last executing test programs: 8m48.838504698s ago: executing program 3 (id=254): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) (async) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d", 0x20}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) getsockopt$netlink(r7, 0x10e, 0x2, &(0x7f0000000580)=""/197, &(0x7f0000000040)=0xc5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x10, 0xffffffffffffffe2, 0x0, 0x40f00, 0x59, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x10, 0xffffffffffffffe2, 0x0, 0x40f00, 0x59, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40010000100001000053600ead27a55e00000004000000e00000010000000000000000000000000000000000000000000000000100000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fc020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000630b0000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000a00020000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160005000000"], 0x140}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11ecc0d0e53dd30f627841f6da9576a475caeae95813d755fc19773c1ed10b8ce2d249df1e87e77ac7396a23aca348bd68a1626426d253b798edcb0778e55694dcd5547e5dfbf66c113db3af4b71c39553c203f87cd9f9b93d05db9cdb68295e5e84bc763885c47dd41e5c233b46a0fec9515b9c227c5cafdbdfdffd624a975fb51bc410ee8e776a91b98768abef1fd5b90215645545f3ad713fe137db633824aab2d1b72a86c8dd39d352da25221a66a37fab288abfe1bd0b0ab5337d4dad1d0cce6e1b54d59ece36c55a0c2a8c1f8895d1199f184c55a324699778cfc1", @ANYRESHEX=r10, @ANYRESDEC=0x0], 0x50) 8m47.982272639s ago: executing program 2 (id=262): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_cmd={0x21, 0x5, 0x710, 0x7, 0x4, 0x9, 0x3, 0x6, 0x0, 0x6, 0x5, 0x4d1c, 0x1, 0x25, 0x1, 0x4, [0xb, 0xffffffff]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x89, 0x3, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff0000000080000008850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240410c0) 8m47.574800762s ago: executing program 3 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900), 0x0, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010a000000000000000006000002050005000200000005000400000000000c000780080012400010000012000300686173683a9bd24f6e65742c706f727400000005000100070000000900020073797a3000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x709, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf20f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x48004) 8m47.537057196s ago: executing program 2 (id=266): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x26020480) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) unshare(0x6a040000) (async) unshare(0x44000000) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = accept(r0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (rerun: 32) getsockopt(r3, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0xa, 0x0, &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x5, 0x10, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f00000002c0)=[{0x3, 0x4, 0x2}, {0x3, 0x3, 0x10, 0x7}, {0x1, 0x4, 0xa, 0x1}, {0x0, 0x3, 0x8, 0x5}, {0x1, 0x5, 0xb, 0x5}, {0x5, 0x1, 0x7, 0x5}], 0x10, 0xad9}, 0x94) (async) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 8m46.572307632s ago: executing program 3 (id=273): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) (async) r1 = socket(0x5, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$vsock_stream(r3, &(0x7f00000016c0)={0x28, 0x0, 0x2711}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r4, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r4, 0x0, 0x10000000000000}, 0x18) (async, rerun: 32) mmap(&(0x7f00003c2000/0x4000)=nil, 0x4000, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080028bd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="14000b0000000000000000d40100ffffac0014bb14000b00fe88000000000000000000000000000114000b00fe88000000000000000000000000000108000900030000007900020000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x0, 0x36, 0x0, &(0x7f00000003c0)="c1188e99b95d02ff4284860186dd5d383683ccda953c7b292815a02a0ff89e41e9942a2ef100771f87f75c46f8e2f4adb22f333bc814", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68ddff10100005ff00000000ffdbdf250000a04a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002809fff198014000500ddf4b9b3f7a3d2929ea9f03aae926089050006000200000014000500dd7b503ba6c08ca0705541d084ca0ea1"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="b8180000", @ANYRES16=r9, @ANYBLOB="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"], 0x10b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) (async, rerun: 64) getsockopt$packet_buf(r8, 0x107, 0x6, 0x0, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) 8m46.197457864s ago: executing program 3 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6, 0xf4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6, 0xf4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) 8m46.182325224s ago: executing program 2 (id=276): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="883db3a83d0faaaaaaaaaabb81020d008847451d00340064000007019078ac1414bbe00000020b28907800fc0000461f000800660000d63200ffe0000002ac1414aa4404bc30517fd36055b4d12aa81d701ab3ee52a2e0b8e297cc97fa3993622af63ce948eb46d5a3a9c31beb8f1faa53d0bba73827d8eb3e838a8f4cc8449aae44545aef12ff5d8a3ffd6bd704d6a8e3f708497475b8f9bae6a780d5041caea9adb5060960ef40fb89c677860000"], 0x0) 8m45.926645514s ago: executing program 2 (id=280): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async, rerun: 32) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000080)=""/33, 0x21}], 0x2, &(0x7f0000000240)=""/172, 0xac}, 0x1400}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/3, 0x3}, {&(0x7f0000001340)=""/223, 0xdf}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001480)=""/212, 0xd4}, {&(0x7f0000001580)=""/32, 0x20}, {&(0x7f00000015c0)=""/41, 0x29}, {&(0x7f0000001600)=""/224, 0xe0}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/241, 0xf1}, {&(0x7f0000001880)=""/26, 0x1a}], 0x7, &(0x7f0000001940)=""/153, 0x99}, 0x7}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/159, 0x9f}], 0x1}, 0x6}, {{&(0x7f0000001b00)=@qipcrtr, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/54, 0x36}, {&(0x7f0000002bc0)=""/243, 0xf3}, {&(0x7f0000002cc0)=""/221, 0xdd}, {&(0x7f0000002dc0)=""/143, 0x8f}], 0x5, &(0x7f0000002f00)=""/65, 0x41}, 0x3}], 0x5, 0x0, 0x0) (rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 8m45.904083184s ago: executing program 3 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0x6, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40048f3}, 0x40d8) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001a000100289d70000000800002202000000000030010000008000300", @ANYRES32=r7, @ANYBLOB="080019"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0xea5bc50b6199d77e) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r9, @ANYRES32=r4, @ANYRESOCT=r9, @ANYRES64=r2, @ANYBLOB], 0x48}}, 0x4000010) (async) setsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f0000000440)="02889b069935a7782fa83bf37b11b6098ab4d1eed79369b2f1dc5a949beb4659fd38eb69bbda7268887f7d63021dd3f9edad6139052e6b276125bb6facd41c2f45f9df64d56afab48578bc971892a71738a1dddaeedc4fedea86bc0bc6019d8ab375aa18e4f9a63643d377a31a9cef8eae3b911540f71e21593fd0184da660ba3283d7bbdda43fe7ba522b932add4cd654ea8730f72134ce0337556280a7d18bb149984cb43e57a07888087735bf9fc43c5666d72c9e7d232da85a0930656faed1003cb131b423f7278d9ecd2376a2088fa4140f147466c730465bd13de5e939f4f54d1825a637404422621c364e9bef25cc2b598e9a08fa64e4efc6a6c5dc04a2c3d9a0f543983b06c7cc50d30a54b7baa6178ba23f0a16991bb515943856c453ec33dd19cd93230d303234a72cca938056268c79a308f78037f40333d570cf024a30a856ff54ca52b13dfce75cbed0c0cd465b6171adb5b2116e27b613a2f34f6e2d14e4d412eaf68f988d326f4555821744aa18b65c10f6939844ebcff8601d91c8ccf305aedf74c9a2a15d973ad4353979c5ed9abace607950454810be1e694026a3bd65a3747cc36715b325955cc224dfa90b420521e6d5d44ecfab625e504f6a40c822f8eeffc43814ed810cb2306fee5c745072c7663b48996371d75a1961072fb9c0f7607789682a49ca0a38830a449ee0d3ef3eb54d66ec794a85c994a240e2800b3be5b8f1e0750e8d5caa948dd1fd2074f136ee11877aa9c3f778cddd8e478e99f6376cfa215533b6242cbafe7ce947ea3ddfd19c121ab485da885d71a4a1b772b4324a524da3db0b34474ac7d9af70a397c5ef96aa6c94a34dc0595bd4e09108e9dc5dee05ea396c1c2da7215d05a74d8704c75123347878c9428e6d8100848b1fe58f74f69a61bfc9e60d7fcbcdfb5f2c100430384e7679c780ce149d4e30e84e40461d1069d7f027f6bf471a157f0d528dfb38ce2e1650b048d16c3cc3a2b17949f55d79efeabf39119ae164ab38e744522dcfdc86ba4d3c3e36072acb01b3382c1a92cf7376b0482c44a192ff50ed8ffb98cdece9d21a56bb821b57f9dc377468c6bdc49cac180fc120fb7a6c80fd2e688d12fa10db7e3b2eabd13f03b1436c19c48cdeabf14bcb871de1eca3bbf461267ec8cc5e3a1def19210716a1907f2b810134b848694f74ff5588cb323bc06d18173919f469b810d70a2367cef308de9e8cbce77d77e95b086771e677209b1e82f81304992290317019dbfe77d23b719534f985cb61430c4999b5fafaa38d839f1c83772a70d28fcb303e2722cd4f2a7fc1422c20ab344a874d1570ffbfdd9d0152b544c77c7ae37765ed5bffea92f7481d94c6019d5ba632601516557afec26fdd8da165bee21f57a262ae58b0e6c6b91bcf713a1ef5227278afcd1765bb8198a66bd8188335cfb16c6b454f65f4620bbe00e39f0f687718df61c4623ce2595a3e9b0b94470e775f108a3b438f79ec2e2dc527e792e8306b9d992eb354240bd3540c25421cc8a6e5e82410a564b355d8b0e7f315294555722465a5f67580bde0ce68203293ee1909a2956a4c3d76a52509f7af2781c663a564dc218843e53fcdb0143690406f6128e5f6b8751016d28a7d1969374f47bceb6e95c54562101b433146143a513bcb69bb3d56b16c58bfcdf269275336a519da9309ee97c5651519166bafc1c4f8f5a3e222f60107a8bafaf0579f7e3399a78b98c3f2034d7197be9941c93e7a669d359fe1159ae099e451e3d427032487c82dd66e30a9b7ddf6cbe9541de7b4e575f08716fdfdffb4fcc8b5b7d4b008aa2c8ff98781c55cb7825e448d2ef9f0bfb148841b256714b52b4eb7b78af653812011417536742ad3cc19fd094ce235ce266673c7652f668c512565247f9cf364f4eb867a246193f3aeeea69cd0c5307f00d88e7b5f822ee9e8849e9305cc4aa2af39041d02eb496cdf323803078ba5bcf40e77a3dfd2cbaffe03598fbf27dc0cf67e0ad19a746a713d51534977a3543e60ddf3843755c48d911d77ea8f7d89c63a20f287709271da70d6070b5d910b467c23fdfbd8e2a0a304a1d5fde927ab1f015d14c899169d262bb30ef4f1c10e6509c166973bc53ebf07cbb81e0d2a8287b037ea99dbb927643900d55bfe98d5b453f96cfe90fdf9e15cb80e1675c91cfe6cc306f715bddb9cb64e7efa7e512aeb22917c54866b5754009ff30a8ecb5597f1115e9a719f66d62408dc591c49d873d8c373efcde75af08ce8e96f436ad757409f1641dfcbebe824f7903e3c03d1c2166056ccca8955f5fe6dee893cdf2ea797df3a53de9c648844261fa9274ddbc102c0c440609265369a0cf85feb9973d62891a8a55733f7d782530f7fd1dbef82f1dea31b77fe27bf4aed38465ea0e8aab18443997badd6826d6086981c226ba2cfddb65cd3ae0816ff7aceb733df576eece1ff1f831bc7df70b4b50c8d29960c48e653cd3da92d6fb1a9cc772c4009cb5078572bdd9dd55a023912cc585e654ef06c75404a4811e7322c69fdae343dee8ee6035a9655630efb7224bed739c211a24ee5fcf91d669697a6a61d79b2ebd276bb556f58d4ddee1299e0bc490932f3cc90f2733552394a2808dc045c41d1a1a0af31a49985c451bc763c0757f74f4d48c7b5143fdf7fe7b1daae65ee44aefe510fe8d8912741d85343fb1c822d9fdfef1bfb5fbbf25190d6fbdeaaa07bcefbd34435fab48b66314f9815444120689a3d9b590ed5bebf48fde7778f1cc440e46d7858c87c0af2d6adf08a080c8e1fe9834000a31baa97be070bf38b6567c51bdbd4fab9481d1ae848377ed642d99c4b7d6385dff24ecac5e2ca43753369358c8b52b8ed41a71b6ac104f2431b807f69a944fd8f81a22a66777a23a149e224a06fe3f3e5d3bc2281be3937c78eba7bba128ce2db3c36f867b0d0700de58258c36fb6177e1296439249a59a97df8717f593dd5290349793e4bacab8ede7cb90e22ab62ace2d5db6724afd64db9c32f5249a0cadc1a19367200aca8cb2d073f6bb104ebfcbd11a7b35362fd52cb71830d08fce646f43e97b4178464d89e8d8c490f04eb66cff22c97699b254faf378eea7be473403e10f7cf319390759ae1978a93953dd39d9c1a6e43f8e26b392ee875645c4442252d200f1449b7ac7e83a36b7c8bd94de3f8032dbe527b51ad84129c7dba0155b4bad53b4f441976970b5afc4dd2509dc13e9264d18f24a155023ec276a2f6d30ec69676558f94a51e4042b31eeecde793c572597c6fe1240c4b585f47e253fc694dbd322fc8cf16ba7e528679b12ab65f70315691b66dcfe377b8fa1a9c28455284006f43b151cc6d7e853686deb092f2d0af1961dcd96114c4d19814e9ff775163e45e89eb4fa120fda20830b9e67431604a162932e8963eb9285980af64ab8e837b113dcdc4c4edfa2eaa78be53dbc4320d88ddb590396921acb9021e3c1ecbe386cf17f75b6b13cc41a8f57efebcd88a661386956415e51fe66c071ef681c1858a957bfedf314f840ecd9662d9cd54993ab53343fb8fdf4871925d3c41d4fd1901009d6c4d15596a73dfc0b119acae6b1dea34c0a85d98ad84fed603733de9ad33123358f8267da90075a9fc2f8ea3adf401556e20257e004edaf71ef90f923d4162ca3ba8978a789d061c879df88e3afc31b5a7a6233444330a6ca21f19db4c2c9f8335fdb10686d071bf362b0c5fd44aac7f82d5938475752fcad6a7a8bd257706910416ee0f470ee88644285ca3138c00322d67c88cc8a943310ed79a4790e6c5233043c6ee64455f44f21755d4f2bcafbb876732cd6f7977e85de757153d70592589346ea6123fdf5464bb1ef4a75abb7eee35153e331e9b59c04b18d60f0c76b03f50811d248ba770e30ba3937948edf86941aab2c28117ca7ca9ce0bec4d5239a81c9a0d5b8180a7389301c719a07a9bc2bbfc4ce844ffb443f147cd962a5f8dc546434f2028289413d700da041b770b15b43145562e74c1ee3e54bbc3ad084b0d1aaeb9116bbb66c06cecf7a55affc5359d561b9d151ac01ddd42a353764b85df1e3d3e9f4070eccd3fd0586da0fe1ea7e752b335494724b61929c2e64aa03c1437f3e3c738841e98be3b7e3f7ef37672281329679646caea4081aa6045abc901342236ef5f23046bb5371a88f7887b8100273e976e5ffb7d3769d9d56200511d53d4b14296005698e0ea37b456d225feea593377ba44c953ec0c72d8f5e4a6ce9f6602d04b5f5530347c79102525b998c58f3a457e1c46d59e9a371e8a76bbcd3e2fa4e17cf9c61e487e0019652b07c9e185cbba04939ed3576ef55de8b861f73dcfb89e813a6eb2f0d9d233a9b0e4e1db2b53259c2f378a95989664998765ea56f3b55413b4d7abbb92fde678e05c469ce9e73ab3c8e7a89559f608a5f86c024ae6b09f6ce5dbd9ca8bbdc14dab1c2e2ca6eab38e1684500b298d8b8fd44716ce550bc3bae3334444bcd7c6e7901e5c39a5f422922fa307985068bfa2393f2f19b29bc67da2de58d2cecc96920b436f34786669e9cbc51375907337187abe793206ae0f191d862679973e2481d19336b0d85a266260d6fe41ae0fbecae7d63cecf99042603088e1b08f200ed928121e872c2ebc237c5e3cda7c1d6fd54855fd6fa3f37fa4c30e5e2b739ce3be460e130ffb8f1e695557ad756dab70629aa44c388797fb89690849e24c06500957a6a70c6bf2d739eafaa9cbc6d8deaa69e03562f84feecd0d12433e2901df5281f0b79509b6466bee218179b78f4b48a29878d09a4578bb5af18aba5c73967331bb17fe97df058f2129dd119811d810db7052617bd702dc222a5b60d52d99029ae9fb4813ab2a488cd171a8f08084cf32ad290af2c75fee08f00fe49ff5c3af677ecc75354fa0d13dc0bbab862232d227da61ac6307b6eac68904f3de0e14352722a5dbf54be7463dd3af404c8d88c4bde5cb2a94af82ba70f98539bfdd7eb2416a0e50166126892b2ac9735aff65aaa2395630ce0b8def37d81363e4f514e850c966149e4b51dfa03045c80558fef40f5351f7b14e251ebffe3887bd12024298999e956c0f423042bce4565524fc44a026360d1f4c3e268f1b3f2644e70e045402a5c4ad3dcdfb13e2b0dd65479c560e4f3ed749eb234031fc69ff79c0e466407c79feac545a1c4a2e58e9bfba5c4ee538e8e7a736503fede41aa6f3cbcb8905bd5b8dc491733213accff3f739b720788530ef0d77cedf20288d0496e6f9652b794a12e22d7b28d5a18569da989bcc0b79c9a325c4ac86ad078b3769577fddee460718872695dd6f26843e81598df87c4df0fad7c8f6da8982185c18036528d31a2f712ec741b26d8891d5a27f7fb7e17073b0ebdcded96783fd983fe18170fe016dcea727f549b45b5da3d72c0d8fa6da0b6cb29d647f65c6a9dd0629ead08746043a41e7b085f5be4fd6976becea28c5869825ae6f82c9246d7376540e2456cebd623bdb6fba84cbe5bb43a4cc466a416259b82ce280f9720e247a58f5d254215f3a6658448897ef71c7aaea338f0a8ca5019697ddb3149400a4e00fb3b3f58c4544da7e604b3a97bfe18fd27635793b2043cda36e804456dae905c68c4921201a4aa553e3ad00a1924483d22fac0d9459e4686ad8c62a605be1dd711bdd77236851722b43ddb07a29235931784b5e40b772ff99f2b807ba87696c2a5c18d2679604a6020173abfb3b08dc9cd2a7d60c1512388eb54aa26d6d21cb761ee736bde5a9009cbe1caa133f8", 0x1000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETPERSIST(r11, 0x400454c9, 0x1) ioctl$TUNGETSNDBUF(r11, 0x800454d3, &(0x7f0000000700)) (async) socket(0x2, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r12, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000015c0)={0xd8, r10, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040854}, 0x24004184) (async) socket$packet(0x11, 0x3, 0x300) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r13, 0x6, 0x22, &(0x7f0000000000)=0x8, 0x4) 8m45.825293324s ago: executing program 2 (id=282): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x64e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "53ccb3", 0x618, 0x3a, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x22}, {[@dstopts={0x3c, 0x25, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0xc, 0x8001, [0x950000000000, 0xfffffffffffffff8, 0x5, 0x7, 0xae26, 0x9, 0x5]}}, @enc_lim={0x4, 0x1, 0xa3}, @generic={0x59, 0xe1, "55b410764adcc2f2524a1bf15698aafd77d6def34a8e8bee76e6409faca41a35d8fed21dcd4fa7096ad81f61b935ea19c08d225966505529d6690e0e0ea560d9e8f19224b72c66d336848fa529216135136685380d900fce47d2cb7dc2ce067b52a768d9b5a90d16aa01c8ced9e317fbcad2a24cc8dbceda41158eb24e6f89299ad0f4d50f5af27555d6d4eac575fda033045b9009f6bf941d1b9bba1872c10e1aca74ade0331c38ab19b9bfda8abd70b6e2b630b666d673c567b074525f24de58cf6c508efb26602dae0f5b6fab214c020e6e4a151c58f667b276043834aef1bc"}, @pad1]}, @hopopts={0x6, 0x1d, '\x00', [@pad1, @generic={0x7, 0x2f, "c67c0c935e0fd5d7ef5c22e61a0d2766c0e50845c6c2c5d60739419029cb017bdb059b213351b65bc3bdd3cb0e53c9"}, @enc_lim={0x4, 0x1, 0xc7}, @generic={0x4, 0xaf, "3862ecf2b81f75262096530a0c1ef070e600eacf7892b3ae24fb8b76de8d29502beaef9a170558b6cf9b204c2108b55310a604372ac989cc61e29e88fe9d935d072f421d6019e04a6a2aed45551a07eca57ed3a24efca5a00dd27c7d6d3cc679105872016026aadf0f1fc81661a64b8a8165ae1a75075548da0899ed9212c20c18c6f33c9be698137322bd6a4dfe8f453a481d8bbd7f46bf6b968e1dafe635a32dc737ed2401e405426c77a1b8c37d"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x3, 0xa, [{0x2, 0x1, 0x1, @mcast1, [@rand_addr=' \x01\x00'], [0xffff1311]}, {0xf8, 0x2, 0x7, @loopback, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, @private0, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], [0x4, 0xffffffc0]}, {0xb, 0x1, 0x3, @empty, [@mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}], [0xe]}, {0x1, 0x9, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, [@dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x3, 0xf773, 0x7, 0xed, 0x2, 0x2, 0x8, 0x9, 0x2]}, {0x8, 0x1, 0x6, @private1, [@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @local, @remote], [0xb7b]}, {0x9, 0x3, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, [@empty, @local, @dev={0xfe, 0x80, '\x00', 0x15}], [0xd1, 0x5, 0x6]}, {0xd5, 0x7, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x3ff, 0x5, 0x3, 0x3, 0x7, 0x3, 0xec]}, {0x0, 0x4, 0x2, @remote, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}], [0x84bf, 0x5, 0x2, 0x7fffffff]}, {0x7, 0xa, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @mcast2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x30000000, 0x1, 0x1, 0x5, 0x8, 0x1, 0x1584e273, 0x401, 0xffffc6cc, 0xfffffff8]}, {0x9c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, [@mcast2], [0x9, 0xdf]}]}}}}}}, 0x0) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) socket$inet(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) sendmsg$sock(r1, &(0x7f00000008c0)={&(0x7f0000000700)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)="cb6fdeda", 0x4}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x756b79f}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x48}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xd8}, 0x40010) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) syz_emit_ethernet(0x64e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "53ccb3", 0x618, 0x3a, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x22}, {[@dstopts={0x3c, 0x25, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0xc, 0x8001, [0x950000000000, 0xfffffffffffffff8, 0x5, 0x7, 0xae26, 0x9, 0x5]}}, @enc_lim={0x4, 0x1, 0xa3}, @generic={0x59, 0xe1, "55b410764adcc2f2524a1bf15698aafd77d6def34a8e8bee76e6409faca41a35d8fed21dcd4fa7096ad81f61b935ea19c08d225966505529d6690e0e0ea560d9e8f19224b72c66d336848fa529216135136685380d900fce47d2cb7dc2ce067b52a768d9b5a90d16aa01c8ced9e317fbcad2a24cc8dbceda41158eb24e6f89299ad0f4d50f5af27555d6d4eac575fda033045b9009f6bf941d1b9bba1872c10e1aca74ade0331c38ab19b9bfda8abd70b6e2b630b666d673c567b074525f24de58cf6c508efb26602dae0f5b6fab214c020e6e4a151c58f667b276043834aef1bc"}, @pad1]}, @hopopts={0x6, 0x1d, '\x00', [@pad1, @generic={0x7, 0x2f, "c67c0c935e0fd5d7ef5c22e61a0d2766c0e50845c6c2c5d60739419029cb017bdb059b213351b65bc3bdd3cb0e53c9"}, @enc_lim={0x4, 0x1, 0xc7}, @generic={0x4, 0xaf, "3862ecf2b81f75262096530a0c1ef070e600eacf7892b3ae24fb8b76de8d29502beaef9a170558b6cf9b204c2108b55310a604372ac989cc61e29e88fe9d935d072f421d6019e04a6a2aed45551a07eca57ed3a24efca5a00dd27c7d6d3cc679105872016026aadf0f1fc81661a64b8a8165ae1a75075548da0899ed9212c20c18c6f33c9be698137322bd6a4dfe8f453a481d8bbd7f46bf6b968e1dafe635a32dc737ed2401e405426c77a1b8c37d"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x3, 0xa, [{0x2, 0x1, 0x1, @mcast1, [@rand_addr=' \x01\x00'], [0xffff1311]}, {0xf8, 0x2, 0x7, @loopback, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, @private0, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], [0x4, 0xffffffc0]}, {0xb, 0x1, 0x3, @empty, [@mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}], [0xe]}, {0x1, 0x9, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, [@dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x3, 0xf773, 0x7, 0xed, 0x2, 0x2, 0x8, 0x9, 0x2]}, {0x8, 0x1, 0x6, @private1, [@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @local, @remote], [0xb7b]}, {0x9, 0x3, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, [@empty, @local, @dev={0xfe, 0x80, '\x00', 0x15}], [0xd1, 0x5, 0x6]}, {0xd5, 0x7, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x3ff, 0x5, 0x3, 0x3, 0x7, 0x3, 0xec]}, {0x0, 0x4, 0x2, @remote, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}], [0x84bf, 0x5, 0x2, 0x7fffffff]}, {0x7, 0xa, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @mcast2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x30000000, 0x1, 0x1, 0x5, 0x8, 0x1, 0x1584e273, 0x401, 0xffffc6cc, 0xfffffff8]}, {0x9c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, [@mcast2], [0x9, 0xdf]}]}}}}}}, 0x0) (async) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) (async) sendmsg$sock(r1, &(0x7f00000008c0)={&(0x7f0000000700)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)="cb6fdeda", 0x4}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x756b79f}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x48}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xd8}, 0x40010) (async) 8m45.274941995s ago: executing program 3 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m45.274479909s ago: executing program 2 (id=287): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) unshare(0x100) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b8008"], 0x174}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000098120100340012800e0001006970366772657461700000002000028008000100", @ANYRES32=0x0, @ANYBLOB="1400070000000000000000000000ffffac1e0001080004009331003a00"], 0x5c}}, 0x4000) 8m44.797839716s ago: executing program 32 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m44.489592531s ago: executing program 33 (id=287): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) unshare(0x100) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b8008"], 0x174}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000098120100340012800e0001006970366772657461700000002000028008000100", @ANYRES32=0x0, @ANYBLOB="1400070000000000000000000000ffffac1e0001080004009331003a00"], 0x5c}}, 0x4000) 1m56.218868651s ago: executing program 5 (id=3290): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0xff98) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000084f682e08288374d0100000046b989e59367b3503bb235e7e5c0c558bff4b86cf97d70c2856d0f3b68afe32272c466d25f370d18e2fa76244112a8b52b4b21667af3d5e64c21102a889f1ec441a3d354ad97b1f33cf4ede2170a981cbaadcfef36044741db2b2b68624936e00019039313956c256337e33d10de9b80ceddb9b538ede2116dce08912f447fdf428562dde3082306521970432b04fe076904a83d2b56f6401ce9f6ce356ab15c3c8237aa075bc5966f3e82722f2a7cf62a15074ec5dd6bef129addfd81f49ca75da943466ad9a6a05e63293bbe8932b0ff34cbe078af490f192da3f9d4dc6d2845144d5ddc8ca74dfb767863cab801ca70556a4ce2e34abab388b3e69ef9d0c96b", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40044}}], 0x1, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x12ac, 0x3d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x15}, [@nested={0x55, 0x138, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@broadcast}, @generic="4d58375be611e9394866660976fffc78fccf453b9ccac2aaad7dc7d290d7bf236431f7b5c932223cc68ac856e260417452aaea6c4f18f5621572375d7278d924216ba1a4d9f0b6f880"]}, @generic="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", @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x21c, 0x118, 0x0, 0x1, [@generic="e45037d22571bee721f0308c3c77c095f558591343108d22a48e66ff3f98869a74c72e8f00968aaf2cad6603757a93f4c3a641469533c6e8ab13066dca78bdfb0918751ef5d7634e51a99cea4a1b348bb4bd78252d43dcdc3441e38c943a03c3cbb1158ac09fbe1b45246c0464c0bb7465b04f81b93809e2f0724af97128a4fbe75f9d6f96b106005d6072763579a547ba76816fdb97018373416fd69b7d29ad7b8aa7e4fc66ac445e882ff0218f5256a01f229935be4a4b6162e15bc3f65f76ce488874798c23d849eed31e201c9da3240a2846193b6110c25d0a87c32bd98b6c5c95416cb7", @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000001}, @generic="e7eec3542424e2f3c27863b224bb282573830b535d479b1eb43af89a2f477fd3baa9f1cb0e21eee9cfca9f642633dafd653c421895eeb3915e7cb4a3c27d3e2815fb7ea2f650f34c1fd610b44d640a95433124", @generic="9c9f043825e27b45ad97f2602db2415fe8e88cef99109cb76b083de6b482f28e8280bfafdf3360a7b5ebea17975bcac609ab21a2766b0dd4193b66c6edb3ba4d554649af630c5718d9c1958577ca59f0310ec87bf111299dcc40caf6d08bfb45ce756ecb5c2bda05b607d9af1e8771cdd1124ddad631d0fa958ac884975cee6bc0df25dd1535107910e393b58f3b617bcb8ca6134615db4a5f16ad3d41007d693318e4f7955989544578c7f970ccfda6d6fb5bf7c6bf7c24d6c927e8f890fc859c7b78e345d79bb3e0ad91bec16054761ee186"]}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r5}, @typed={0x14, 0xee, 0x0, 0x0, @ipv6=@private0}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x44006}, 0x40040) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m56.009217902s ago: executing program 5 (id=3291): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0x11}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) write$cgroup_subtree(r2, 0x0, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x6b, 0x4, &(0x7f0000000480)=""/149, &(0x7f00000003c0)=0x95) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x4048004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x0, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.781438215s ago: executing program 5 (id=3293): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0xfedc) (async) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="a5", 0x1}], 0x1}}], 0x2, 0x40) 1m55.182278993s ago: executing program 5 (id=3294): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x44}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r4, 0x5170c560dce29b81, 0x8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) (async, rerun: 32) close(0x4) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m54.822908257s ago: executing program 5 (id=3296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) (async, rerun: 32) bind$tipc(r1, 0x0, 0x0) (rerun: 32) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc60105d52d9", 0x14}], 0x1}, 0x20000040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 1m54.606800305s ago: executing program 5 (id=3300): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x1, 0x8, 0x9, 0x5b, 0x200, 0xe, 0xfffffc01, 0x8000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2], 0x1e) 1m42.143498153s ago: executing program 1 (id=3360): socket$kcm(0xa, 0x1, 0x0) (async) r0 = socket$kcm(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x7e, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) (async) listen(r3, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) sendmmsg$inet(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000180)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="c8f7b1e9333639f8bd8fdeb92d78b4a97911591fe679fb361f24c857a704110504a9a3fe19cb63d815dcd55dc3ccfceb58afaa1415db7fad56514bd8d49b846ab5b07e16a500963d4a69281a26c3b8ab9107000000000000", 0x58}, {&(0x7f0000000e40)="5449a6f1790f7090e2241d102fe867bcc9e6912d0323ec893d5745268a445f78328a0d0e3a125b29e072fcc834c3e643cb1801ab653acf9a854e0627568693bf40e3c6def891dc5d3303b6daf6", 0x4d}], 0x2}}], 0x3, 0xc0) (async) sendmmsg$inet(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000180)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="c8f7b1e9333639f8bd8fdeb92d78b4a97911591fe679fb361f24c857a704110504a9a3fe19cb63d815dcd55dc3ccfceb58afaa1415db7fad56514bd8d49b846ab5b07e16a500963d4a69281a26c3b8ab9107000000000000", 0x58}, {&(0x7f0000000e40)="5449a6f1790f7090e2241d102fe867bcc9e6912d0323ec893d5745268a445f78328a0d0e3a125b29e072fcc834c3e643cb1801ab653acf9a854e0627568693bf40e3c6def891dc5d3303b6daf6", 0x4d}], 0x2}}], 0x3, 0xc0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r11) 1m41.794600172s ago: executing program 1 (id=3361): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x600}, 0x800, 0x0, 0x2, 0x0, 0x40}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000200000085008000ab000000950000000000000000000000000016"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x8004) (async) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4010) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="30000000000b05000000000700000308000240000000020c0001004e465155455545000800034000000001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) 1m41.711499521s ago: executing program 1 (id=3362): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd451c5e3ee6e5de4ad7f07395e0a2d09cc99d29125d3a017a68c8", 0x0, 0x5dee, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x80, 0xffff, {{0x16, 0x4, 0x0, 0x3c, 0x58, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x44, 0xe, "d08600de046391f117990538"}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0xe, [{@rand_addr=0x64010101, 0x3}]}, @ssrr={0x89, 0x1f, 0x2f, [@broadcast, @local, @loopback, @private=0xa010100, @empty, @multicast2, @empty]}, @noop, @generic={0x86, 0x9, "97934ee4e08286"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', r9, 0x40, 0x8, 0x7fff, 0x4, {{0xf, 0x4, 0x3, 0x15, 0x3c, 0x64, 0x0, 0xfc, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@rr={0x7, 0x7, 0xa3, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x1b, 0x67, [@empty, @local, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1]}]}}}}}) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) 1m41.57870582s ago: executing program 1 (id=3364): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_emit_ethernet(0xfb5, &(0x7f0000001680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@llc={0x4, {@snap={0x1, 0x1, "ef", '#&b', 0x88be, "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"}}}}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000000)=0x7, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) 1m41.577869281s ago: executing program 4 (id=3365): r0 = socket(0x10, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='\'@/\'', 0x4}], 0x1, 0x0, 0x0, 0x4004005}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001280)="05", 0x1}], 0x1, &(0x7f0000000940)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x2, 0xd0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) unshare(0x2c020400) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) listen(r3, 0x400) 1m41.458883567s ago: executing program 4 (id=3367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000001c0)=0x81, 0x4) socket(0x1e, 0x4, 0x0) socket(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) unshare(0x68040200) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, 0x0, 0x0) 1m41.285079187s ago: executing program 1 (id=3370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x2160) 1m41.080362681s ago: executing program 1 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendto$packet(r2, &(0x7f0000000580)="4fa553d0fab842b73354df7c4ee1b5de44a01c6d1788befb94b9a7b2fce6713a55347e9a9a695eea10d029a25352cc014af9a0b637bc0cdafdf421163485101d8747bca2ca174c18767bbd4c4c85b69585c662d40eff4262f717451b394e04a5154310eefd788dd3c4cd09eeeefdd1f9bd930138707119ff70833b1e17fd666d5068", 0x82, 0x44c0, &(0x7f0000000640)={0x11, 0x17, r3, 0x1, 0xbc, 0x6, @broadcast}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) recvfrom$netrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x40010143, &(0x7f0000000140)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x150, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x48, 0x6, "e5951adda8bcf9f37a0d2f4f89c5e32cb9f488092474e47c60c21bcef405e71d94ae755ba26119d6e9bd1f9f6b33f13c777fef9ab20a6e7471357e0dec2b3fd6824b9161"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x40c89f21c2c7dbc2}, @NFTA_TABLE_USERDATA={0xca, 0x6, "e6a4dfcd2f2475cb677eea656928ed8538d59965f1453dae654ac1f64fb23a86ace286a042e085f9472e4987d823404706fd28246c49cf0a32d778c6e066973ec815fc69515e33faba800193f7e8f7fc294856c0bde0d13cd0ff73818d51be503b2b8c2f1c85447795d41fe2eb7a7ac4a1dc74e29bb259a9b6a8d17f3c17a91d64ab511e6e6f0bb6ca907494b4a78f684696e69f3069542496cdaf5167aa7d673e3bfe072388a609e9eddaadcee033f1f8f1314fa16ce50c730ac80a796de04460d3c777a9dd"}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a4}}, 0x8050) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0x2}, {0x0, 0x9}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x985, 0x2, 0xfffffffc, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xc7, 0x0, 0x4, 0x5d9, 0x2, 0x40, 0xff, 0xa}}, {0x18, 0x2, [0x6, 0xb, 0x0, 0x2, 0x6, 0x81, 0x7, 0x7ff, 0x8, 0xc]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x401, 0x0, 0xf, 0x6, 0x7}}, {0x12, 0x2, [0xf, 0x1ff, 0x1cea, 0x2, 0x9, 0xfffa, 0xec2]}}, {{0x1c, 0x1, {0x9, 0xa, 0xfd, 0x3, 0x1, 0x8, 0x8, 0x5}}, {0xe, 0x2, [0x877, 0x0, 0x5, 0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0xfe, 0x1, 0x7, 0x2, 0x2, 0x20008, 0x7}}, {0x12, 0x2, [0x2, 0x0, 0xffff, 0x1000, 0x5, 0x400, 0x3]}}, {{0x1c, 0x1, {0x2, 0x3, 0x5, 0x1ff, 0x2, 0xb289, 0x2, 0x9}}, {0x16, 0x2, [0x7, 0x6, 0x800, 0x8, 0xb0, 0x7, 0x8000, 0x4, 0x5]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, @in={0x2, 0x4e22, @local}], 0x3c) 1m40.923017487s ago: executing program 4 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r4}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0xffffffff, 0x5, 0x53}, &(0x7f0000000600)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000)=r8, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001340)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001380)=0x14) sendmmsg$inet_sctp(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x9, @local}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d7e56a8e395259d6b938beaa21f1f43ba03441b789f0d8bde9e3071ef73f344a69", 0x21}, {&(0x7f0000000100)="44e8431a7e41dc6116fdac2999ca9006ed9a434c411a43584f03e59c341fd971d7f8d07508c6674dea550d2faf37cc9c3ba5e491f11e84d4b2bc52354d08c4d2b194cc13e13b8ad34cd126e09e1e23fb55aed713ac8e4c2e", 0x58}, {&(0x7f0000000240)="490a71e57aa7a281f259266def31a5365d40b720fa0b8118db4ee1ff9320bb9b4e259d79a93c6b200152a5f47c7790af0ee826f5a2e342c20c424f3cb251d0942bed3b931416a1911b486cabcbfbd32f27005e4127e6dbe3a6943d51a986c41bb108c999512f827108f25a47e4ccebf7c056aa2399cdac1518d53a1da00618e7914e2607a4ace7f894c3132aa531226da3fe5372489b00b7f73ca0f0d49390ea71bd28858dcc4f4efc4dcc7847d80a1e416d3b47a3fd8410e1a6951eda9d470fd6eb2d954cb3ae3c133faaf5603fe48c105f36d921b7e659f7175be0c4b8e2883273082fa0b02e5d0d492fba925b12269e", 0xf1}, {&(0x7f0000000180)="e63311c806608417ace9a82335fc4d7ef28a0361d4f7a1e88c7987f8644229a33ba2ae6cf1fe65846d8aa08bcd1091414b96", 0x32}], 0x4, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0xc7, 0x7ff, 0x6, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0xfff8, 0x7, 0x9, 0x81, r4}}], 0x38, 0x860bb9cc6e6f78a1}, {&(0x7f0000000380)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="a432b59071c3ba559ab50fad396b9dd35115302dce55b3f7dba743ae1f0e0818fe6797f4dea045f881ccab7ac04bf481057a773dc37c475a5321781a90d42f89f9a659ecddfea52b0a337ea8dd40d50a82853eeda7c8126489a30d54639ae7d77025", 0x62}, {&(0x7f00000004c0)="1764f3f8886c486f5c25a7c308d68fed7a75af79a7dee87391596b4e92347a1d01e77d6869b4d163df14ad8b54e5892e5c5af6cfeccefe8657bd7d6e104a8c30c55563d2f568229fe22fdfff7d93e7302f304f9f23e72ed2ed7ebef48faac5c5ae3d93aa41c07b47469f69f1e74d46e55ce374730682816631d704f40a0d08644cd4177a92f5d9a3b2b8821ae9ad2fa830e8b89574854ae81f5518ec661da75be34d0542119a79a0306d397dc7bd771d7a0e467a24a87d09f050d8da804287b674cfa95ecee3e96667556de3a5c189c95a80d72ec25069c0fd498aca2f464306664d40ed6c81e3976d367fb4bb0a6708ac", 0xf1}], 0x2, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0xf3a7be1aae77da2e, 0x5, 0x1, r5}}, @authinfo={0x18, 0x84, 0x6, {0xe436}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @sndinfo={0x20, 0x84, 0x2, {0xfff2, 0x1000c, 0x2db8, 0xfff, r8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffffff00}}, @init={0x18, 0x84, 0x0, {0x101, 0x4, 0x279b, 0x40}}, @init={0x18, 0x84, 0x0, {0x8, 0x9d26, 0x101, 0x67}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}], 0xd0, 0x800}, {&(0x7f0000000740)=@in={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000780)="f8", 0x1}, {&(0x7f00000007c0)="a4275ef47f6631ace564dde80232c1ea00c4fee5802bce01de4ecf2a3e59b36d9e6fd1d9518ed3347c73f047e19312e8474928fc66fd928e935e93a2d60d0f200db0270a8da1e92430d93418ed7e4976fd2a2b52593fb5d8ca94da432248850fe87c0fbe332e683c701b5d2e0f10d61844c8d4dd868e7de8eef6a07d16ea79bace9c9635c21a77b00e1079e7d454c33923b935642a70372a1db6506215c119a165f5c32674d122186881f6db4bcb42e9d3c19ccde505f4f0", 0xb8}, {&(0x7f0000000880)="6e1f8684b20eae1c66dfd0746744935da74ebfe41b95bbc60b21d30a60c4f0ef624231b241d9eb5da93bc78035bad64cbc77fa6e8eb7aca6c77fa059a44a5a2337772d463d6e8d4521972ec5e808cef8f4171382691b80ae0e3ad6499bc454c7648eb792253860c841f32aa51fc1acc0c18d310b7918e76cfa982a3a6e844b852898c8b68be2806fb12463689a72d66ccdb4f7495f49789bd534", 0x9a}, {&(0x7f0000000940)="283e1d0d3d39329b7fd9b716e8971371bb8f17be4bcef8802d946fc5eebad41fa198c1b8f8a7474240d89e907d9dbdd2", 0x30}, {&(0x7f0000000980)="ceda19b2f29d9aae7a0634375c0d11e0ec91605d7519b999fa13f3e42c05aa0e77e6b75fbca63ff40eb1114a489d7e2df29631bd7af7d7619d442217eb01ed4a642e41fa4a86ad1335d8b9b1eec212265869c96c39316a87c906209bfaf3ca3f6dee1713b2f586293a8ad76b12a136bfb922b4edc857a3bafa649bef", 0x7c}, {&(0x7f0000000a00)="979b6087b5e212d14010eafb5adcf0dc897e473598e7bd26475d79543496ef1a573ff8422ae4dd8f473afd573b78eeb2ae5cddd4655a0a37cd", 0x39}], 0x6, &(0x7f0000000ac0)=[@init={0x18, 0x84, 0x0, {0x4, 0x401, 0x1, 0x9}}], 0x18, 0x20000001}, {&(0x7f0000000b00)=@in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000b40)="8ab95617ff3b97efff6dc054c2ee509392e0a24c0a8f8f8b69d4058e0f2b5131981052dce939c0a3c4a43c1cef5967364129cd6bdad75aa0450bf33ac9cbaec1e0ee31c06cc74839b6fd273d1a4dbb64fbad3c036c490143cbb5e72bc10b05e2a26b604fa8fcc9e61de2d54f506ac0fe3bfafaad2c028ff366ceb1393e4ab8b1442d542e07b979a8b9ac9d0badf0d49398120b85659ec189f3719f00598c9ab651a8b622e43ac3902f371fe15f639e704e83d83e2c502ea38332683084b5f886", 0xc0}, {&(0x7f0000000c00)="71ab8304d03b3883027e8cf54e3a6f25564c621c07b0fe4c5e2d740c9439fd0f9575004caa671eece507c52531c678ef78c81dcc6e34b6a7f28600fbd95c6ab5d7d2245c9329bfb261e7d65a9e804c47872278547e5cfa06ea8e30729b19bb786b0295720ffa1af868f7a99e279d66c44a254982383e99d8c7bc2081a5534f67079d765733575bf48a4e3a873dd89e3affb8edf5dca87cece2", 0x99}, {&(0x7f0000000cc0)="5326b3a5e34aae8ad9e15c3284e9940f735e71467a029b99639598e90a86ad77d1de288b5b0aa21b488d61e2a51e6b4f63c0bb130c8ec45fb89cc75daf56f58d52c18aa83c42e09598eb91b6c118448e8800b5d7f81d2ec170a46410d9924d25b196a7eda1aa6581982a4c3988cc7fa9c3c54c6bb1855e798af975c35b6d902e2c0df491da4414b9c0c1ab63e84e772a462cd55d974a58131dea7809e840e4b501bb44c02410b0daf3b5912ffc261cf016319c63f802b701ebda63bd099d60c40d4cdd291bec7d838b4c1aced6acc946393480ea3b481eb86f64b25cd5855a7723ff02ac79fb13cf2aa55ad63efe41", 0xef}, {&(0x7f0000000dc0)="748f662cd0d6d5f28e9eaa2340fa11f72eb6393b4fdcf54a69d0aed161cc8133c8ffb073d93af3ade6eb42b03bc6a884b14d30b3c23e5d07d2b4d964ede3b8fbac93663365436154809cab71cd2c3052f17b80d3d6fd16b6c40478fc115a8900fd8e14864423614ed2bd77cd1e2731f361047ff4e615df537ab36043534b61ac91541aa43959e767db8577d38430edf11a7b726afe0632369781704b4124c63e187af679059dad3261acbc74e92d7beee2f842d10de842550959684bdf5504859383ed743f535e251ec2b3b1", 0xcc}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="0e7c06873c245d663b9593aeff7c", 0xe}], 0x6, &(0x7f0000000fc0)=[@authinfo={0x18, 0x84, 0x6, {0xba2a}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xffffff06}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x50}, {&(0x7f0000001040)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="630095a4f086817edf7b5d3eb6d8b28fce38ef50545fdf44fde63cab340245e5e9340ea64fe2eb4f62640e48fc737936fa7df7e09971f9e593370862b431dc8a989abd480aeae5f80b05cf8cf0336dc9b2a692a2a616b2ec65803ca5e1d8c3101d04be8057a70cdc9185a239db061b8e4aab773c853a0dba252a8938ec5ebdc082e6494981a4e323", 0x88}, {&(0x7f0000001140)="05260937cab7a2fa9446d766d994e651e655bcd60e9d883fe823c40003712e31c6da1571937e8da665e3ecb67190ebab72352d53f6d77daa5ea78e325ae3681bfe7b936cf59080b2e7b8d3ccc3bfbcf30d4c788937ca46dfed81c87375ff8a5594db5fb850b2b2989739d74850ac47825c138b2571ba37961149727830114cae54794e198c743e6453ae8de6468b2b588759a256351b1a53be270028267d326626e77c20fe544ee6", 0xa8}, {&(0x7f0000001200)="3c62726266bac2f7874860a0d7cd1f98b3ae6c5fab97c9e002b3608b295bf32e2be00a023385c52b834abefd0f625177787e6d98493c5554b2fe04cbeba9c208e2d3851537f0698ec959ec527d2c15e928f17321d71c9f1fc40021d766e5f4f2710f533ae12385f9e035e06d67fe0c43e9c06294e3dffbdb00f970ec5bfc60f0e22834658f3546cffc8672d1075ac6263f01d23d7cff8cda67acde3f5930d67a136348d4829671e5917327c61734570415f189fed56d04c57d27e5fca78baaf6b1a1f1ee6c4dd6ad6da19208bcf10084b69d5431", 0xd4}], 0x3, &(0x7f00000013c0)=[@sndrcv={0x30, 0x84, 0x1, {0xc, 0x6, 0x10209, 0x81, 0x8, 0x5, 0x7, 0x95, r9}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8000}}], 0x48, 0x8000}], 0x5, 0x14004802) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x38, r10, 0x2, 0x70bd23, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'pim6reg0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x1) 1m40.430588494s ago: executing program 4 (id=3376): socket(0x80000000000000a, 0x2, 0x0) unshare(0x22020600) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="e89531816ae29e77ba4759786c5a3c1364050504988e0ec854ab8dece00a018e53ad21706d1d561c47457859fdda0cc63a18f6a88ebc851ae1d8d5ce590c784bb8d5bcb49e5c62cec17996d6a41ea854a705424d84769e96b0498878fa9c56cfc77787fd16fa1cff95defa44fe891f9c3c53031908dc5aa9d680a169e0850d0fa6dbc68f7347e16b0a8ac9bfb28c78c64d06ddfa46063be056728d684cadd80310292996c43983c10d6a4617eaf7016bad45e392832fcbc65e81c8a721b2e1d54cca66b170f2b2abb6932f8a3d73708b986e032707beda5002a1c200489cf27ac868d0777dfaa9585e5ba1724c1a57440d5aaa239d00c8605a337971b179c6ec91224eb3ffd82e85dfea", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf2502000000050029000100000008003400080000000a000900ffffffffffff000005002e00010000000800390006000000080031000700000008003a0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000080) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) socket$inet(0xa, 0x801, 0x84) (async) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e21, 0xe0, @mcast1, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e21, 0xe0, @mcast1, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000200)=0x4) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) 1m40.192201552s ago: executing program 4 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000000000000000d8dc31335453da80000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r2, 0xfbdc, 0x5}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x8, 0x400, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0xab, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x3, [{@remote, 0x5}, {@rand_addr=0x64010100, 0x9}, {@remote, 0x3}, {@multicast2, 0xd8f}]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r12, 0x0) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r14 = accept(r11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x48001}, 0x4040804) shutdown(r14, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7, 0x700, 0x9, 0x5, {{0x26, 0x4, 0x2, 0x19, 0x98, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x23, 0xbd, [@loopback, @multicast2, @remote, @local, @local, @loopback, @empty, @loopback]}, @rr={0x7, 0x7, 0xfd, [@loopback]}, @timestamp_addr={0x44, 0x2c, 0x4f, 0x1, 0x2, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x40}, {@broadcast, 0x3}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0xa, [{@multicast1, 0x2}, {@multicast1, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xb4, r8, 0x30c, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40095}, 