last executing test programs: 1m30.471549137s ago: executing program 4 (id=1780): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x6, 0x5, 0x3, 0x5, "249523"}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x6, 0x8}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x6, 0x4}, 0xc) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 1m30.416160078s ago: executing program 4 (id=1782): socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) accept4$tipc(r0, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10, 0x400) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3ff, 0x1, 0x10, 0x1, 0x4004, 0x2, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x8, @empty}}, 0x9, 0xffffffab, 0x4, 0xce, 0xc}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, &(0x7f0000000480)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 1m29.986542203s ago: executing program 3 (id=1787): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}, "ffffff7f00000000"}}}}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r4, r3, 0x0, 0xfffbffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000680000022cbd7000fddbdf25020004001600000024000c800800030004000000060001648c273e35edeee000070000000800030006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80c1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r6, 0x7, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040800) r9 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f00000003c0)=[{r0}, {r7, 0x14}, {r4, 0x80}, {r9, 0x8ca62ae39d361e08}, {r5}, {r2, 0x1}, {r5, 0x28}, {r3, 0x80a5}, {r2, 0x6600}, {r4, 0xc108}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000480)={[0x8]}, 0x8) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "589de7ee04e0b582a0c318c51bc8afa4"}, @NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000045}, 0x80) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r10) 1m29.723700849s ago: executing program 3 (id=1791): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000ff0100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffc2}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r10, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r10, r11, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r0, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x15, &(0x7f0000000980)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x9, 0x2, 0x5, 0x8, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x0, 0x8, 0x3, 0x6, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @exit], &(0x7f0000000440)='syzkaller\x00', 0xd345, 0xaf, &(0x7f0000001680)=""/175, 0x41100, 0x20, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x3, 0x893, 0x61}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[r0, r1, r11, r1, r0, r12, r13, r14, r0, r1], 0x0, 0x10, 0x5}, 0x94) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r16}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x24, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x2, 0x3, 0x3, 0x7, 0xb, 0x6}, @call={0x85, 0x0, 0x0, 0xbc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x8f, &(0x7f0000000680)=""/143, 0x40f00, 0x12, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x7, 0xf, 0x101}, 0x10, 0x2a56e, r16, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m29.679608053s ago: executing program 0 (id=1792): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 1m29.603312115s ago: executing program 2 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r5, 0x891d, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000e0000002000000000000000000000000ff020000000000000000000000000001fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000426c00330000000000000000000001ac1414bb0000000000000000006fb40000000000000000000000000000001200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x134}}, 0x0) 1m29.346179926s ago: executing program 3 (id=1795): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x200, 0x407, 0x7fff, 0xba86, 0x254438a, 0x10001, 0x401, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0xffff8e33, 0x0, 0x401, 0xd, 0x800, 0xa8c2, 0x1, {r2, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x5, 0x2, 0x6, 0x200}}, &(0x7f0000000200)=0xb0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x402, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x7f, 0x1, 0x2, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6) sendmsg$alg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r7 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) recvfrom$unix(r9, 0x0, 0x0, 0x2002, 0x0, 0x0) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x8, r8, 0x27, r9}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m29.279800282s ago: executing program 4 (id=1796): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0xf, 0xf, 0x2, 0x0, 0xfffffffffffffff9, 0x4]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0xa4}}, 0x20000044) 1m29.231488519s ago: executing program 2 (id=1798): r0 = socket$inet(0x2, 0x80000, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m29.102035483s ago: executing program 0 (id=1799): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newchain={0x2c, 0x64, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0xd}, {0x6}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x2c}}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m29.04289528s ago: executing program 4 (id=1800): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}}], 0x1, 0x44004) syz_emit_ethernet(0x86, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x7, 0xfffd, 0x0, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x21cf}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5d08}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfe8c}]}}]}, 0xc8}}, 0x0) 1m28.758974924s ago: executing program 0 (id=1801): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r1}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "d639d37c2cc17a53", "cb7354d77efa216ec0757e98ed6300", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001"], 0x60}}, 0x0) (async) r7 = socket(0x8000000010, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r8}, 0x10) (async) write(r7, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m28.757711766s ago: executing program 2 (id=1802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) 1m28.511788494s ago: executing program 0 (id=1804): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000118e000000950000585db23800"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) 1m28.435404294s ago: executing program 3 (id=1805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x2008}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m28.4336108s ago: executing program 2 (id=1806): socket$nl_route(0x10, 0x3, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x4814) recvmmsg(r0, &(0x7f0000000e00), 0x0, 0x2001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000280012800b000100697036746e6c00001800028014000300ff02000000000000000000000000000108000a00", @ANYRES32=r9, @ANYBLOB="0db3b3c1381b22d14ed5b35d74db6474de6895cf4555"], 0x50}}, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r12, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r11}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r12, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) unshare(0x6020400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m28.314709516s ago: executing program 0 (id=1807): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000020c0)={'ip6_vti0\x00', &(0x7f0000002040)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', 0x8020, 0x20, 0x80000001, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002180)={'ip6tnl0\x00', &(0x7f0000002100)={'ip6_vti0\x00', 0x0, 0x2f, 0x63, 0x3, 0x9, 0x49, @empty, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8, 0xae4d, 0x5eb}}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000000000008100000088a8", 0x20, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r14, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a00)=@o_path={&(0x7f0000001f80)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003bc0)={r15, 0x0, 0x28, 0x1000, &(0x7f0000002a40)="28b1b487e86bdd97ab221ecb581e55a7d7d6eba66af8869bef7e27573875b6ddaebde50945e4590d", &(0x7f0000002a80)=""/4096, 0x24000000, 0x0, 0x6d, 0xbf, &(0x7f0000003a80)="2b58cd7c6158e6bedd9f6916187d7555350c894d4eadc566e1896876e49cf7136d558091b4dc69b38913b308be7f563ce33532a3cac671344cfa4b098dc68930a4e5c7d66139cb9ec2356e07f5eb4d603cbfd2aa41576e6a71c891f5e0c153bad3238ff9d5d9b14278d86a1ef9", &(0x7f0000003b00)="08e6ff7f8b13dd6ac9e20f43b6ef5ef1ed1f590e97002602e259d6515a0d8f98516068e9b41d5be4a6075b34c97dd9322deb09c43d961cd67624ad4a429d93c2654ce0aec7c5dc034675a71c149d2f7d29c7d91619881f813562f5b57688050acbf1f09b03426670252459c8fd8f8fa4862fa7043065cf2b45e02c38d1e71bbe154af3427845b7024a9c1a257240c6799a055c0d4c34ccc38daf00aaabe6fad7d82e5fe2f745146a619753f4d2e33938b01ba83cc52be06c0297e716c1f14b", 0x1, 0x0, 0x6}, 0x50) sendmmsg$inet(r2, &(0x7f0000002880)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="6c55c76d58706116b2f1c0b39e2d678316618d33d6b988dfa3111ed38de65ce7d4338d82dcaefb316d406b0962d778c312276a5e24f09ffff2192afe5c5e013b59818b389c816abe617e43b566d571a31a236061dbec435b99e0e0615fd88ec56bb80ec55f5b30b2a7990dcf8a64048d27eb0939516f524e5894dd312f29321fb421a6d0549276f0fb12b02f5f406b6e94b92512b77f419125fc742976244c6598cf5fd347a7e6d8edc8e135895459f7e52ce638fe683b8ea58d393d66a4ff120d52a0278838fcef0b36ed9a5d70bc3e8e42810b63f4088df6f123a7c687d575", 0xe0}, {&(0x7f0000000280)="1757dadc21a2708a868ecc6bad9cad10f38200282e44e2118826b9468db1936f487a379c09d76532351d9ab8c91728786d166d3e7a358aa887d1c0dcdda9cef54760de50da06a00c2fe5f76293ed4d4432cdd6099c3ef2879a37ff71947386382914fc66cd11a24174c4a87a3e820d016f91bddfda0e466b936b14c744484d4b7541166e46d02bfc274a6be0ff18e2b72ef5a4a9ecf2a8eac75c3f11e9e85b6aeeb4a5f9246abd5cf0c651b6b9c93803fe6947d5be44bc0253f342cb", 0xbc}, {&(0x7f0000000340)="bbc66f391c2c4cf490228e5a517a0304c5823b0da3112f350c0d4178d956baa400eac506488f51a9b05bb3d9dd6cd25122f9d57cf83ec8af4eede79a4947532ef80ca3a4b532f6d02a83ead33e94c96d79efcbac6ab09bc52fedaebbe9b9dc0458e2f8ce56354a1ee9a595e3bb62d15a528e6fe220118d4c3cd19589a92502f00ca9965937106c3ae9daa2f54ee4bfce4faca7f90e4f6a18dfafd56c41582cfb9e25165965b81ead4bcc90c265c790f3b32155ae9d7d13bbe85e78c3", 0xbc}], 0x4, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x38}}, {{&(0x7f0000000480)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="53ba8ede54a5ec3e95bbb84ec78d103a", 0x10}, {&(0x7f0000000500)="7fd305363c8871682964e5e531761e96b2b294b60d2c55f0fa1c20bc3312ca25dd6cc04aab3d05977246060042c4de525a1854a1232edbe085e6f8918d7922778b4b6cf35078dead2e5309dd007841b08be435db2f6af9a0a83738d7632841c196b28558787cfbb94107b3cfe6c33d574b335cfbc2845b504995f5c9b47181dac76bd22b487ae79a4251c7386784fb709e9fe72e0190e2b061776a36487ce5", 0x9f}, {&(0x7f00000005c0)="1ab0bff49e6e7b401add063cee20253e88a99a30367285d64f175bff3c2e58f2b874e245f106f9308ca00f0db690c81e6d081c7457cbca9db041ac9b1ce1007fa4fcb2641ee482713a3f0278d8336ae68d1509b4f8e94c106976aa487cce8b4522b68e7f0a7f61c9060f1d3cc4025d5fad147da71bdd7cf0a82d337ceb60ac20f965e1", 0x83}, {&(0x7f0000000680)="5bdb1c389eeb40bfc98758b2f2950461d68330ee5cacb293f7533dbf5e801ea2313b9fc2c991778bbf610ab1af53ccd1eff9601e9abc3fb0e9a81182cfbf8d87faf9b13cdc28ab7dcf39c4b58d858a3d311a5d6d74e7ad025d93c2aea573df0f292601c81ad76b5756bfa99adb9668ce358b981b6760909e1453d1defe2b14cc84a00b33a4c16cb153f133b676efe14c2965f9f6e25f1fe7ee7b74d2c784d6cb", 0xa0}, {&(0x7f0000000740)="2071ad8dab10790446c11f17868fa2568f901cb64deaff2fda43064ef9c01882700ffb47c4db0ece0e149113f351c3ca673ba19def8dcf9e", 0x38}, {&(0x7f0000000780)="8188abb2d7fa6a5e6ad27d28c2357277de8243eab09b599796a4f531f079e377b1ddaf14ce4e02b59e1a2aa2325154e1946247ae904fde047f1cb09f9e8610a4e3a337d9a64141173b91e89c3f7b5519396d6abf4c", 0x55}, {&(0x7f0000000800)="31f75ec598473a21bbf536d5df9295b952f1637e5e1eae25b088a41ab5e54fa64e88ea8f846ff2931cfc83371ba0325239071bb234e6dc815364", 0x3a}], 0x7, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbb}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xa5, 0x0, 0xe}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x48}}, {{&(0x7f0000000940)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="d467ddae6a28a81f1ff0ca105c740e274353540c7c6de0cb1434f1c35105785843cc1a6657b3ba58a9ecf85b645750a576589eac5f5c68fb6cdef09207bb070ba2924e2c702a681934810a060fe3fce6fa861e7b653a373ca8aae93a4407f34f77ad09ebe999cafe1c070491d19310a21f4e27db795f803dfe7729c92c20768adf86870630615d2031c34f5129345b58a890df2d0d99d7ddb2b63e902689f1045bc16db5d36b75ba091e75cb5534e5ffba61d34e0cfcd80ceeb4522f4a7107", 0xbf}], 0x2, &(0x7f0000001a80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x28, [@remote, @private=0xa010100, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x8b, [@rand_addr=0x64010100, @multicast1, @multicast1, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x9, [{@empty, 0x4}, {@multicast2, 0x6}, {@local, 0x2}, {@local, 0x5}]}, @ssrr={0x89, 0x7, 0x49, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @lsrr={0x83, 0x7, 0x7e, [@remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x59, 0x1, 0xb, [{@remote, 0x2}]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0x0, 0x4, 0x4fff]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x6, [{@broadcast, 0x6}, {@local, 0xca}, {@private=0xa010101, 0x401}, {@empty, 0x2}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x101}, {@remote, 0xfffffffe}]}, @cipso={0x86, 0x4a, 0x3, [{0xbcc5bd479c6b1b6f, 0xa, "2fffe85c8b7608ae"}, {0x2, 0xe, "15f94f50df0559a97d4ca1f5"}, {0x5, 0x7, "20f9cb4fb1"}, {0x5, 0x2}, {0x8, 0x6, "af6633fb"}, {0x2, 0xe, "3257e688f35e8ac6fc170b92"}, {0x6, 0xf, "5f10f85556bba2fbe72ae30c59"}]}, @timestamp_prespec={0x44, 0x3c, 0x45, 0x3, 0x7, [{@private=0xa010101, 0xe9a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x100}, {@empty, 0x6}, {@rand_addr=0x64010101}, {@multicast1, 0x6}, {@rand_addr=0x64010101, 0xf}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast1}}}], 0x220}}, {{&(0x7f0000001cc0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001d00)="410f20a0c327", 0x6}, {&(0x7f0000001d40)="0c9ae0645cbe01e18928f2a10bfcffad08695d1e0de4262547ef1a01bda41bb9c849d19ce72605113c8272cac17d02b619eef7618eafea0f45a884f0a1f98c83b62aef0eb5b137c924026cac39b4a068ab7945a621a122a451acd5b3f33878ac7507bbc81081b6207fdad44f504c32ffa425f56a92ccd28c682fe7448968ef4ca16ea024f7dcf8bada926158637d3126abaaf3a332992b87c47fc0a6c01dfddf36b89391c44ae11ae7e7866edcd251bc8d3b35dad7248a223f68e730b2bc42af9b37277d8e5ffd", 0xc7}, {&(0x7f0000001e40)="ce137cddbc97134ea8c055f144cb4a3df88ff73ba591d504dd979c2a79c1120e3d39d9e338283b31a411374365d7c7a83be1228c9164fa726baba10fcce645506d6d7ded08e6", 0x46}, {&(0x7f0000001ec0)="08fe7944edc8a2c917b1bc0c071e748c9e1f2761e3c260af51b23b67ed2f79b62d79d1231bc3ecece91bf2021e5cc62bc6e541851ff5be1ef5784524315f0fc667a5d340f38f738943476c3132b106c24b1d2694aaeb1c3218fa3ca451b52c97850ec451eae10b195d9cfe34ba589a08bfdfa4693339ffe8155e43e1214f5e696f31e2ef677759ed0c17ab86a7", 0x8d}, {&(0x7f0000001f80)}], 0x5, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0x4e, 0x0, 0x7, [0x6]}, @rr={0x7, 0x17, 0x12, [@dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0x6, [{@local, 0x5f}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0xb0}}, {{&(0x7f0000002280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002340)=[{&(0x7f00000022c0)="f79f0f5064bde7046ad0b15d23fcf2dada16b3db937dae7506a195da19b26c4e75ce29123ff5bb536c692acc754455e2d496e05f759115dae928ad0fbd8cbfcf04a125be31f6a0e3b1ab77b5f5ea66d534146b", 0x53}], 0x1, &(0x7f0000002380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfde}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x37, 0x0, 0x1, [0x5]}, @ssrr={0x89, 0x23, 0x60, [@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @remote]}, @noop]}}}], 0xb0}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002740)=[{&(0x7f0000002480)="221f65cce82617fe308c6bfda0eecb8a18dad75d14afd9241e58d83387fe6d2b5cce3c1aef7df57753e16e1bb10d6d2d0b0909c3358a60faa8b17db2458add385cd76c73ef5061defacf1848929b7ef216d179e637e3014a9b73c1139311e7df54e3c54a5b7bba56b2b346f36ac9bfeecc3b1f62d9c2c71a9fb66fa2d53b0d9b31091c94696cb609d1316ec9b5998b1008345e47ac1dd5d99c2a8da9087a3b68b3169ad9", 0xa4}, {&(0x7f0000002540)="4e366fb4f08adf9c67d022e2ace610ed68766e29e44b355f9498e80e16ff7017", 0x20}, {&(0x7f0000002580)="089b2adcc6e1882f889952e98ba7d8407d71352b056564e91dd0b0387d60d6840342833c90314ea01bb52affb9a037b4db227b046a2cb355f0bb839f0640438d07929e57f397a486d03295dc614989fb2135ae8fb0424068e09fa7680b1691d53dd3", 0x62}, {&(0x7f0000002600)="1fc7abaf844bc8485e3be41f4dc854ff67e86ac9be18aa5b0ec7", 0x1a}, {&(0x7f0000002640)="1ca3244293fa398dcb3a0c9bed6343b9aa022f09f613e17ea6f00972eff3def603b86188d5c8f220a26c277c6807a0c1d0ecfd63e5aaca6f8aeed35b07072b02bcdb7bf3375a436564368f013c2104e6facf424a19518f564846059666821331df1c07ef4be1e4ab905b93b6b298ac32350f8a4d467f50d1cf532ca87cd249f9e57a64a797ccfcfc30a619e3fc8bc653138f4d69209a2c2b6795cec219fd00b64a124d154547db2228227a78bf2957f410d4fc40ff98ea53a25b5014812f32559efd00", 0xc3}], 0x5, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast1, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x1, [0xff]}, @generic={0x83, 0xa, "40999f18b4516d3b"}, @generic={0x7, 0x10, "d294bebe597d711c74a00afe4c13"}]}}}], 0xa0}}], 0x6, 0x480c6) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r1, 0x1, 0x3d, &(0x7f00000000c0), 0x4) 1m28.294111911s ago: executing program 2 (id=1808): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000004080), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r3, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x6e, &(0x7f0000000540)={0x0, 0x3, 0x1ff, 0x2}, 0x10) 1m28.199173724s ago: executing program 4 (id=1809): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0x3, 0x1, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') unshare(0x6a040000) r3 = socket(0x8, 0x6, 0x20) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0024b5", @ANYRES16=r4, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) connect$phonet_pipe(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x6702, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x6, 0x4, 0x0, 0xf0ff1f00000000) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) 1m28.151943899s ago: executing program 3 (id=1810): socket$netlink(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000007ed111e6c1c285aa02829a678309b48a9e5712b8a7a711b3d05cc63ce770d690fa28a134390eaf345a635a4e6923eccc10fc1d1544310e9c3fa55485d87931cb999ba59b027fd56b56bb5184b8d5bff4dae58a5e9b42c6b6d0e6de7db03ca5dcc3e078abc274a7efefd942285766e41f966e234b28cae9baf089f251fa8ff925627c796c9d9288aaf6c74fc2be9ffb62a047487215b64de203a9ca65fe3fb7"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x70bd27, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x26, 0x3, 0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m27.926568623s ago: executing program 0 (id=1811): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001ac0)=0x2000002b, 