (unregistering): Released all slaves [ 341.361349][ T1150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.466981][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.498698][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.536989][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.558260][T15999] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 341.575359][T16000] smc: net device gre0 applied user defined pnetid SYZ1 [ 341.583791][T16000] smc: net device gre0 erased user defined pnetid SYZ1 [ 341.701601][T16007] netlink: 'syz.2.2940': attribute type 10 has an invalid length. [ 341.714099][T16007] team0: Device ipvlan1 failed to register rx_handler [ 341.767065][T16009] pimreg: entered allmulticast mode [ 342.007657][T15956] chnl_net:caif_netlink_parms(): no params data found [ 342.031286][T16025] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 342.352709][T16040] __nla_validate_parse: 5 callbacks suppressed [ 342.352726][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'. [ 342.368322][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.380339][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.398080][T15956] bridge_slave_0: entered allmulticast mode [ 342.418995][T15956] bridge_slave_0: entered promiscuous mode [ 342.468107][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.480015][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.508295][T15956] bridge_slave_1: entered allmulticast mode [ 342.524544][T15956] bridge_slave_1: entered promiscuous mode [ 342.555356][T16051] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.651160][ T5843] Bluetooth: hci1: command tx timeout [ 342.677877][T16060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2957'. [ 342.689201][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.711815][T16061] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2956'. [ 342.763202][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.836025][T16070] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2959'. [ 342.858862][T15956] team0: Port device team_slave_0 added [ 342.893850][T15956] team0: Port device team_slave_1 added [ 343.012578][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.019566][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.065687][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.085104][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.093604][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.120585][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.286287][T15956] hsr_slave_0: entered promiscuous mode [ 343.301425][T15956] hsr_slave_1: entered promiscuous mode [ 343.317395][T15956] debugfs: 'hsr0' already exists in 'hsr' [ 343.323463][T15956] Cannot create hsr debugfs directory [ 343.335395][T16091] : renamed from vlan0 (while UP) [ 343.661512][T16101] netlink: zone id is out of range [ 343.686000][T16101] vlan2: entered promiscuous mode [ 343.693847][T16101] bridge0: entered promiscuous mode [ 343.874379][T15956] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 343.944377][T15956] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.008302][T15956] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.083488][T15956] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.248831][T16129] netlink: 'syz.2.2974': attribute type 4 has an invalid length. [ 344.300838][T16131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2975'. [ 344.310384][T16131] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2975'. [ 344.443332][T16140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2977'. [ 344.729366][T15956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.740066][ T5843] Bluetooth: hci1: command tx timeout [ 344.788016][T15956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.836935][T15956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.885162][T15956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.908976][T16157] syzkaller0: entered promiscuous mode [ 344.915052][T16157] syzkaller0: entered allmulticast mode [ 344.925878][T16162] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2981'. [ 344.956130][T16163] netem: change failed [ 345.249553][T16175] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.257347][T16175] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.420125][T16175] bridge_slave_0: left allmulticast mode [ 345.425807][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2987'. [ 345.435509][T16175] bridge_slave_0: left promiscuous mode [ 345.441297][T16175] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.457866][T16175] bridge_slave_1: left allmulticast mode [ 345.463809][T16175] bridge_slave_1: left promiscuous mode [ 345.469732][T16175] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.487034][T16175] bond0: (slave bond_slave_0): Releasing backup interface [ 345.503242][T16175] bond0: (slave bond_slave_1): Releasing backup interface [ 345.520880][T16175] team0: Port device team_slave_0 removed [ 345.538043][T16175] team0: Port device team_slave_1 removed [ 345.551347][T16175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.562814][T16175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.575280][T16175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.592860][T16175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.608784][T16175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.628456][T16193] veth1_to_bond: entered allmulticast mode [ 345.654370][T16186] veth1_to_bond: left allmulticast mode [ 345.821483][T16201] IPVS: length: 158 != 8 [ 345.823851][T16200] bridge0: port 4(veth0_to_bridge) entered blocking state [ 345.834881][T16200] bridge0: port 4(veth0_to_bridge) entered disabled state [ 345.842498][T16200] veth0_to_bridge: entered allmulticast mode [ 345.853694][T16200] veth0_to_bridge: entered promiscuous mode [ 345.879103][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.934841][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.964104][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.971359][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.005795][T16207] tipc: Started in network mode [ 346.028819][T16207] tipc: Node identity 5268d2183e87, cluster identity 4711 [ 346.037769][T16207] tipc: Enabled bearer , priority 0 [ 346.056480][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.063730][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.094298][T16209] syzkaller0: entered promiscuous mode [ 346.100278][T16209] syzkaller0: entered allmulticast mode [ 346.116602][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2991'. [ 346.140975][T16207] tipc: Resetting bearer [ 346.167927][T16215] geneve2: entered promiscuous mode [ 346.173970][T16215] geneve2: entered allmulticast mode [ 346.217312][T16203] tipc: Resetting bearer [ 346.245443][T16203] tipc: Disabling bearer [ 346.767017][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.810631][ T5843] Bluetooth: hci1: command tx timeout [ 346.839216][T15956] veth0_vlan: entered promiscuous mode [ 346.874145][T15956] veth1_vlan: entered promiscuous mode [ 346.919669][T15956] veth0_macvtap: entered promiscuous mode [ 346.930997][T15956] veth1_macvtap: entered promiscuous mode [ 346.952076][T16257] netlink: 'syz.0.3008': attribute type 18 has an invalid length. [ 346.979652][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.007651][T16257] bond0: entered allmulticast mode [ 347.013230][T16257] bond_slave_0: entered allmulticast mode [ 347.024322][T16257] bond_slave_1: entered allmulticast mode [ 347.045978][T16257] netlink: 'syz.0.3008': attribute type 1 has an invalid length. [ 347.063496][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.085734][T16257] netlink: 'syz.0.3008': attribute type 2 has an invalid length. [ 347.095184][T16257] netlink: 'syz.0.3008': attribute type 1 has an invalid length. [ 347.106404][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.115540][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.142840][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.177156][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.339054][T16269] geneve3: entered promiscuous mode [ 347.422868][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.434997][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.556105][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.585146][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.786789][T16295] __nla_validate_parse: 4 callbacks suppressed [ 347.786807][T16295] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3019'. [ 347.833274][T16297] netlink: 'syz.1.2917': attribute type 4 has an invalid length. [ 347.892725][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 347.965961][T16293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3018'. [ 348.485215][T16318] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 348.503540][T16318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.549191][T16318] team0: Failed to send options change via netlink (err -105) [ 348.550096][T16324] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 348.609393][T16318] team0: Port device dummy0 added [ 348.617499][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3027'. [ 348.667865][T16334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3029'. [ 348.695635][T16324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.718207][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.726207][T16324] team0: Failed to send options change via netlink (err -105) [ 348.728773][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.736854][T16324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.743258][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.754466][T16324] team0: Port device dummy0 removed [ 348.762264][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.768995][T16324] dummy0: entered allmulticast mode [ 348.770934][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.785198][T16324] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 348.890589][ T5843] Bluetooth: hci1: command tx timeout [ 348.896796][T16342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3030'. [ 348.943247][T16337] lo speed is unknown, defaulting to 1000 [ 348.952258][T16344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3031'. [ 349.005252][T16348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3032'. [ 349.192872][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'. [ 349.249412][T16353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 349.369689][T16362] --map-set only usable from mangle table [ 349.630383][T16369] lo speed is unknown, defaulting to 1000 [ 349.640621][T16337] chnl_net:caif_netlink_parms(): no params data found [ 350.020277][T16377] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 350.072072][T16337] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.107093][T16337] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.124772][T16337] bridge_slave_0: entered allmulticast mode [ 350.137599][T16337] bridge_slave_0: entered promiscuous mode [ 350.146965][T16337] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.161600][T16337] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.169594][T16337] bridge_slave_1: entered allmulticast mode [ 350.178629][T16403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3047'. [ 350.191735][T16337] bridge_slave_1: entered promiscuous mode [ 350.350919][T16337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.363808][T16337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.527683][T16337] team0: Port device team_slave_0 added [ 350.539488][T16337] team0: Port device team_slave_1 added [ 350.600918][T16337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.607957][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.634371][T16337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.649146][T16337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.657160][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.684189][T16337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.745658][T16337] hsr_slave_0: entered promiscuous mode [ 350.753943][T16337] hsr_slave_1: entered promiscuous mode [ 350.760699][T16337] debugfs: 'hsr0' already exists in 'hsr' [ 350.766495][T16337] Cannot create hsr debugfs directory [ 350.890642][ T5843] Bluetooth: hci3: command tx timeout [ 350.942452][T16337] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.002824][T16337] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.056077][T16337] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.101783][T16422] tipc: Enabled bearer , priority 0 [ 351.140343][T16422] syzkaller0: entered promiscuous mode [ 351.145850][T16422] syzkaller0: entered allmulticast mode [ 351.165848][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.208655][T16337] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.237783][T16422] tipc: Resetting bearer [ 351.363950][T16436] delete_channel: no stack [ 351.488490][T16443] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 351.516347][T16337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.531025][T16337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.544808][T16337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.576037][T16337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.732336][T16337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.757743][T16337] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.767528][T16420] tipc: Resetting bearer [ 351.795762][T16420] tipc: Disabling bearer [ 351.849529][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.856797][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.886252][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.893500][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.405653][T16337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.582882][T16337] veth0_vlan: entered promiscuous mode [ 352.618509][T16337] veth1_vlan: entered promiscuous mode [ 352.668839][T16337] veth0_macvtap: entered promiscuous mode [ 352.693390][T16337] veth1_macvtap: entered promiscuous mode [ 352.724291][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.737177][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.878890][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.901131][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.928185][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.966418][T16506] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 352.983542][ T5843] Bluetooth: hci3: command tx timeout [ 353.003083][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.071596][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.093308][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.126743][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.147351][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.257222][T16518] __nla_validate_parse: 9 callbacks suppressed [ 353.257240][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'. [ 353.279349][T16520] IPVS: Unknown mcast interface: syzkaller1 [ 353.315117][T16521] IPVS: Unknown mcast interface: syzkaller1 [ 353.368106][T16524] !: renamed from dummy0 (while UP) [ 353.604659][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 353.657014][T16538] IPVS: Unknown mcast interface: rose0 [ 353.780519][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3088'. [ 353.789465][T16546] bridge_slave_1: left allmulticast mode [ 353.825344][T16546] bridge_slave_1: left promiscuous mode [ 353.835747][T16546] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.836554][T16554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3092'. [ 353.855877][T16546] bridge_slave_0: left allmulticast mode [ 353.865041][T16546] bridge_slave_0: left promiscuous mode [ 353.871077][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.950164][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3093'. [ 354.134979][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'. [ 354.266194][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3098'. [ 354.485809][T16578] syzkaller0: entered promiscuous mode [ 354.492606][T16578] syzkaller0: entered allmulticast mode [ 354.547972][T16581] lo speed is unknown, defaulting to 1000 [ 354.931000][T16604] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3104'. [ 355.017778][T16611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.056187][ T5832] Bluetooth: hci3: command tx timeout [ 355.183698][T16621] netlink: 'syz.0.3108': attribute type 3 has an invalid length. [ 355.192841][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 355.204515][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 355.253530][T16623] netlink: zone id is out of range [ 355.525906][T16637] netlink: 'syz.6.3116': attribute type 21 has an invalid length. [ 355.536849][T16637] netlink: 'syz.6.3116': attribute type 22 has an invalid length. [ 355.547115][T16637] netlink: 'syz.6.3116': attribute type 23 has an invalid length. [ 355.555221][T16637] netlink: 'syz.6.3116': attribute type 25 has an invalid length. [ 355.630718][T16632] veth3: entered promiscuous mode [ 355.784704][T16644] netlink: 'syz.2.3118': attribute type 9 has an invalid length. [ 355.820537][T16646] netlink: 'syz.6.3119': attribute type 32 has an invalid length. [ 355.845635][T16644] gretap1: entered promiscuous mode [ 355.851803][T16644] gretap1: entered allmulticast mode [ 355.894864][T16646] bond2: option coupled_control: invalid value (40) [ 355.905333][T16646] bond2 (unregistering): Released all slaves [ 355.995639][T16652] syzkaller1: entered promiscuous mode [ 356.001454][T16652] syzkaller1: entered allmulticast mode [ 356.266797][T16668] IPVS: Unknown mcast interface: netpci0 [ 356.683225][T16698] syzkaller0: entered promiscuous mode [ 356.688844][T16698] syzkaller0: entered allmulticast mode [ 356.858944][T16707] openvswitch: netlink: Key type 1040 is out of range max 32 [ 357.120547][T16728] netlink: 'syz.1.3146': attribute type 2 has an invalid length. [ 357.130501][ T5832] Bluetooth: hci3: command tx timeout [ 357.370281][T16753] IPVS: set_ctl: invalid protocol: 1 172.30.0.7:20002 [ 357.397896][T16757] net veth1_virt_wifi .: renamed from virt_wifi0 [ 357.415422][T16755] tipc: Started in network mode [ 357.421815][T16755] tipc: Node identity 82b17ba1e24a, cluster identity 4711 [ 357.429119][T16755] tipc: Enabled bearer , priority 0 [ 357.464454][T16755] syzkaller0: entered promiscuous mode [ 357.472704][T16755] syzkaller0: entered allmulticast mode [ 357.534908][T16755] tipc: Resetting bearer [ 357.550716][T16754] tipc: Resetting bearer [ 357.583332][T16754] tipc: Disabling bearer [ 357.759854][T16776] sctp: [Deprecated]: syz.0.3159 (pid 16776) Use of int in max_burst socket option. [ 357.759854][T16776] Use struct sctp_assoc_value instead [ 358.405320][T16799] tipc: Enabled bearer , priority 0 [ 358.415052][T16799] syzkaller0: entered allmulticast mode [ 358.424313][T16799] syzkaller0: mtu less than device minimum [ 358.447488][T16798] tipc: Disabling bearer [ 358.456411][T16796] lo speed is unknown, defaulting to 1000 [ 359.010929][T16829] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 359.078378][T16835] __nla_validate_parse: 17 callbacks suppressed [ 359.078395][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3174'. [ 