0x20008010) (async) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r16 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r16) 1m40.066902646s ago: executing program 0 (id=3379): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4008080) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1m39.9217526s ago: executing program 4 (id=3381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r2 = socket(0x18, 0x0, 0x2) getpeername$netrom(r2, 0x0, &(0x7f0000000080)=0xffffffffffffff77) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4000014) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r4, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local}) (async, rerun: 64) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (rerun: 64) 1m39.846929407s ago: executing program 0 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c000020000280140003000000000000000000d5", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x4, 0xe, 0x3, 0x1000, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x8, 0x10, 0x10000, 0x10001}}) 1m30.346608832s ago: executing program 0 (id=3383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711005000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd"], 0xfdef) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001e00)=ANY=[@ANYBLOB="197bb5036305ada738a1d1fc3c77a95004c4d9f7573fc2c5764cb8719c8b464f59578968502cdb12ae08ba81a94093336e6f0c82de5aa0aa62bd0e", @ANYRES16=r2, @ANYBLOB="04002abd7000fedbdf25030000001400018008000300850e00000800030001000000200002800400040008000100ff01000008000200ff0100000400040004000400"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) recvmmsg$unix(r1, &(0x7f0000001c00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f0000000080)=""/59, 0x3b}], 0x4, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4, 0x4}, {&(0x7f0000001900)=""/120, 0x78}, {&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/78, 0x4e}], 0x7, &(0x7f0000001b80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x2, 0x40, 0x0) 1m23.544933234s ago: executing program 34 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendto$packet(r2, &(0x7f0000000580)="4fa553d0fab842b73354df7c4ee1b5de44a01c6d1788befb94b9a7b2fce6713a55347e9a9a695eea10d029a25352cc014af9a0b637bc0cdafdf421163485101d8747bca2ca174c18767bbd4c4c85b69585c662d40eff4262f717451b394e04a5154310eefd788dd3c4cd09eeeefdd1f9bd930138707119ff70833b1e17fd666d5068", 0x82, 0x44c0, &(0x7f0000000640)={0x11, 0x17, r3, 0x1, 0xbc, 0x6, @broadcast}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) recvfrom$netrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x40010143, &(0x7f0000000140)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x150, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x48, 0x6, "e5951adda8bcf9f37a0d2f4f89c5e32cb9f488092474e47c60c21bcef405e71d94ae755ba26119d6e9bd1f9f6b33f13c777fef9ab20a6e7471357e0dec2b3fd6824b9161"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x40c89f21c2c7dbc2}, @NFTA_TABLE_USERDATA={0xca, 0x6, "e6a4dfcd2f2475cb677eea656928ed8538d59965f1453dae654ac1f64fb23a86ace286a042e085f9472e4987d823404706fd28246c49cf0a32d778c6e066973ec815fc69515e33faba800193f7e8f7fc294856c0bde0d13cd0ff73818d51be503b2b8c2f1c85447795d41fe2eb7a7ac4a1dc74e29bb259a9b6a8d17f3c17a91d64ab511e6e6f0bb6ca907494b4a78f684696e69f3069542496cdaf5167aa7d673e3bfe072388a609e9eddaadcee033f1f8f1314fa16ce50c730ac80a796de04460d3c777a9dd"}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a4}}, 0x8050) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0x2}, {0x0, 0x9}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x985, 0x2, 0xfffffffc, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xc7, 0x0, 0x4, 0x5d9, 0x2, 0x40, 0xff, 0xa}}, {0x18, 0x2, [0x6, 0xb, 0x0, 0x2, 0x6, 0x81, 0x7, 0x7ff, 0x8, 0xc]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x401, 0x0, 0xf, 0x6, 0x7}}, {0x12, 0x2, [0xf, 0x1ff, 0x1cea, 0x2, 0x9, 0xfffa, 0xec2]}}, {{0x1c, 0x1, {0x9, 0xa, 0xfd, 0x3, 0x1, 0x8, 0x8, 0x5}}, {0xe, 0x2, [0x877, 0x0, 0x5, 0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0xfe, 0x1, 0x7, 0x2, 0x2, 0x20008, 0x7}}, {0x12, 0x2, [0x2, 0x0, 0xffff, 0x1000, 0x5, 0x400, 0x3]}}, {{0x1c, 0x1, {0x2, 0x3, 0x5, 0x1ff, 0x2, 0xb289, 0x2, 0x9}}, {0x16, 0x2, [0x7, 0x6, 0x800, 0x8, 0xb0, 0x7, 0x8000, 0x4, 0x5]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, @in={0x2, 0x4e22, @local}], 0x3c) 1m22.687028717s ago: executing program 6 (id=3385): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000000)=0x6, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x43, 0x5]}, &(0x7f0000000080)=0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "40ecca63fff748a8", "e36129d52352dbfd365627c207144980dcdb1a87b17d595a359d5fbb99f2d8bb", "aabe3665", "b1a6edf711a86455"}, 0x38) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="6b5edfdccb9f86e529d1280ced", 0xd}, {&(0x7f0000000180)="066e18f2a73fb1ac789994779077b89b9f8f632a18426aa15a8139da619fbf6cce351b3c75451b8370ce87588fa6bb45aa08a7d00210bae5fec705dab52685ef003a93c9fe5a38", 0x47}], 0x2, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) r3 = getuid() r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)=[{&(0x7f00000002c0)={0x1a0, 0x26, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="c92063c60b3c6ce7c82fa67a82a733ebaf963f512b42ae2b5ba13e8749ec0e9db78de2ce6928b4f75eafe7f74e4346bcb4dcde8c7b5d9467ca989934ad9d89311696cecb3cb78a45b115279026a9f0d51f7e7a787e90dafb5e2d90add4dd3303aa8f059d0c3071853f6d61415fe9c46d2ba2e3126d1a9ed6e4524865f7c250c91e8453bc1297477ec33b0d6047fddf1eab9fc12028dc833b8148", @typed={0xc, 0x12e, 0x0, 0x0, @u64}, @typed={0x8, 0xe9, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0x7a, 0x0, 0x1, [@nested={0x4, 0xb0}]}, @nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0x109}]}, @generic="4c470e3b71798bdd08606a4649b1f4878701ed126992f61a1bd67c610d68cbdfdec580a8f0c614ca2bf7605e6c1f771266", @generic="52c7690212764ef1b888af7b498a76c4621fc95a025a0a45a55fb00b104992a308afc9f3585134ed9e33ecfc49f46c4c09934e86e3e1403047963a0dd17be9ed609cc4d63fbb358655038271abeba3c47067927db17209d06038a8925327d285443b433df0b2e1899f8cbaca64139e602ed69948c4d81d70aac00397d1f7660ec35fd39abaa1b28cac204d0b3d769479901a1495b13844dd", @typed={0x8, 0xa0, 0x0, 0x0, @uid=r3}]}, 0x1a0}, {&(0x7f0000000480)={0x100, 0x29, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@empty}, @nested={0x17, 0x48, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x6}, @generic="dea212"]}, @nested={0xc4, 0x96, 0x0, 0x1, [@generic="22f1061fbb7e067a50355c857b5a70810df1ed2709f5b60c4a10448899a6445919df36fe385619b32b30ea878a2987c56957325846ff364f1387bab2eec925bc68bb3b19a34bf031e0fabccf4111202939cd712d991c89db615a001ea47f654630065f00a1cfaa08884b16373c16ece0fbe16a9de661defadaffae9654b0d8b75071de", @generic="cef8e7326061895351b6cd7b3185c18b99d41e99853ddb6995cd362e42a709a1abcb69fe0932361d11780ba74bc8b9873677eb9931cf982ab4", @nested={0x4, 0x120}]}, @typed={0xc, 0x8c, 0x0, 0x0, @u64=0xc}]}, 0x100}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @rights={{0x2c, 0x1, 0x1, [r0, r6, r0, r1, r1, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r2, r2, r1, r2, r0, r0, r2]}}], 0x88, 0x4084}, 0x80005) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x170077ec}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62d3d501}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000a00)={{r9}, 0x0, 0xc, @unused=[0xe49b, 0x8, 0x0, 0x9], @subvolid=0x4}) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x2, 0x0, @multicast1}, &(0x7f0000001a40)=0x10, 0x80800) bind$inet(r10, &(0x7f0000001a80)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001ac0)={{r9}, "b4edc3ffbc144d954f1aa9c32adaacd9e17d06810abd8340fd270f43f298a2aae74c1dcd789b6294280bd37c3befb36cc20d04a47095edc5e547e8e2489027434c2f3496d60336f303891e3aebf45512bd81e8477977e214882262dfcff828b2bcb45084cf31b65439bb885cb80747e864b39de7ecb8edf4994e0c6065ea0c1ed8576e61982c6ff28787faea419393a59a874f286177efc14ed653b5a80de522685d8dc61bb4b1bbc0dbbc9a970c04cfa91416725f1100fd14403dcf9ae5db45a7ceb0fff3d92085c476fa4e20acba345851d5d8d9c79bd9d478df6a7b50e07bf744d980780c4228516cc93acfe7373ef5d4ec1ddeda1c23a8dc2b392fbb86cfaec3363b5db579d486fe46663edd4ecef98ec1d20f87a975918d90940d4e130bba2fc4f27ff62ac80037315687c3f924fe888af049cac5db1f56785adf1eeab2a91c9ff03e87d32bd1c337e2a02efee400edeba814c14ac750b17cbcd0d8f5d736d4edbf69db792f241d7ea6d1a128245eaba098ad9561daf55595eebcd3138771d79e724917c91742f659c11e146a05242d8767f6e0648f12b840b82142d809e695380d843f88278afdd7b3b4a541beef243a2a1370851f89dcc7c2de6e92462949e952e83e9221475a204a76ff993eaa76f48d647bd42a3644ffa3f4d8d947e8668def405c39f868d5b996b491a6292656cea5c8398157c063da44594c5cbc92e5910de75f633dd144b98368cfabc5384a505c75e463793d7a2975ff44f05877889e931a756bf1c8beb58d0981f811d4f2ae64237d1ae721482def8c96ba17100e63e2660f0b2234a441b52454220eebb4e75e76f329edca37a14581df79b3d2c4eca8bc61569ae1fa75a6967db1d7543d55f77cec1c76563361703e734c10717c7918330f2a8ae6c9d1d1de703fd594767c0e0737dcaf5f2ad8a2514657b73559c35d6a2cd3681831f32bad7654958acfdcb2846654114aeddca7acdc58fd7340a90a5ccac4bedb123980c92556f7fac631d50bd6322c6f53bb8634831d719618d78cb9d36d5bb2302e4036887d73cf388fee66301d88cfbc8b61a39ab40f86b31de9597af441337cfe72505d1b05d0a857f01fe85c787e0e14546944155294e84a4436966a28f037c94922ba7949aa4d60785bb54f406aa82930dde9fdf055ad72277066a56b53eb83fcd6c3d5afebfc2c42bc8233b4fe60dd7171aa24d1d122ef4513efc7afec109ddf23d0ad73419397fc3066d6e827728e83f4a9886b06192fd4eea6b51dae8889e93438984b98fb6dc2e3f9eb49e05f24b1f0c823e8f23367bb96db62ae72960d79d0502b58a42101d81fb4f3231995edc403a34d8b69778e468efd95782fc894ae48d501b7a913d857a0bea5ba147100f654ddadc8cf98397aedd4ed7522c915d99a9e88429e1d7fcd6d1e638014f2e950830f9164090846132eef57a885a66f3f07e458a333c1de305ade9a7e1efb3fdde0e3a4454fbafb402fb109a3d39f588b530282bfc88875afbf0ac0a06cefdabd21fb0262b0373da1d594aeb716243fddc28313234724523b61f2bd66cf2e2fdc49328067947c0a14a11fc004f8b7e345401c705c1b227f64297768042a15859d24142925fbe026b1729c589fa6dcff9704edba5d5eb57e5351088ed666db77167fee4fa859fcded3d2ef1b20ed2215480512d70e9dda91ddaebfc92ce514dc8e584a03fd1d91c9be39764ed51d8f3c8341b57ba2c9bf6f0a33ab74ecab9039d32195e57233222c0c66ca488b83e542de6694b2413e4ba641b2c9834ca0fb6b6720f256bd9b627aeaf940877cb1081e97c6d7a41c33e6bbca7a8200a196624d1b1c5fe2cbe4ddcc3afb1e9d7590577c090337da9e0c808f061662de79f78e258d0e717318d7a0152f832c6673d19b2f11459f6fd19b3f26a4d2f31c7d73a185e278769399d7640eacb65534f0e3cda0803a65385010ec6d29fcfd973e130d0b4d8a556f04456666b5fb949f583cf35ea8589d5dd3725c598267c1dcc247cf0ddd8101de100ad1ddeeb9f774e1c1e9d84dda549d3aa5863e9a5606a31a80cb9386f22ae3a9318c1fa5cd766fb53d83f3ff5f06bd4591b48df924105e7647ab12302dca2182bcf8935eb1e8c9237435796d0bbae07e6ea0e50f05521329eaa89732a7897da575a5073c1c1477f6e2ad743cb74c4bfade9d3a9a9eed64a1119fcc223a14630d94c22c49c80ffa2f6a2b1096f11e168bdebd346cf8a0d9b1e6914ed0e6b000a93745fb7cdb03d700420d68c02c96b31135576d824ee6ac7a66baebb320d70379dae1525493299ca224e2e18dc7d01ac65bb595688a50d452ec23aa8163deaa870b0b2d9cdb06a16add6b985f4f0c14388dbb1525bfbb340c4817b180a35aff0d0bb0fd2f161578f3e686add061942525345d0d3ee1775e430ff0c522805abb32b6af9ae0ba160a9cd26411d3a36386ffcbb0f1491c367b99cac3211813882bb825b86500967caf05524743161ee8277f383a4ce5663fbf2fffeb4bf95c5b623a7b4c74b7fe2072014bfff09d457e981a7f0683b5fce5405d0abe3ccd86bb49688ba85b7310edc382304d220dd8b5b72dcc03cc60f43dfca6c0a3ff322bd7914aae0bc99b36412b5d972970b46499f13ef5dd86ad465f4f77fbad7488b382544f73b04167c3d5635e828452b28bc4f3366095acccd694cb330471fefdeda99cffa427ef908628c565aa682cadb93d7cb6089a1143feb97f99f903f9a6d0c224ecd8a2eb9852252f06a77828f61f132b9a4d3254cf233393ec956c692646f42efc89420ac39415674210b071ff87b8abcc1f24d997de51551da9ddb19b291267cb653165ecddbc8fb88d296b79b5715c9e147f3acdc1723ff6d45f25c518fdf83251152905ddda218018d739254dfa9508c1bae7cbbda23bf3ccdf86e3c72927c9a69eac502c6b9b7ee0febe9cd44300db1d19a27f846e630b2d427e50d8f938732560617e48be6070db3a110bec0c55ffeb941aceed496a16052e5b173ee13e67e4fc1aa3c2be55322570ea2cd4fe7c33ecad4ae055277674fd4fa78cc7eed287f88cde75dcd1c3355f1408ef1b04357bbcd893e83160d9acf6f838135db9e6b3fb0417ed47d5bac2a661c4253d83d459444625397ffea095c0932b49cd228d057ca086e8f9bfd6b7ce76fa30f661bb89b11fab941368685465bb32d4dd3240b6d74cc0b49d7fbc3389413d01a73e4af4867a5624a811c8d7cf3ea90fd3b57f684e12ae51e33a66267d823086593d222d905e540a7c3c1e3171defab97f092c4cb85b9aa1e2c83e0d57deb229464e28f27998e7c986a80565410116d12400fc2693831938fc3373b65271599d38ff7970ae7246c8be08ed5f5c27336d664f46d04c604c19ef5f4ab615f5cba095d7fcbe6d67b21788031b5ff1623e70e71e6708dc47215ace18a9a7c2205c7f427e1b9f8bc5ecd3b2d87883d95e4734c6ad4ee4868573c9295cbd70d566ad9dad4ff7db9182b25e4c974db5701ae977a892d3470a86ade80fe25d231a1345b60ec159ed9a286c5d7cc5f3da29cd74e7da93605fb0a1af31bdd9cd12bc9268eb115ae94851e990be6e1c19b53683e70dc3cc2a22977213a84ad717704ff835c822ff50cc9aa3e2d1847626fb92e6a8777b873aac709a21e820e47e2fe1e2de82722ad54c7091f278f337e6e7eb0979db3bad198e23df84c4851560928fac7bcc42819e10a5cd50daab3b2948167736719a3032cb85d87824a3df890537954c8167fb58078a342b0abb2a5217959bd892cabca1a25c1ab7de832481fc5eaffe12b3e7f984227fc7a5c83123d7e9417035797af24100ec443591134954beeb6933401cad3a78a15461139372c29e317dec7fecb6dcd7ac25741da1c973265a46be7624c6bff55466021086575a72c19f0ca5e148527a799e492f3ffb52ef31bd90eb0f0e1d38448ae0929685c40bf4a6c6a4f70ee54c68d6d79428dfbf17fba8259197266f69bdab93a7eb6cd8037a4102ebb005cc6c218bdb915a2ef5718d169fd83711eccb1b2f34508839e4ea13b7bcb4b2e1ad99304690f8b06b7029280a211986a2a0097a042cd64eec2fd038bb4e81c1eaed23541e33151162a7cb46fe90afbd5dc229dae3f461c110fae3314fcc8b9448106325d50ed2fa37aaf547c41fe0f3af1a3a44e43d86888ac2fe74812212af0d8c073bb7c4d83ce7754842dea834f3eba0b447b5023d7e72a57bf158d08387edfa9ac4bb43c15d4988b86ad213c37baa244389c4ae773901bbd564ca2ddcdd2da20717ae341bb92d1a7acf41e28bc080d318674d5122a8c3d4b03665843d39f395a2ac0eb33d4f075b2ab99254159cd2a067ffc7226ee2de4fd9007250b764df30f516a6bb76040e87eb483050c4459da0f5d97f07a1843557c3e674f1333997c28d7b4cec0d1e9bf57653ffc8169efb329629efb4ad1166a2f31136ceed44a93a131d234e04eebe3c280501de4ed18d84900525a3a93b0df58d73bd7918ea69cd5c4ac203d9e0f0f2ddc1b3c2f761e0b9a1569ec845b9e122b36e2300cdfa81d3fabf086a53e71a196e7940c4a4b1c0b35a581663000285feed7fb479d867be71782c6b58e2c684aa3bc873c0ccdb8e782ec6ce776e1375de2391fc9cd0641e073efa6847d2f9355f6bd3777e15d6624f21cebd77663e90175bea04bb5d7d0281c05c9cdf646bfc81bf1a6aa5a1ea746b37f70d2147b012a68ca8a51140cc78aa4d8c73e4c3385504a920bfe9757d24d4845c19b642cd5f80498b55d5310c98171a9322af479cd6248880765f004156cf06185cdf8393e2a6ea1d1aa3bf2583489b6c0083dc8cd07d9d9c36c76514b412f7beb0cb3971c7c2b66a08ed8e539efaa61ce1b7fed7307f82a41395b029d635e88b7f138c12c4db06957d6874d80e7aeae8e69678b1290b4bbe903d87709b8a4dfeecdfb84016eb512ac8c2858e9ee307788b2b7562a95044eb1064363629e84b5b21cd19f3c167db8a94fe5414ebf29d04d4a171a6be6a26e8b0dd8f7f7f584b2238eecf5cbb34d3ecf6892d23626a8bd99396b44eb4d9593a9239af481db6c8755fda5ed710787318eaed2c8ee40f30f23bce7f9138ca105ebb688cebf0bb33113aeb1ec5f32a69734d9cc7a3202beb3391347070e7d9508b6de096b2e0b17e67e544570b70875bee05b499f4d7f97c15cb9a2e8aee0c5f7c71303f92c5ea47628f6f66badbaa7e0feced2c4544a9289e7a26d048f8b20ae7bacc322bf393d32623823b342ff365f69546cf48ec64b135778d3127083b2f055d94066f0aa5a3d99c93a8de531d1c818c7e8230aaaea7714df0cd777c3ef05308169413132fe92d1c3567825737c40165284e9f0485330d5ffbad0ae59f298f4c8b6035cd8d483bcc1a5a53c972d94ae97dd710527918548c8cd5ea762aae14b09a3aeed6bdc2a13d9398394ca2590eb36ba06eb996e334cd41a1e2814b40e6d8b6c9bb0612d5fe69a9e2f46f5c5b0dfa8ccdabf32fb69b580de453245efde0f2637229f242faa8aaf773018743c35447cb5d9933a10e1b4649af548d30a1c694a79e0d600ff08936124b40317ab5058db2fcb83d1277bb4753a7bbbf84ca3df8626b5019c9064255bcf42fc9413e60bdecd9cb420d27f5d56b1e1259b774dc5696882517f37c0d15fa2013cef25849a91db98ab7a512a45d791f795cf0b95248f2923642a26d583d8761953933a9f940966a320eb94bcbe41a0d9701d9dbd797165224d5ed10b220eb0d71e5ec"}) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000002ac0)=0x9, 0x4) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002b00)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r11, &(0x7f0000002b40)='cpuset.cpus\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000002b80)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000002c80)=0xe8) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000002cc0)=""/148, &(0x7f0000002d80)=0x94) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002dc0)={0x9, 0x6, 0x4, 0x6, 0x5, 0x5bbd, 0x0, 0x4}, &(0x7f0000002e00)={0x56aa, 0xd2c0, 0x7, 0x100000000, 0x26b2, 0x0, 0x5, 0x9}, &(0x7f0000002e40)={0x2, 0x0, 0x8000, 0x2, 0x2, 0x5, 0x2c0000000000000, 0x8}, &(0x7f0000002ec0)={r12, r13+10000000}, &(0x7f0000002f40)={&(0x7f0000002f00)={[0x401]}, 0x8}) socket$isdn_base(0x22, 0x3, 0x0) 1m19.667370472s ago: executing program 35 (id=3381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r2 = socket(0x18, 0x0, 0x2) getpeername$netrom(r2, 0x0, &(0x7f0000000080)=0xffffffffffffff77) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4000014) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r4, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local}) (async, rerun: 64) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (rerun: 64) 1m19.485205717s ago: executing program 0 (id=3387): r0 = socket(0x2a, 0x80004, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x5, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x4, 0x1, 0x8000000000007, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x40, 0x20, 0x7, 0x7, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @generic={0x88, 0xc, "643b862072a126933401"}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 32) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2502000000050005000000140004a4e50ef0c24c0b7fe17cd2cb00fe8000"/48], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async, rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYRES32=r4], &(0x7f0000000100)=0x28) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 1m10.923608736s ago: executing program 6 (id=3388): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @generic={0x6, 0xc, 0x1, 0x200, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x864}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, [0x9]}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) write(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1m6.06978879s ago: executing program 0 (id=3389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x200, 0x10000000, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (fail_nth: 1) 57.546881677s ago: executing program 0 (id=3390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x30, 0x0, "077d309381f6f5b011e9896c51b8b8b2c31140f6ce1b6e50674079e486eaab184475004f474dc434b2fa260f21bf5909f87d8ce713b07ab2999482fe98bf90219de365ec5e862ab29c10fab6e4e8eed2"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 57.10486215s ago: executing program 6 (id=3391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x12, 0x301, 0x70bd30, 0x25dfdbfd, {0x22, 0x2, 0x0, 0x54, {0x4e2b, 0x4e20, [0x44, 0x2, 0x0, 0xfff], [0x0, 0x7ffffffe], 0x0, [0x0, 0x2]}, 0xf1000000, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4004) 47.025202845s ago: executing program 6 (id=3392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6gre0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0xce, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @private0, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001dff28bd70000400df2500000000", @ANYRES64=r1, @ANYBLOB="8254010088520300200012800b000100697036746e6c0000100002800400130005000900290000000800040000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) 39.120881531s ago: executing program 36 (id=3390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x30, 0x0, "077d309381f6f5b011e9896c51b8b8b2c31140f6ce1b6e50674079e486eaab184475004f474dc434b2fa260f21bf5909f87d8ce713b07ab2999482fe98bf90219de365ec5e862ab29c10fab6e4e8eed2"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 33.910615047s ago: executing program 6 (id=3394): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x880) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$kcm(0x10, 0x2, 0x0) unshare(0x2c020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffff8, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4087, 0xff7}], 0x1}, 0x20018160) 19.149436415s ago: executing program 6 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8000000000000000200012800900010069706970000000001000028008000100", @ANYRES32=0x0, @ANYBLOB="040013001400030074756e6c3000"], 0x54}}, 0x1020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30}, 0x90) 0s ago: executing program 37 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8000000000000000200012800900010069706970000000001000028008000100", @ANYRES32=0x0, @ANYBLOB="040013001400030074756e6c3000"], 0x54}}, 0x1020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30}, 0x90) kernel console output (not intermixed with test programs): rt 8472 - 0 [ 435.438375][ T6026] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.448029][ T6026] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.514542][T14654] vxcan1 speed is unknown, defaulting to 1000 [ 435.844693][T14677] bond2: option mode: unable to set because the bond device has slaves [ 435.868072][T14679] syz_tun: entered promiscuous mode [ 435.874604][T14679] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 435.885900][T14679] macvlan0: entered promiscuous mode [ 435.891641][T14679] bond0: entered promiscuous mode [ 435.907249][T14679] bond2: (slave macvlan0): Enslaving as a backup interface with a down link [ 436.588210][T14709] netlink: 'syz.6.2169': attribute type 17 has an invalid length. [ 436.667081][T14709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.150706][T14716] vxcan1 speed is unknown, defaulting to 1000 [ 437.217709][T14723] sit0: Caught tx_queue_len zero misconfig [ 437.298526][T14725] bond0: option updelay: invalid value (18446744072065443590) [ 437.328757][T14725] bond0: option updelay: allowed values 0 - 2147483647 [ 437.346302][T14725] bond0 (unregistering): Released all slaves [ 437.395059][T14723] ip6tnl0: Caught tx_queue_len zero misconfig [ 437.646753][T14738] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2176'. [ 437.787788][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 437.835742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.984266][T14746] syzkaller1: entered promiscuous mode [ 437.997308][T14746] syzkaller1: entered allmulticast mode [ 438.031351][T14724] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 438.034010][ T30] audit: type=1107 audit(1759599444.756:7): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='PIôUñÜö%þÈzö fÑô¼qŠãQ‘cjixÊÐ.