0x26) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmsg$can_raw(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x7, "04030ec0a4"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000080)={0x10000000}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xa8, r12, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x84004) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) close(r11) sendmsg$xdp(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x808, 0x70bd29, 0x25dfdbfc, {0x2, 0x94, 0x80, 0x82, 0x8, 0x0, 0x0, 0x2, 0x11}, [@FRA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x0) 1m27.164143757s ago: executing program 32 (id=1811): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001ac0)=0x2000002b, 0x26) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmsg$can_raw(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x7, "04030ec0a4"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000080)={0x10000000}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xa8, r12, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x84004) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) close(r11) sendmsg$xdp(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x808, 0x70bd29, 0x25dfdbfc, {0x2, 0x94, 0x80, 0x82, 0x8, 0x0, 0x0, 0x2, 0x11}, [@FRA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x0) 1m27.122627339s ago: executing program 2 (id=1814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 1m27.004468893s ago: executing program 33 (id=1814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 1m26.985133703s ago: executing program 4 (id=1815): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000000c0)={'geneve1\x00', @ifru_ivalue=0x9}) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x29, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x800}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x40}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='svcrdma_dma_map_rw_err\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000280)=0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x8}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_netdev_private(r9, 0x89f9, &(0x7f0000000300)="f4740867f159798ffdc546d87677f7855b17a2658c54b66720f0bcb9dd2ecbcb738e19ed8d72aa4c087bad89c84bb4240171fe62f3981641a4d9e3a9407cd99bad193048") getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000370400"/20, @ANYRES32=r10, @ANYBLOB="83040500000000004000128008004100677265003400028008000600ac1414bb0600000006000f00b74b000005001700010000000500170000000000060011004e220000a0e2b6bbc1baa10fddca6dc13d5a3b7bc7e4732d4bcea1912b7495a5d5d073f55d6948d68d7078c02c226d9c408fb758ab93e739dfb5bb7bb7c4394a4c7423b79aff5160aece6a84c66d20bc9732d8ad4dd8c13bf30f0b264e0f718101e2850284a4dbb83582dac5b00591134b753903c0cd1d234b460eff49a21e523e1e59d828aac35f8f0dc830edf863988bfd06268bc21939c8d07dd95b819f5eb9d49355496745398fbfa1ee6354b200000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m26.98445617s ago: executing program 34 (id=1815): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000000c0)={'geneve1\x00', @ifru_ivalue=0x9}) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x29, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x800}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x40}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='svcrdma_dma_map_rw_err\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000280)=0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x8}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_netdev_private(r9, 0x89f9, &(0x7f0000000300)="f4740867f159798ffdc546d87677f7855b17a2658c54b66720f0bcb9dd2ecbcb738e19ed8d72aa4c087bad89c84bb4240171fe62f3981641a4d9e3a9407cd99bad193048") getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000370400"/20, @ANYRES32=r10, @ANYBLOB="83040500000000004000128008004100677265003400028008000600ac1414bb0600000006000f00b74b000005001700010000000500170000000000060011004e220000a0e2b6bbc1baa10fddca6dc13d5a3b7bc7e4732d4bcea1912b7495a5d5d073f55d6948d68d7078c02c226d9c408fb758ab93e739dfb5bb7bb7c4394a4c7423b79aff5160aece6a84c66d20bc9732d8ad4dd8c13bf30f0b264e0f718101e2850284a4dbb83582dac5b00591134b753903c0cd1d234b460eff49a21e523e1e59d828aac35f8f0dc830edf863988bfd06268bc21939c8d07dd95b819f5eb9d49355496745398fbfa1ee6354b200000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m26.963456329s ago: executing program 3 (id=1816): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20) (rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async, rerun: 64) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000800000085100000030000001800000000000000020000011b0100009500000000000000bf00ffff010080009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 1m26.386910819s ago: executing program 35 (id=1816): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20) (rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async, rerun: 64) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000800000085100000030000001800000000000000020000011b0100009500000000000000bf00ffff010080009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 5.98345453s ago: executing program 5 (id=2373): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.530283729s ago: executing program 8 (id=2380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4da, @private0={0xfc, 0x0, '\x00', 0x5}}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000003c0)="fcb6d50eb3dbae4c7f5f38a0a9b008699cf14c31e146c5919bd6e7e012d406d3d5795883041a35bfee7f63dd91ccd1142a1089d87dae262d9fad72d33c78411d9e89b5a3eaf03981aa1b3094edcce97810e3724627be18567930239bf8ccd7cc7e5b9fdf0c7388614ddfa58169b1648eff5bbcb3a0b9030764b96f6c01ad29d82f3df8d45a8535f89f1d0082cc03d40c2b4facece7484f789182acc4b40ee007b47413eb44f93f72a5c32598d15ebb0397ad52e252ad736240547bbe6c83545d1f48c6d4cf28a3dc6d89546eca20284156b39131cd06e6c7c2a6d0cf5c32424c8ea56355b2dea48c18e6fb58f2565ad9cff46d4045508eaa0066d8b9027daa4eb20501432f06e13cfc3610c75d72379a04031a1bfdae1a50fc5338c275ff7a8d1601c77b03d927f90fb226e0e6fe2986d2b15dd50970ebcbb0aee91f03c3d0c766f187d59761e39efeb0857093d2718c4f7579c3b77fb03da78bebd460df41d91918641d39a9b1f9534643675206d994150da755e469f0e4ec8cc663fc56d556640ffb6aeb1742b30e5f9664d41b7f821d2ab137154371ab2c7ddf5d4c30e5e2a43872eef32b6d8193ad66ebdee39355e3f9e033ab00564f42282d508c9a56ba3b32ea0c69ac3c9605d84d6249d2c3a772b26c1c", 0x1d4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@hopopts={{0xa8, 0x29, 0x36, {0xa7, 0x11, '\x00', [@ra={0x5, 0x2, 0x1000}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x3, [0x6, 0x5, 0x92a7]}}, @generic={0x4, 0x67, "c861ba82f5f4dcb2b210919d0948eb4316bf844b5ca8c6497a2fe9dd47cdb85928a297de14c1c525b409eea5672c084025e3169641ece94f364810d8424ba374d292b662bb398f9b26fff9e0f0b19dd0101136338a01ba1904f4c1f92df7666820297791944a40"}]}}}], 0xa8}}], 0x2, 0x88c4) 5.369218254s ago: executing program 8 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@exit], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.145213119s ago: executing program 8 (id=2385): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2517000000440006803c000400676b6d286165732900000000000000000000000000000000000000000000000014000000bf1dddca2049e38b2f49083c278c97edd08cd4e8040005"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000340, 0x0, 0x0, 0x200000000416, 0x200000000446], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1ae) 4.479414627s ago: executing program 6 (id=2389): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000001c0)={0x20000000}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b5e68ed5b3b8c1d88d5c5089b7ed85de9517f15cb1da4012867a4baab04ecec9c4d4c50c3feeeeac50849ef7de98824f31aea29ab70604f1c0c8a598eec1ae246a1efded9d1639db9cf8f1980f9a70635fc5f6ff6ee381bfcacaba39b91b55dc152acf0521c624af6a741c95ae86a15f9d6719f70e2c5cf856d28a3da624e75f7237e0c84f8cedbb9627159ebdf21805e4397796150304e3f60b945e4aaf89c62bf19be6371c743490904b6df17dce9d3508f7973469b1d9e56bd4524ab3cf6fc924263afbdbe75c9950ae685281778fb3c968acfcf31652931e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x308) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.478412609s ago: executing program 8 (id=2391): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, 0x0, 0x4000000) sendmsg$kcm(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc00e}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040003000000fbdbdf25040000003c0001800c0007000000000008000000080008005c0c0000060002006c00000014000300fe8800000000000000000000000000010600010002000000080004000300000024000280080008000500000008000800e90000000800070076000000060002004e200000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x48000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00eb8008000140000000250900010073797a3000000000090002733b623200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) socket(0xa, 0x800, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 4.017128476s ago: executing program 7 (id=2393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x11) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140), 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x8004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x101}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000004c0)={@private0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc0200c0}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:udev_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xadf}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60050841}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x800d) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000ac0)) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='afs_edit_dir\x00', r9, 0x0, 0x1ff}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r4) r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c00)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r13, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r11, 0x4004662b, &(0x7f0000000d00)=0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'ip6gre0\x00', &(0x7f0000000d80)={'ip6gre0\x00', r6, 0x2f, 0x4b, 0x4, 0x5, 0x5, @local, @local, 0x20, 0x7, 0x8, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000e40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x80, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0xa0, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f00000011c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x234, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4002000}, 0x20000001) 3.895520066s ago: executing program 1 (id=2394): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r3}, 0x14) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 3.789458458s ago: executing program 6 (id=2395): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095a0d571f7a131943bcb47f55d8921b9bf42acbc4dcc72b54bd1f3f8"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3.655108912s ago: executing program 7 (id=2396): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000300)={r3, 0x6, 0xffffffffffff3bb4}) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="cdb0bdb21b45619943b8d3365c7559d5d89dc4e99e2807d5b2e6bc6a19654a49f97b279934156b0440507a40e1088b02b3ad01ca5de4c51f3f276de4eeb8675b67ded6d2fb792b907687b60e3a8d7ee8103148dfa80ea942423c7c6fc9ef2f1b2613b95e02d8dcaa", 0x68}, {&(0x7f0000000640)="58aceabdb235ee6d87bb238cced41fbf99a4ff157fdc30d2f211a3df48c152c8d1f60cfb080df981db5a291ffc56c787ff4aa22dc13a4dba77c07b487c25db3981b8f39752b75cfa5be53169e9a691433cf3520cee5b956b6660255e143959023469dc65ab4588a162dafe00e9e778e0966d8d1fbcceb28dc43d42a1ec92e712bdd8bee4010f13eb8fc7ef09e6e578a843f2cdad91d6555dea460df230bfa68635e85f4c270a27042727784ac9b024439b9b00f472f71eb60d260ba34180afeaf127bcb90d58ebf483a84d3ab1b37bc7dfe5e56fb4", 0xd5}, {&(0x7f00000003c0)="13b3582523375102478bfcb1c754ad7e714ae925ff98c221d1168ffc68ce4c196db529d59980fe0e89c43278e3898b3f7a933e39179794ed0029430635586f321fe2af5ea76c971c866c28c6b1dbf5668e5187a8d8ab80a175c3ffca5e7303b6ce67a378e8ab88a0dc18cf1a83", 0x6d}], 0x3, &(0x7f0000000740)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7f}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @assoc={0x18, 0x117, 0x4, 0xec}, @op={0x18, 0x117, 0x3, 0x1}], 0x1b8}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000100000400088010000c8006000b"], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x80) close(r4) close(r1) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000001f0000ff03000024000000", @ANYRES32, @ANYBLOB="0000000000000000000000009a04000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @remote}, 0xfffffffffffffed4) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 3.570161464s ago: executing program 6 (id=2397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a0101010000000000000000000000004e2200004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000bb00000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cafcfff1ffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000008001d000000000008001e0003000000"], 0x148}}, 0x0) 3.475865363s ago: executing program 6 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'vcan0\x00', @ifru_names='caif0\x00'}) 3.402548106s ago: executing program 8 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000017020561eb06000009e1a12d1a9c0bffffffff01ff410baeda27dd6d01d927810b68f3911892b0664e2c1248611954106eea9493f555a8fb5b8aa0e3a720ce6d57"], 0x18) 3.327553696s ago: executing program 1 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd7000fedbdf2508000000540001800800050002000000060002005c000000060004004e240000060001000a00000014000300000000000000000000000000000000011400030020010000000000000000000000000000060001001b00000008000500feffffff1c000280080009000600000008000700ff07000008000700000200001800038014000600000000000000000000000000000000010800050003000000080004000800000038000280080005000400000014000100e0000001000000000000000000000000080006000400000005000d0000000000060002004e220000"], 0xec}, 0x1, 0x0, 0x0, 0x24040080}, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac1414250000000000000000000000000435000001", @ANYRESDEC=r3], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd7000fedbdf2508000000540001800800050002000000060002005c000000060004004e240000060001000a00000014000300000000000000000000000000000000011400030020010000000000000000000000000000060001001b00000008000500feffffff1c000280080009000600000008000700ff07000008000700000200001800038014000600000000000000000000000000000000010800050003000000080004000800000038000280080005000400000014000100e0000001000000000000000000000000080006000400000005000d0000000000060002004e220000"], 0xec}, 0x1, 0x0, 0x0, 0x24040080}, 0x5) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYBLOB="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", @ANYRESDEC=r3], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) (async) 3.230518507s ago: executing program 7 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="14002c"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) socketpair(0x0, 0x6, 0x7c, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@rand_addr, @local, 0x0}, &(0x7f0000000240)=0xc) sendto$packet(r4, &(0x7f0000000100)="1f64590d29363df60234e7381dffc8fbeb6e71f56257d78b7f6057078550526e69f50b6167473abf56e45228f0e00c1ab18f9d11df7a0bb3ab6b1cb5535f580851593ea073212ac8a810ca61ed8a225afc24c0a8c5d3fa264d0f8ce1e7791573080daef0d25002dd332e371e8c3f9dc6e5cb33308c2881d8b7a7b3a6fb4759e5da3f44996fb0a6245fae4441306ffb1d76e2afc0007429e3edabd32c464bc09b5339e5c69ca489170c7cd293acd705f97194e5456139230536f31ef39f4c0c7cc4025e2f618759c0f18c83dc348cd63e75cd873b6a2f51f5824793613cda6571b77a7b1e5e9714892083e75f2ba82e80e6e5", 0xf2, 0x200100c0, &(0x7f0000000280)={0x11, 0xf7, r5, 0x1, 0x9, 0x6, @remote}, 0x14) 3.196943151s ago: executing program 6 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, r3, 0x7, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008014) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x2, 0x7af, 0x6, 0x10000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r8 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) 3.059035373s ago: executing program 1 (id=2403): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, 0x62995d92}}, [0xb, 0x100, 0x1ff, 0x3, 0x56, 0x13a0, 0xf08, 0xffffffffffff4b1e, 0x1, 0x3, 0x401, 0x1, 0x598e, 0x81, 0x3]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x9}}, 0xd, 0x0, 0x5, 0x7, 0x4, 0x8, 0x10}, &(0x7f0000000200)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x9}}, 0xd, 0x0, 0x5, 0x7, 0x4, 0x8, 0x10}, &(0x7f0000000200)=0x9c) r1 = accept(0xffffffffffffffff, &(0x7f0000000240)=@qipcrtr, &(0x7f00000002c0)=0x80) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000300), 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r0, 0xfff}, 0x8) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x38}}, 0x8044) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000005c0)={0x7, 0x5, 0x3, 0x29e}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000005c0)={0x7, 0x5, 0x3, 0x29e}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={r0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x1, 0x7, 0x567, 0x9, 0x8, 0xd, 0x9}, &(0x7f00000006c0)=0x9c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d0, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff6}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x93}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf5}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x1d0}}, 0x40000) ioctl$FITHAW(r1, 0xc0045878) (async) ioctl$FITHAW(r1, 0xc0045878) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000a00)=[@in6={0xa, 0x4e20, 0x6, @empty, 0x58}, @in={0x2, 0x7, @multicast1}, @in6={0xa, 0x4e22, 0xb96b, @local, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x11, 0x8, 0x9, 0x19, 0x2800, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x11, 0x8, 0x9, 0x19, 0x2800, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)=@generic={&(0x7f0000000a80)='./file0\x00', r5}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)=@generic={&(0x7f0000000a80)='./file0\x00', r5}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xec, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xec, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000c00)={{0x4, 0x6}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000c00)={{0x4, 0x6}, 0x100, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000d40)={r0, 0x262c}, &(0x7f0000000d80)=0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001080)={'veth0_to_bridge\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x79c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001200)={r3, 0x6}, 0x8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000001240)=@bpq0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008044) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x0, 0x0, 0xffffffff, 0x160, 0x0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, &(0x7f00000013c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff, 0xff000000], 'nr0\x00', 'bridge0\x00', {}, {0xff}, 0x89, 0x2, 0x5, 0x20}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x2, 0x0, [0x7ff, 0x1, 0xc, 0x8000, 0xbe, 0x1, 0x1, 0x2, 0x7c5, 0x4, 0x2, 0x3, 0x6, 0xfff4, 0x74, 0x2], 0x8}}, @common=@frag={{0x30}, {[0x7, 0x6a52], 0x8, 0x0, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffffe, 0xcc24, 0x10001, 0x1, 0x0, 0x8, 0xba, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x5, 0xffae, 0x1, 