359.191959][T16829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 359.220249][ T5832] Bluetooth: hci3: command tx timeout [ 359.559220][T16850] IPv6: sit1: Disabled Multicast RS [ 359.585392][T16850] sit1: entered allmulticast mode [ 360.387930][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.409159][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.461329][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.531116][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.702664][T16920] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 360.711519][T16920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.754866][T16922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.857566][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3203'. [ 360.872153][T16929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 361.429980][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3214'. [ 361.894212][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 361.927352][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 361.949140][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 361.969050][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 362.032895][T16993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.139185][T17003] IPVS: length: 214 != 24 [ 362.147288][T17001] netlink: 'syz.3.3223': attribute type 4 has an invalid length. [ 362.162234][T17005] netlink: 'syz.0.3220': attribute type 8 has an invalid length. [ 362.185055][T17001] netlink: 'syz.3.3223': attribute type 4 has an invalid length. [ 362.417674][T17011] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3226'. [ 362.586396][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 362.618291][T17029] bond1: Invalid ad_actor_system MAC address. [ 362.625690][T17029] bond1: option ad_actor_system: invalid value (1471) [ 362.635572][T17029] bond1 (unregistering): Released all slaves [ 363.014304][T17044] tipc: Enabled bearer , priority 0 [ 363.028893][T17043] tipc: Disabling bearer [ 363.141042][T17057] Cannot find set identified by id 0 to match [ 363.345978][T17074] netlink: 'syz.6.3244': attribute type 1 has an invalid length. [ 363.360163][T17074] netlink: 'syz.6.3244': attribute type 4 has an invalid length. [ 363.481128][T17080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.493173][T17080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.514873][T17084] netlink: 'syz.6.3247': attribute type 1 has an invalid length. [ 363.522915][T17080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.538596][T17080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.654091][T17086] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 363.670909][T17086] tipc: Enabled bearer , priority 10 [ 363.701457][T17089] lo speed is unknown, defaulting to 1000 [ 364.061553][T17109] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 364.247456][T17116] __nla_validate_parse: 32 callbacks suppressed [ 364.247476][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 364.382299][T17122] netlink: 'syz.6.3250': attribute type 4 has an invalid length. [ 364.496420][T17123] tipc: Enabled bearer , priority 0 [ 364.521173][T17123] syzkaller0: entered promiscuous mode [ 364.526677][T17123] syzkaller0: entered allmulticast mode [ 364.579506][T17123] tipc: Resetting bearer [ 364.588025][T17117] tipc: Resetting bearer [ 364.630472][T17117] tipc: Disabling bearer [ 364.790410][ T8925] tipc: Node number set to 1627093921 [ 364.879106][T17141] xt_TCPMSS: Only works on TCP SYN packets [ 364.916471][T17141] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3265'. [ 364.955779][T17141] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 364.965006][T17145] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3266'. [ 364.977999][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3266'. [ 365.240915][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 365.298325][T17161] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 365.449242][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3270'. [ 365.497024][T17171] tipc: Enabling of bearer rejected, media not registered [ 365.804750][T17187] netlink: 'syz.6.3279': attribute type 2 has an invalid length. [ 365.845017][T17187] : entered promiscuous mode [ 365.860861][T17189] sch_fq: defrate 0 ignored. [ 365.902046][T17194] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.3274'. [ 365.907491][T17196] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3282'. [ 365.912791][T17194] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.3274'. [ 366.128423][T17215] wg2: entered allmulticast mode [ 366.187085][T17219] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 366.268899][T17223] netlink: 'syz.3.3292': attribute type 10 has an invalid length. [ 366.280119][T17223] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 366.290854][T17223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.306803][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 366.339457][T17223] xt_l2tp: invalid flags combination: 8 [ 366.378396][T17224] team0: Port device team_slave_0 removed [ 366.423999][T17231] netlink: 'syz.3.3294': attribute type 13 has an invalid length. [ 366.433813][T17231] gretap0: refused to change device tx_queue_len [ 366.441625][T17231] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 366.613212][T17234] netlink: 'syz.3.3294': attribute type 13 has an invalid length. [ 366.641393][T17234] gretap0: refused to change device tx_queue_len [ 366.648203][T17234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.461446][T17304] netlink: 'syz.0.3315': attribute type 23 has an invalid length. [ 368.323131][T17369] sctp: [Deprecated]: syz.3.3334 (pid 17369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.323131][T17369] Use struct sctp_sack_info instead [ 368.462856][T17374] ip6t_srh: unknown srh match flags 5F28 [ 368.779352][T17396] netlink: 'syz.0.3344': attribute type 11 has an invalid length. [ 369.394524][T17438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.579332][T17453] __nla_validate_parse: 11 callbacks suppressed [ 369.579350][T17453] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3363'. [ 369.629171][T17456] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 369.730321][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 369.766575][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3369'. [ 369.807506][T17470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3368'. [ 369.829146][T17471] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3370'. [ 369.864102][T17464] hsr_slave_1 (unregistering): left promiscuous mode [ 369.903038][T17466] syzkaller1: entered promiscuous mode [ 369.913435][T17466] syzkaller1: entered allmulticast mode [ 370.400590][T17501] netlink: 'syz.3.3378': attribute type 33 has an invalid length. [ 370.415767][T17505] syzkaller0: entered promiscuous mode [ 370.422752][T17505] syzkaller0: entered allmulticast mode [ 370.429700][T17501] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3378'. [ 370.482483][T17514] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 370.619469][T17513] bond1 (unregistering): Released all slaves [ 370.678958][T17515] ip6tnl1: entered promiscuous mode [ 370.712221][T17515] ip6tnl1: entered allmulticast mode [ 370.727979][T17532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3387'. [ 370.859407][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 370.872922][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 370.887781][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'. [ 371.058957][T17553] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 371.436137][T17579] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 371.452735][T17579] bond2 (unregistering): Released all slaves [ 372.029741][T17626] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 372.059129][T17624] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 372.132468][T17637] netlink: 'syz.6.3421': attribute type 8 has an invalid length. [ 372.543339][T17667] netlink: 'syz.0.3432': attribute type 29 has an invalid length. [ 373.005246][T17705] geneve2: entered promiscuous mode [ 373.012590][T17705] geneve2: entered allmulticast mode [ 373.040669][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 373.057308][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 373.132793][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 373.163781][T17710] netlink: 'syz.2.3445': attribute type 4 has an invalid length. [ 373.174771][T17715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.408138][T17731] syzkaller0: entered promiscuous mode [ 373.414152][T17731] syzkaller0: entered allmulticast mode [ 373.548484][T17737] veth0_macvtap: left promiscuous mode [ 373.734513][T17746] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 373.745920][T17748] syzkaller0: entered promiscuous mode [ 373.751655][T17748] syzkaller0: entered allmulticast mode [ 373.937990][T17761] syzkaller0: entered promiscuous mode [ 373.949331][T17761] syzkaller0: entered allmulticast mode [ 374.208150][T17786] delete_channel: no stack [ 374.412356][T17789] xt_CT: No such helper "pptp" [ 374.634648][T17705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.656039][T17812] __nla_validate_parse: 18 callbacks suppressed [ 374.656058][T17812] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3474'. [ 374.766929][T17705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.790926][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3478'. [ 374.855979][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 374.867682][T17826] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 