›ÎLi_ÍôŸö³ÌsÂ%;âN*”M ò'àé' [ 438.057879][T14746] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2179'. [ 438.409037][T14750] vxcan1 speed is unknown, defaulting to 1000 [ 438.648485][T14773] nbd: must specify an index to disconnect [ 438.789641][T14778] netlink: 'syz.4.2190': attribute type 4 has an invalid length. [ 438.822977][T14780] syz.4.2190: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 438.875935][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.4.2190 Not tainted syzkaller #0 PREEMPT(full) [ 438.875968][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.875990][T14780] Call Trace: [ 438.875999][T14780] [ 438.876010][T14780] dump_stack_lvl+0x189/0x250 [ 438.876056][T14780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.876084][T14780] ? __pfx__printk+0x10/0x10 [ 438.876119][T14780] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 438.876148][T14780] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 438.876180][T14780] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 438.876213][T14780] warn_alloc+0x214/0x310 [ 438.876250][T14780] ? __pfx_warn_alloc+0x10/0x10 [ 438.876292][T14780] ? __get_vm_area_node+0x28f/0x300 [ 438.876320][T14780] ? xskq_create+0xbf/0x170 [ 438.876359][T14780] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 438.876432][T14780] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.876471][T14780] ? __kasan_kmalloc+0x93/0xb0 [ 438.876501][T14780] vmalloc_user_noprof+0xad/0xf0 [ 438.876530][T14780] ? xskq_create+0xbf/0x170 [ 438.876565][T14780] xskq_create+0xbf/0x170 [ 438.876603][T14780] xsk_init_queue+0xb0/0x110 [ 438.876639][T14780] xsk_setsockopt+0x57b/0x8d0 [ 438.876674][T14780] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.876706][T14780] ? __pfx_aa_sk_perm+0x10/0x10 [ 438.876739][T14780] ? __fget_files+0x2a/0x420 [ 438.876767][T14780] ? aa_sock_opt_perm+0xff/0x1b0 [ 438.876801][T14780] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 438.876835][T14780] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.876869][T14780] do_sock_setsockopt+0x179/0x1b0 [ 438.876900][T14780] __x64_sys_setsockopt+0x13f/0x1b0 [ 438.876932][T14780] do_syscall_64+0xfa/0x3b0 [ 438.876954][T14780] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.876988][T14780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.877010][T14780] ? clear_bhb_loop+0x60/0xb0 [ 438.877038][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.877060][T14780] RIP: 0033:0x7fae2e98eec9 [ 438.877085][T14780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.877105][T14780] RSP: 002b:00007fae2cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.877128][T14780] RAX: ffffffffffffffda RBX: 00007fae2ebe6090 RCX: 00007fae2e98eec9 [ 438.877145][T14780] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 438.877159][T14780] RBP: 00007fae2ea11f91 R08: 0000000000000004 R09: 0000000000000000 [ 438.877173][T14780] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 438.877187][T14780] R13: 00007fae2ebe6128 R14: 00007fae2ebe6090 R15: 00007ffcb4528168 [ 438.877223][T14780] [ 438.877236][T14780] Mem-Info: [ 439.148895][T14780] active_anon:3973 inactive_anon:0 isolated_anon:0 [ 439.148895][T14780] active_file:3274 inactive_file:39992 isolated_file:0 [ 439.148895][T14780] unevictable:768 dirty:65 writeback:0 [ 439.148895][T14780] slab_reclaimable:12235 slab_unreclaimable:153896 [ 439.148895][T14780] mapped:29046 shmem:1362 pagetables:986 [ 439.148895][T14780] sec_pagetables:0 bounce:0 [ 439.148895][T14780] kernel_misc_reclaimable:0 [ 439.148895][T14780] free:1262136 free_pcp:21727 free_cma:0 [ 439.202259][T14780] Node 0 active_anon:15892kB inactive_anon:0kB active_file:13096kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120184kB dirty:260kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13696kB pagetables:3812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 439.236715][T14780] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 439.267949][T14780] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.296899][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 439.305746][T14780] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 439.326847][T14780] Node 0 DMA32 free:1139700kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15852kB inactive_anon:0kB active_file:13096kB inactive_file:159440kB unevictable:1536kB writepending:260kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:71820kB local_pcp:28432kB free_cma:0kB [ 439.397791][T14780] lowmem_reserve[]: 0 0 0 0 0 [ 439.402718][T14780] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.434941][T14780] lowmem_reserve[]: 0 0 0 0 0 [ 439.440182][T14780] Node 1 Normal free:3893484kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15232kB local_pcp:5248kB free_cma:0kB [ 439.473353][T14780] lowmem_reserve[]: 0 0 0 0 0 [ 439.481845][T14780] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.495039][T14780] Node 0 DMA32: 931*4kB (UME) 510*8kB (UME) 269*16kB (UME) 616*32kB (UM) 235*64kB (UME) 70*128kB (UME) 17*256kB (UM) 5*512kB (M) 4*1024kB (ME) 5*2048kB (UME) 258*4096kB (M) = 1133836kB [ 439.515094][T14780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.528299][T14780] Node 1 Normal: 165*4kB (U) 49*8kB (UME) 37*16kB (UME) 104*32kB (UME) 20*64kB (UM) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893484kB [ 439.547718][T14780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.557454][T14780] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.567428][T14780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.578568][T14780] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.588999][T14780] 44625 total pagecache pages [ 439.593807][T14780] 0 pages in swap cache [ 439.598327][T14780] Free swap = 124996kB [ 439.602647][T14780] Total swap = 124996kB [ 439.607412][T14780] 2097051 pages RAM [ 439.611322][T14780] 0 pages HighMem/MovableOnly [ 439.617218][T14780] 423781 pages reserved [ 439.621501][T14780] 0 pages cma reserved [ 441.131130][T14789] vxcan1 speed is unknown, defaulting to 1000 [ 441.376115][T14815] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2195'. [ 441.399635][T14817] tipc: Enabling of bearer rejected, failed to enable media [ 441.545855][T14807] vxcan1 speed is unknown, defaulting to 1000 [ 441.741447][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 441.751715][T14827] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2202'. [ 441.908973][T14836] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 441.999362][T14810] vxcan1 speed is unknown, defaulting to 1000 [ 442.535744][T14841] vxcan1 speed is unknown, defaulting to 1000 [ 442.641304][T14846] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2206'. [ 443.190181][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2208'. [ 443.532897][T14842] vxcan1 speed is unknown, defaulting to 1000 [ 443.536141][T14877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2212'. [ 443.582441][T14865] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2210'. [ 443.602933][T14865] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2210'. [ 443.628668][T14863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.903126][T14882] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2213'. [ 444.423261][T14888] vxcan1 speed is unknown, defaulting to 1000 [ 445.634940][T14938] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2228'. [ 445.798331][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 445.865169][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 446.011310][T14946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.044323][T14952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.140128][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'. [ 446.171402][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.438782][T14973] vxcan1 speed is unknown, defaulting to 1000 [ 446.477270][T14979] veth0: entered promiscuous mode [ 446.814520][T14979] netlink: 'syz.5.2238': attribute type 16 has an invalid length. [ 446.864453][T14995] netlink: 'syz.0.2240': attribute type 13 has an invalid length. [ 446.872477][T14995] netlink: 'syz.0.2240': attribute type 17 has an invalid length. [ 446.914247][T14979] netlink: 'syz.5.2238': attribute type 17 has an invalid length. [ 446.946673][T14995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.050665][T14976] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 447.064173][T14979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.190596][T14991] vxcan1 speed is unknown, defaulting to 1000 [ 447.249481][T14979] veth0: left promiscuous mode [ 447.410100][T15005] netlink: 'syz.1.2243': attribute type 10 has an invalid length. [ 447.769391][T15010] xfrm0: entered allmulticast mode [ 448.014460][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 448.160943][T15028] syzkaller0: entered promiscuous mode [ 448.166668][T15028] syzkaller0: entered allmulticast mode [ 448.407621][T15035] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2252'. [ 448.457354][T15037] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2250'. [ 448.492186][T15035] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2252'. [ 448.516977][T15037] ip6erspan1: entered promiscuous mode [ 448.540834][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 448.803138][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 448.820541][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 448.976655][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2256'. [ 449.007018][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 449.053436][T15051] vxcan1 speed is unknown, defaulting to 1000 [ 449.790108][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 449.806726][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2262'. [ 449.826098][T15079] nbd: illegal input index 218103808 [ 449.836732][T15079] block nbd0: NBD_DISCONNECT [ 449.841443][T15079] block nbd0: Send disconnect failed -32 [ 449.861936][T15079] block nbd0: shutting down sockets [ 450.050585][T15083] bond11: entered promiscuous mode [ 450.076454][T15083] bond11: entered allmulticast mode [ 450.092464][T15083] 8021q: adding VLAN 0 to HW filter on device bond11 [ 450.303067][T15087] vxcan1 speed is unknown, defaulting to 1000 [ 451.020500][T15131] netlink: 'syz.0.2274': attribute type 12 has an invalid length. [ 451.117532][T15137] syzkaller1: entered promiscuous mode [ 451.123071][T15137] syzkaller1: entered allmulticast mode [ 451.473804][T15158] pim6reg1: entered promiscuous mode [ 451.479645][T15158] pim6reg1: entered allmulticast mode [ 452.219560][T15179] openvswitch: netlink: Missing key (keys=40, expected=80) [ 452.284841][T15183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.490101][T15183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.654581][T15192] netlink: 'syz.4.2290': attribute type 3 has an invalid length. [ 453.674697][T15247] __nla_validate_parse: 11 callbacks suppressed [ 453.674720][T15247] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2306'. [ 453.723380][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 453.733819][T15253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.772742][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 453.851468][T15257] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 454.238238][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 454.581891][T15285] ipvlan0: entered promiscuous mode [ 454.919608][T15292] vxcan1 speed is unknown, defaulting to 1000 [ 455.423280][T15315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2326'. [ 455.827806][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 456.804145][T15343] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2330'. [ 456.829104][T15345] netlink: 'syz.0.2331': attribute type 6 has an invalid length. [ 456.902298][T15345] netlink: 'syz.0.2331': attribute type 12 has an invalid length. [ 456.928802][T15345] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2331'. [ 456.966673][T15350] !: renamed from dummy0 (while UP) [ 457.127655][T15352] vxcan1 speed is unknown, defaulting to 1000 [ 457.482982][T15365] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.649610][T15365] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.753475][T15365] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.866820][T15378] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 457.892544][T15365] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.062654][ T6031] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.104670][ T6031] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.164646][ T7063] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.225820][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.568543][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2345'. [ 458.577839][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2345'. [ 458.883243][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2346'. [ 458.995967][T15424] veth1_vlan: left allmulticast mode [ 459.006471][T15424] ipvlan1: left promiscuous mode [ 459.011606][T15424] bond3: left promiscuous mode [ 459.036911][T15424] bond4: left promiscuous mode [ 459.049520][T15424] gtp0: left promiscuous mode [ 459.071543][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 459.149762][T15424] gtp0: left allmulticast mode [ 459.184443][T15424] hsr1: left promiscuous mode [ 459.199303][T15424] ip6gre1: left allmulticast mode [ 459.227404][T15424] xfrm0: left allmulticast mode [ 459.233883][T15424] ip6erspan1: left promiscuous mode [ 459.269928][T15427] geneve3: entered promiscuous mode [ 459.289114][T15427] geneve3: entered allmulticast mode [ 459.558289][T15431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.583867][T15433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2351'. [ 459.608053][ T7055] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.620052][T15434] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2351'. [ 459.701147][ T7055] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.717251][ T7055] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.741888][T15441] syzkaller1: entered allmulticast mode [ 459.789254][ T7055] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.162717][T15462] C: renamed from team_slave_0 [ 460.198623][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2360'. [ 460.201042][T15462] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2359'. [ 460.218229][T15469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2358'. [ 460.257069][T15468] netlink: 'syz.6.2361': attribute type 7 has an invalid length. [ 460.264871][T15468] netlink: 'syz.6.2361': attribute type 8 has an invalid length. [ 460.290995][T15468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2361'. [ 460.423849][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 460.693862][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 460.822690][T15487] vxcan1 speed is unknown, defaulting to 1000 [ 460.907736][T15488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.014641][T15497] netlink: 'syz.0.2371': attribute type 10 has an invalid length. [ 461.354820][T15510] vxcan1 speed is unknown, defaulting to 1000 [ 462.282253][T15542] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 462.580079][T15542] 8021q: adding VLAN 0 to HW filter on device bond10 [ 462.637149][T15554] erspan0: entered allmulticast mode [ 462.670026][T15554] bond10: (slave erspan0): making interface the new active one [ 462.745487][T15554] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 463.052823][T15569] block nbd0: Unsupported socket: should be TCP or UNIX. [ 463.742596][T15596] netlink: 'syz.1.2395': attribute type 13 has an invalid length. [ 463.784141][T15596] netlink: 'syz.1.2395': attribute type 17 has an invalid length. [ 463.877883][T15599] vxcan1 speed is unknown, defaulting to 1000 [ 464.007788][T15611] __nla_validate_parse: 3 callbacks suppressed [ 464.007812][T15611] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2398'. [ 464.055972][T15611] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2398'. [ 464.142751][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2400'. [ 464.311432][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2402'. [ 464.341939][T15627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2401'. [ 464.379303][T15630] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2402'. [ 464.468405][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 464.899269][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2406'. [ 464.996224][T15650] netlink: 'syz.6.2406': attribute type 1 has an invalid length. [ 465.054915][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 465.076515][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 465.162025][T15655] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.619325][T15677] netlink: 'syz.5.2413': attribute type 1 has an invalid length. [ 465.761569][T15683] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.779967][T15683] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 465.812887][T15678] vxcan1 speed is unknown, defaulting to 1000 [ 465.912698][T15677] bond9: (slave bridge0): Enslaving as an active interface with a down link [ 465.994625][T15693] bond9: (slave gretap3): making interface the new active one [ 466.028272][T15693] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 466.290650][T15717] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 466.331017][T15713] vxcan1 speed is unknown, defaulting to 1000 [ 466.763303][T15731] netlink: 'syz.6.2427': attribute type 3 has an invalid length. [ 467.003980][T15738] netlink: 'syz.6.2427': attribute type 23 has an invalid length. [ 467.011829][T15731] vxcan1 speed is unknown, defaulting to 1000 [ 467.239159][T15743] pimreg: entered allmulticast mode [ 467.257638][T15743] pimreg: left allmulticast mode [ 467.575001][T15733] hsr_slave_0: left promiscuous mode [ 467.638146][T15733] hsr_slave_1: left promiscuous mode [ 467.804292][T15751] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 468.094802][T15755] vxcan1 speed is unknown, defaulting to 1000 [ 468.177354][T15780] netlink: 'syz.0.2435': attribute type 58 has an invalid length. [ 468.219134][T15776] netlink: 'syz.4.2431': attribute type 16 has an invalid length. [ 468.243165][T15776] netlink: 'syz.4.2431': attribute type 17 has an invalid length. [ 468.354599][T15776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.781268][T15795] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 469.076870][T15803] __nla_validate_parse: 12 callbacks suppressed [ 469.076892][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2443'. [ 469.278786][T15792] vxcan1 speed is unknown, defaulting to 1000 [ 469.887258][T15797] vxcan1 speed is unknown, defaulting to 1000 [ 470.204960][T15827] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 470.392389][T15835] gretap0: Device is already in use. [ 470.658628][T15836] vxcan1 speed is unknown, defaulting to 1000 [ 471.072263][T15858] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2457'. [ 471.260209][T15856] syzkaller1: entered promiscuous mode [ 471.270405][T15856] syzkaller1: entered allmulticast mode [ 471.344612][T15866] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2460'. [ 472.156335][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'. [ 472.274522][T15896] ip6gretap0: entered promiscuous mode [ 472.288654][T15896] macsec2: entered allmulticast mode [ 472.296135][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2468'. [ 472.313226][T15896] ip6gretap0: entered allmulticast mode [ 472.731479][T15917] syz.5.2471 (15917) used obsolete PPPIOCDETACH ioctl [ 472.990791][T15930] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.028367][T15935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'. [ 473.056758][T15934] macsec0: entered promiscuous mode [ 473.062159][T15934] macsec0: entered allmulticast mode [ 473.074368][T15930] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.093266][T15940] block nbd0: Unsupported socket: should be TCP or UNIX. [ 473.102841][T15939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'. [ 473.114012][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 473.136009][T15930] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.158221][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 473.194527][T15934] veth1_macvtap: entered allmulticast mode [ 473.201399][T15934] macsec0: left promiscuous mode [ 473.208160][T15934] macsec0: left allmulticast mode [ 473.213394][T15934] veth1_macvtap: left allmulticast mode [ 473.270887][T15930] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.514341][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2479'. [ 473.609953][T15769] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.638960][T15759] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.661848][T15759] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.700861][T15759] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.011991][T15769] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 474.690667][T15977] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 474.706932][T15977] __nla_validate_parse: 5 callbacks suppressed [ 474.706955][T15977] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2488'. [ 474.950111][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'. [ 474.977065][T16005] syzkaller0: entered promiscuous mode [ 474.994896][T16005] syzkaller0: entered allmulticast mode [ 475.009853][T16004] tipc: Enabled bearer , priority 0 [ 475.074724][T16012] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:18 [ 475.082574][T16004] tipc: Resetting bearer [ 475.143244][T16004] tipc: Disabling bearer [ 475.197625][T16016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2497'. [ 475.607697][T16033] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2504'. [ 475.970995][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2507'. [ 476.228817][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 