0x0, "18870796788bec842bc33cd3ed4207ab13d62da01cddefa02e9fddc6d54b84a006c643180e924497d7fee1c772827b4d5a4625a6bb41991be31fb069271cba48"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@mcast2, @gre_key=0xc1b, @port=0x4e21}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff000000, 0x0, 0xff], [0xdb34ab394d1307dc, 0xff000000, 0xffffff, 0xff], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x29, 0x1, 0x4, 0x25}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x4], 0x6, 0x1, 0x3}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@local, @gre_key=0x73cc, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x0, 0x0, 0xffffffff, 0x160, 0x0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, &(0x7f00000013c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff, 0xff000000], 'nr0\x00', 'bridge0\x00', {}, {0xff}, 0x89, 0x2, 0x5, 0x20}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x2, 0x0, [0x7ff, 0x1, 0xc, 0x8000, 0xbe, 0x1, 0x1, 0x2, 0x7c5, 0x4, 0x2, 0x3, 0x6, 0xfff4, 0x74, 0x2], 0x8}}, @common=@frag={{0x30}, {[0x7, 0x6a52], 0x8, 0x0, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffffe, 0xcc24, 0x10001, 0x1, 0x0, 0x8, 0xba, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x5, 0xffae, 0x1, 0x0, "18870796788bec842bc33cd3ed4207ab13d62da01cddefa02e9fddc6d54b84a006c643180e924497d7fee1c772827b4d5a4625a6bb41991be31fb069271cba48"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@mcast2, @gre_key=0xc1b, @port=0x4e21}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff000000, 0x0, 0xff], [0xdb34ab394d1307dc, 0xff000000, 0xffffff, 0xff], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x29, 0x1, 0x4, 0x25}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x4], 0x6, 0x1, 0x3}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@local, @gre_key=0x73cc, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000001a40), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) 2.943021564s ago: executing program 1 (id=2404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.857787332s ago: executing program 5 (id=2405): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r6, 0x111, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@empty, 0x2, r4}) recvfrom$inet6(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) listen(r7, 0xa5) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) 2.791042542s ago: executing program 7 (id=2406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000480)=""/212, &(0x7f00000000c0)=0xd4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xf4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400000006fe09040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800a00010071756575650000001400028006000140000800000600024000000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 2.705383469s ago: executing program 6 (id=2407): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0xffffff8b) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebe, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$rose(r1, 0x0, &(0x7f0000000240), 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000280)={0x5, 0x0, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno', 0xa) sendmmsg$inet(r5, &(0x7f0000002240), 0x0, 0x8041) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030000000900010073797a30000000000100030073797a320000000014000000110001a0cba90260a16f25ccd8003eeb6b587e505efef1b6cd9635de6ac3613dd27b533eefdc75ce8010c7c345e179ad0371f0a47bd86f8b93a7f682cac7dc634a119928a467ef79f306966b0b667a00"/187], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001ab00000000000000000000000a1c62ce39db0be6de06677a61cd000000090a010100000000000000000300000208000c4000000001140000001100010000000000000000000700000a"], 0x44}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000606010100b63e89a723829660d0a7a0a42f64b35b000000000000000500000205000100070000000900020073797a30000000000900020073797a31000000000900030073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.614241103s ago: executing program 5 (id=2408): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2, 0x7}}, 0x0, 0x4, 0x87c, 0x1}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x3c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x4, @private1, 0x400}]}, &(0x7f0000000180)=0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 2.613589191s ago: executing program 1 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100001000000000000000000ac14140000000000e4ffffffffffffffac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) 2.507273857s ago: executing program 7 (id=2410): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000004cc0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x190, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.378559483s ago: executing program 5 (id=2411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xdf, 0xd, 0x1, 0x0, "7c4e0a7499c2fea2d3253617e8d043a661de6c5cfa86ef859dccce7f27b141d69ea95fa53562786baf55c2213c6e45b510b89ac7127e08c5b529ceb26383d5786efebf06827f9e62eb140c53c584d2f3cb3f012064e0138b92167ebaa64378904d3d765f8b910a8e5b8230bd789331f736d680bfe86a318dbe3c841667408e55ad1419baaa68366c32240250eb4ee1e67fe8b36dc76587a11c28e410096233a5161bc22de83349f62ba1f3591a36f9375d7296d75b8b9eba45f90e9df67d2e370b7e99753725eada0865d4156f26688c238bf48007fb4ea27ab2fe"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0xf7fce58a4481fa21, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.140710568s ago: executing program 5 (id=2412): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="04"], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 231.431256ms ago: executing program 8 (id=2413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x1000}) 230.461156ms ago: executing program 7 (id=2414): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000100), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000440)={{r2}, "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"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x44}}, 0x0) 229.790959ms ago: executing program 1 (id=2415): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r1, 0x0, 0x0, 0x0}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0)=r5, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xfffffffffffffc24, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f0000000240)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @default]}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="001f29bd7000000800030000000000000000", @ANYRES32=r10, @ANYBLOB="0c0099008f00000037000000080057005b0b00000400870004008e0004008e000600cd004000000004006c000400870004008700"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) 0s ago: executing program 5 (id=2416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) kernel console output (not intermixed with test programs): process `syz.4.785'. [ 221.197269][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 221.818917][ T8992] netlink: 'syz.4.791': attribute type 4 has an invalid length. [ 221.946374][ T8992] netlink: 'syz.4.791': attribute type 4 has an invalid length. [ 221.978722][ T8995] Bluetooth: MGMT ver 1.23 [ 222.070912][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.788'. [ 222.553902][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 222.587341][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 222.689211][ T9029] netlink: 'syz.1.798': attribute type 16 has an invalid length. [ 222.724421][ T9018] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 222.746501][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 222.760038][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 222.796234][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 222.819122][ T9018] bond1 (unregistering): Released all slaves [ 222.933945][ T9027] bridge0: entered promiscuous mode [ 222.942715][ T9027] macsec2: entered promiscuous mode [ 222.952943][ T9027] macsec2: entered allmulticast mode [ 222.961053][ T9027] bridge0: entered allmulticast mode [ 222.970515][ T9027] bridge0: port 3(macsec2) entered blocking state [ 222.980146][ T9027] bridge0: port 3(macsec2) entered disabled state [ 223.033917][ T9027] bridge0: left allmulticast mode [ 223.045363][ T9027] bridge0: left promiscuous mode [ 223.221202][ T9037] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 223.238727][ T9037] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 223.921360][ T9065] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 224.147802][ T9075] macvtap1: entered allmulticast mode [ 224.174172][ T9075] veth0_macvtap: entered allmulticast mode [ 224.632160][ T9097] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 224.658329][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'. [ 224.981122][ T9097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.200983][ T9103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.243627][ T9103] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.283565][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 225.322191][ T9103] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 225.644690][ T9109] gretap1: entered promiscuous mode [ 225.695163][ T9109] bond3: (slave gretap1): making interface the new active one [ 225.770357][ T9109] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 225.919972][ T9154] veth1_macvtap: left promiscuous mode [ 226.231677][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 226.401175][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 226.464068][ T9167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.830'. [ 226.618092][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 226.915867][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 226.928050][ T9189] netlink: 92 bytes leftover after parsing attributes in process `syz.2.836'. [ 227.047683][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 227.668421][ T9227] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.874773][ T9231] can: request_module (can-proto-0) failed. [ 228.098031][ T9237] veth3: entered allmulticast mode [ 228.176917][ T9228] infiniband sy: set active [ 228.201264][ T9228] infiniband sy: added bond_slave_0 [ 228.536006][ T9228] RDS/IB: sy: added [ 228.576867][ T9228] smc: adding ib device sy with port count 1 [ 228.608067][ T9228] smc: ib device sy port 1 has no pnetid [ 228.658221][ T9249] tipc: Started in network mode [ 228.681872][ T9249] tipc: Node identity ac14140f, cluster identity 4711 [ 228.714300][ T9249] tipc: New replicast peer: 255.255.255.255 [ 228.736698][ T9249] tipc: Enabled bearer , priority 10 [ 229.047969][ T9261] lo speed is unknown, defaulting to 1000 [ 229.500694][ T9274] netlink: 10 bytes leftover after parsing attributes in process `syz.2.863'. [ 229.853138][ T5913] tipc: Node number set to 2886997007 [ 230.682592][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.691939][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.877987][ T9302] bridge_slave_0: left allmulticast mode [ 230.889876][ T9302] bridge_slave_0: left promiscuous mode [ 230.899335][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.936659][ T9302] bridge_slave_1: left allmulticast mode [ 230.947055][ T9302] bridge_slave_1: left promiscuous mode [ 230.957084][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.005616][ T9302] bond0: (slave bond_slave_0): Releasing backup interface [ 231.042274][ T9302] bond0: (slave bond_slave_1): Releasing backup interface [ 231.104118][ T9302] team0: Port device team_slave_0 removed [ 231.157793][ T9302] team0: Port device team_slave_1 removed [ 231.177571][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.194821][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.214544][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.238593][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.283319][ T9302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.951668][ T9332] delete_channel: no stack [ 232.045017][ T9348] gtp0: entered promiscuous mode [ 232.073096][ T9348] gtp0: entered allmulticast mode [ 232.593136][ T9360] netlink: 165 bytes leftover after parsing attributes in process `syz.2.875'. [ 232.809753][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.878'. [ 233.443310][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 233.495629][ T9380] netlink: 'syz.2.881': attribute type 8 has an invalid length. [ 233.888638][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.990747][ T5839] Bluetooth: hci4: link tx timeout [ 233.999396][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 234.867490][ T6269] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 235.489245][ T9443] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 235.606176][ T9443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.747675][ T9444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.767470][ T9444] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 235.787326][ T9444] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 236.039710][ T9456] syzkaller1: entered promiscuous mode [ 236.083780][ T9456] syzkaller1: entered allmulticast mode [ 236.104351][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 236.114961][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 236.156752][ T9465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.166098][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 236.175520][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 236.184346][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 236.921427][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 237.325783][ T9514] netlink: 'syz.1.914': attribute type 6 has an invalid length. [ 237.626381][ T9528] netlink: 'syz.3.917': attribute type 64 has an invalid length. [ 237.636045][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.917'. [ 237.672757][ T9528] netlink: 'syz.3.917': attribute type 64 has an invalid length. [ 237.711386][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.917'. [ 238.389794][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 238.430890][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 239.246043][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 239.469593][ T9592] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 240.276625][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 240.440068][ T9629] syzkaller0: entered promiscuous mode [ 240.464313][ T9629] syzkaller0: entered allmulticast mode [ 240.487921][ T9631] netlink: 'syz.1.943': attribute type 13 has an invalid length. [ 240.568566][ T9631] macvtap1: left allmulticast mode [ 240.605885][ T9631] veth0_macvtap: left allmulticast mode [ 240.771545][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 242.658433][ T9638] Bluetooth: hci0: command 0x0406 tx timeout [ 242.674238][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 242.675498][ T9638] Bluetooth: hci3: command 0x0406 tx timeout [ 242.688518][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 244.352638][ T9683] vlan2: entered promiscuous mode [ 244.376751][ T9683] vlan2: entered allmulticast mode [ 244.386313][ T9683] hsr_slave_1: entered allmulticast mode [ 244.403098][ T9697] netlink: 'syz.0.954': attribute type 12 has an invalid length. [ 244.447314][ T9697] netlink: 'syz.0.954': attribute type 29 has an invalid length. [ 244.464141][ T9697] netlink: 148 bytes leftover after parsing attributes in process `syz.0.954'. [ 244.478742][ T9697] netlink: 'syz.0.954': attribute type 2 has an invalid length. [ 244.532131][ T9697] netlink: 'syz.0.954': attribute type 3 has an invalid length. [ 244.550087][ T9697] netlink: 15 bytes leftover after parsing attributes in process `syz.0.954'. [ 244.561037][ T9702] netlink: 48 bytes leftover after parsing attributes in process `syz.4.956'. [ 244.575527][ T9688] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.953'. [ 244.650328][ T9705] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 244.710497][ T9706] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 245.107247][ T9729] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 245.132459][ T9729] netlink: 17 bytes leftover after parsing attributes in process `syz.0.962'. [ 245.313489][ T9737] netlink: 'syz.1.964': attribute type 268 has an invalid length. [ 245.553773][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 246.073124][ T9768] netlink: 'syz.1.970': attribute type 2 has an invalid length. [ 246.182485][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 246.680503][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 246.758417][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 246.787187][ T9782] gretap0: entered promiscuous mode [ 246.800075][ T9782] gretap0: left promiscuous mode [ 247.015277][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 247.080867][ T9800] vlan3: entered allmulticast mode [ 247.119778][ T9800] hsr0: entered allmulticast mode [ 247.144340][ T9800] hsr_slave_0: entered allmulticast mode [ 248.136466][ T9845] syzkaller0: entered promiscuous mode [ 248.162982][ T9845] syzkaller0: entered allmulticast mode [ 248.500888][ T9860] xt_hashlimit: size too large, truncated to 1048576 [ 249.048102][ T9884] netlink: 'syz.0.998': attribute type 3 has an invalid length. [ 249.122050][ T9880] bond2: option lacp_rate: invalid value (244) [ 249.171728][ T9880] bond2 (unregistering): Released all slaves [ 249.248835][ T9884] syzkaller0: entered promiscuous mode [ 249.259248][ T9884] syzkaller0: entered allmulticast mode [ 249.273513][ T9884] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 249.411985][ T9897] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 249.439175][ T9897] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 249.590486][ T9901] __nla_validate_parse: 16 callbacks suppressed [ 249.590510][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 250.324596][ T1167] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.378716][ T1167] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.454553][ T9919] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1003'. [ 250.539053][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 250.583683][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 250.712391][ T1167] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.772898][ T1167] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.840531][ T1167] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.893390][ T1167] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.947610][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1005'. [ 250.995734][ T9932] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1005'. [ 251.063592][ T1167] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.101381][ T9951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.102671][ T1167] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.619772][ T9972] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1013'. [ 251.931890][ T9985] Bluetooth: MGMT ver 1.23 [ 251.944393][ T6275] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.999831][ T6275] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.034049][ T6275] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.066907][ T6275] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.191711][ T9990] IPVS: Error connecting to the multicast addr [ 252.340989][ T9995] syzkaller1: entered promiscuous mode [ 252.379993][ T9995] syzkaller1: entered allmulticast mode [ 252.642227][T10014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.828017][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.853736][T10022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 252.901202][T10025] : renamed from hsr0 (while UP) [ 253.201787][T10034] IPv6: sit2: Disabled Multicast RS [ 253.218666][T10034] sit2: entered allmulticast mode [ 253.258682][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 253.311736][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1035'. [ 253.714525][T10062] tipc: Started in network mode [ 253.770866][T10062] tipc: Node identity da35a98855bd, cluster identity 4711 [ 253.846346][T10062] tipc: Enabled bearer , priority 0 [ 253.900487][T10065] syzkaller0: entered promiscuous mode [ 253.994674][T10065] syzkaller0: entered allmulticast mode [ 254.108304][T10065] tipc: Resetting bearer [ 254.158623][T10060] tipc: Resetting bearer [ 254.258904][T10060] tipc: Disabling bearer [ 254.711549][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 254.805085][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 255.102735][T10110] lo speed is unknown, defaulting to 1000 [ 255.185857][T10120] openvswitch: netlink: Key 0 has unexpected len 2090 expected 0 [ 255.205862][T10100] lo speed is unknown, defaulting to 1000 [ 255.638156][T10132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1054'. [ 256.012839][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 258.159937][T10147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1059'. [ 258.240868][T10152] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1059'. [ 258.298769][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.301494][T10157] netlink: 'syz.1.1062': attribute type 19 has an invalid length. [ 258.310408][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.644334][T10162] syzkaller1: entered promiscuous mode [ 258.667322][T10162] syzkaller1: entered allmulticast mode [ 258.714997][T10163] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 258.740568][T10163] syzkaller1: Refused to change device type [ 259.228355][T10180] smc: net device gre0 applied user defined pnetid SYZ1 [ 259.241890][T10176] smc: net device gre0 erased user defined pnetid SYZ1 [ 259.421336][T10190] tipc: Enabling of bearer rejected, failed to enable media [ 259.478312][T10193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1071'. [ 259.517899][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 260.118334][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 260.407403][T10235] nbd: nbd2 already in use [ 260.435302][T10234] block nbd2: not configured, cannot reconfigure [ 260.574328][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'. [ 260.642109][T10245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1083'. [ 260.952309][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 261.045194][T10261] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 261.361531][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 261.764884][ T3198] IPVS: starting estimator thread 0... [ 261.790911][T10287] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1095'. [ 261.870661][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 261.881651][T10288] IPVS: using max 30 ests per chain, 72000 per kthread [ 261.907507][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 261.934176][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 261.954543][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 262.320225][T10312] netlink: 'syz.1.1102': attribute type 2 has an invalid length. [ 262.404132][T10314] dvmrp0: entered allmulticast mode [ 265.361585][T10322] __nla_validate_parse: 3 callbacks suppressed [ 265.361606][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 265.390254][T10322] tc_dump_action: action bad kind [ 265.495685][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.514846][T10336] bridge_slave_1: left allmulticast mode [ 265.541842][T10336] bridge_slave_1: left promiscuous mode [ 265.550935][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.754315][T10354] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 265.795671][T10354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1116'. [ 265.835807][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 265.948076][ T1157] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 265.960995][T10367] x_tables: unsorted underflow at hook 2 [ 266.132412][T10372] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 266.157233][T10372] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 266.241112][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 266.630375][T10370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1120'. [ 267.235827][T10421] ipt_REJECT: TCP_RESET invalid for non-tcp [ 267.290642][T10432] ipt_REJECT: TCP_RESET invalid for non-tcp [ 267.423516][T10438] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1132'. [ 267.728300][T10453] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1134'. [ 267.803805][T10456] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 267.824477][T10456] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 267.834631][T10456] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1136'. [ 268.001661][T10464] syzkaller0: entered promiscuous mode [ 268.034880][T10464] syzkaller0: entered allmulticast mode [ 268.069201][T10467] netlink: 'syz.0.1138': attribute type 14 has an invalid length. [ 268.078576][T10468] IPVS: length: 4096 != 24 [ 268.088153][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 268.125936][ T6283] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.146475][ T6283] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.160212][ T6283] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.386995][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1143'. [ 269.588945][T10507] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 270.463359][T10545] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 270.856488][T10565] __nla_validate_parse: 2 callbacks suppressed [ 270.856508][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 270.888536][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 270.959951][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 270.959951][ T69] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.983365][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 271.002953][ T5841] block nbd0: Receive control failed (result -32) [ 271.043446][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 271.071889][ T69] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.115370][T10560] syz.1.1164 (10560) used greatest stack depth: 17832 bytes left [ 271.167090][T10574] netlink: 'syz.0.1167': attribute type 3 has an invalid length. [ 271.303905][ T69] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.332685][ T69] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.361059][T10580] x_tables: unsorted entry at hook 3 [ 288.649989][T10599] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 288.651018][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'. [ 288.673238][T10599] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1175'. [ 288.764631][T10604] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 288.965469][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 289.034399][T10606] bond2: (slave veth3): Enslaving as an active interface with a down link [ 289.100306][T10610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.633934][T10645] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 289.647398][T10645] syzkaller1: Refused to change device type [ 289.822267][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 290.220905][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1193'. [ 290.220902][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1193'. [ 290.349944][T10678] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 290.401258][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.461863][T10678] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 290.604811][T10685] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 290.615152][T10685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1195'. [ 290.674412][T10690] bond3: invalid ARP target 0.0.0.0 specified for addition [ 290.687207][T10690] bond3: option arp_ip_target: invalid value (0) [ 290.700191][T10690] bond3 (unregistering): Released all slaves [ 290.732563][T10685] batadv0: entered promiscuous mode [ 290.742584][T10685] bond0: (slave batadv0): Releasing backup interface [ 290.756732][T10685] bridge0: port 3(batadv0) entered blocking state [ 290.764247][T10685] bridge0: port 3(batadv0) entered disabled state [ 290.792019][T10695] sit0: entered promiscuous mode [ 290.798390][T10695] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 290.810722][T10695] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1199'. [ 290.874097][ T6284] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 290.884747][ T6284] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 291.032319][T10705] netlink: 'syz.4.1202': attribute type 21 has an invalid length. [ 291.058305][T10705] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 291.146430][T10707] sctp: [Deprecated]: syz.2.1203 (pid 10707) Use of int in maxseg socket option. [ 291.146430][T10707] Use struct sctp_assoc_value instead [ 291.458723][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 291.590414][T10721] veth0_macvtap: left promiscuous mode [ 291.687988][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 292.184112][T10739] wlan1: mtu less than device minimum [ 292.232412][T10745] netlink: 'syz.3.1214': attribute type 19 has an invalid length. [ 292.441033][T10751] netlink: 'syz.0.1215': attribute type 4 has an invalid length. [ 292.469035][T10752] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 292.665494][T10758] veth0: entered promiscuous mode [ 292.728853][T10758] netlink: 'syz.3.1218': attribute type 11 has an invalid length. [ 293.049230][T10757] veth0: left promiscuous mode [ 293.365703][T10777] veth0_to_bridge: mtu greater than device maximum [ 309.913219][T10806] __nla_validate_parse: 3 callbacks suppressed [ 309.913244][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 309.938648][T10805] netlink: 'syz.3.1232': attribute type 13 has an invalid length. [ 309.938826][T10807] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1230'. [ 310.365400][T10827] veth0_to_team: entered promiscuous mode [ 310.986183][T10845] netlink: 'syz.2.1240': attribute type 32 has an invalid length. [ 311.042898][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 311.285711][T10845] bond4: option coupled_control: invalid value (52) [ 311.326801][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 311.348970][T10845] bond4 (unregistering): Released all slaves [ 311.442754][T10865] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 311.494182][T10865] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 311.735827][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 311.792207][T10873] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 311.816997][T10872] syzkaller0: entered promiscuous mode [ 311.902849][T10872] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 311.939003][T10873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.093238][T10883] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 312.110501][T10873] vlan3: entered allmulticast mode [ 312.120035][T10873] bond4: entered allmulticast mode [ 312.146699][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 312.170688][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 312.399722][T10883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.577098][T10895] block nbd1: server does not support multiple connections per device. [ 312.658728][T10895] block nbd1: shutting down sockets [ 312.689906][T10898] netlink: 5780 bytes leftover after parsing attributes in process `syz.0.1249'. [ 312.985504][T10907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1253'. [ 313.286086][T10916] syzkaller0: entered allmulticast mode [ 313.401804][T10921] syzkaller1: entered promiscuous mode [ 313.415513][T10921] syzkaller1: entered allmulticast mode [ 313.449391][T10914] netdevsim0: mtu greater than device maximum [ 313.855912][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 314.020929][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 314.260478][T10953] openvswitch: netlink: Flow key attr not present in new flow. [ 314.298466][T10954] ipvlan2: entered promiscuous mode [ 315.394989][T10988] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.566179][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 315.700718][T11001] netlink: 'syz.1.1280': attribute type 3 has an invalid length. [ 315.751323][ T9906] IPVS: starting estimator thread 0... [ 315.751708][T11001] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 315.813118][T11001] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1280'. [ 315.883014][T11007] IPVS: using max 22 ests per chain, 52800 per kthread [ 315.890000][T11002] netlink: 'syz.1.1280': attribute type 3 has an invalid length. [ 315.926908][T11002] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 315.954646][T11002] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1280'. [ 315.983432][T11013] veth0_to_team: left promiscuous mode [ 315.986498][T11006] netlink: 'syz.4.1279': attribute type 11 has an invalid length. [ 316.048038][T11006] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1279'. [ 316.142486][T11013] veth1_macvtap: left allmulticast mode [ 316.624133][T11024] netlink: 'syz.2.1282': attribute type 16 has an invalid length. [ 316.654340][T11024] netlink: 'syz.2.1282': attribute type 17 has an invalid length. [ 316.846384][ T1318] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.906426][ T1318] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.950690][ T1318] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.994498][ T1318] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.048768][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.137526][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.154418][T11039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1287'. [ 317.402248][T11024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.439931][ T1318] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.460343][ T1318] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.501040][T11032] : entered promiscuous mode [ 317.547180][ T1318] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.593024][ T1318] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.800436][T11052] netlink: 'syz.3.1294': attribute type 23 has an invalid length. [ 317.889387][T11059] netlink: 'syz.4.1297': attribute type 21 has an invalid length. [ 317.990417][T11059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1297'. [ 318.134138][T11068] netlink: 'syz.1.1300': attribute type 15 has an invalid length. [ 318.227136][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 318.398993][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1301'. [ 318.411835][T11068] netlink: 'syz.1.1300': attribute type 15 has an invalid length. [ 318.411866][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 318.437748][ T69] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 318.457028][ T69] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 318.491440][ T69] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 318.707308][T11087] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 318.736266][T11100] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1305'. [ 318.789725][ T69] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 320.036042][T11158] netlink: 'syz.0.1323': attribute type 11 has an invalid length. [ 320.675133][T11184] __nla_validate_parse: 9 callbacks suppressed [ 320.675165][T11184] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1329'. [ 320.746015][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 320.846245][T11189] bond0: (slave rose0): Enslaving as an active interface with an up link [ 320.860784][T11184] bridge_slave_1: left allmulticast mode [ 320.868439][T11184] bridge_slave_1: left promiscuous mode [ 320.876200][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.891493][T11184] bridge_slave_0: left allmulticast mode [ 320.900507][T11184] bridge_slave_0: left promiscuous mode [ 320.912881][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.124968][T11203] openvswitch: netlink: Message has 4 unknown bytes. [ 321.685124][T11215] netlink: 'syz.3.1337': attribute type 21 has an invalid length. [ 321.779986][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 323.960343][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 323.973285][T11224] batman_adv: batadv0: Interface deactivated: dummy0 [ 324.132392][T11234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.259469][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1341'. [ 324.592166][T11256] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1345'. [ 324.641959][T11256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1345'. [ 324.734478][T11258] syzkaller0: entered promiscuous mode [ 324.740993][T11258] syzkaller0: entered allmulticast mode [ 324.773579][T11258] openvswitch: netlink: Flow key attr not present in new flow. [ 324.954364][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 325.123366][T11272] netlink: 'syz.3.1352': attribute type 11 has an invalid length. [ 325.211363][T11272] tipc: Enabled bearer , priority 0 [ 325.228571][T11272] syzkaller0: entered promiscuous mode [ 325.240536][T11272] syzkaller0: entered allmulticast mode [ 325.321447][T11278] tipc: Resetting bearer [ 325.363559][T11271] tipc: Resetting bearer [ 325.454221][T11271] tipc: Disabling bearer [ 325.880458][T11301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1360'. [ 325.926427][T11301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1360'. [ 326.147666][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 326.530141][T11323] tipc: Enabled bearer , priority 10 [ 326.566002][T11324] tipc: Enabling of bearer rejected, already enabled [ 326.782702][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 326.813302][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 326.844779][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 326.885245][T11334] geneve2: entered promiscuous mode [ 326.897520][T11334] geneve2: entered allmulticast mode [ 326.913279][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.929687][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.967944][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.030475][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.643781][ T9] tipc: Node number set to 3758096386 [ 327.929014][T11380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1380'. [ 327.963495][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 327.999528][T11383] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1382'. [ 328.086315][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 328.348063][T11393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.484722][T11427] openvswitch: netlink: Missing key (keys=40, expected=100) [ 329.521362][T11428] netlink: 'syz.0.1397': attribute type 4 has an invalid length. [ 329.834301][T11442] netlink: 'syz.4.1402': attribute type 7 has an invalid length. [ 329.885237][T11442] netlink: 'syz.4.1402': attribute type 8 has an invalid length. [ 330.198668][T11459] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 330.545232][T11473] syzkaller1: entered promiscuous mode [ 330.551701][T11473] syzkaller1: entered allmulticast mode [ 331.382338][T11498] syzkaller0: entered promiscuous mode [ 331.405326][T11498] syzkaller0: entered allmulticast mode [ 331.699580][T11509] __nla_validate_parse: 5 callbacks suppressed [ 331.699621][T11509] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1418'. [ 331.879022][T11513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1419'. [ 331.993026][T11524] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 332.004893][T11521] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 332.402249][T11535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 332.444506][T11535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 332.523776][T11541] mac80211_hwsim hwsim11 : renamed from wlan1 [ 332.571095][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 332.625710][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 333.099169][T11563] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 333.142871][T11563] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 333.198222][T11563] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 333.278617][T11563] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 333.839057][T11591] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1438'. [ 333.884243][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 333.921073][T11598] netlink: 'syz.0.1441': attribute type 21 has an invalid length. [ 333.973816][T11598] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1441'. [ 334.318023][T11605] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 334.384403][T11607] openvswitch: netlink: Flow key attr not present in new flow. [ 334.423847][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 334.707745][T11620] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 334.843864][T11634] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1451'. [ 334.879633][T11620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.145458][T11623] bond6: (slave veth7): Enslaving as an active interface with a down link [ 335.474323][T11649] netlink: 'syz.3.1454': attribute type 33 has an invalid length. [ 335.505858][T11651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1456'. [ 336.108177][T11673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.522644][T11664] Driver unsupported XDP return value 0 on prog (id 328) dev N/A, expect packet loss! [ 336.835786][T11678] x_tables: duplicate underflow at hook 1 [ 337.059959][T11682] __nla_validate_parse: 6 callbacks suppressed [ 337.060108][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 337.141212][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 337.174010][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 337.231017][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 338.413080][T11736] netlink: 'syz.3.1480': attribute type 3 has an invalid length. [ 338.484975][T11736] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 338.567645][T11736] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1480'. [ 338.680430][T11744] xt_l2tp: unknown flags: 10 [ 339.728499][T11765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1486'. [ 340.438540][T11788] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 340.528514][T11792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.531660][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 340.570698][T11788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.633867][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 340.689058][T11798] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1493'. [ 340.990424][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 341.347579][T11820] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 341.546986][T11825] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 342.111928][T11850] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 342.162752][T11854] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 342.564678][T11867] __nla_validate_parse: 1 callbacks suppressed [ 342.564704][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 342.663064][ T6269] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.664404][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 342.688956][ T6269] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.735777][ T6269] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.782262][ T6269] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.802375][T11870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.830338][T11876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 342.875257][T11876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 343.131431][T11880] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1518'. [ 343.150450][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 343.178941][T11882] syzkaller0: entered promiscuous mode [ 343.187781][T11887] netlink: 'syz.4.1518': attribute type 23 has an invalid length. [ 343.199033][T11882] syzkaller0: entered allmulticast mode [ 343.349090][T11896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 343.471971][T11896] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.525073][T11896] gretap2: entered promiscuous mode [ 343.530593][T11896] gretap2: entered allmulticast mode [ 343.693590][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 344.568108][T11927] ppp0: entered allmulticast mode [ 344.810220][T11930] tipc: Enabled bearer , priority 0 [ 344.864010][T11934] syzkaller0: entered promiscuous mode [ 344.904307][T11934] syzkaller0: entered allmulticast mode [ 344.928041][T11930] sctp: [Deprecated]: syz.1.1531 (pid 11930) Use of int in max_burst socket option deprecated. [ 344.928041][T11930] Use struct sctp_assoc_value instead [ 345.024293][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 345.070371][T11934] tipc: Resetting bearer [ 345.241894][T11929] tipc: Resetting bearer [ 345.367898][T11929] tipc: Disabling bearer [ 345.424991][T11957] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1538'. [ 345.440025][T11959] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1538'. [ 345.874559][T11967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1542'. [ 345.919412][T11967] pim6reg527: entered allmulticast mode [ 346.045753][T11971] tap0: tun_chr_ioctl cmd 1074025676 [ 346.059918][T11971] tap0: owner set to 0 [ 346.784102][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 346.799790][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 346.850124][T12007] syzkaller0: entered promiscuous mode [ 346.868348][T12008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.885578][T12007] syzkaller0: entered allmulticast mode [ 347.523805][T12032] netlink: 'syz.0.1562': attribute type 17 has an invalid length. [ 347.780121][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.036527][T12047] lo speed is unknown, defaulting to 1000 [ 348.080971][T12056] __nla_validate_parse: 3 callbacks suppressed [ 348.080995][T12056] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1569'. [ 348.803281][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 348.977350][T12076] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 349.029806][T12077] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 349.141661][T12082] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1578'. [ 349.666063][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'. [ 349.704120][T12093] syzkaller0: entered promiscuous mode [ 349.712261][T12093] syzkaller0: entered allmulticast mode [ 350.268921][T12112] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 350.780965][T12122] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 350.823140][T12122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.870667][T12122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1585'. [ 350.895282][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 352.041307][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 352.339198][T12106] syz.2.1584: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.383139][T12106] CPU: 0 UID: 0 PID: 12106 Comm: syz.2.1584 Not tainted syzkaller #0 PREEMPT(full) [ 352.383173][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.383191][T12106] Call Trace: [ 352.383201][T12106] [ 352.383211][T12106] dump_stack_lvl+0x189/0x250 [ 352.383254][T12106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.383297][T12106] ? __pfx__printk+0x10/0x10 [ 352.383321][T12106] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.383362][T12106] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.383396][T12106] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 352.383431][T12106] warn_alloc+0x214/0x310 [ 352.383474][T12106] ? __pfx_warn_alloc+0x10/0x10 [ 352.383522][T12106] ? __get_vm_area_node+0x28f/0x300 [ 352.383555][T12106] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 352.383586][T12106] __vmalloc_node_range_noprof+0x690/0x12d0 [ 352.383657][T12106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.383690][T12106] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 352.383720][T12106] ? rcu_is_watching+0x15/0xb0 [ 352.383748][T12106] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 352.383772][T12106] __kvmalloc_node_noprof+0x674/0x910 [ 352.383809][T12106] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 352.383832][T12106] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 352.383865][T12106] ? kfree+0x19a/0x6d0 [ 352.383891][T12106] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 352.383922][T12106] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 352.383965][T12106] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 352.383988][T12106] ? __fget_files+0x2a/0x420 [ 352.384013][T12106] ? __fget_files+0x2a/0x420 [ 352.384035][T12106] ? __fget_files+0x2a/0x420 [ 352.384059][T12106] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 352.384093][T12106] link_create+0x673/0x850 [ 352.384126][T12106] __sys_bpf+0x6be/0x860 [ 352.384151][T12106] ? __pfx___sys_bpf+0x10/0x10 [ 352.384198][T12106] ? rcu_is_watching+0x15/0xb0 [ 352.384235][T12106] __x64_sys_bpf+0x7c/0x90 [ 352.384281][T12106] do_syscall_64+0xfa/0xfa0 [ 352.384315][T12106] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.384351][T12106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.384374][T12106] ? clear_bhb_loop+0x60/0xb0 [ 352.384403][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.384425][T12106] RIP: 0033:0x7fc5fd98f749 [ 352.384483][T12106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.384527][T12106] RSP: 002b:00007fc5fe8cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.384556][T12106] RAX: ffffffffffffffda RBX: 00007fc5fdbe5fa0 RCX: 00007fc5fd98f749 [ 352.384574][T12106] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 352.384589][T12106] RBP: 00007fc5fda13f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.384603][T12106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.384617][T12106] R13: 00007fc5fdbe6038 R14: 00007fc5fdbe5fa0 R15: 00007ffd46a72d08 [ 352.384657][T12106] [ 352.384980][T12106] Mem-Info: [ 352.885779][T12106] active_anon:5709 inactive_anon:0 isolated_anon:0 [ 352.885779][T12106] active_file:2757 inactive_file:39963 isolated_file:0 [ 352.885779][T12106] unevictable:768 dirty:39 writeback:0 [ 352.885779][T12106] slab_reclaimable:10940 slab_unreclaimable:122133 [ 352.885779][T12106] mapped:30127 shmem:1364 pagetables:1173 [ 352.885779][T12106] sec_pagetables:0 bounce:0 [ 352.885779][T12106] kernel_misc_reclaimable:0 [ 352.885779][T12106] free:1307446 free_pcp:12670 free_cma:0 [ 352.999559][T12186] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 353.018594][T12106] Node 0 active_anon:23136kB inactive_anon:0kB active_file:11028kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120608kB dirty:156kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 353.065248][T12106] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 353.121636][T12106] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.194189][T12106] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 353.209688][T12106] Node 0 DMA32 free:1319148kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23096kB inactive_anon:0kB active_file:11028kB inactive_file:159648kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:37056kB local_pcp:19816kB free_cma:0kB [ 353.261072][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1605'. [ 353.282598][T12106] lowmem_reserve[]: 0 0 0 0 0 [ 353.302295][T12106] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.393213][T12106] lowmem_reserve[]: 0 0 0 0 0 [ 353.430821][T12106] Node 1 Normal free:3895244kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13704kB local_pcp:4768kB free_cma:0kB [ 353.506002][T12106] lowmem_reserve[]: 0 0 0 0 0 [ 353.515924][T12106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 353.540417][T12106] Node 0 DMA32: 139*4kB (UME) 316*8kB (UM) 138*16kB (UME) 1040*32kB (UM) 223*64kB (UM) 61*128kB (UM) 36*256kB (UM) 22*512kB (UM) 11*1024kB (UM) 7*2048kB (UM) 296*4096kB (UM) = 1319148kB [ 353.608561][T12197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 353.629560][T12106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 353.744454][T12106] Node 1 Normal: 191*4kB (UME) 52*8kB (UME) 49*16kB (UME) 103*32kB (UME) 31*64kB (UME) 13*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895244kB [ 353.768618][T12106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.786252][T12106] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.799244][T12106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.875047][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1608'. [ 353.892536][T12106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.909686][T12204] rdma_rxe: rxe_newlink: failed to add bond0 [ 353.921735][T12106] 44080 total pagecache pages [ 353.930822][T12106] 0 pages in swap cache [ 353.936507][T12106] Free swap = 124996kB [ 353.941946][T12106] Total swap = 124996kB [ 353.950034][T12106] 2097051 pages RAM [ 353.958108][T12106] 0 pages HighMem/MovableOnly [ 353.966350][T12106] 424124 pages reserved [ 353.975424][T12106] 0 pages cma reserved [ 354.431244][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 354.445193][T12222] netlink: 'syz.4.1614': attribute type 2 has an invalid length. [ 354.449361][T12223] syzkaller0: entered promiscuous mode [ 354.467581][T12223] syzkaller0: entered allmulticast mode [ 354.488621][T12222] : entered promiscuous mode [ 354.501269][T12223] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 354.711246][T12226] netlink: 'syz.2.1616': attribute type 13 has an invalid length. [ 354.762620][T12228] netlink: 'syz.2.1616': attribute type 21 has an invalid length. [ 354.934174][T12232] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1617'. [ 355.155108][T12226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.174875][T12236] openvswitch: netlink: Unknown key attributes 2 [ 355.339299][T12241] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 355.415458][T12241] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 355.496349][T12241] team0: Port device dummy0 added [ 355.646047][T12241] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 355.717240][T12241] team0: Port device dummy0 removed [ 355.797731][T12241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 356.076565][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'. [ 356.754490][T12306] netlink: 'syz.3.1636': attribute type 16 has an invalid length. [ 356.871896][T12306] netlink: 'syz.3.1636': attribute type 17 has an invalid length. [ 357.340602][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.450137][T12327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1641'. [ 357.472139][T12306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.513944][ T9324] lo speed is unknown, defaulting to 1000 [ 357.523366][ T9324] syz2: Port: 1 Link ACTIVE [ 358.015683][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'. [ 358.064390][T12342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1649'. [ 358.275016][T12346] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1650'. [ 358.290441][T12346] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 358.387009][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 358.415072][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 358.780428][T12362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1655'. [ 358.830836][T12362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1655'. [ 359.187688][T12379] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 359.321785][T12366] syzkaller0: entered promiscuous mode [ 359.356184][T12366] syzkaller0: entered allmulticast mode [ 359.396506][T12376] lo: entered promiscuous mode [ 359.420707][T12376] tunl0: entered promiscuous mode [ 359.467134][T12376] gre0: entered promiscuous mode [ 359.507315][T12376] gretap0: entered promiscuous mode [ 359.547044][T12376] erspan0: entered promiscuous mode [ 359.569670][T12376] ip_vti0: entered promiscuous mode [ 359.602926][T12379] syz_tun: entered promiscuous mode [ 359.648487][T12389] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 359.679111][T12379] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 359.689590][T12388] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 359.951075][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 360.157059][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 360.248853][T12409] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 360.300288][T12411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 363.537398][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1663'. [ 363.590932][T12409] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.709044][T12412] vlan1: entered allmulticast mode [ 363.717849][T12412] bond6: entered allmulticast mode [ 364.093344][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'. [ 364.172620][T12426] tipc: Enabled bearer , priority 0 [ 364.388127][T12427] tipc: Disabling bearer [ 364.509652][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 364.935538][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 364.986990][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 365.069869][T12464] bond0: entered promiscuous mode [ 365.080828][ T5839] block nbd1: Receive control failed (result -1) [ 365.082357][T12464] dummy0: entered promiscuous mode [ 365.146605][T12464] bond0: left promiscuous mode [ 365.154599][T12464] dummy0: left promiscuous mode [ 365.778518][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 365.841678][T12485] xt_hashlimit: overflow, rate too high: 0 [ 366.830614][T12513] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 366.868981][T12524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1694'. [ 