374.913032][T17705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 375.007936][T17836] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 375.152455][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.160411][T17843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3483'. [ 375.244159][T17848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3485'. [ 375.272366][ T1084] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.298983][ T1084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.352003][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.456963][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3488'. [ 375.474105][T17860] netlink: 'syz.6.3489': attribute type 6 has an invalid length. [ 375.593373][T17866] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3491'. [ 375.859578][T17889] netlink: 'syz.3.3497': attribute type 9 has an invalid length. [ 375.867958][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 375.898725][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.907681][T17889] netlink: 'syz.3.3497': attribute type 9 has an invalid length. [ 375.912371][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.924113][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 375.950199][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.997946][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.212657][T17911] ip6t_REJECT: ECHOREPLY is not supported [ 376.252268][T17915] syz.0.3507: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.288068][T17915] CPU: 1 UID: 0 PID: 17915 Comm: syz.0.3507 Not tainted syzkaller #0 PREEMPT(full) [ 376.288118][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.288138][T17915] Call Trace: [ 376.288145][T17915] [ 376.288153][T17915] dump_stack_lvl+0x189/0x250 [ 376.288185][T17915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.288210][T17915] ? __pfx__printk+0x10/0x10 [ 376.288229][T17915] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 376.288253][T17915] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 376.288280][T17915] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 376.288307][T17915] warn_alloc+0x214/0x310 [ 376.288332][T17915] ? stack_depot_save_flags+0x40/0x860 [ 376.288361][T17915] ? __pfx_warn_alloc+0x10/0x10 [ 376.288389][T17915] ? kasan_save_track+0x3e/0x80 [ 376.288410][T17915] ? __kasan_kmalloc+0x93/0xb0 [ 376.288435][T17915] ? xsk_setsockopt+0x4dc/0x8d0 [ 376.288452][T17915] ? do_sock_setsockopt+0x17c/0x1b0 [ 376.288478][T17915] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 376.288502][T17915] ? do_syscall_64+0xfa/0xfa0 [ 376.288521][T17915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.288645][T17915] __vmalloc_node_range_noprof+0x125/0x12d0 [ 376.288721][T17915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.288752][T17915] ? __kasan_kmalloc+0x93/0xb0 [ 376.288794][T17915] vmalloc_user_noprof+0xad/0xf0 [ 376.288820][T17915] ? xskq_create+0xbf/0x170 [ 376.288843][T17915] xskq_create+0xbf/0x170 [ 376.288865][T17915] xsk_init_queue+0xb0/0x110 [ 376.288889][T17915] xsk_setsockopt+0x4dc/0x8d0 [ 376.288912][T17915] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.288934][T17915] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.288959][T17915] ? aa_sock_opt_perm+0xff/0x1b0 [ 376.288989][T17915] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 376.289006][T17915] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.289033][T17915] do_sock_setsockopt+0x17c/0x1b0 [ 376.289070][T17915] __x64_sys_setsockopt+0x13f/0x1b0 [ 376.289103][T17915] do_syscall_64+0xfa/0xfa0 [ 376.289124][T17915] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.289147][T17915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.289170][T17915] ? clear_bhb_loop+0x60/0xb0 [ 376.289209][T17915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.289241][T17915] RIP: 0033:0x7fb618d8efc9 [ 376.289289][T17915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.289307][T17915] RSP: 002b:00007fb619be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.289346][T17915] RAX: ffffffffffffffda RBX: 00007fb618fe5fa0 RCX: 00007fb618d8efc9 [ 376.289361][T17915] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 376.289378][T17915] RBP: 00007fb618e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 376.289390][T17915] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.289402][T17915] R13: 00007fb618fe6038 R14: 00007fb618fe5fa0 R15: 00007fffbba33cc8 [ 376.289437][T17915] [ 376.289451][T17915] Mem-Info: [ 376.338314][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 376.406369][T17923] netlink: 'syz.1.3508': attribute type 8 has an invalid length. [ 376.409449][T17915] active_anon:4549 inactive_anon:0 isolated_anon:0 [ 376.409449][T17915] active_file:3205 inactive_file:39987 isolated_file:0 [ 376.409449][T17915] unevictable:768 dirty:66 writeback:0 [ 376.409449][T17915] slab_reclaimable:13368 slab_unreclaimable:136316 [ 376.409449][T17915] mapped:39266 shmem:1356 pagetables:1093 [ 376.409449][T17915] sec_pagetables:0 bounce:0 [ 376.409449][T17915] kernel_misc_reclaimable:0 [ 376.409449][T17915] free:1268391 free_pcp:14118 free_cma:0 [ 376.762557][T17915] Node 0 active_anon:17996kB inactive_anon:0kB active_file:12820kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165164kB dirty:260kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15128kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 376.807651][T17933] syzkaller0: entered promiscuous mode [ 376.841791][T17933] syzkaller0: entered allmulticast mode [ 376.874814][T17915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.016006][T17915] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.072339][T17915] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 377.078355][T17915] Node 0 DMA32 free:1162552kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18276kB inactive_anon:0kB active_file:12820kB inactive_file:159760kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:39528kB local_pcp:21036kB free_cma:0kB [ 377.135615][T17915] lowmem_reserve[]: 0 0 0 0 0 [ 377.140862][T17915] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.173941][T17915] lowmem_reserve[]: 0 0 0 0 0 [ 377.179484][T17915] Node 1 Normal free:3893888kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15424kB local_pcp:9824kB free_cma:0kB [ 377.222569][T17915] lowmem_reserve[]: 0 0 0 0 0 [ 377.228435][T17915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.293717][T17915] Node 0 DMA32: 596*4kB (UME) 539*8kB (UM) 307*16kB (UME) 143*32kB (ME) 79*64kB (UME) 31*128kB (M) 22*256kB (UM) 9*512kB (UME) 7*1024kB (UM) 6*2048kB (UME) 270*4096kB (M) = 1160824kB [ 377.329361][T17915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.379577][T17955] syzkaller0: entered promiscuous mode [ 377.397120][T17955] syzkaller0: entered allmulticast mode [ 377.416818][T17958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.442491][T17915] Node 1 Normal: 160*4kB (UME) 44*8kB (UME) 42*16kB (UME) 134*32kB (UME) 43*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3893888kB [ 377.472458][T17963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.505595][T17915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.617301][T17915] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 377.680723][T17915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.723757][T17915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.756366][T17915] 44547 total pagecache pages [ 377.784184][T17915] 0 pages in swap cache [ 377.794858][T17915] Free swap = 124996kB [ 377.808103][T17915] Total swap = 124996kB [ 377.823790][T17915] 2097051 pages RAM [ 377.837956][T17915] 0 pages HighMem/MovableOnly [ 377.861245][T17915] 424107 pages reserved [ 377.877971][T17915] 0 pages cma reserved [ 378.578475][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.424518][T17968] netlink: 'syz.1.3524': attribute type 21 has an invalid length. [ 379.425697][T17969] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 379.456969][T17985] netlink: 'syz.0.3531': attribute type 2 has an invalid length. [ 379.557179][ T1150] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.590984][T17968] netlink: 'syz.1.3524': attribute type 21 has an invalid length. [ 379.598993][ T1150] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.619908][ T1150] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.628662][ T1150] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.700977][T18002] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 379.756453][T18007] __nla_validate_parse: 6 callbacks suppressed [ 379.756470][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3537'. [ 379.785968][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3540'. [ 380.060342][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3546'. [ 380.069459][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3546'. [ 380.078823][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 380.089308][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 380.093476][T18030] netlink: 'syz.1.3546': attribute type 15 has an invalid length. [ 380.133938][T18029] netlink: 'syz.1.3546': attribute type 15 has an invalid length. [ 380.156475][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'. [ 380.201177][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'. [ 380.229668][T18034] : entered promiscuous mode [ 380.363317][T18043] netlink: 'syz.0.3552': attribute type 11 has an invalid length. [ 381.964296][T18043] syzkaller1: entered promiscuous mode [ 381.970080][T18043] syzkaller1: entered allmulticast mode [ 382.232655][T18069] netlink: 