476.250746][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2511'. [ 476.285786][T16065] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 476.330709][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2512'. [ 476.338423][T16058] tipc: Enabled bearer , priority 0 [ 476.403147][T16066] tipc: Resetting bearer [ 476.493209][T16066] vxcan1 speed is unknown, defaulting to 1000 [ 477.134997][T16057] tipc: Disabling bearer [ 477.983439][T16125] tipc: Enabling of bearer rejected, failed to enable media [ 478.265785][T16140] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2527'. [ 479.049018][T16163] vxcan1 speed is unknown, defaulting to 1000 [ 479.098880][T16167] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2535'. [ 479.664838][T16182] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 480.039955][T16191] tipc: Enabled bearer , priority 0 [ 480.111112][T16197] syzkaller0: entered promiscuous mode [ 480.140344][T16197] syzkaller0: entered allmulticast mode [ 480.229530][T16191] tipc: Resetting bearer [ 480.238799][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.248508][T16206] __nla_validate_parse: 5 callbacks suppressed [ 480.248530][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2548'. [ 480.267521][T16190] tipc: Resetting bearer [ 480.267739][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.281658][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.298565][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.319906][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.335373][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.344156][T16190] tipc: Disabling bearer [ 480.354976][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.373439][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.391972][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.409723][T16208] netlink: 'syz.5.2543': attribute type 5 has an invalid length. [ 480.418630][T16212] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2549'. [ 480.998466][T16248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2555'. [ 481.432032][T16262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 481.662673][T16270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 481.847066][T16279] pim6reg: entered allmulticast mode [ 482.040635][T16287] vxcan1 speed is unknown, defaulting to 1000 [ 482.113442][T16290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2566'. [ 482.128963][T16290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2566'. [ 482.192657][T16299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2568'. [ 482.419637][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 482.470215][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 483.584921][ T30] audit: type=1107 audit(1759599490.306:8): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 483.753112][T16364] vxcan1 speed is unknown, defaulting to 1000 [ 483.890933][T16375] tipc: New replicast peer: 255.255.255.255 [ 483.907948][T16375] tipc: Enabled bearer , priority 26 [ 485.097769][T16416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.331761][T16416] __nla_validate_parse: 129 callbacks suppressed [ 485.331785][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.349669][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.367584][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.376915][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.396601][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.405709][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.423765][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.433370][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.442936][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.452652][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 485.531238][T16425] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 485.546062][T16425] bridge0: port 1(wlan0) entered disabled state [ 485.586008][T16425] bond9: (slave ip6gretap2): Removing an active aggregator [ 485.608941][T16425] bond9: (slave ip6gretap2): Releasing backup interface [ 485.652438][ T6047] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.672048][ T6047] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.693074][ T6047] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 485.716344][ T6047] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.725273][ T6047] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.756662][ T6047] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 485.800074][ T6047] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.810055][ T6047] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.830965][ T6047] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 485.841678][ T6047] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.851321][ T6047] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.861233][ T6047] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 486.020712][T16442] vxcan1 speed is unknown, defaulting to 1000 [ 486.541588][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 486.692034][T16481] geneve6: entered promiscuous mode [ 486.706708][T15759] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 486.716033][T15766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 486.724442][T15766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 486.778766][T15766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 486.940536][T16495] validate_nla: 26 callbacks suppressed [ 486.940556][T16495] netlink: 'syz.5.2618': attribute type 13 has an invalid length. [ 487.884590][T16495] ip6gretap0: left allmulticast mode [ 487.972893][T15760] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.030301][T15760] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.065964][T15760] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.106991][T16494] vxcan1 speed is unknown, defaulting to 1000 [ 488.147782][T15760] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.102437][T16561] dvmrp1: left allmulticast mode [ 489.358630][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 489.365225][ T5837] Bluetooth: hci2: command 0x0405 tx timeout [ 490.664540][T16618] __nla_validate_parse: 91 callbacks suppressed [ 490.664560][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2650'. [ 490.696188][T16618] netlink: 'syz.5.2650': attribute type 5 has an invalid length. [ 490.703977][T16618] netlink: 'syz.5.2650': attribute type 8 has an invalid length. [ 490.750785][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2650'. [ 490.806972][T16618] geneve4: entered promiscuous mode [ 490.863266][T16618] geneve4: entered allmulticast mode [ 490.894177][ T7055] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 490.912626][ T7055] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 490.928941][ T7055] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 490.956473][ T7055] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 491.011501][T16635] vxcan1 speed is unknown, defaulting to 1000 [ 491.056049][T16640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.249790][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2653'. [ 491.928957][T16664] netlink: 'syz.6.2659': attribute type 21 has an invalid length. [ 491.938750][T16664] netlink: 'syz.6.2659': attribute type 20 has an invalid length. [ 492.067792][T16666] dvmrp8: entered allmulticast mode [ 492.186013][T16669] tipc: Enabled bearer , priority 0 [ 492.193873][T16669] syzkaller0: entered promiscuous mode [ 492.205716][T16669] syzkaller0: entered allmulticast mode [ 492.329914][T16667] vxcan1 speed is unknown, defaulting to 1000 [ 492.366537][T16669] tipc: Resetting bearer [ 492.398465][T16668] tipc: Resetting bearer [ 492.437579][T16668] tipc: Disabling bearer [ 493.136884][T16701] ip6erspan0: default FDB implementation only supports local addresses [ 493.193539][T16707] dvmrp1: entered allmulticast mode [ 493.318200][T16718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2671'. [ 493.771825][T16738] tipc: Enabled bearer , priority 0 [ 493.782708][T16744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2680'. [ 493.802969][T16730] syzkaller0: entered promiscuous mode [ 493.816954][T16737] netlink: 'syz.4.2679': attribute type 7 has an invalid length. [ 493.824942][T16730] syzkaller0: entered allmulticast mode [ 493.861747][T16737] netlink: 'syz.4.2679': attribute type 3 has an invalid length. [ 493.864009][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2680'. [ 493.884311][T16721] tipc: Resetting bearer [ 493.892430][T16737] netlink: 'syz.4.2679': attribute type 1 has an invalid length. [ 493.941664][T16721] tipc: Disabling bearer [ 494.160033][T16768] netlink: 'syz.5.2688': attribute type 1 has an invalid length. [ 494.168823][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 494.215800][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 494.232154][T16768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.283517][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2688'. [ 494.303732][T16769] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.314402][T16769] bond10: (slave batadv1): making interface the new active one [ 494.326046][T16769] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 494.520605][T16794] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 494.541352][T16775] bond10 (unregistering): (slave batadv1): Releasing active interface [ 494.568351][T16775] bond10 (unregistering): Released all slaves [ 494.740925][T16766] veth0_to_bond: left promiscuous mode [ 494.778558][T16785] vlan0: entered allmulticast mode [ 494.827325][T16785] veth1: entered allmulticast mode [ 494.999045][T16808] sctp: [Deprecated]: syz.4.2694 (pid 16808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.999045][T16808] Use struct sctp_sack_info instead [ 495.137664][T16812] vxcan1 speed is unknown, defaulting to 1000 [ 495.230156][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2694'. [ 495.716938][T16827] tipc: Enabled bearer , priority 0 [ 495.725054][T16827] syzkaller0: entered promiscuous mode [ 495.732612][T16827] syzkaller0: entered allmulticast mode [ 495.751247][T16824] tipc: Resetting bearer [ 495.862326][T16824] tipc: Disabling bearer [ 496.082036][T16839] Bluetooth: MGMT ver 1.23 [ 496.134915][T16839] geneve3: entered promiscuous mode [ 496.164381][T16847] __nla_validate_parse: 1 callbacks suppressed [ 496.164403][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 496.182468][ T7055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.255086][ T7055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.355463][ T7055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.389141][ T7055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.572521][T16859] netlink: 'syz.5.2703': attribute type 21 has an invalid length. [ 496.623461][T16859] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2703'. [ 496.640934][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2703'. [ 496.703441][T16857] tipc: Enabled bearer , priority 0 [ 496.723946][T16865] netlink: 'syz.5.2703': attribute type 21 has an invalid length. [ 496.734418][T16857] syzkaller0: entered promiscuous mode [ 496.740063][T16857] syzkaller0: entered allmulticast mode [ 496.789841][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 496.819592][T16865] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2703'. [ 496.849264][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2703'. [ 497.077854][T16857] tipc: Resetting bearer [ 497.203431][T16856] tipc: Resetting bearer [ 497.301502][T16856] tipc: Disabling bearer [ 497.320877][T16886] tipc: Enabling of bearer rejected, already enabled [ 497.339848][T16886] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 497.349705][T16886] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 497.588270][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 497.702790][T16900] tipc: Disabling bearer [ 497.829632][T16919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2719'. [ 498.013446][T16922] vxcan1 speed is unknown, defaulting to 1000 [ 498.082375][T16929] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 498.122572][T16929] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2723'. [ 498.191626][T16932] tipc: Enabling of bearer rejected, already enabled [ 498.581841][T16954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.842399][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2732'. [ 498.852544][T16962] netlink: 'syz.5.2732': attribute type 7 has an invalid length. [ 498.863809][T16930] vxcan1 speed is unknown, defaulting to 1000 [ 498.883545][T16962] netlink: 'syz.5.2732': attribute type 8 has an invalid length. [ 499.267482][T16955] vxcan1 speed is unknown, defaulting to 1000 [ 499.709544][T16981] tipc: Enabled bearer , priority 0 [ 499.727126][T16981] syzkaller0: entered promiscuous mode [ 499.732790][T16981] syzkaller0: entered allmulticast mode [ 499.769609][T16980] tipc: Resetting bearer [ 499.809718][T16980] tipc: Disabling bearer [ 499.824660][T16961] vxcan1 speed is unknown, defaulting to 1000 [ 500.334465][T16995] tipc: Enabled bearer , priority 0 [ 500.344859][T16995] syzkaller0: entered promiscuous mode [ 500.350855][T16995] syzkaller0: entered allmulticast mode [ 500.411996][T16999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.423204][T16999] netlink: 'syz.4.2743': attribute type 4 has an invalid length. [ 500.432494][T16995] tipc: Resetting bearer [ 500.519793][T16999] .`: renamed from bond0 (while UP) [ 500.611597][T16994] tipc: Resetting bearer [ 500.647534][T16994] tipc: Disabling bearer [ 501.189567][T17016] vxcan1 speed is unknown, defaulting to 1000 [ 501.272337][T17020] bridge13: port 1(macvlan0) entered blocking state [ 501.282546][T17020] bridge13: port 1(macvlan0) entered disabled state [ 501.290005][T17020] macvlan0: entered allmulticast mode [ 501.301408][T17020] macvlan0: entered promiscuous mode [ 501.320760][T17024] tipc: Enabled bearer , priority 0 [ 501.342370][T17024] syzkaller0: entered promiscuous mode [ 501.354468][T17024] syzkaller0: entered allmulticast mode [ 501.432367][T17021] tipc: Resetting bearer [ 501.497392][T17021] tipc: Disabling bearer [ 501.622371][ T30] audit: type=1107 audit(1759599508.346:9): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 502.160037][T17059] __nla_validate_parse: 4 callbacks suppressed [ 502.160060][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 502.839757][T17044] vxcan1 speed is unknown, defaulting to 1000 [ 503.132711][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 503.264540][T17082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 503.282300][T17043] vxcan1 speed is unknown, defaulting to 1000 [ 503.378206][T17086] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2763'. [ 503.476882][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 503.856683][T17080] vxcan1 speed is unknown, defaulting to 1000 [ 504.038481][T17103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2765'. [ 504.375265][T17083] vxcan1 speed is unknown, defaulting to 1000 [ 504.388598][T17115] syz.1.2767: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 504.426213][T17115] CPU: 1 UID: 0 PID: 17115 Comm: syz.1.2767 Not tainted syzkaller #0 PREEMPT(full) [ 504.426244][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.426258][T17115] Call Trace: [ 504.426267][T17115] [ 504.426277][T17115] dump_stack_lvl+0x189/0x250 [ 504.426315][T17115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.426343][T17115] ? __pfx__printk+0x10/0x10 [ 504.426377][T17115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.426408][T17115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.426439][T17115] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 504.426471][T17115] warn_alloc+0x214/0x310 [ 504.426509][T17115] ? __pfx_warn_alloc+0x10/0x10 [ 504.426551][T17115] ? __get_vm_area_node+0x28f/0x300 [ 504.426587][T17115] ? xskq_create+0xbf/0x170 [ 504.426627][T17115] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 504.426692][T17115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 504.426722][T17115] ? xskq_create+0x56/0x170 [ 504.426759][T17115] ? __kasan_kmalloc+0x93/0xb0 [ 504.426789][T17115] vmalloc_user_noprof+0xad/0xf0 [ 504.426817][T17115] ? xskq_create+0xbf/0x170 [ 504.426851][T17115] xskq_create+0xbf/0x170 [ 504.426888][T17115] xsk_init_queue+0xb0/0x110 [ 504.426925][T17115] xsk_setsockopt+0x57b/0x8d0 [ 504.426959][T17115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 504.426988][T17115] ? __pfx_aa_sk_perm+0x10/0x10 [ 504.427021][T17115] ? __fget_files+0x2a/0x420 [ 504.427048][T17115] ? aa_sock_opt_perm+0xff/0x1b0 [ 504.427084][T17115] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 504.427117][T17115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 504.427150][T17115] do_sock_setsockopt+0x179/0x1b0 [ 504.427181][T17115] __x64_sys_setsockopt+0x13f/0x1b0 [ 504.427213][T17115] do_syscall_64+0xfa/0x3b0 [ 504.427234][T17115] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.427267][T17115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.427288][T17115] ? clear_bhb_loop+0x60/0xb0 [ 504.427316][T17115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.427337][T17115] RIP: 0033:0x7f5d39f8eec9 [ 504.427357][T17115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.427376][T17115] RSP: 002b:00007f5d3adff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.427400][T17115] RAX: ffffffffffffffda RBX: 00007f5d3a1e5fa0 RCX: 00007f5d39f8eec9 [ 504.427416][T17115] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 504.427429][T17115] RBP: 00007f5d3a011f91 R08: 0000000000000004 R09: 0000000000000000 [ 504.427443][T17115] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 504.427457][T17115] R13: 00007f5d3a1e6038 R14: 00007f5d3a1e5fa0 R15: 00007ffc673407d8 [ 504.427492][T17115] [ 504.427502][T17115] Mem-Info: [ 504.607232][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 504.611706][T17115] active_anon:4009 inactive_anon:0 isolated_anon:0 [ 504.611706][T17115] active_file:3274 inactive_file:40020 isolated_file:0 [ 504.611706][T17115] unevictable:3836 dirty:55 writeback:0 [ 504.611706][T17115] slab_reclaimable:12543 slab_unreclaimable:169252 [ 504.611706][T17115] mapped:35236 shmem:4423 pagetables:1064 [ 504.611706][T17115] sec_pagetables:0 bounce:0 [ 504.611706][T17115] kernel_misc_reclaimable:0 [ 504.611706][T17115] free:1251495 free_pcp:13209 free_cma:0 [ 504.758766][T17115] Node 0 active_anon:16136kB inactive_anon:0kB active_file:13096kB inactive_file:159876kB unevictable:13808kB isolated(anon):0kB isolated(file):0kB mapped:140944kB dirty:220kB writeback:0kB shmem:16156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13892kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.805413][T17115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.836295][T17115] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.875925][T17115] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 504.881937][T17115] Node 0 DMA32 free:1096100kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16124kB inactive_anon:0kB active_file:13096kB inactive_file:159552kB unevictable:13824kB writepending:220kB present:3129332kB managed:2566256kB mlocked:12288kB bounce:0kB free_pcp:37728kB local_pcp:19656kB free_cma:0kB [ 504.915767][T17115] lowmem_reserve[]: 0 0 0 0 0 [ 504.921016][T17115] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.096595][T17115] lowmem_reserve[]: 0 0 0 0 0 [ 505.105685][T17115] Node 1 Normal free:3893764kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15016kB local_pcp:9984kB free_cma:0kB [ 505.176110][T17115] lowmem_reserve[]: 0 0 0 0 0 [ 505.196960][T17115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 505.228519][T17115] Node 0 DMA32: 2*4kB (UE) 1*8kB (M) 1*16kB (U) 376*32kB (UM) 251*64kB (UME) 145*128kB (UME) 53*256kB (UM) 20*512kB (UM) 14*1024kB (UME) 6*2048kB (UM) 241*4096kB (UM) = 1084256kB [ 505.278419][T17115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.290391][T17115] Node 1 Normal: 163*4kB (U) 49*8kB (UME) 37*16kB (UME) 109*32kB (UME) 22*64kB (UM) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893764kB [ 505.309324][T17115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.322396][T17115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.333222][T17115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.343689][T17115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.365183][T17115] 50575 total pagecache pages [ 505.377845][T17115] 0 pages in swap cache [ 505.399268][T17115] Free swap = 124996kB [ 505.403578][T17115] Total swap = 124996kB [ 505.408183][T17115] 2097051 pages RAM [ 505.423839][T17115] 0 pages HighMem/MovableOnly [ 505.428892][T17115] 423781 pages reserved [ 505.433072][T17115] 0 pages cma reserved [ 505.632653][T17133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2772'. [ 505.650609][T17131] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 505.784065][T17133] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2772'. [ 505.799647][T17133] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2772'. [ 506.146737][T17147] netlink: 'syz.4.2776': attribute type 1 has an invalid length. [ 506.164769][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 506.553890][T17152] vxcan1 speed is unknown, defaulting to 1000 [ 506.567164][T17161] gretap2: entered promiscuous mode [ 506.583849][T17163] syzkaller1: entered promiscuous mode [ 506.589723][T17163] syzkaller1: entered allmulticast mode [ 506.837994][T17170] bond11: option mode: invalid value (254) [ 506.848741][T17170] bond11 (unregistering): Released all slaves [ 506.992984][T17154] vxcan1 speed is unknown, defaulting to 1000 [ 507.193335][T17179] __nla_validate_parse: 2 callbacks suppressed [ 507.193354][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2787'. [ 507.332708][T17182] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 507.591740][T17199] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 507.605428][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 507.652266][T17199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2790'. [ 508.187084][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2795'. [ 508.663332][T17238] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2802'. [ 508.938131][T17243] vxcan1 speed is unknown, defaulting to 1000 [ 509.064019][T17251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2805'. [ 509.468831][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2809'. [ 509.478868][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2809'. [ 509.651165][T17254] vxcan1 speed is unknown, defaulting to 1000 [ 510.004800][T17290] netlink: 'syz.0.2814': attribute type 13 has an invalid length. [ 510.030964][T17290] netlink: 'syz.0.2814': attribute type 17 has an invalid length. [ 510.088969][T17290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.273720][T17286] vxcan1 speed is unknown, defaulting to 1000 [ 510.981916][T17314] vxcan1 speed is unknown, defaulting to 1000 [ 511.260606][T17326] netlink: 'syz.6.2823': attribute type 1 has an invalid length. [ 511.407108][T17326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.424782][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 511.663141][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 511.677855][T17330] vxcan1 speed is unknown, defaulting to 1000 [ 511.931984][T17345] sctp: [Deprecated]: syz.4.2827 (pid 17345) Use of int in max_burst socket option deprecated. [ 511.931984][T17345] Use struct sctp_assoc_value instead [ 512.480511][T17347] vxcan1 speed is unknown, defaulting to 1000 [ 512.916287][T17350] vxcan1 speed is unknown, defaulting to 1000 [ 512.959259][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 512.989091][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 513.019006][T17363] netlink: 'syz.0.2832': attribute type 5 has an invalid length. [ 513.315244][T17372] macsec0: entered allmulticast mode [ 513.341224][T17376] veth1_macvtap: entered allmulticast mode [ 513.371509][T17376] macsec0: left allmulticast mode [ 513.378370][T17376] veth1_macvtap: left allmulticast mode [ 513.432765][T17372] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2833'. [ 513.443504][T17372] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2833'. [ 513.643743][T17388] netlink: 'syz.4.2838': attribute type 13 has an invalid length. [ 514.258998][T17403] netlink: 'syz.5.2841': attribute type 1 has an invalid length. [ 514.293788][T17403] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2841'. [ 514.304384][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 514.337101][T17403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2841'. [ 514.412452][T17388] .