366.924984][T12516] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 367.407042][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'. [ 367.489777][T12537] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 367.503824][T12537] netlink: 'syz.1.1698': attribute type 2 has an invalid length. [ 367.803328][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1701'. [ 368.642569][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 368.673452][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 368.755501][T12579] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 368.886420][T12582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1713'. [ 369.010674][T12586] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 369.025677][T12582] syzkaller0: entered promiscuous mode [ 369.050883][T12582] syzkaller0: entered allmulticast mode [ 369.117765][T12586] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 369.341609][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 369.703126][T12605] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 369.784747][T12605] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 370.013728][T12610] netlink: 'syz.3.1723': attribute type 1 has an invalid length. [ 370.557135][T12642] bond5: (slave ip6gretap1): making interface the new active one [ 370.609083][T12642] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 370.662680][T12647] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 370.870607][T12648] bond2: (slave bridge3): making interface the new active one [ 370.881863][T12648] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 371.477593][T12670] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 371.589383][T12670] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 371.649138][T12675] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 371.977215][T12686] netlink: 'syz.2.1740': attribute type 2 has an invalid length. [ 372.003138][T12686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.154445][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 372.328557][T12693] macvtap0: entered promiscuous mode [ 372.355170][T12704] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1743'. [ 372.357267][T12693] vlan0: entered promiscuous mode [ 372.391618][T12705] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 372.401084][T12705] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1746'. [ 372.422572][T12693] macvtap0: entered allmulticast mode [ 372.431192][T12693] vlan0: entered allmulticast mode [ 372.438394][T12693] veth0_vlan: entered allmulticast mode [ 372.474061][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 372.786641][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 372.922275][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1752'. [ 372.976421][T12724] openvswitch: netlink: Flow key attr not present in new flow. [ 373.253717][T12726] can: request_module (can-proto-4) failed. [ 373.592466][T12744] openvswitch: netlink: Missing valid actions attribute. [ 373.685645][T12744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.979550][T12754] __nla_validate_parse: 3 callbacks suppressed [ 373.979575][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 374.064137][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 374.207187][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 374.383758][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 374.589702][T12767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.612039][T12767] bond4: (slave bond5): Enslaving as an active interface with an up link [ 374.637984][T12769] bond4 (unregistering): (slave bond5): Releasing backup interface [ 374.661217][T12769] bond4 (unregistering): Released all slaves [ 375.057621][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 375.109645][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1769'. [ 375.142698][T12783] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 375.186253][T12783] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 375.504495][T12803] netlink: 'syz.1.1777': attribute type 27 has an invalid length. [ 375.518764][T12802] bridge0: entered allmulticast mode [ 375.526780][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 376.089679][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 376.443978][T12848] netlink: 'syz.1.1790': attribute type 2 has an invalid length. [ 376.657485][T12856] netlink: 'syz.0.1792': attribute type 29 has an invalid length. [ 376.694267][ T9307] IPVS: starting estimator thread 0... [ 376.718336][T12856] netlink: 'syz.0.1792': attribute type 29 has an invalid length. [ 376.766306][T12868] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1792'. [ 376.782443][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 376.832996][T12864] IPVS: using max 26 ests per chain, 62400 per kthread [ 377.138701][T12883] : entered promiscuous mode [ 377.262454][T12881] syzkaller1: entered promiscuous mode [ 377.283286][T12881] syzkaller1: entered allmulticast mode [ 377.551012][T12896] syzkaller0: entered promiscuous mode [ 377.584125][T12896] syzkaller0: entered allmulticast mode [ 377.768396][T12911] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 378.423350][ T6275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.454846][ T6275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.798732][ T6275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.863347][ T6275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.005236][ T5848] bond0: (slave syz_tun): Releasing backup interface [ 379.132000][ T6275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.165159][ T6275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.085352][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.106937][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.125509][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.140110][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.153196][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.461552][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.479496][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.497577][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.521131][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.536499][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.678601][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.692159][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.706229][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.730884][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.749530][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.999104][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.030623][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.046065][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.088847][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.101589][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.133773][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 381.328712][ T6275] bond3 (unregistering): (slave gretap1): Releasing active interface [ 381.581377][ T6275] dvmrp0 (unregistering): left allmulticast mode [ 382.185366][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.218137][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.235967][ T6275] bond0 (unregistering): Released all slaves [ 382.263738][ T5841] Bluetooth: hci0: command tx timeout [ 382.267822][ T6275] bond1 (unregistering): Released all slaves [ 382.463057][ T6275] bond2 (unregistering): Released all slaves [ 382.646502][ T6275] bond3 (unregistering): Released all slaves [ 382.654333][ T5841] Bluetooth: hci1: command tx timeout [ 382.830313][ T5841] Bluetooth: hci3: command tx timeout [ 382.859337][ T6275] bond5 (unregistering): Released all slaves [ 382.894830][ T9313] sy: Port: 1 Link DOWN [ 383.090533][T12943] lo speed is unknown, defaulting to 1000 [ 383.104611][T12951] lo speed is unknown, defaulting to 1000 [ 383.116803][ T6275] tipc: Left network mode [ 383.177534][T12947] lo speed is unknown, defaulting to 1000 [ 383.201945][T12939] lo speed is unknown, defaulting to 1000 [ 383.243910][ T5841] Bluetooth: hci4: command tx timeout [ 383.459226][T12970] __nla_validate_parse: 2 callbacks suppressed [ 383.459250][T12970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1820'. [ 384.320206][T12943] chnl_net:caif_netlink_parms(): no params data found [ 384.338051][ T5841] Bluetooth: hci0: command tx timeout [ 384.696611][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.721846][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.734492][ T5839] Bluetooth: hci1: command tx timeout [ 384.736176][T12943] bridge_slave_0: entered allmulticast mode [ 384.753309][T12943] bridge_slave_0: entered promiscuous mode [ 384.790789][T12993] netlink: 'syz.1.1825': attribute type 12 has an invalid length. [ 384.841570][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.862366][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.882405][T12943] bridge_slave_1: entered allmulticast mode [ 384.893260][ T5839] Bluetooth: hci3: command tx timeout [ 384.902601][T12943] bridge_slave_1: entered promiscuous mode [ 385.144513][T13003] netlink: 'syz.1.1826': attribute type 4 has an invalid length. [ 385.172972][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 385.206068][T12943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.249045][T12943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.293015][ T5839] Bluetooth: hci4: command tx timeout [ 385.793623][T12943] team0: Port device team_slave_0 added [ 385.855292][ T6275] hsr_slave_0: left promiscuous mode [ 385.865351][ T6275] hsr_slave_1: left promiscuous mode [ 385.874464][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.888354][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1828'. [ 385.891070][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.911511][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.920738][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.929833][ T6275] batman_adv: batadv0: Removing interface: dummy0 [ 385.954669][ T6275] veth1_macvtap: left promiscuous mode [ 385.961934][ T6275] veth0_macvtap: left promiscuous mode [ 385.967815][ T6275] veth1_vlan: left promiscuous mode [ 386.027614][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 386.138193][ T6275] pim6reg527 (unregistering): left allmulticast mode [ 386.413135][ T5839] Bluetooth: hci0: command tx timeout [ 386.783521][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 386.816907][ T5839] Bluetooth: hci1: command tx timeout [ 386.849041][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 386.972949][ T5839] Bluetooth: hci3: command tx timeout [ 386.973701][ T6263] smc: removing ib device sy [ 387.379342][ T5839] Bluetooth: hci4: command tx timeout [ 387.517644][T12943] team0: Port device team_slave_1 added [ 387.538600][T13018] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 387.725822][T12943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.746732][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.779356][T12943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.921514][T12943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.929195][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.963825][T12943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.991534][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 388.013678][T12951] chnl_net:caif_netlink_parms(): no params data found [ 388.160129][T13034] Bluetooth: MGMT ver 1.23 [ 388.496402][ T5839] Bluetooth: hci0: command tx timeout [ 388.575217][T12943] hsr_slave_0: entered promiscuous mode [ 388.616694][T12943] hsr_slave_1: entered promiscuous mode [ 388.903750][ T5839] Bluetooth: hci1: command tx timeout [ 389.055417][ T5839] Bluetooth: hci3: command tx timeout [ 389.453093][ T5839] Bluetooth: hci4: command tx timeout [ 389.827389][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.857762][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.869874][T12951] bridge_slave_0: entered allmulticast mode [ 389.894446][T12951] bridge_slave_0: entered promiscuous mode [ 390.055840][T12947] chnl_net:caif_netlink_parms(): no params data found [ 390.206347][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.228562][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.245089][T12951] bridge_slave_1: entered allmulticast mode [ 390.276726][T12951] bridge_slave_1: entered promiscuous mode [ 390.575998][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.687808][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.707777][T12939] chnl_net:caif_netlink_parms(): no params data found [ 390.809724][ T6275] IPVS: stop unused estimator thread 0... [ 390.867222][T12951] team0: Port device team_slave_0 added [ 390.927060][T12951] team0: Port device team_slave_1 added [ 391.050018][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.074662][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.123822][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.140329][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.148636][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.180054][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.192490][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.204192][T12947] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.211942][T12947] bridge_slave_0: entered allmulticast mode [ 391.223139][T12947] bridge_slave_0: entered promiscuous mode [ 391.331571][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.363280][T12947] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.370756][T12947] bridge_slave_1: entered allmulticast mode [ 391.395781][T12947] bridge_slave_1: entered promiscuous mode [ 391.466302][ T6275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.478377][ T6275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.490303][ T6275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 391.631143][T12951] hsr_slave_0: entered promiscuous mode [ 391.639069][T12951] hsr_slave_1: entered promiscuous mode [ 391.646728][T12951] debugfs: 'hsr0' already exists in 'hsr' [ 391.652709][T12951] Cannot create hsr debugfs directory [ 391.672431][T12947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.728708][ T6275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.740303][ T6275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.753442][ T6275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 391.777836][T12947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.828731][T12939] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.843240][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.852413][T12939] bridge_slave_0: entered allmulticast mode [ 391.864222][T12939] bridge_slave_0: entered promiscuous mode [ 391.878662][T12939] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.888537][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.898050][T12939] bridge_slave_1: entered allmulticast mode [ 391.911721][T12939] bridge_slave_1: entered promiscuous mode [ 391.976796][ T6275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.989431][ T6275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.005584][ T6275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 392.041483][T12947] team0: Port device team_slave_0 added [ 392.110422][T12947] team0: Port device team_slave_1 added [ 392.146258][T12939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.161339][T12939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.229751][ T6275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.243441][ T6275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.258792][ T6275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 392.309299][T12947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.317423][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.350476][T12947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.441412][T12947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.448782][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.476387][T12947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.496806][T12943] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.515998][T12939] team0: Port device team_slave_0 added [ 392.566539][T12943] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.589819][T12943] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.622474][T12939] team0: Port device team_slave_1 added [ 392.719113][T12943] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.758783][T12939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.768170][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.798456][T12939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.900096][T12939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.909890][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.940923][T12939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.957923][T13149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.966335][T12947] hsr_slave_0: entered promiscuous mode [ 392.973612][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.983610][T12947] hsr_slave_1: entered promiscuous mode [ 392.997642][T12947] debugfs: 'hsr0' already exists in 'hsr' [ 393.005712][T12947] Cannot create hsr debugfs directory [ 393.348603][T12939] hsr_slave_0: entered promiscuous mode [ 393.357761][T12939] hsr_slave_1: entered promiscuous mode [ 393.366738][T12939] debugfs: 'hsr0' already exists in 'hsr' [ 393.375052][T12939] Cannot create hsr debugfs directory [ 393.390386][ T6275] bridge0: port 3(batadv0) entered disabled state [ 393.401771][ T6275] bridge_slave_1: left allmulticast mode [ 393.414900][ T6275] bridge_slave_1: left promiscuous mode [ 393.426324][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.439753][ T6275] bridge_slave_0: left allmulticast mode [ 393.447787][ T6275] bridge_slave_0: left promiscuous mode [ 393.455077][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.358895][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.373174][ T6275] bond_slave_0: left allmulticast mode [ 394.387649][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.404061][ T6275] bond_slave_1: left allmulticast mode [ 394.413590][ T6275] bond0 (unregistering): Released all slaves [ 394.593121][ T6275] bond1 (unregistering): Released all slaves [ 394.611452][ T6275] bond2 (unregistering): Released all slaves [ 394.629896][ T6275] bond3 (unregistering): Released all slaves [ 394.804416][ T6275] bond4 (unregistering): Released all slaves [ 394.824231][ T6275] bond5 (unregistering): Released all slaves [ 395.024624][ T6275] bond6 (unregistering): (slave veth7): Releasing active interface [ 395.040313][ T6275] bond6 (unregistering): Released all slaves [ 395.068211][T13164] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1854'. [ 395.347703][ T6275] tipc: Left network mode [ 395.510297][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 395.590643][T12951] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 395.721678][T12951] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 395.847593][T12951] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 396.020237][T13179] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1859'. [ 