'syz.6.3561': attribute type 1 has an invalid length. [ 382.241073][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3561'. [ 382.356723][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 382.379154][T18080] syzkaller0: entered promiscuous mode [ 382.388752][T18080] syzkaller0: entered allmulticast mode [ 382.528472][T18088] netlink: 'syz.2.3567': attribute type 11 has an invalid length. [ 382.716131][T18099] x_tables: duplicate underflow at hook 2 [ 382.868812][T18102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.902432][T18118] unsupported nla_type 776 [ 383.255528][T18139] veth0: entered promiscuous mode [ 383.261860][T18139] veth0: left promiscuous mode [ 383.318716][ T5942] IPVS: starting estimator thread 0... [ 383.407721][T18141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.415543][T18144] IPVS: using max 34 ests per chain, 81600 per kthread [ 383.499450][T18156] nbd: must specify a device to reconfigure [ 383.529638][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.542070][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.553597][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.562832][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.635348][T18167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.721231][T18169] syz_tun: entered allmulticast mode [ 383.744929][T18169] pimreg: entered allmulticast mode [ 383.787143][T18168] syz_tun: left allmulticast mode [ 383.792753][T18168] pimreg: left allmulticast mode [ 384.085926][T18195] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 384.099721][T18195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.805945][T18253] __nla_validate_parse: 8 callbacks suppressed [ 384.805964][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 385.200408][T18284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3628'. [ 385.237850][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3628'. [ 385.965045][T18331] netlink: 'syz.6.3646': attribute type 4 has an invalid length. [ 386.026494][T18334] sctp: [Deprecated]: syz.0.3647 (pid 18334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.026494][T18334] Use struct sctp_sack_info instead [ 386.032703][T18335] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.296417][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 386.438473][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3655'. [ 386.448961][T18355] syzkaller0: entered promiscuous mode [ 386.455045][T18355] syzkaller0: entered allmulticast mode [ 386.618281][T18370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3658'. [ 386.747010][T18378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.883550][T18385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3665'. [ 386.925198][T18381] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 386.940041][T18381] bond1: entered promiscuous mode [ 386.945105][T18381] bond1: entered allmulticast mode [ 386.951160][T18381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.529601][ T1084] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x66 [ 387.667074][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3681'. [ 388.077682][T18467] : renamed from bridge_slave_0 (while UP) [ 388.097339][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3689'. [ 388.108211][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3689'. [ 388.325905][T18480] batadv0: entered promiscuous mode [ 388.361976][T18480] bond0: entered promiscuous mode [ 388.367945][T18480] gretap1: entered promiscuous mode [ 388.377670][T18480] debugfs: 'hsr1' already exists in 'hsr' [ 388.387323][T18480] Cannot create hsr debugfs directory [ 388.393636][T18480] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 388.407099][T18480] hsr1: entered allmulticast mode [ 388.412466][T18480] batadv0: entered allmulticast mode [ 388.417914][T18480] bond0: entered allmulticast mode [ 388.424077][T18480] gretap1: entered allmulticast mode [ 388.430421][T18480] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 388.440767][T18488] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 388.821013][T18512] syzkaller0: entered promiscuous mode [ 388.841069][T18512] syzkaller0: entered allmulticast mode [ 388.881212][T18512] netlink: 'syz.2.3706': attribute type 3 has an invalid length. [ 390.554995][T18540] kthread_run failed with err -4 [ 390.586943][T18545] 8021q: VLANs not supported on ip6gre0 [ 390.703189][T18555] tipc: Enabled bearer , priority 0 [ 390.717603][T18555] syzkaller0: entered promiscuous mode [ 390.726728][T18555] syzkaller0: entered allmulticast mode [ 390.857605][T18551] tipc: Resetting bearer [ 390.926753][T18551] tipc: Disabling bearer [ 390.972648][T18573] __nla_validate_parse: 2 callbacks suppressed [ 390.972666][T18573] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3722'. [ 391.142017][T18583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.149263][T18583] IPv6: NLM_F_CREATE should be set when creating new route [ 391.157441][T18580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.162805][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 391.170422][T18586] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3723'. [ 391.255855][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.263627][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.432902][T18579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.447991][T18579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.589707][ T1084] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.599104][ T1084] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.613943][ T1084] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.623620][ T1084] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.634563][T18594] tipc: Enabled bearer , priority 0 [ 391.647741][ T1084] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.679076][ T1084] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.701919][T18592] tipc: Disabling bearer [ 391.712784][ T1084] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.725951][ T1084] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.736352][T18599] tipc: Enabled bearer , priority 0 [ 391.765455][T18599] tipc: Disabling bearer [ 391.782868][T18606] bridge_slave_0: entered promiscuous mode [ 391.804900][T18607] netlink: 'syz.1.3730': attribute type 11 has an invalid length. [ 392.015919][T18617] netlink: 5815 bytes leftover after parsing attributes in process `syz.6.3735'. [ 392.017723][T18619] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3736'. [ 392.025528][T18617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.196497][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 392.207500][T18629] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3738'. [ 392.226564][T18623] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.234310][T18623] bridge0: port 1() entered disabled state [ 392.274556][T18623] bond0: left allmulticast mode [ 392.279211][T18633] netlink: 'syz.2.3741': attribute type 28 has an invalid length. [ 392.279528][T18623] bond_slave_0: left allmulticast mode [ 392.299193][T18623] bond_slave_1: left allmulticast mode [ 392.304989][T18623] dummy0: left allmulticast mode [ 392.435802][T18623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.455549][T18623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.542785][T18623] bond1: left allmulticast mode [ 392.555100][T18623] vlan2: left promiscuous mode [ 392.560604][T18623] bridge0: left promiscuous mode [ 392.566669][T18623] geneve2: left promiscuous mode [ 392.572309][T18623] geneve2: left allmulticast mode [ 392.643746][T18629] geneve3: entered promiscuous mode [ 392.648974][T18629] geneve3: entered allmulticast mode [ 392.663503][ T1109] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.674703][ T1109] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.684792][ T1109] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.705273][ T1109] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.852677][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3749'. [ 392.864695][T18651] netlink: 'syz.1.3749': attribute type 2 has an invalid length. [ 392.874698][T18651] netlink: 'syz.1.3749': attribute type 1 has an invalid length. [ 392.931819][T18651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.959923][T18659] bond3: (slave geneve2): making interface the new active one [ 392.972956][T18659] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 392.984532][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 392.995755][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 393.014478][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 393.043164][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 393.066387][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 393.182394][T18674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3754'. [ 393.201478][T18674] netlink: 'syz.0.3754': attribute type 1 has an invalid length. [ 393.235547][T18674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.363530][T18683] bond4: (slave veth3): Enslaving as an active interface with a down link [ 393.386657][T18688] nbd: couldn't find a device at index 0 [ 393.396529][T18688] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 393.405641][T18688] netlink: 'syz.2.3758': attribute type 2 has an invalid length. [ 393.413615][T18688] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 393.444320][T18685] vlan3: entered allmulticast mode [ 393.449537][T18685] bond4: entered allmulticast mode [ 393.459328][T18685] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 394.001375][T18728] netlink: 'syz.1.3771': attribute