`: left promiscuous mode [ 514.417446][T17388] syz_tun: left promiscuous mode [ 514.538454][T17399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.572127][ T6047] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.594243][ T6047] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.618675][T17401] vxcan1 speed is unknown, defaulting to 1000 [ 514.631116][ T6047] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.742811][ T6047] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.003863][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 515.020899][T17436] !: renamed from dummy0 [ 515.705760][ T7055] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 515.716162][ T7055] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 515.769570][ T7055] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 515.786636][ T7055] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 515.855102][T17474] netlink: 'syz.4.2857': attribute type 7 has an invalid length. [ 515.879153][T17468] bond0: entered promiscuous mode [ 515.896445][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.363513][T17494] tipc: Enabling of bearer rejected, already enabled [ 516.379064][T17489] vxcan1 speed is unknown, defaulting to 1000 [ 516.402546][T17473] tipc: Enabled bearer , priority 0 [ 516.434468][T17494] tipc: Resetting bearer [ 516.457811][T17473] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 516.480027][T17473] tipc: Resetting bearer [ 516.553456][T17499] tipc: Enabled bearer , priority 0 [ 516.593027][T17499] tipc: Resetting bearer [ 516.636172][T17498] tipc: Disabling bearer [ 516.704714][T17502] bond11 (unregistering): Released all slaves [ 516.818698][T17464] tipc: Disabling bearer [ 517.146046][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 517.156287][T17508] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.273589][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2869'. [ 517.319045][T17513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.366213][T17512] vlan3: entered allmulticast mode [ 517.465264][T17519] ipip1: entered promiscuous mode [ 517.904096][T17540] IPVS: length: 4096 != 204795574264 [ 518.013200][T17537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 518.031699][T17547] __nla_validate_parse: 3 callbacks suppressed [ 518.031720][T17547] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2879'. [ 518.100611][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 518.141001][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2877'. [ 518.359912][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 518.489148][T17578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'. [ 518.518833][T17579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'. [ 519.292895][T17602] vxcan1 speed is unknown, defaulting to 1000 [ 519.405879][T17605] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 519.413853][T17605] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2887'. [ 519.432972][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 519.449556][T17607] bond2: option mode: unable to set because the bond device has slaves [ 519.511136][T17610] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2889'. [ 520.015284][T17607] macvlan1: entered promiscuous mode [ 520.021611][T17607] macvlan1: entered allmulticast mode [ 520.030390][T17607] veth0: entered allmulticast mode [ 520.040685][T17607] bond2: (slave macvlan1): Enslaving as a backup interface with a down link [ 520.084070][T17619] veth0_to_bond: entered allmulticast mode [ 521.183110][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.193361][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.204151][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.214843][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.223988][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.349461][T17655] vxcan1 speed is unknown, defaulting to 1000 [ 521.421226][T17670] veth1_to_team: left promiscuous mode [ 521.427811][T17670] veth1_to_team: entered allmulticast mode [ 521.437741][T17670] Bluetooth: MGMT ver 1.23 [ 521.444884][T17669] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 521.457830][T17669] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 521.865220][T17678] vxcan1 speed is unknown, defaulting to 1000 [ 522.089804][T17697] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2910'. [ 522.473927][T17655] chnl_net:caif_netlink_parms(): no params data found [ 522.845084][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'. [ 523.004234][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.014728][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.031787][T17655] bridge_slave_0: entered allmulticast mode [ 523.044753][T17655] bridge_slave_0: entered promiscuous mode [ 523.067051][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.083171][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.097558][T17655] bridge_slave_1: entered allmulticast mode [ 523.112521][T17655] bridge_slave_1: entered promiscuous mode [ 523.221555][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.245610][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.275783][ T5837] Bluetooth: hci0: command tx timeout [ 523.302535][T17735] __nla_validate_parse: 2 callbacks suppressed [ 523.302556][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2919'. [ 523.334799][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2919'. [ 523.336045][T17655] team0: Port device team_slave_0 added [ 523.387880][T17655] team0: Port device team_slave_1 added [ 523.480693][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 523.496410][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2919'. [ 523.669937][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.690390][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.734658][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.816761][T15760] nci: nci_rx_work: unknown MT 0x1 [ 523.844904][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.853851][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.884184][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.967409][T17742] vxcan1 speed is unknown, defaulting to 1000 [ 524.043278][T17655] hsr_slave_0: entered promiscuous mode [ 524.059844][T17655] hsr_slave_1: entered promiscuous mode [ 524.076166][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 524.089807][T17655] Cannot create hsr debugfs directory [ 524.214137][T17756] syzkaller0: entered promiscuous mode [ 524.220661][T17756] syzkaller0: entered allmulticast mode [ 524.339686][T17736] vxcan1 speed is unknown, defaulting to 1000 [ 524.450582][T17655] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 524.482981][T17758] netlink: 'syz.6.2926': attribute type 1 has an invalid length. [ 524.491626][T17758] netlink: 'syz.6.2926': attribute type 2 has an invalid length. [ 524.590391][T17655] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 524.728731][T17655] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 524.779189][T17741] vxcan1 speed is unknown, defaulting to 1000 [ 524.857155][T17773] netlink: 'syz.5.2929': attribute type 28 has an invalid length. [ 524.892233][T17655] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 525.310675][T17779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2932'. [ 525.355963][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 525.696489][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2935'. [ 525.800985][T17789] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2935'. [ 525.859877][T17655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.932551][T17655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.976230][T17655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.988243][T17655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.224948][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.319287][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.421643][T15766] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.429019][T15766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.512559][T17810] siw: device registration error -23 [ 526.524264][T15759] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.531539][T15759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.912662][T17820] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 527.080002][T17825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 527.203567][T17830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2941'. [ 527.402577][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.443827][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 527.501133][T17655] veth0_vlan: entered promiscuous mode [ 527.514472][T17655] veth1_vlan: entered promiscuous mode [ 527.684397][T17840] vxcan1 speed is unknown, defaulting to 1000 [ 527.710256][T17655] veth0_macvtap: entered promiscuous mode [ 527.756189][T17655] veth1_macvtap: entered promiscuous mode [ 527.834920][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.870555][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.928409][T15760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.955710][T15760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.964607][T15760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.044455][T15760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.080148][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 528.321924][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2946'. [ 528.391513][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2946'. [ 528.401819][T17848] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 528.410552][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2946'. [ 528.416216][T15770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.449007][T15770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.560396][T15770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.576381][T15770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.854171][T17862] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2895'. [ 529.143033][ T9152] IPVS: starting estimator thread 0... [ 529.258569][T17871] IPVS: using max 23 ests per chain, 55200 per kthread [ 529.404302][T17880] netlink: 'syz.5.2953': attribute type 2 has an invalid length. [ 529.405912][T17883] tipc: Enabling of bearer rejected, failed to enable media [ 529.437344][T17883] sctp: [Deprecated]: syz.0.2955 (pid 17883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.437344][T17883] Use struct sctp_sack_info instead [ 529.462174][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2954'. [ 529.508951][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 529.520045][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 529.613290][T17886] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2956'. [ 530.018022][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2961'. [ 530.096559][T17907] 8021q: adding VLAN 0 to HW filter on device bond11 [ 530.121499][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2963'. [ 530.184496][T17912] 8021q: adding VLAN 0 to HW filter on device bond11 [ 530.222639][T17912] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 530.301775][T17920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2961'. [ 530.353672][T17912] bond11: (slave wireguard0): Error -95 calling set_mac_address [ 531.283793][T17938] netlink: 'syz.0.2968': attribute type 10 has an invalid length. [ 531.354695][T17938] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.368541][T17938] bond0: (slave team0): Enslaving as an active interface with an up link [ 531.416524][T17923] vxcan1 speed is unknown, defaulting to 1000 [ 531.596883][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 531.851945][T17946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 532.009174][T17964] netlink: 'syz.5.2976': attribute type 5 has an invalid length. [ 532.045659][T17953] vxcan1 speed is unknown, defaulting to 1000 [ 532.901336][T17995] IPVS: Scheduler module ip_vs_sip not found [ 533.046353][T17995] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 [ 533.589148][T18012] netlink: 'syz.1.2990': attribute type 58 has an invalid length. [ 533.599655][T18012] __nla_validate_parse: 8 callbacks suppressed [ 533.599673][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2990'. [ 535.818623][T18026] netlink: 'syz.5.2993': attribute type 4 has an invalid length. [ 535.850555][T18026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2993'. [ 536.034566][T18032] ip6erspan1: entered allmulticast mode [ 536.290983][T18044] netlink: 558 bytes leftover after parsing attributes in process `syz.5.3001'. [ 536.757538][ T5846] .`: (slave syz_tun): Releasing backup interface [ 536.774586][ T5846] .`: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 536.891399][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.902143][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.918282][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.962928][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.978524][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.012757][T18061] vxcan1 speed is unknown, defaulting to 1000 [ 537.266577][T18064] vxcan1 speed is unknown, defaulting to 1000 [ 537.406899][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 538.068127][T18111] tipc: Enabled bearer , priority 0 [ 538.080828][T18111] tipc: Resetting bearer [ 538.122938][T18110] tipc: Disabling bearer [ 538.309837][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3023'. [ 538.333567][T18130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 538.878968][T15759] geneve0 (unregistering): left promiscuous mode [ 538.889407][T15759] team0: Port device geneve0 removed [ 538.940454][T18159] netlink: 'syz.1.3030': attribute type 10 has an invalid length. [ 538.990809][T18160] netlink: 'syz.1.3030': attribute type 10 has an invalid length. [ 539.036160][ T5837] Bluetooth: hci4: command tx timeout [ 539.435264][T15759] bond2 (unregistering): (slave macvlan3): Removing an active aggregator [ 539.446500][T15759] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 539.454707][T15759] bond2 (unregistering): (slave macvlan3): the permanent HWaddr of slave - 2e:48:92:97:05:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 539.489680][T15759] bond2 (unregistering): (slave macvlan0): Releasing backup interface [ 539.498698][T15759] macvlan0 (unregistering): left promiscuous mode [ 539.511014][T15759] .` (unregistering): (slave team0): Releasing backup interface [ 539.520661][T15759] .` (unregistering): Released all slaves [ 539.629808][T15759] bond1 (unregistering): Released all slaves [ 539.736916][T15759] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 539.746944][T15759] veth0: left allmulticast mode [ 539.753325][T15759] bond2 (unregistering): Released all slaves [ 539.853847][T15759] bond3 (unregistering): (slave bond4): Releasing backup interface [ 539.862857][T15759] bond3 (unregistering): Released all slaves [ 539.967100][T15759] bond4 (unregistering): Released all slaves [ 539.982027][T15759] bond5 (unregistering): Released all slaves [ 539.996990][T15759] bond6 (unregistering): Released all slaves [ 540.103666][T15759] bond7 (unregistering): Released all slaves [ 540.118586][T15759] bond8 (unregistering): Released all slaves [ 540.221578][T15759] bond9 (unregistering): Released all slaves [ 540.339894][T15759] bond0 (unregistering): Released all slaves [ 540.511733][T18147] syzkaller0: entered allmulticast mode [ 540.531630][T18157] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 540.546521][T18159] .`: (slave 0!): Releasing backup interface [ 540.579862][T18160] .`: (slave 0!): Enslaving as an active interface with an up link [ 540.621968][T18166] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 540.634628][T18167] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 541.117926][ T5837] Bluetooth: hci4: command tx timeout [ 541.342171][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3035'. [ 541.352174][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3035'. [ 542.491370][T18173] vxcan1 speed is unknown, defaulting to 1000 [ 542.538343][T18064] chnl_net:caif_netlink_parms(): no params data found [ 542.679738][T18201] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3036'. [ 542.809491][T18201] batadv2: entered promiscuous mode [ 542.814953][T18201] batadv2: entered allmulticast mode [ 542.935286][T15759] tipc: Left network mode [ 543.000932][T18064] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.026362][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.043761][T15759] IPVS: stopping backup sync thread 13118 ... [ 543.053802][T18064] bridge_slave_0: entered allmulticast mode [ 543.065416][T18064] bridge_slave_0: entered promiscuous mode [ 543.112504][T18064] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.124789][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.132421][T18064] bridge_slave_1: entered allmulticast mode [ 543.141781][T18064] bridge_slave_1: entered promiscuous mode [ 543.149562][T18205] vxcan1 speed is unknown, defaulting to 1000 [ 543.199289][ T5837] Bluetooth: hci4: command tx timeout [ 543.348006][T18221] team0: Port device team_slave_0 removed [ 543.459408][T18228] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3044'. [ 543.523138][T18064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.557294][T18064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.603483][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 543.701271][T18064] team0: Port device team_slave_0 added [ 543.735974][T18064] team0: Port device team_slave_1 added [ 543.802697][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 544.059181][T18064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.068224][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.097731][T18064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.187927][T18064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.195161][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.223722][T18064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.246627][T18064] hsr_slave_0: entered promiscuous mode [ 545.253504][T18064] hsr_slave_1: entered promiscuous mode [ 545.274093][T18064] debugfs: 'hsr0' already exists in 'hsr' [ 545.280169][ T5837] Bluetooth: hci4: command tx timeout [ 545.286186][T18064] Cannot create hsr debugfs directory [ 545.451927][T18264] bond10: (slave erspan0): Releasing active interface [ 545.474997][T18270] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3057'. [ 545.525428][T18264] .