type 9 has an invalid length. [ 394.009386][T18728] netlink: 'syz.1.3771': attribute type 7 has an invalid length. [ 394.028912][T18724] syzkaller0: entered promiscuous mode [ 394.030471][T18728] netlink: 'syz.1.3771': attribute type 8 has an invalid length. [ 394.051220][T18724] syzkaller0: entered allmulticast mode [ 394.059186][T18729] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 395.775499][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.797385][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.808948][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.817598][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.825427][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.903744][T18754] lo speed is unknown, defaulting to 1000 [ 396.022366][T18759] __nla_validate_parse: 4 callbacks suppressed [ 396.022384][T18759] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3778'. [ 396.080919][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3780'. [ 396.091575][T18764] tipc: Enabled bearer , priority 0 [ 396.098336][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.187634][T18761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.281396][T18764] syzkaller0: entered promiscuous mode [ 396.286990][T18764] syzkaller0: entered allmulticast mode [ 396.304781][T18772] tipc: Resetting bearer [ 396.324390][T18770] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3783'. [ 396.343485][T18762] tipc: Resetting bearer [ 396.361551][T18770] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3783'. [ 396.428789][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 396.643487][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 397.797075][T18762] tipc: Disabling bearer [ 397.932893][ T5843] Bluetooth: hci4: command tx timeout [ 397.976372][T18793] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3787'. [ 398.103828][T18801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3789'. [ 398.165731][T18801] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 398.197243][T18804] tipc: Cannot configure node identity twice [ 398.288289][T18801] bond5 (unregistering): Released all slaves [ 398.416509][T18810] ip6tnl2: entered promiscuous mode [ 398.429946][T18810] ip6tnl2: entered allmulticast mode [ 398.590332][T18819] gre1: entered promiscuous mode [ 398.595394][T18819] gre1: entered allmulticast mode [ 398.611367][T18823] tipc: Enabled bearer , priority 0 [ 398.618421][T18818] syzkaller0: entered promiscuous mode [ 398.627689][T18818] syzkaller0: entered allmulticast mode [ 398.636102][T18754] chnl_net:caif_netlink_parms(): no params data found [ 398.651186][T18818] 8021q: VLANs not supported on ipvlan0 [ 398.712930][T18818] tipc: Resetting bearer [ 398.732790][T18814] tipc: Resetting bearer [ 398.795176][T18814] tipc: Disabling bearer [ 399.173473][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.212556][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.220890][T18754] bridge_slave_0: entered allmulticast mode [ 399.243940][T18754] bridge_slave_0: entered promiscuous mode [ 399.283081][T18754] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.302906][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.313403][T18863] netlink: 'syz.1.3803': attribute type 6 has an invalid length. [ 399.320608][T18754] bridge_slave_1: entered allmulticast mode [ 399.327868][T18865] netlink: 'syz.6.3804': attribute type 21 has an invalid length. [ 399.337581][T18754] bridge_slave_1: entered promiscuous mode [ 399.342292][T18865] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3804'. [ 399.403722][T18862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.412304][T18862] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.425153][T18862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.441618][T18865] netlink: 'syz.6.3804': attribute type 5 has an invalid length. [ 399.480468][T18865] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3804'. [ 399.544663][T18754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.553615][T18875] netlink: 'syz.0.3805': attribute type 1 has an invalid length. [ 399.568298][T18754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.646259][T18875] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 399.652672][T18754] team0: Port device team_slave_0 added [ 399.684025][T18754] team0: Port device team_slave_1 added [ 399.805757][T18754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.819107][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.847112][T18754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.921219][T18754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.930390][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.959010][T18754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.002945][T18890] netlink: 'syz.6.3811': attribute type 2 has an invalid length. [ 400.011836][ T5843] Bluetooth: hci4: command tx timeout [ 400.133002][T18890] 9: entered promiscuous mode [ 400.145432][T18754] hsr_slave_0: entered promiscuous mode [ 400.168986][T18754] hsr_slave_1: entered promiscuous mode [ 400.176190][T18754] debugfs: 'hsr0' already exists in 'hsr' [ 400.190202][T18754] Cannot create hsr debugfs directory [ 400.757542][T18754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.774964][T18920] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 400.775610][T18754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.843513][T18928] netlink: 'syz.0.3822': attribute type 7 has an invalid length. [ 400.854921][T18754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.894184][T18754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.212153][T18754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.247089][T18754] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.302912][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.310109][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.356825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.364051][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.456691][T18972] __nla_validate_parse: 6 callbacks suppressed [ 401.456709][T18972] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3832'. [ 401.552725][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 401.568113][T18974] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3833'. [ 401.588059][T18974] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3833'. [ 401.639968][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3833'. [ 401.684233][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3833'. [ 401.888502][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 401.908458][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 401.926922][T18992] netlink: 'syz.1.3837': attribute type 8 has an invalid length. [ 401.948950][T18994] netlink: 'syz.1.3837': attribute type 8 has an invalid length. [ 401.981887][T18995] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.084571][T18754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.090749][ T5843] Bluetooth: hci4: command tx timeout [ 402.386703][T19014] dvmrp0: entered allmulticast mode [ 402.401331][T19014] dvmrp0: left allmulticast mode [ 402.423240][T19016] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3844'. [ 402.460262][T19016] netlink: 'syz.1.3844': attribute type 10 has an invalid length. [ 402.539019][T19016] team0: Port device dummy0 added [ 402.539505][T19017] netlink: 'syz.1.3844': attribute type 10 has an invalid length. [ 402.661274][T19017] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 402.707838][T19017] team0: Failed to send options change via netlink (err -105) [ 402.717087][T19017] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 402.728113][T19017] team0: Port device dummy0 removed [ 402.744846][T19017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 402.851668][T19038] IPVS: set_ctl: invalid protocol: 171 0.0.0.0:20001 [ 402.862413][T18754] veth0_vlan: entered promiscuous mode [ 402.911631][T18754] veth1_vlan: entered promiscuous mode [ 403.017267][T19049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.057307][T18754] veth0_macvtap: entered promiscuous mode [ 403.076819][T18754] veth1_macvtap: entered promiscuous mode [ 403.136334][T18754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.166291][T18754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.188292][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3853'. [ 403.204619][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.227689][T19059] tipc: Started in network mode [ 403.234434][T19059] tipc: Node identity , cluster identity 4711 [ 403.245078][T19059] tipc: Failed to obtain node identity [ 403.251110][T19059] tipc: Enabling of bearer rejected, failed to enable media [ 403.260418][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.295152][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.323635][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.418899][T19061] lo speed is unknown, defaulting to 1000 [ 403.483315][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.505751][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.602659][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.620532][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.739461][T19077] bridge0: port 1(ipvlan2) entered blocking state [ 403.760758][T19077] bridge0: port 1(ipvlan2) entered disabled state [ 403.767477][T19077] ipvlan2: entered allmulticast mode [ 403.781090][T19077] bridge0: entered allmulticast mode [ 403.789324][T19077] ipvlan2: left allmulticast mode [ 403.794542][T19077] bridge0: left allmulticast mode [ 403.818987][T19084] sctp: [Deprecated]: syz.1.3863 (pid 19084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.818987][T19084] Use struct sctp_sack_info instead [ 403.846288][T19085] sctp: [Deprecated]: syz.1.3863 (pid 19085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.846288][T19085] Use struct sctp_sack_info instead [ 403.973576][T19091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.985435][T19089] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 404.174319][ T5843] Bluetooth: hci4: command tx timeout [ 404.199993][T19102] bridge0: entered promiscuous mode [ 404.205769][T19102] macsec1: entered promiscuous mode [ 404.211975][T19102] macsec1: entered allmulticast mode [ 404.217348][T19102] bridge0: entered allmulticast mode [ 404.225602][T19102] bridge0: port 3(macsec1) entered blocking state [ 404.236667][T19102] bridge0: port 3(macsec1) entered disabled state [ 404.253727][T19102] bridge0: left allmulticast mode [ 404.259223][T19102] bridge0: left promiscuous mode [ 404.668270][T19118] xt_policy: output policy not valid in PREROUTING and INPUT [ 404.696202][T19128] validate_nla: 1 callbacks suppressed [ 404.696220][T19128] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 404.727046][T19131] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 404.770841][T19132] netlink: 'syz.7.3874': attribute type 83 has an invalid length. [ 404.842000][T19128] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.901284][T19134] veth5: entered promiscuous mode [ 404.915694][T19134] bond5: (slave veth5): Enslaving as an active interface with a down link [ 405.127607][T19159] netlink: 'syz.1.3883': attribute type 1 has an invalid length. [ 405.169367][T19159] bond6: entered promiscuous mode [ 405.175855][T19159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.315886][T19169] netlink: 'syz.2.3885': attribute type 4 has an invalid length. [ 405.488084][T19179] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 405.504262][T19181] batadv0: entered promiscuous mode [ 405.516683][T19181] bond0: entered promiscuous mode [ 405.522868][T19181] bond_slave_0: entered promiscuous mode [ 405.530481][T19179] netlink: 'syz.0.3890': attribute type 3 has an invalid length. [ 405.533048][T19181] bond_slave_1: entered promiscuous mode [ 405.545833][T19181] dummy0: entered promiscuous mode [ 405.555474][T19181] debugfs: 'hsr1' already exists in 'hsr' [ 405.561854][T19181] Cannot create hsr debugfs directory [ 405.567763][T19181] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 405.578826][T19181] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 405.591781][T19181] hsr1: entered allmulticast mode [ 405.596973][T19181] batadv0: entered allmulticast mode [ 405.602977][T19181] bond0: entered allmulticast mode [ 405.627765][T19181] bond_slave_0: entered allmulticast mode [ 405.634008][T19181] bond_slave_1: entered allmulticast mode [ 405.640037][T19181] dummy0: entered allmulticast mode [ 405.645929][T19181] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.667653][T19175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.707027][T19193] netlink: 'syz.7.3893': attribute type 1 has an invalid length. [ 406.081392][ T8925] IPVS: starting estimator thread 0... [ 406.157089][T19223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.181696][T19218] IPVS: using max 27 ests per chain, 64800 per kthread [ 406.242689][T19223] netlink: 'syz.7.3903': attribute type 14 has an invalid length. [ 406.319734][T19223] netlink: 'syz.7.3903': attribute type 14 has an invalid length. [ 406.320587][ T1109] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.484469][ T1109] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.516559][ T1109] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.555280][ T1109] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.006704][T19278] 8021q: VLANs not supported on ip_vti0 [ 407.308657][T19300] pim6reg: entered allmulticast mode [ 407.454388][T19307] __nla_validate_parse: 12 callbacks suppressed [ 407.454405][T19307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3928'. [ 407.538993][T19309] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3929'. [ 407.606149][T19314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3930'. [ 407.631613][T19314] syzkaller0: entered promiscuous mode [ 407.637107][T19314] syzkaller0: entered allmulticast mode [ 407.801260][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 407.851876][T19323] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3934'. [ 408.244190][T19349] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 408.310998][T19356] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 408.611388][T19377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3952'. [ 408.671852][T19379] tipc: Enabled bearer , priority 0 [ 408.695169][T19379] syzkaller0: entered promiscuous mode [ 408.710409][T19379] syzkaller0: entered allmulticast mode [ 408.736334][T19379] tipc: Resetting bearer [ 408.764111][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 408.779708][T19376] tipc: Resetting bearer [ 408.793746][T19392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3956'. [ 408.813987][T19376] tipc: Disabling bearer [ 408.814110][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 408.832347][T19393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3956'. [ 408.906589][T19394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.924402][T19394] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 408.935618][T19400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.993579][T19394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.004762][T19394] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 409.022062][T19394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.028233][T19394] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 409.121983][T19407] --map-set only usable from mangle table [ 409.386601][T19426] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 409.405099][T19426] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 409.424358][T19426] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 409.515695][ T36] syzkaller0: tun_net_xmit 76 [ 409.525523][ T36] syzkaller0: tun_net_xmit 48 [ 409.540155][ T8925] syzkaller0: tun_net_xmit 76 [ 409.547840][T19433] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 409.556114][T19433] syzkaller0: Linktype set failed because interface is up [ 409.570908][ T5942] syzkaller0: tun_net_xmit 76 [ 409.794266][T19447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.810846][ T5942] syzkaller0: tun_net_xmit 76 [ 411.257528][T19454] bridge_slave_1: left allmulticast mode [ 411.264499][T19454] bridge_slave_1: left promiscuous mode [ 411.270430][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.281765][T19454] bridge_slave_0: left allmulticast mode [ 411.287435][T19454] bridge_slave_0: left promiscuous mode [ 411.296830][T19454] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.609607][T19482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.673971][T19480] syzkaller0: entered promiscuous mode [ 411.679469][T19480] syzkaller0: entered allmulticast mode [ 411.705605][T19482] syz.0.3986 (19482) used greatest stack depth: 18328 bytes left [ 412.613088][T19548] __nla_validate_parse: 5 callbacks suppressed [ 412.613106][T19548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4005'. [ 412.729266][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'. [ 412.861877][T19558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4007'. [ 412.936518][T19564] bond2 (unregistering): Released all slaves [ 413.009375][T19573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4007'. [ 413.041184][T19576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4012'. [ 413.101332][T19576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4012'. [ 413.201514][T19581] validate_nla: 7 callbacks suppressed [ 413.201532][T19581] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 413.273900][T19581] bond2: (slave gretap2): making interface the new active one [ 413.282824][T19581] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 413.568594][T19604] bond3: option resend_igmp: invalid value (32767) [ 413.604302][T19604] bond3: option resend_igmp: allowed values 0 - 255 [ 413.656665][T19604] bond3 (unregistering): Released all slaves [ 414.027343][T19647] netlink: 'syz.0.4031': attribute type 3 has an invalid length. [ 414.028147][T19649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4035'. [ 414.048267][T19647] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4031'. [ 414.068814][T19646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'. [ 414.128905][T19646] tipc: Enabled bearer , priority 0 [ 414.183713][T19646] syzkaller0: entered promiscuous mode [ 414.191767][T19646] syzkaller0: entered allmulticast mode [ 414.198222][T19646] tipc: Resetting bearer [ 414.223284][T19643] tipc: Resetting bearer [ 414.385865][T19663] netlink: 'syz.1.4038': attribute type 1 has an invalid length. [ 414.396242][T19666] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4040'. [ 414.456949][T19672] netlink: 'syz.0.4039': attribute type 11 has an invalid length. [ 415.693169][ T31] INFO: task syz.5.2073:12950 blocked for more than 143 seconds. [ 415.701327][ T31] Not tainted syzkaller #0 [ 415.706266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.715080][ T31] task:syz.5.2073 state:D stack:25864 pid:12950 tgid:12949 ppid:11183 task_flags:0x400140 flags:0x00080002 [ 415.727254][ T31] Call Trace: [ 415.730914][ T31] [ 415.733875][ T31] __schedule+0x1798/0x4cc0 [ 415.738418][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.743432][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.748447][ T31] ? __pfx___schedule+0x10/0x10 [ 415.753364][ T31] ? schedule+0x91/0x360 [ 415.757686][ T31] schedule+0x165/0x360 [ 415.761902][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.767352][ T31] __mutex_lock+0x7e6/0x1350 [ 415.772593][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.777379][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 415.783198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.788224][ T31] ? __nlmsg_put+0xef/0x1b0 [ 415.792890][ T31] ? genlmsg_put+0x137/0x2e0 [ 415.797548][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 415.803178][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 415.808550][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 415.814632][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 415.820258][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 415.826358][ T31] genl_rcv_msg+0x60e/0x790 [ 415.830998][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.836030][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 415.842573][ T31] ? __asan_memcpy+0x40/0x70 [ 415.847208][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.853833][ T31] netlink_rcv_skb+0x208/0x470 [ 415.858608][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.863543][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.868562][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.873906][ T31] ? down_read+0x1ad/0x2e0 [ 415.878321][ T31] genl_rcv+0x28/0x40 [ 415.882395][ T31] netlink_unicast+0x82f/0x9e0 [ 415.887162][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 415.892485][ T31] ? netlink_sendmsg+0x642/0xb30 [ 415.897415][ T31] ? skb_put+0x11b/0x210 [ 415.901734][ T31] netlink_sendmsg+0x805/0xb30 [ 415.906496][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.911803][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.916733][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.922101][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.927381][ T31] __sock_sendmsg+0x21c/0x270 [ 415.932149][ T31] ____sys_sendmsg+0x505/0x830 [ 415.936913][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.942299][ T31] ? import_iovec+0x74/0xa0 [ 415.946804][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 415.951568][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.956799][ T31] ? __fget_files+0x2a/0x420 [ 415.961523][ T31] ? __fget_files+0x3a0/0x420 [ 415.966223][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 415.971174][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.976632][ T31] ? do_syscall_64+0xbe/0xfa0 [ 415.981383][ T31] do_syscall_64+0xfa/0xfa0 [ 415.985938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.991261][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.997340][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.002251][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.008500][ T31] RIP: 0033:0x7fa9baf8efc9 [ 416.013046][ T31] RSP: 002b:00007fa9bbd92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.021549][ T31] RAX: ffffffffffffffda RBX: 00007fa9bb1e5fa0 RCX: 00007fa9baf8efc9 [ 416.029627][ T31] RDX: 0000000020048000 RSI: 0000200000000140 RDI: 000000000000000d [ 416.037701][ T31] RBP: 00007fa9bb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.045768][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.053769][ T31] R13: 00007fa9bb1e6038 R14: 00007fa9bb1e5fa0 R15: 00007ffc6003ccb8 [ 416.061939][ T31] [ 416.065048][ T31] [ 416.065048][ T31] Showing all locks held in the system: [ 416.072935][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 416.078232][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 416.088282][ T31] 1 lock held by khungtaskd/31: [ 416.093500][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 416.103480][ T31] 3 locks held by kworker/u8:4/60: [ 416.108581][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.120531][ T31] #1: ffffc9000211fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.131570][ T31] #2: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 416.140747][ T31] 5 locks held by kworker/u8:6/1109: [ 416.146057][ T31] 2 locks held by getty/5590: [ 416.150783][ T31] #0: ffff88814de4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 416.160645][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 416.172466][ T31] 2 locks held by syz.4.1277/10325: [ 416.177678][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.186001][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 416.196252][ T31] 2 locks held by syz.5.2073/12950: [ 416.201569][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.209862][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 416.220062][ T31] 2 locks held by syz.3.3537/18004: [ 416.225266][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.233479][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 416.243775][ T31] 2 locks held by syz.2.4033/19643: [ 416.248963][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 416.258407][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 416.270212][ T31] 2 locks held by syz.1.4038/19663: [ 416.275445][ T31] #0: ffffffff8f7d2130 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 416.285524][ T31] #1: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 416.294679][ T31] 2 locks held by syz.1.4038/19669: [ 416.300102][ T31] #0: ffffffff8ea6b540 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 416.309633][ T31] #1: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 416.318722][ T31] 2 locks held by syz.0.4039/19672: [ 416.324054][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.333617][ T31] #1: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 416.343026][ T31] 1 lock held by syz.6.4040/19666: [ 416.348296][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 416.357421][ T31] 1 lock held by syz.6.4040/19673: [ 416.362646][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 416.371734][ T31] 1 lock held by syz.7.4044/19687: [ 416.376828][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 416.386369][ T31] [ 416.388698][ T31] ============================================= [ 416.388698][ T31] [ 416.397832][ T31] NMI backtrace for cpu 1 [ 416.397849][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 416.397866][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.397877][ T31] Call Trace: [ 416.397884][ T31] [ 416.397892][ T31] dump_stack_lvl+0x189/0x250 [ 416.397923][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.397947][ T31] ? __pfx__printk+0x10/0x10 [ 416.397978][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 416.398008][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 416.398036][ T31] ? __pfx__printk+0x10/0x10 [ 416.398059][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.398086][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 416.398121][ T31] watchdog+0xf60/0xfa0 [ 416.398145][ T31] ? watchdog+0x1e2/0xfa0 [ 416.398169][ T31] kthread+0x711/0x8a0 [ 416.398195][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.398212][ T31] ? __pfx_kthread+0x10/0x10 [ 416.398235][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.398255][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.398273][ T31] ? __pfx_kthread+0x10/0x10 [ 416.398296][ T31] ret_from_fork+0x4bc/0x870 [ 416.398316][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.398342][ T31] ? __switch_to_asm+0x39/0x70 [ 416.398356][ T31] ? __switch_to_asm+0x33/0x70 [ 416.398370][ T31] ? __pfx_kthread+0x10/0x10 [ 416.398393][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.398425][ T31] [ 416.398431][ T31] Sending NMI from CPU 1 to CPUs 0: [ 416.543668][ C0] NMI backtrace for cpu 0 [ 416.543685][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 416.543703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.543713][ C0] Workqueue: 0x0 (events_unbound) [ 416.543738][ C0] RIP: 0010:kasan_check_range+0xa5/0x2c0 [ 416.543756][ C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 <49> ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 416.543770][ C0] RSP: 0018:ffffc90000ac7be0 EFLAGS: 00000046 [ 416.543783][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff819dfa8d [ 416.543795][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801a0c8000 [ 416.543805][ C0] RBP: ffff88801a0c8000 R08: ffff88801a0c8003 R09: 1ffff11003419000 [ 416.543817][ C0] R10: dffffc0000000000 R11: ffffed1003419000 R12: 0000000000000001 [ 416.543828][ C0] R13: dffffc0000000000 R14: ffffed1003419001 R15: 1ffff11003419000 [ 416.543841][ C0] FS: 0000000000000000(0000) GS:ffff88812613f000(0000) knlGS:0000000000000000 [ 416.543854][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.543865][ C0] CR2: 000000110c36be68 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 416.543879][ C0] Call Trace: [ 416.543885][ C0] [ 416.543895][ C0] do_raw_spin_unlock+0x4d/0x240 [ 416.543918][ C0] _raw_spin_unlock_irq+0x1e/0x50 [ 416.543936][ C0] worker_thread+0xa7d/0xda0 [ 416.543968][ C0] kthread+0x711/0x8a0 [ 416.543992][ C0] ? __pfx_worker_thread+0x10/0x10 [ 416.544008][ C0] ? __pfx_kthread+0x10/0x10 [ 416.544028][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.544044][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.544061][ C0] ? __pfx_kthread+0x10/0x10 [ 416.544080][ C0] ret_from_fork+0x4bc/0x870 [ 416.544103][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 416.544123][ C0] ? __switch_to_asm+0x39/0x70 [ 416.544136][ C0] ? __switch_to_asm+0x33/0x70 [ 416.544148][ C0] ? __pfx_kthread+0x10/0x10 [ 416.544167][ C0] ret_from_fork_asm+0x1a/0x30 [ 416.544190][ C0] [ 417.022831][T19643] tipc: Disabling bearer