`: (slave 0!): Releasing backup interface [ 545.563939][T18264] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 545.657209][T15759] IPVS: stop unused estimator thread 0... [ 545.727179][T18264] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 545.982500][T18287] tipc: Enabled bearer , priority 0 [ 546.005129][T18286] tipc: Resetting bearer [ 546.081382][T18284] tipc: Disabling bearer [ 546.176412][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3063'. [ 546.247765][T18298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3064'. [ 546.430334][T18298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.438386][T18298] bridge0: port 3(bond1) entered blocking state [ 546.444944][T18298] bridge0: port 3(bond1) entered disabled state [ 546.452156][T18298] bond1: entered allmulticast mode [ 546.460951][T18298] bond1: entered promiscuous mode [ 546.467155][T18298] bridge0: port 3(bond1) entered blocking state [ 546.473740][T18298] bridge0: port 3(bond1) entered forwarding state [ 547.063468][ T6047] bridge0: port 3(bond1) entered disabled state [ 547.183166][T18337] bridge6: entered allmulticast mode [ 547.245295][T18064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 547.343457][T18064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.419401][T18064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 547.505800][T18064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.625580][T18360] vxcan1 speed is unknown, defaulting to 1000 [ 547.769793][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.812445][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.850092][T15760] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.857372][T15760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.904197][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.911435][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.478109][T18370] vxcan1 speed is unknown, defaulting to 1000 [ 548.758083][T18389] netlink: 'syz.5.3085': attribute type 21 has an invalid length. [ 548.766590][T18388] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 548.868258][T18064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.286973][T18399] vlan0: entered promiscuous mode [ 549.600236][T18064] veth0_vlan: entered promiscuous mode [ 549.664712][T18064] veth1_vlan: entered promiscuous mode [ 549.775325][T18064] veth0_macvtap: entered promiscuous mode [ 549.849103][T18064] veth1_macvtap: entered promiscuous mode [ 549.880214][T18064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.920300][T18064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.960739][ T7055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.982742][ T7055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.003518][ T7055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.036997][ T7055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.153321][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3090'. [ 550.245119][T15760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.286006][T15760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.372482][T15760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.394771][T15760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.723223][T18447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3101'. [ 550.744354][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3099'. [ 550.762564][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'. [ 550.927645][T18447] vxcan1 speed is unknown, defaulting to 1000 [ 550.937990][T18453] netlink: 'syz.5.3104': attribute type 1 has an invalid length. [ 551.219307][T18458] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.306823][T18458] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 551.400489][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.425876][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.435059][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.445021][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.468372][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.504253][T18459] bond11: (slave bridge7): Enslaving as an active interface with a down link [ 551.538505][T18460] macvlan4: entered promiscuous mode [ 551.543939][T18460] macvlan4: entered allmulticast mode [ 551.550436][T18460] bond11: entered promiscuous mode [ 551.556722][T18460] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 551.605816][T18460] bond11: left promiscuous mode [ 551.739013][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 551.895290][T18461] vxcan1 speed is unknown, defaulting to 1000 [ 552.209391][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 552.293146][T18493] netlink: 'syz.5.3116': attribute type 13 has an invalid length. [ 552.343532][T18483] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.3111'. [ 552.354353][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3116'. [ 552.539314][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 552.951006][T18514] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3123'. [ 553.222058][T18461] chnl_net:caif_netlink_parms(): no params data found [ 553.401811][T18526] netlink: 'syz.4.3125': attribute type 1 has an invalid length. [ 553.536919][ T5841] Bluetooth: hci5: command tx timeout [ 553.709212][T18526] bond1: option arp_validate: invalid value (18446744073491447809) [ 553.734241][T18526] bond1 (unregistering): Released all slaves [ 554.483562][T18461] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.511771][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.532133][T18461] bridge_slave_0: entered allmulticast mode [ 554.557904][T18461] bridge_slave_0: entered promiscuous mode [ 554.577521][T18461] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.591324][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.600489][T18461] bridge_slave_1: entered allmulticast mode [ 554.615475][T18461] bridge_slave_1: entered promiscuous mode [ 554.779147][T18461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.811840][T18461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.899129][T18461] team0: Port device team_slave_0 added [ 554.920454][T18461] team0: Port device team_slave_1 added [ 555.062450][T18569] netlink: 'syz.5.3131': attribute type 29 has an invalid length. [ 555.148239][T18461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.155255][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.191426][T18461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.227479][T18461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.244818][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.320655][T18461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.476152][T18585] syz_tun: entered allmulticast mode [ 555.483161][T18585] __nla_validate_parse: 2 callbacks suppressed [ 555.483180][T18585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3139'. [ 555.506041][T18461] hsr_slave_0: entered promiscuous mode [ 555.513532][T18461] hsr_slave_1: entered promiscuous mode [ 555.521933][T18461] debugfs: 'hsr0' already exists in 'hsr' [ 555.528122][T18461] Cannot create hsr debugfs directory [ 555.604548][ T5841] Bluetooth: hci5: command tx timeout [ 556.012317][T18461] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.090401][T18598] vxcan1 speed is unknown, defaulting to 1000 [ 556.110081][T18461] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.286323][T18461] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.344169][T18584] syz_tun: left allmulticast mode [ 556.395395][T18461] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.463326][T18602] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 556.578591][T18603] veth3: entered promiscuous mode [ 556.883200][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'. [ 556.898799][T18606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'. [ 556.908333][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'. [ 556.921961][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'. [ 556.938294][T18461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 556.980252][T18461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.009008][T18461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.064926][T18461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.136534][T18612] Unsupported ieee802154 address type: 0 [ 557.568034][T18461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.600245][T18634] macsec1: entered promiscuous mode [ 557.609838][T18634] macsec1: entered allmulticast mode [ 557.676577][ T5841] Bluetooth: hci5: command tx timeout [ 557.683734][T18461] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.722019][T15770] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.729277][T15770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.776673][T18636] !: renamed from dummy0 (while UP) [ 557.797461][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.804699][ T7055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.055899][T18643] vxcan1 speed is unknown, defaulting to 1000 [ 558.632001][T18461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.745236][T18667] netlink: 'syz.5.3157': attribute type 13 has an invalid length. [ 558.760208][T18667] netlink: 'syz.5.3157': attribute type 17 has an invalid length. [ 558.879564][T18667] gretap0: left promiscuous mode [ 558.924867][T18667] ip6gretap0: left promiscuous mode [ 559.011060][T18667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.132180][T18667] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.172700][T18667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.280808][T18461] veth0_vlan: entered promiscuous mode [ 559.356976][T18677] vxcan1 speed is unknown, defaulting to 1000 [ 559.412953][T18461] veth1_vlan: entered promiscuous mode [ 559.480241][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 559.633481][T18686] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3159'. [ 559.716448][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3159'. [ 559.774720][ T5841] Bluetooth: hci5: command tx timeout [ 559.781167][T18688] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3159'. [ 559.989041][T18461] veth0_macvtap: entered promiscuous mode [ 560.034693][T18461] veth1_macvtap: entered promiscuous mode [ 560.082641][T18461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.110143][T18461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.461529][T15766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.474699][T15766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.546654][T15766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.562368][T15766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.689072][T18699] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 560.820486][ T7055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.837971][ T7055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.957116][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.965390][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.027986][T18704] netlink: 'syz.6.3164': attribute type 12 has an invalid length. [ 561.069579][T18704] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.3164'. [ 561.085227][T18707] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 561.106853][T18708] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 561.203699][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'. [ 561.274430][T18707] vlan2: entered allmulticast mode [ 561.289596][T18707] bridge0: entered allmulticast mode [ 561.301845][T18707] bond2: (slave vlan2): making interface the new active one [ 561.314793][T18707] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 561.439788][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 561.474810][T18730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.482119][T18730] IPv6: NLM_F_CREATE should be set when creating new route [ 561.494731][T18730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.502026][T18730] IPv6: NLM_F_CREATE should be set when creating new route [ 561.628313][T18737] tipc: Started in network mode [ 561.633426][T18737] tipc: Node identity c6147165d564, cluster identity 4711 [ 561.641988][T18737] tipc: Enabled bearer , priority 0 [ 561.653884][T18737] syzkaller0: entered promiscuous mode [ 561.660331][T18737] syzkaller0: entered allmulticast mode [ 561.698380][T18737] tipc: Resetting bearer [ 561.714774][T18736] tipc: Resetting bearer [ 561.768252][T18736] tipc: Disabling bearer [ 561.863505][T18741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.912847][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3174'. [ 561.929012][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3174'. [ 562.136404][T18759] tipc: Started in network mode [ 562.141709][T18759] tipc: Node identity 426944a8467b, cluster identity 4711 [ 562.150691][T18759] tipc: Enabled bearer , priority 0 [ 562.164869][T18759] syzkaller0: entered promiscuous mode [ 562.178592][T18759] syzkaller0: entered allmulticast mode [ 562.242449][T18760] tipc: Resetting bearer [ 562.254721][T18759] openvswitch: netlink: Missing valid actions attribute. [ 562.271071][T18759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.341748][T18772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 562.351205][T18772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 562.360434][T18767] vxcan1 speed is unknown, defaulting to 1000 [ 562.371675][T18772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 562.381606][T18758] tipc: Resetting bearer [ 562.428301][T18758] tipc: Disabling bearer [ 562.554530][T18780] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3184'. [ 562.583098][T18780] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3184'. [ 562.620045][T18782] tipc: Enabled bearer , priority 0 [ 562.634505][T18782] syzkaller0: entered promiscuous mode [ 562.645390][T18782] syzkaller0: entered allmulticast mode [ 562.726186][T18782] tipc: Resetting bearer [ 562.764569][T18779] tipc: Resetting bearer [ 562.807172][T18789] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 562.819395][T18789] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 562.829901][T18779] tipc: Disabling bearer [ 562.830653][T18789] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 562.844304][T18789] netlink: 'syz.4.3188': attribute type 2 has an invalid length. [ 562.864799][T18795] netlink: 'syz.5.3189': attribute type 61 has an invalid length. [ 562.979476][T18787] syzkaller0: entered allmulticast mode [ 563.243198][T18801] vxcan1 speed is unknown, defaulting to 1000 [ 563.664074][T18828] netlink: 'syz.6.3197': attribute type 21 has an invalid length. [ 564.550101][T18872] bridge_slave_1: left allmulticast mode [ 564.560737][T18872] bridge_slave_1: left promiscuous mode [ 564.572772][T18872] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.584948][T18872] bridge_slave_0: left allmulticast mode [ 564.607520][T18872] bridge_slave_0: left promiscuous mode [ 564.611637][T18873] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 564.624153][T18872] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.159247][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803387c400: rx timeout, send abort [ 565.650475][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.667352][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803387dc00: rx timeout, send abort [ 565.672252][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.677068][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803387c400: abort rx timeout. Force session deactivation [ 565.685804][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.704380][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.713474][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.946797][T18923] vxcan1 speed is unknown, defaulting to 1000 [ 566.175997][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803387dc00: abort rx timeout. Force session deactivation [ 566.642632][T18976] vxcan1 speed is unknown, defaulting to 1000 [ 566.711946][T18977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.822093][T18979] ip6tnl1: entered promiscuous mode [ 566.855528][T18979] ip6tnl1: entered allmulticast mode [ 567.044436][T18993] bridge0: port 4(macsec0) entered blocking state [ 567.051959][T18993] bridge0: port 4(macsec0) entered disabled state [ 567.059237][T18993] macsec0: entered allmulticast mode [ 567.064770][T18993] veth1_macvtap: entered allmulticast mode [ 567.074121][T18993] macsec0: entered promiscuous mode [ 567.083146][T18993] bridge0: port 4(macsec0) entered blocking state [ 567.089841][T18993] bridge0: port 4(macsec0) entered forwarding state [ 567.325337][T18923] chnl_net:caif_netlink_parms(): no params data found [ 567.372372][T19004] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 567.418129][T19011] __nla_validate_parse: 15 callbacks suppressed [ 567.418150][T19011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3239'. [ 567.449366][T19010] bond0: option all_slaves_active: invalid value (7) [ 567.584809][T19017] @0Ù: renamed from bond_slave_1 [ 567.749517][T18923] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.765809][ T5837] Bluetooth: hci2: command tx timeout [ 567.773217][T18923] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.799933][T18923] bridge_slave_0: entered allmulticast mode [ 567.818289][T18923] bridge_slave_0: entered promiscuous mode [ 567.833464][T18923] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.842433][T18923] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.851298][T18923] bridge_slave_1: entered allmulticast mode [ 567.864647][T18923] bridge_slave_1: entered promiscuous mode [ 567.945478][T19032] validate_nla: 1 callbacks suppressed [ 567.954354][T19032] netlink: 'syz.5.3246': attribute type 13 has an invalid length. [ 567.964375][ T6039] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 567.994975][ T6039] bond0: (slave c@0Ù): link status definitely down, disabling slave [ 568.013295][ T6039] bond0: now running without any active interface! [ 568.022152][T19032] netlink: 'syz.5.3246': attribute type 17 has an invalid length. [ 568.183707][T19032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.341443][T19031] wg1: entered promiscuous mode [ 568.348098][T19031] wg1: entered allmulticast mode [ 568.651429][T18923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.694079][T18923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.858100][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 568.887356][T19035] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3247'. [ 568.901716][T18923] team0: Port device team_slave_0 added [ 568.928359][T18923] team0: Port device team_slave_1 added [ 569.012813][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3250'. [ 569.022123][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 569.047837][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 569.064604][T18923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.077948][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.108347][T18923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.132961][T18923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.165862][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.203862][T18923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.354156][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 569.424863][T18923] hsr_slave_0: entered promiscuous mode [ 569.437502][T18923] hsr_slave_1: entered promiscuous mode [ 569.455200][T18923] debugfs: 'hsr0' already exists in 'hsr' [ 569.469532][T18923] Cannot create hsr debugfs directory [ 569.774268][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 569.835850][ T5837] Bluetooth: hci2: command tx timeout [ 570.024842][T18923] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.171129][T18923] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.345679][T18923] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.409726][T19111] netlink: 'syz.1.3267': attribute type 4 has an invalid length. [ 570.454494][T18923] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.539482][T19120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3268'. [ 570.621265][T19107] vxcan1 speed is unknown, defaulting to 1000 [ 570.631620][T19120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3268'. [ 570.643447][T19113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3268'. [ 570.854990][T18923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.899837][T18923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.917921][T18923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.934239][T18923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 571.339859][T18923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.603831][T18923] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.641123][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.648386][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.663586][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.670824][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.859472][T19164] tipc: Enabled bearer , priority 0 [ 571.881964][T19164] syzkaller0: entered promiscuous mode [ 571.899296][T19164] syzkaller0: entered allmulticast mode [ 571.926304][ T5837] Bluetooth: hci2: command tx timeout [ 571.962081][T19164] tipc: Resetting bearer [ 571.997367][T19163] tipc: Resetting bearer [ 572.040520][T19163] tipc: Disabling bearer [ 572.319929][T18923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.468201][T19170] __nla_validate_parse: 3 callbacks suppressed [ 572.468222][T19170] netlink: 1372 bytes leftover after parsing attributes in process `syz.5.3281'. [ 572.571505][T19195] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3284'. [ 573.018195][T19204] vxcan1 speed is unknown, defaulting to 1000 [ 573.099516][T18923] veth0_vlan: entered promiscuous mode [ 573.132242][T19217] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3291'. [ 573.150475][T18923] veth1_vlan: entered promiscuous mode [ 573.160422][T19217] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3291'. [ 573.251899][T18923] veth0_macvtap: entered promiscuous mode [ 573.285414][T18923] veth1_macvtap: entered promiscuous mode [ 573.338052][T19219] tipc: Enabled bearer , priority 0 [ 573.358862][T18923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.375213][T19219] syzkaller0: entered promiscuous mode [ 573.383693][T19219] syzkaller0: entered allmulticast mode [ 573.418076][T19221] macsec3: entered promiscuous mode [ 573.426553][T19221] team0: entered promiscuous mode [ 573.431995][T19221] team_slave_1: entered promiscuous mode [ 573.453740][T19221] team0: Device macsec3 is already an upper device of the team interface [ 573.505323][T19221] team0: left promiscuous mode [ 573.532589][T19221] team_slave_1: left promiscuous mode [ 573.710176][T18923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.779281][T19226] tipc: Resetting bearer [ 573.788467][ T6039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.798622][ T6039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.857844][T19218] tipc: Resetting bearer [ 573.887926][T19218] tipc: Disabling bearer [ 573.902211][ T6039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.912298][ T6039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.964130][T19229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 573.996149][ T5837] Bluetooth: hci2: command tx timeout [ 574.309377][T15768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.331761][T15768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.468627][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3300'. [ 574.509057][T19245] netlink: 'syz.4.3299': attribute type 1 has an invalid length. [ 574.526272][T19245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3299'. [ 574.612011][T15764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.624025][T15764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.733562][T19253] netlink: 'syz.6.3216': attribute type 1 has an invalid length. [ 574.793465][T19253] veth3: entered promiscuous mode [ 575.088479][T19263] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3304'. [ 575.142926][T19268] vxcan1 speed is unknown, defaulting to 1000 [ 575.163293][T19271] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3306'. [ 575.691459][T19284] TCP: TCP_TX_DELAY enabled [ 575.737419][T19282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3309'. [ 575.797249][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 575.933070][T19293] openvswitch: netlink: Missing key (keys=40, expected=100) [ 575.958040][T19282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.043854][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.053889][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.062748][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.071705][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.082561][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.363989][T19301] vxcan1 speed is unknown, defaulting to 1000 [ 576.547197][T19317] netlink: 'syz.1.3318': attribute type 6 has an invalid length. [ 576.589291][T19317] netlink: 'syz.1.3318': attribute type 5 has an invalid length. [ 577.508262][T18966] bond9 (unregistering): (slave gretap3): Releasing active interface [ 577.584294][T18966] dvmrp1 (unregistering): left allmulticast mode [ 577.842601][T18966] bond6 (unregistering): (slave bridge4): Releasing active interface [ 577.949944][T18966] bond9 (unregistering): (slave bridge0): Releasing active interface [ 578.078813][T18966] bond11 (unregistering): (slave bridge7): Releasing active interface [ 578.156133][ T5837] Bluetooth: hci3: command tx timeout [ 579.348163][T18966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.361419][T18966] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 579.373252][T18966] bond0 (unregistering): Released all slaves [ 579.479498][T18966] bond1 (unregistering): Released all slaves [ 579.494145][T18966] bond2 (unregistering): Released all slaves [ 579.509034][T18966] bond3 (unregistering): Released all slaves [ 579.529783][T18966] bond4 (unregistering): Released all slaves [ 579.550135][T18966] bond5 (unregistering): Released all slaves [ 579.564394][T18966] bond6 (unregistering): Released all slaves [ 579.683748][T18966] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 579.693799][T18966] bond7 (unregistering): (slave wireguard1): Releasing backup interface [ 579.703050][T18966] bond7 (unregistering): Released all slaves [ 579.808135][T18966] bond8 (unregistering): Released all slaves [ 579.822363][T18966] bond9 (unregistering): Released all slaves [ 579.837664][T18966] bond10 (unregistering): Released all slaves [ 579.857851][T18966] bond11 (unregistering): Released all slaves [ 579.875253][T18966] bond12 (unregistering): Released all slaves [ 579.940487][T19337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.987060][T19342] __nla_validate_parse: 6 callbacks suppressed [ 579.987082][T19342] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3323'. [ 580.102013][T18966] tipc: Disabling bearer [ 580.131046][T18966] tipc: Left network mode [ 580.153764][T19343] vxcan1 speed is unknown, defaulting to 1000 [ 580.235725][ T5837] Bluetooth: hci3: command tx timeout [ 580.931580][T19366] vxcan1 speed is unknown, defaulting to 1000 [ 580.946118][T19301] chnl_net:caif_netlink_parms(): no params data found [ 581.164963][T19383] tipc: Enabled bearer , priority 0 [ 581.173915][T19383] syzkaller0: entered promiscuous mode [ 581.184574][T19383] syzkaller0: entered allmulticast mode [ 581.332608][T19382] tipc: Resetting bearer [ 581.380775][T19382] tipc: Disabling bearer [ 581.428374][T19301] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.436050][T19301] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.443565][T19301] bridge_slave_0: entered allmulticast mode [ 581.466819][T19301] bridge_slave_0: entered promiscuous mode [ 581.562211][T19301] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.589875][T19301] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.609632][T19301] bridge_slave_1: entered allmulticast mode [ 581.632032][T19301] bridge_slave_1: entered promiscuous mode [ 581.862402][T19301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.894645][T18966] hsr_slave_0: left promiscuous mode [ 581.901391][T18966] hsr_slave_1: left promiscuous mode [ 581.907811][T18966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.318676][ T5837] Bluetooth: hci3: command tx timeout [ 582.329081][T19399] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 582.398334][T18966] team0 (unregistering): Port device team_slave_1 removed [ 583.078006][T19301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.192077][T19399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.289378][T19400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.303412][T19400] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.327561][T19400] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 583.594989][T19410] bridge_slave_0: default FDB implementation only supports local addresses [ 583.619489][T19301] team0: Port device team_slave_0 added [ 583.639287][T19301] team0: Port device team_slave_1 added [ 583.764285][T19415] netlink: 'syz.4.3337': attribute type 1 has an invalid length. [ 583.774120][T19415] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3337'. [ 583.875265][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 583.985098][T19419] netlink: 'syz.0.3338': attribute type 13 has an invalid length. [ 584.021778][T19419] netlink: 'syz.0.3338': attribute type 17 has an invalid length. [ 584.051940][T19301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.062567][T19301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.112335][T19301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.324512][T19419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.397879][ T5837] Bluetooth: hci3: command tx timeout [ 584.409783][T19301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.427522][T19301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.486033][T19301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.605059][T19426] pim6reg: entered allmulticast mode [ 584.611977][T19426] pim6reg: left allmulticast mode [ 584.857630][T19436] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3341'. [ 585.073067][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3344'. [ 585.114791][T19436] veth5: entered promiscuous mode [ 585.118623][T19443] netlink: 336 bytes leftover after parsing attributes in process `syz.1.3343'. [ 585.260336][ C0] Unknown status report in ack skb [ 585.301890][T19301] hsr_slave_0: entered promiscuous mode [ 585.412645][T19301] hsr_slave_1: entered promiscuous mode [ 585.438057][T19301] debugfs: 'hsr0' already exists in 'hsr' [ 585.454396][T19301] Cannot create hsr debugfs directory [ 585.634851][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.732736][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.807208][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.853372][T19450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 585.902140][T19454] tipc: Started in network mode [ 585.907301][T19454] tipc: Node identity 8a94bb6fa96c, cluster identity 4711 [ 585.914783][T19454] tipc: Enabled bearer , priority 0 [ 585.925109][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.930689][T19454] tipc: Resetting bearer [ 585.974883][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.994509][T19453] tipc: Disabling bearer [ 586.006735][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.031643][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.064985][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.137752][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.154106][T18966] IPVS: stop unused estimator thread 0... [ 586.158578][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.205829][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.439173][T19469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3353'. [ 586.464592][T19466] dvmrp8: entered allmulticast mode [ 586.493883][T19472] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 586.539681][T19472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.573020][T19472] vlan3: entered promiscuous mode [ 586.592491][T19472] bond3: entered promiscuous mode [ 586.598045][T19472] vlan3: entered allmulticast mode [ 586.603204][T19472] bond3: entered allmulticast mode [ 586.609965][T19466] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.942423][T19495] tipc: Enabled bearer , priority 0 [ 587.003280][T19489] netlink: 'syz.4.3357': attribute type 1 has an invalid length. [ 587.034268][T19492] tipc: Resetting bearer [ 587.041313][T19301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 587.115105][T19301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 587.226722][T19503] netlink: 'syz.1.3361': attribute type 21 has an invalid length. [ 587.231165][T19491] tipc: Disabling bearer [ 587.251508][T19301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 587.264197][T19503] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 587.272495][T19503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3361'. [ 587.329905][T19301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 587.468886][T19522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 587.543676][T19521] syzkaller1: entered allmulticast mode [ 587.682581][T19301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.724079][T19528] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.751174][T19301] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.850149][T18963] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.857411][T18963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.951110][T18963] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.958370][T18963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.138887][T19539] virt_wifi0 speed is unknown, defaulting to 1000 [ 588.779071][T19568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.085986][T19539] netlink: 'syz.1.3372': attribute type 17 has an invalid length. [ 589.116344][T19539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.207472][T19595] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3380'. [ 589.264299][T19301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.769250][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 630.503633][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 641.854612][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 642.184669][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.395320][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 642.542779][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 642.665060][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.023885][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.425084][T19638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 643.652561][T19638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.893287][T19638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 644.534468][T19638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.204444][T15766] dvmrp8 (unregistering): left allmulticast mode [ 647.374669][T19638] Bluetooth: hci1: command tx timeout [ 647.523263][T19638] Bluetooth: hci5: command tx timeout [ 649.442928][T19638] Bluetooth: hci1: command tx timeout [ 649.614183][T19638] Bluetooth: hci5: command tx timeout [ 651.524784][T19638] Bluetooth: hci1: command tx timeout [ 651.743566][T19638] Bluetooth: hci5: command tx timeout [ 653.622891][T19638] Bluetooth: hci1: command tx timeout [ 653.854583][T19638] Bluetooth: hci5: command tx timeout [ 663.293306][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 663.362691][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 673.914620][T19303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.113987][T19303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 674.653791][T19303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 675.414038][T19303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 675.682965][T19303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.893355][T19303] Bluetooth: hci6: command tx timeout [ 680.983661][T19303] Bluetooth: hci6: command tx timeout [ 681.775266][T19638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.914299][T19638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.253569][T19638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.924778][T19638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.083921][ T5837] Bluetooth: hci6: command tx timeout [ 683.274948][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.133380][T19303] Bluetooth: hci6: command tx timeout [ 686.014098][T19303] Bluetooth: hci0: command tx timeout [ 688.103570][ T5837] Bluetooth: hci0: command tx timeout [ 688.894949][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 690.164578][T19303] Bluetooth: hci0: command tx timeout [ 691.943825][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 692.255147][T19303] Bluetooth: hci0: command tx timeout [ 692.794175][T15766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.743692][T15766] bond_slave_0: left promiscuous mode [ 693.894731][T15766] bond_slave_0: left allmulticast mode [ 695.194195][T15766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.403283][T15766] bond_slave_1: left promiscuous mode [ 697.584647][T15766] bond_slave_1: left allmulticast mode [ 697.855253][T15766] bond0 (unregistering): Released all slaves [ 707.152976][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 707.413777][T19638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 707.802744][T19638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 708.784646][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 709.093378][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 709.134746][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 709.382475][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 709.514637][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 709.595070][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 710.244826][T19660] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 710.533547][T19660] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 713.443587][ T5837] Bluetooth: hci7: command tx timeout [ 713.794210][ T5837] Bluetooth: hci8: command tx timeout [ 714.385204][T15766] bond1 (unregistering): Released all slaves [ 715.534464][ T5837] Bluetooth: hci7: command tx timeout [ 715.842701][ T5837] Bluetooth: hci8: command tx timeout [ 717.613423][ T5837] Bluetooth: hci7: command tx timeout [ 717.935068][ T5837] Bluetooth: hci8: command tx timeout [ 719.693315][ T5837] Bluetooth: hci7: command tx timeout [ 720.003161][ T5837] Bluetooth: hci8: command tx timeout [ 724.001948][T19638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 724.464345][T19638] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 724.604880][T19638] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 725.343778][T19638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 726.054032][T19638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 729.124361][ T5837] Bluetooth: hci9: command tx timeout [ 730.955094][T15766] bond2 (unregistering): Released all slaves [ 731.253171][ T5837] Bluetooth: hci9: command tx timeout [ 732.104389][T15766] bond3 (unregistering): Released all slaves [ 733.284112][ T5837] Bluetooth: hci9: command tx timeout [ 734.772394][T19638] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 735.013274][T19638] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 735.374484][T19638] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 735.374773][T19660] Bluetooth: hci9: command tx timeout [ 735.801839][T19660] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 736.064696][T19660] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 739.382079][T19638] Bluetooth: hci10: command tx timeout [ 741.453328][T19638] Bluetooth: hci10: command tx timeout [ 743.524896][T19638] Bluetooth: hci10: command tx timeout [ 745.613651][T19638] Bluetooth: hci10: command tx timeout [ 747.724255][ T31] INFO: task kworker/u8:19:6047 blocked for more than 143 seconds. [ 747.775195][T15766] bond4 (unregistering): Released all slaves SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 748.483632][ T31] Not tainted syzkaller #0 [ 748.664685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.953009][ T31] task:kworker/u8:19 state:D stack:21192 pid:6047 tgid:6047 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 749.284409][ T31] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 749.653640][ T31] Call Trace: [ 749.753174][ T31] [ 749.904164][T15766] bond5 (unregistering): Released all slaves [ 749.932694][ T31] __schedule+0x1798/0x4cc0 [ 750.105265][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.264560][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.394252][ T31] ? __pfx___schedule+0x10/0x10 [ 750.623499][ T31] ? schedule+0x91/0x360 [ 750.845208][ T31] schedule+0x165/0x360 [ 751.072242][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.474930][ T31] __mutex_lock+0x7e6/0x1350 [ 751.592608][ T31] ? __mutex_lock+0x5bb/0x1350 [ 751.934278][ T31] ? cfg80211_dfs_channels_update_work+0xc4/0x650 [ 752.084713][T19664] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 752.362896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 752.512462][T19664] CPU: 0 UID: 0 PID: 19664 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 752.512502][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.512516][T19664] Call Trace: [ 752.512525][T19664] [ 752.512535][T19664] dump_stack_lvl+0x189/0x250 [ 752.512572][T19664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.512600][T19664] ? __pfx__printk+0x10/0x10 [ 752.512634][T19664] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 752.512664][T19664] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 752.512696][T19664] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 752.512729][T19664] warn_alloc+0x214/0x310 [ 752.512767][T19664] ? __pfx_warn_alloc+0x10/0x10 [ 752.512808][T19664] ? __get_vm_area_node+0x28f/0x300 [ 752.512841][T19664] ? kcov_ioctl+0x55/0x640 [ 752.512879][T19664] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 752.512941][T19664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 752.512980][T19664] ? __pfx_kcov_ioctl+0x10/0x10 [ 752.513015][T19664] vmalloc_user_noprof+0xad/0xf0 [ 752.513045][T19664] ? kcov_ioctl+0x55/0x640 [ 752.513079][T19664] kcov_ioctl+0x55/0x640 [ 752.513108][T19664] ? bpf_lsm_file_ioctl+0x9/0x20 [ 752.513130][T19664] ? __pfx_kcov_ioctl+0x10/0x10 [ 752.513161][T19664] __se_sys_ioctl+0xfc/0x170 [ 752.513188][T19664] do_syscall_64+0xfa/0x3b0 [ 752.513209][T19664] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.513242][T19664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.513264][T19664] ? clear_bhb_loop+0x60/0xb0 [ 752.513291][T19664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.513312][T19664] RIP: 0033:0x7f345a98eacb [ 752.513332][T19664] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 752.513353][T19664] RSP: 002b:00007ffc5a46fb80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.513375][T19664] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f345a98eacb [ 752.513391][T19664] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 752.513406][T19664] RBP: 00007f345abe63f8 R08: 00000000000000da R09: 0000000000000000 [ 752.513420][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.513433][T19664] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 752.513465][T19664] [ 752.513473][T19664] Mem-Info: [ 752.883078][ T31] cfg80211_dfs_channels_update_work+0xc4/0x650 [ 753.002463][ T31] ? __lock_acquire+0xab9/0xd20 [ 753.404924][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 753.493289][ T31] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 753.814967][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 753.883502][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 754.053793][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 754.265181][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 754.442943][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 754.514273][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 754.862801][ T31] process_scheduled_works+0xade/0x17b0 [ 754.942775][T19664] active_anon:5787 inactive_anon:0 isolated_anon:0 [ 754.942775][T19664] active_file:3274 inactive_file:40113 isolated_file:0 [ 754.942775][T19664] unevictable:768 dirty:16 writeback:0 [ 754.942775][T19664] slab_reclaimable:12455 slab_unreclaimable:158371 [ 754.942775][T19664] mapped:67313 shmem:1363 pagetables:1169 [ 754.942775][T19664] sec_pagetables:0 bounce:0 [ 754.942775][T19664] kernel_misc_reclaimable:0 [ 754.942775][T19664] free:1173870 free_pcp:13174 free_cma:0 [ 755.013135][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.074067][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 755.352803][T19664] Node 0 active_anon:22484kB inactive_anon:0kB active_file:13092kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:269168kB dirty:64kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15088kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.423380][ T31] worker_thread+0x8a0/0xda0 [ 755.524016][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 755.743991][ T31] kthread+0x711/0x8a0 [ 755.842925][T19664] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.892161][ T31] ? __pfx_worker_thread+0x10/0x10 [ 756.173176][ T31] ? __pfx_kthread+0x10/0x10 [ 756.322404][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.753833][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.893995][ T31] ? __pfx_kthread+0x10/0x10 [ 756.945386][T19664] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 757.614514][ T31] ret_from_fork+0x436/0x7d0