396.030849][T12951] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 396.197800][ T6275] hsr_slave_0: left promiscuous mode [ 396.206967][ T6275] hsr_slave_1: left promiscuous mode [ 396.220482][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.233079][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.245511][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.259321][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.302260][ T6275] veth1_macvtap: left promiscuous mode [ 396.311612][ T6275] veth0_macvtap: left promiscuous mode [ 396.320834][ T6275] : left promiscuous mode [ 396.330186][ T6275] veth0_vlan: left promiscuous mode [ 397.207213][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 397.283424][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 397.982428][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.117799][T13209] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 398.128797][T12947] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.175238][T12947] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.241525][T12947] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.279894][T12947] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 398.366603][T12943] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.492164][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.499820][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.515298][T12939] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.540449][T12939] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.580324][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.588220][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.608348][T12939] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.640629][T12939] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.935196][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.025376][T12947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.077334][T12951] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.127215][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.135318][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.266239][T12947] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.285422][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.293440][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.438645][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.445920][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.548065][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.556221][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.657139][T12943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.700977][T12951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.929747][T12939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.981351][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'. [ 400.097079][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1867'. [ 400.106804][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 400.122521][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.279598][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.289577][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.393431][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.400888][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.538135][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 400.614106][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 400.794740][T12951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.015297][T12943] veth0_vlan: entered promiscuous mode [ 401.097602][T12943] veth1_vlan: entered promiscuous mode [ 401.278005][T12943] veth0_macvtap: entered promiscuous mode [ 401.347167][T12943] veth1_macvtap: entered promiscuous mode [ 401.378291][T12947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.483128][T12943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.597841][T12943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.697003][ T6261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.771568][ T6261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.805016][ T6261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.848110][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.879612][ T6261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.246045][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1873'. [ 402.293186][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1873'. [ 402.372340][T12951] veth0_vlan: entered promiscuous mode [ 402.403317][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.412182][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.545848][T12951] veth1_vlan: entered promiscuous mode [ 402.571035][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.584369][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.602233][T12947] veth0_vlan: entered promiscuous mode [ 402.717147][T12947] veth1_vlan: entered promiscuous mode [ 402.741997][T12951] veth0_macvtap: entered promiscuous mode [ 402.830188][T12951] veth1_macvtap: entered promiscuous mode [ 402.982636][T12951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.027559][T12951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.060240][T12947] veth0_macvtap: entered promiscuous mode [ 403.100110][T13355] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1877'. [ 403.163299][T12947] veth1_macvtap: entered promiscuous mode [ 403.207978][T12939] veth0_vlan: entered promiscuous mode [ 403.238989][ T1167] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.290680][T12939] veth1_vlan: entered promiscuous mode [ 403.319476][ T1167] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.401309][ T1167] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.445560][T12947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.540232][ T1167] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.609611][T12947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.655810][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 403.768760][ T1167] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.808258][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.808829][ T1167] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.837233][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.854086][ T1167] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.893545][T12939] veth0_macvtap: entered promiscuous mode [ 403.905034][ T1167] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.971260][T12939] veth1_macvtap: entered promiscuous mode [ 404.102317][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.128914][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.162678][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.275500][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.280184][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.315048][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.396376][ T6263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.412054][ T6263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.531080][ T6263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.553488][ T6263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.649145][T13394] netlink: 'syz.8.1823': attribute type 13 has an invalid length. [ 404.689049][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.706903][T13394] netlink: 'syz.8.1823': attribute type 17 has an invalid length. [ 404.723761][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.865919][T13394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.020218][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.034210][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.347970][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.357813][T13426] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 405.368906][T13418] netlink: 'syz.8.1890': attribute type 1 has an invalid length. [ 405.379098][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.471747][T13418] veth3: entered promiscuous mode [ 405.551820][T13429] netlink: 'syz.6.1892': attribute type 30 has an invalid length. [ 405.742721][T13430] netlink: 'syz.1.1891': attribute type 29 has an invalid length. [ 405.756545][T13438] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1812'. [ 405.817577][T13433] netlink: 'syz.1.1891': attribute type 29 has an invalid length. [ 405.841635][T13438] 0{X: renamed from gretap0 (while UP) [ 405.877308][T13438] 0{X: entered allmulticast mode [ 405.914681][T13438] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 407.123198][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1898'. [ 407.159093][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1898'. [ 407.507420][T13484] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1901'. [ 408.101208][T13503] lo speed is unknown, defaulting to 1000 [ 408.388958][T13523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1913'. [ 408.889693][T13528] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 411.978016][T13589] netlink: 'syz.6.1926': attribute type 4 has an invalid length. [ 412.103350][T13599] netlink: 'syz.5.1928': attribute type 3 has an invalid length. [ 412.350266][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1931'. [ 412.448434][T13611] tipc: Enabling of bearer rejected, failed to enable media [ 412.472461][T13619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1933'. [ 412.503558][T13620] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 412.576076][T13622] openvswitch: netlink: IP tunnel dst address not specified [ 412.583090][T13616] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1932'. [ 412.600063][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1933'. [ 412.828429][T13634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.830717][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 412.876616][T13631] Cannot find add_set index 0 as target [ 412.957422][T13637] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1938'. [ 413.426570][T13656] netlink: 'syz.8.1941': attribute type 1 has an invalid length. [ 413.464578][T13657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1942'. [ 413.524104][T13660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1943'. [ 413.585595][T13660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1943'. [ 413.741572][T13666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.809378][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 413.963021][T13669] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 414.117890][T13669] team1: entered promiscuous mode [ 414.140741][T13669] team1: entered allmulticast mode [ 414.148988][T13685] netlink: 'syz.1.1950': attribute type 5 has an invalid length. [ 414.518587][T13693] vlan2: entered promiscuous mode [ 414.520746][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 414.557012][T13693] bridge0: entered promiscuous mode [ 414.611418][T13699] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 414.789574][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 414.813065][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 414.834815][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 414.857663][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 414.900771][T13696] netlink: 'syz.1.1953': attribute type 39 has an invalid length. [ 415.079905][T13708] bond1: option coupled_control: invalid value (52) [ 415.141039][T13708] bond1 (unregistering): Released all slaves [ 415.360101][T13722] bond1: invalid ARP target 0.0.0.0 specified for addition [ 415.368873][T13722] bond1: option arp_ip_target: invalid value (0) [ 415.388960][T13722] bond1 (unregistering): Released all slaves [ 415.504346][T13731] Cannot find add_set index 0 as target [ 415.659648][T13723] lo speed is unknown, defaulting to 1000 [ 415.730530][T13741] openvswitch: netlink: IP tunnel dst address not specified [ 415.836410][T13739] lo speed is unknown, defaulting to 1000 [ 415.910735][T13750] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 415.993832][T13750] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 416.365008][T13766] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 416.450457][T13766] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 416.492984][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 416.516530][T13766] gretap1: entered promiscuous mode [ 416.593276][T13766] gretap1: entered allmulticast mode [ 416.884753][T13788] batadv0: entered promiscuous mode [ 416.890654][T13788] batadv0: entered allmulticast mode [ 417.643680][T13819] __nla_validate_parse: 8 callbacks suppressed [ 417.643702][T13819] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1978'. [ 417.676672][ T37] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 417.780655][T13836] xt_l2tp: invalid flags combination: 0 [ 417.795758][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 417.950150][T13844] lo speed is unknown, defaulting to 1000 [ 418.451854][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1985'. [ 418.738747][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.766707][T13862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'. [ 419.046328][T13883] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1994'. [ 419.058890][T13883] syzkaller0: entered promiscuous mode [ 419.067831][T13883] syzkaller0: entered allmulticast mode [ 419.497049][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2000'. [ 419.627095][T13907] : entered promiscuous mode [ 420.534877][T13936] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2009'. [ 420.838764][ T37] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 420.878721][ T37] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 420.950049][ T37] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 421.000944][ T37] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 421.080572][T13952] validate_nla: 53 callbacks suppressed [ 421.080599][T13952] netlink: 'syz.7.2014': attribute type 4 has an invalid length. [ 421.292176][T13966] pimreg3: entered allmulticast mode [ 421.399680][T13966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2017'. [ 421.734959][T13985] netlink: 'syz.1.2020': attribute type 17 has an invalid length. [ 421.765586][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2021'. [ 421.780648][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 421.842121][T13985] erspan0: entered promiscuous mode [ 421.855217][T13985] erspan0: left promiscuous mode [ 422.305052][T14007] syzkaller0: entered promiscuous mode [ 422.322981][T14007] syzkaller0: entered allmulticast mode [ 422.403676][T14007] tipc: Started in network mode [ 422.421313][T14007] tipc: Node identity ae5776833d15, cluster identity 4711 [ 422.461573][T14007] tipc: Enabled bearer , priority 0 [ 422.508623][T14011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.568959][T14006] tipc: Resetting bearer [ 422.675826][T14006] tipc: Disabling bearer [ 423.183509][T14038] Bluetooth: MGMT ver 1.23 [ 423.643901][T14055] __nla_validate_parse: 2 callbacks suppressed [ 423.643923][T14055] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2042'. [ 423.651835][T14057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.323149][T14086] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.2050'. [ 424.343498][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 424.628724][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2054'. [ 424.911139][T14102] netlink: 'syz.5.2058': attribute type 1 has an invalid length. [ 424.979489][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2058'. [ 425.025471][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2058'. [ 425.661161][T14127] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 426.228746][T14144] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 426.396696][T14144] bond1 (unregistering): Released all slaves [ 426.938602][T14172] netlink: 'syz.7.2073': attribute type 10 has an invalid length. [ 426.992715][T14180] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2074'. [ 427.048641][T14172] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2073'. [ 428.008777][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 428.023986][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2081'. [ 428.187750][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'. [ 428.722529][ T9] IPVS: starting estimator thread 0... [ 428.731253][T14260] __nla_validate_parse: 3 callbacks suppressed [ 428.731275][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2089'. [ 428.781215][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2089'. [ 428.864882][T14261] IPVS: using max 28 ests per chain, 67200 per kthread [ 429.740611][T14311] netlink: 'syz.8.2099': attribute type 15 has an invalid length. [ 429.760055][T14311] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2099'. [ 429.802564][T14307] syzkaller1: entered promiscuous mode [ 429.818173][T14307] syzkaller1: entered allmulticast mode [ 430.067292][T14324] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2102'. [ 430.273262][T14336] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2105'. [ 430.345553][T14336] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 430.978691][T14363] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2114'. [ 431.133842][T14376] netlink: 'syz.1.2115': attribute type 83 has an invalid length. [ 431.332319][T14383] netlink: 'syz.5.2117': attribute type 1 has an invalid length. [ 431.544310][T14383] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 431.608133][T14394] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2119'. [ 431.813956][T14402] : entered promiscuous mode [ 432.294983][T14417] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 432.404582][T14426] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2126'. [ 432.981714][T14442] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2132'. [ 433.000946][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2132'. [ 433.384343][T14455] syzkaller1: entered promiscuous mode [ 433.413018][T14455] syzkaller1: entered allmulticast mode [ 433.950306][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'. [ 434.613150][T14497] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 434.953707][T14516] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2154'. [ 434.999025][T14518] netlink: 'syz.8.2153': attribute type 1 has an invalid length. [ 435.106685][T14518] bond1 (unregistering): Released all slaves [ 435.389202][T14532] ip6gretap0: entered promiscuous mode [ 435.395708][T14532] ip6gretap0: entered allmulticast mode [ 435.985731][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 436.067368][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2169'. [ 436.166330][T14570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.441186][T14578] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2173'. [ 436.501772][T14578] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2173'. [ 436.585656][ T5839] Bluetooth: hci0: command 0x080f tx timeout [ 436.624847][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2175'. [ 437.004709][T14593] netlink: 'syz.1.2177': attribute type 12 has an invalid length. [ 437.384514][T14598] syzkaller0: entered promiscuous mode [ 437.391951][T14598] syzkaller0: entered allmulticast mode [ 440.709596][T14627] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2187'. [ 441.141219][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2194'. [ 441.331502][T14664] IPVS: ip_vs_add_dest(): server weight less than zero [ 442.015788][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 442.148919][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 442.174943][ T6263] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.194784][ T6263] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.213329][ T6263] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.236448][ T6263] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.507746][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2213'. [ 442.530366][T14713] syzkaller1: entered promiscuous mode [ 442.535977][T14715] block nbd4: Unsupported socket: should be TCP or UNIX. [ 442.550709][T14713] syzkaller1: entered allmulticast mode [ 442.598290][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 442.846352][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 442.863865][T14738] netlink: 'syz.8.2217': attribute type 16 has an invalid length. [ 442.935727][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2217'. [ 443.116504][T14742] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2219'. [ 443.431853][T14758] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2225'. [ 444.036736][T14783] bond1 (unregistering): Released all slaves [ 444.580484][T14801] 8021q: VLANs not supported on ipvlan1 [ 444.933200][T14811] netlink: 'syz.8.2239': attribute type 29 has an invalid length. [ 444.974269][T14811] netlink: 'syz.8.2239': attribute type 29 has an invalid length. [ 444.991070][T14815] xt_hashlimit: size too large, truncated to 1048576 [ 445.190170][T14817] v: renamed from vlan0 [ 445.336544][T14815] syz.5.2240: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.422958][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.5.2240 Not tainted syzkaller #0 PREEMPT(full) [ 445.422991][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.423010][T14815] Call Trace: [ 445.423019][T14815] [ 445.423029][T14815] dump_stack_lvl+0x189/0x250 [ 445.423070][T14815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.423102][T14815] ? __pfx__printk+0x10/0x10 [ 445.423125][T14815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.423157][T14815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.423191][T14815] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 445.423226][T14815] warn_alloc+0x214/0x310 [ 445.423279][T14815] ? __pfx_warn_alloc+0x10/0x10 [ 445.423325][T14815] ? __get_vm_area_node+0x28f/0x300 [ 445.423358][T14815] ? htable_create+0x101/0x7a0 [ 445.423394][T14815] __vmalloc_node_range_noprof+0x690/0x12d0 [ 445.423465][T14815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.423504][T14815] ? rcu_is_watching+0x15/0xb0 [ 445.423531][T14815] ? htable_create+0x101/0x7a0 [ 445.423562][T14815] __kvmalloc_node_noprof+0x674/0x910 [ 445.423597][T14815] ? htable_create+0x101/0x7a0 [ 445.423625][T14815] ? hashlimit_pernet+0x23/0x240 [ 445.423655][T14815] ? hashlimit_pernet+0x23/0x240 [ 445.423684][T14815] ? hashlimit_pernet+0x23/0x240 [ 445.423723][T14815] htable_create+0x101/0x7a0 [ 445.423764][T14815] hashlimit_mt_check_common+0x719/0xa10 [ 445.423807][T14815] xt_check_match+0x3d1/0xab0 [ 445.423843][T14815] ? __pfx_xt_check_match+0x10/0x10 [ 445.423873][T14815] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 445.423923][T14815] ? xt_find_match+0x1f7/0x250 [ 445.423955][T14815] translate_table+0x1553/0x2040 [ 445.424016][T14815] ? __pfx_translate_table+0x10/0x10 [ 445.424055][T14815] ? __might_fault+0xb0/0x130 [ 445.424110][T14815] ? _copy_from_user+0x94/0xb0 [ 445.424147][T14815] do_ip6t_set_ctl+0x970/0xce0 [ 445.424175][T14815] ? rcu_is_watching+0x15/0xb0 [ 445.424203][T14815] ? trace_contention_end+0x39/0x120 [ 445.424231][T14815] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 445.424289][T14815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.424341][T14815] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.424380][T14815] nf_setsockopt+0x26f/0x290 [ 445.424411][T14815] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 445.424447][T14815] do_sock_setsockopt+0x17c/0x1b0 [ 445.424478][T14815] __x64_sys_setsockopt+0x13f/0x1b0 [ 445.424508][T14815] do_syscall_64+0xfa/0xfa0 [ 445.424540][T14815] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.424573][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.424594][T14815] ? clear_bhb_loop+0x60/0xb0 [ 445.424622][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.424650][T14815] RIP: 0033:0x7fb75d78f749 [ 445.424672][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.424692][T14815] RSP: 002b:00007fb75e5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.424716][T14815] RAX: ffffffffffffffda RBX: 00007fb75d9e6090 RCX: 00007fb75d78f749 [ 445.424732][T14815] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 445.424746][T14815] RBP: 00007fb75d813f91 R08: 0000000000000588 R09: 0000000000000000 [ 445.424761][T14815] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 445.424775][T14815] R13: 00007fb75d9e6128 R14: 00007fb75d9e6090 R15: 00007ffc54aa45b8 [ 445.424812][T14815] [ 445.425022][T14815] Mem-Info: [ 445.528874][T14831] siw: device registration error -23 [ 445.603022][T14815] active_anon:6706 inactive_anon:0 isolated_anon:0 [ 445.603022][T14815] active_file:3017 inactive_file:40008 isolated_file:0 [ 445.603022][T14815] unevictable:768 dirty:38 writeback:0 [ 445.603022][T14815] slab_reclaimable:11692 slab_unreclaimable:123718 [ 445.603022][T14815] mapped:29165 shmem:1372 pagetables:1400 [ 445.603022][T14815] sec_pagetables:0 bounce:0 [ 445.603022][T14815] kernel_misc_reclaimable:0 [ 445.603022][T14815] free:1303557 free_pcp:12614 free_cma:0 [ 445.873206][T14815] Node 0 active_anon:26924kB inactive_anon:0kB active_file:12068kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116560kB dirty:152kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14668kB pagetables:5756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.909233][T14815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.039136][T14835] tunl0: entered promiscuous mode [ 446.071387][T14835] netlink: 'syz.8.2247': attribute type 3 has an invalid length. [ 446.081185][T14815] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.153456][T14835] __nla_validate_parse: 3 callbacks suppressed [ 446.153480][T14835] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2247'. [ 446.174911][T14815] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 446.220664][T14848] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 446.223235][T14843] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2248'. [ 446.282486][T14815] Node 0 DMA32 free:1302100kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27380kB inactive_anon:0kB active_file:12068kB inactive_file:159828kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:36464kB local_pcp:15864kB free_cma:0kB [ 446.319898][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 446.325226][T14815] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.365004][T14856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'. [ 446.376957][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 446.382256][T14815] Node 1 Normal free:3896800kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12192kB local_pcp:8704kB free_cma:0kB [ 446.421874][T14848] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 446.432311][T14848] gretap2: entered promiscuous mode [ 446.440969][T14848] gretap2: entered allmulticast mode [ 446.489234][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 446.534194][T14815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.605041][T14815] Node 0 DMA32: 263*4kB (M) 130*8kB (UME) 177*16kB (UME) 379*32kB (UM) 61*64kB (UME) 27*128kB (UM) 15*256kB (UME) 8*512kB (UME) 6*1024kB (UM) 13*2048kB (UM) 302*4096kB (UM) = 1302108kB [ 446.680235][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.701762][T14815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.727119][T14815] Node 1 Normal: 192*4kB (UME) 54*8kB (UME) 49*16kB (UME) 127*32kB (UME) 39*64kB (UME) 15*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3896800kB [ 446.773165][T14815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.809136][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2254'. [ 446.844988][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2252'. [ 446.847881][T14815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.856394][T14875] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2252'. [ 446.895833][T14815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.966464][T14815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.013373][T14815] 44394 total pagecache pages [ 447.027373][T14815] 0 pages in swap cache [ 447.040674][T14815] Free swap = 124996kB [ 447.059488][T14815] Total swap = 124996kB [ 447.098058][T14815] 2097051 pages RAM [ 447.102570][T14815] 0 pages HighMem/MovableOnly [ 447.116481][T14815] 424124 pages reserved [ 447.123637][T14815] 0 pages cma reserved [ 447.399614][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 447.450929][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 447.639743][T14914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.696250][T14913] tipc: Started in network mode [ 447.702211][T14916] netlink: 'syz.5.2263': attribute type 39 has an invalid length. [ 447.719952][T14913] tipc: Node identity e0000002, cluster identity 4711 [ 447.749295][T14913] tipc: Enabling of bearer rejected, failed to enable media [ 447.897432][T14914] netdevsim netdevsim7 v: renamed from netdevsim0 (while UP) [ 448.253292][ T5839] Bluetooth: hci1: command tx timeout [ 448.456051][T14942] Cannot find del_set index 4 as target [ 448.788369][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2272'. [ 448.967777][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2273'. [ 449.305938][T14983] netlink: 'syz.8.2277': attribute type 7 has an invalid length. [ 449.338767][T14983] netlink: 'syz.8.2277': attribute type 8 has an invalid length. [ 449.442391][T14983] netlink: 'syz.8.2277': attribute type 13 has an invalid length. [ 449.475093][T14986] bond1: entered promiscuous mode [ 449.485686][T14986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.537374][T14997] x_tables: duplicate underflow at hook 2 [ 450.236810][T14993] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.401455][T15024] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.410422][ T9307] IPVS: starting estimator thread 0... [ 450.506003][T15030] IPVS: using max 31 ests per chain, 74400 per kthread [ 450.552376][T15034] netlink: 'syz.1.2289': attribute type 4 has an invalid length. [ 450.693323][T15040] netlink: 'syz.7.2293': attribute type 2 has an invalid length. [ 450.712483][T15044] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 450.787325][T15042] netlink: 'syz.6.2292': attribute type 1 has an invalid length. [ 450.796371][T15042] netlink: 'syz.6.2292': attribute type 21 has an invalid length. [ 450.805351][T15042] netlink: 'syz.6.2292': attribute type 1 has an invalid length. [ 450.819182][T15042] netlink: 'syz.6.2292': attribute type 9 has an invalid length. [ 450.915725][T15053] netlink: 'syz.1.2296': attribute type 4 has an invalid length. [ 451.064743][T15056] lo speed is unknown, defaulting to 1000 [ 451.438843][T15074] __nla_validate_parse: 11 callbacks suppressed [ 451.438870][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2300'. [ 451.755635][T15083] x_tables: duplicate underflow at hook 1 [ 451.801038][ T9313] IPVS: starting estimator thread 0... [ 451.867743][T15081] syzkaller0: entered promiscuous mode [ 451.874109][T15081] syzkaller0: entered allmulticast mode [ 451.893920][T15085] IPVS: using max 23 ests per chain, 55200 per kthread [ 452.022208][T15093] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2305'. [ 452.054428][T15093] unsupported nlmsg_type 40 [ 452.123190][T15096] 9: entered promiscuous mode [ 452.218721][T15098] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2307'. [ 452.247449][T15098] bond0: Caught tx_queue_len zero misconfig [ 452.332085][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2309'. [ 452.492105][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2313'. [ 452.598793][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2312'. [ 455.006651][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2323'. [ 455.074120][T15140] validate_nla: 3 callbacks suppressed [ 455.074141][T15140] netlink: 'syz.6.2322': attribute type 1 has an invalid length. [ 455.104871][T15144] netlink: 'syz.6.2322': attribute type 1 has an invalid length. [ 455.112664][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2322'. [ 455.133298][T15140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2322'. [ 455.651526][T15174] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2334'. [ 455.994006][T15194] netlink: 'syz.5.2337': attribute type 6 has an invalid length. [ 456.021245][T15187] lo speed is unknown, defaulting to 1000 [ 456.185209][T15207] netlink: 'syz.6.2343': attribute type 8 has an invalid length. [ 456.241390][T15205] lo: Caught tx_queue_len zero misconfig [ 456.453017][T15219] __nla_validate_parse: 7 callbacks suppressed [ 456.453040][T15219] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2345'. [ 456.685944][T15230] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2348'. [ 456.989225][T15242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2351'. [ 457.052095][T15245] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2352'. [ 457.264434][T15248] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2353'. [ 457.293239][T15248] team0: Caught tx_queue_len zero misconfig [ 457.399389][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 457.409968][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 457.452692][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 457.483006][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 457.737264][T15275] openvswitch: netlink: IP tunnel dst address not specified [ 457.743492][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2361'. [ 461.120438][T15315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.130340][T15350] team0: Device geneve2 is up. Set it down before adding it as a team port [ 461.149499][T15315] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 461.596507][T15361] netlink: 'syz.1.2387': attribute type 4 has an invalid length. [ 461.899581][T15315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.907884][T15379] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 461.924507][T15315] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 461.961856][T15315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.979784][T15315] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 462.093939][T15315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.127776][T15315] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 462.205683][T15315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.219083][T15315] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 463.194274][T15432] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.246167][T15439] __nla_validate_parse: 5 callbacks suppressed [ 463.246189][T15439] netlink: 56847 bytes leftover after parsing attributes in process `syz.6.2402'. [ 463.645941][T15462] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2407'. [ 463.883492][T15477] ipt_REJECT: TCP_RESET invalid for non-tcp [ 465.843259][T15468] kthread_run failed with err -4 [ 465.873630][T15491] bridge_slave_0: left allmulticast mode [ 465.880486][T15491] bridge_slave_0: left promiscuous mode [ 465.923138][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.995615][T15491] bridge_slave_1: left allmulticast mode [ 466.006951][T15491] bridge_slave_1: left promiscuous mode [ 466.014735][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.029019][T15491] bond0: (slave bond_slave_0): Releasing backup interface [ 466.041637][T15491] bond0: (slave bond_slave_1): Releasing backup interface [ 466.067757][T15491] team0: Port device team_slave_0 removed [ 466.083693][T15504] netlink: 'syz.1.2415': attribute type 2 has an invalid length. [ 466.088836][T15491] team0: Port device team_slave_1 removed [ 466.101837][T15491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.110220][T15491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.120642][T15491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.129646][T15491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.141121][T15491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.209229][T15508] [ 466.211657][T15508] ====================================================== [ 466.218714][T15508] WARNING: possible circular locking dependency detected [ 466.225952][T15508] syzkaller #0 Not tainted [ 466.230435][T15508] ------------------------------------------------------ [ 466.237748][T15508] syz.1.2415/15508 is trying to acquire lock: [ 466.243922][T15508] ffffffff8f426cd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0 [ 466.253203][T15508] [ 466.253203][T15508] but task is already holding lock: [ 466.260931][T15508] ffff888028407d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 466.270914][T15508] [ 466.270914][T15508] which lock already depends on the new lock. [ 466.270914][T15508] [ 466.284607][T15508] [ 466.284607][T15508] the existing dependency chain (in reverse order) is: [ 466.294009][T15508] [ 466.294009][T15508] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 466.302720][T15508] lock_acquire+0x120/0x360 [ 466.308207][T15508] _raw_spin_lock_bh+0x36/0x50 [ 466.313708][T15508] nr_rt_device_down+0x12a/0x720 [ 466.319557][T15508] nr_device_event+0x137/0x150 [ 466.325055][T15508] notifier_call_chain+0x1b6/0x3e0 [ 466.331014][T15508] netif_close_many+0x29c/0x410 [ 466.336677][T15508] netif_close+0x158/0x210 [ 466.341674][T15508] dev_close+0x10a/0x220 [ 466.346565][T15508] bpq_device_event+0x377/0x6a0 [ 466.351987][T15508] notifier_call_chain+0x1b6/0x3e0 [ 466.357840][T15508] __dev_notify_flags+0x18d/0x2e0 [ 466.363421][T15508] netif_change_flags+0xe8/0x1a0 [ 466.369020][T15508] dev_change_flags+0x130/0x260 [ 466.374825][T15508] dev_ioctl+0x7b4/0x1150 [ 466.379724][T15508] sock_do_ioctl+0x22c/0x300 [ 466.384875][T15508] sock_ioctl+0x576/0x790 [ 466.389775][T15508] __se_sys_ioctl+0xfc/0x170 [ 466.395077][T15508] do_syscall_64+0xfa/0xfa0 [ 466.400310][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.406758][T15508] [ 466.406758][T15508] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 466.414631][T15508] lock_acquire+0x120/0x360 [ 466.419988][T15508] _raw_spin_lock_bh+0x36/0x50 [ 466.425892][T15508] nr_rt_device_down+0xa9/0x720 [ 466.431483][T15508] nr_device_event+0x137/0x150 [ 466.436833][T15508] notifier_call_chain+0x1b6/0x3e0 [ 466.442592][T15508] netif_close_many+0x29c/0x410 [ 466.448601][T15508] netif_close+0x158/0x210 [ 466.453629][T15508] dev_close+0x10a/0x220 [ 466.458408][T15508] bpq_device_event+0x377/0x6a0 [ 466.463796][T15508] notifier_call_chain+0x1b6/0x3e0 [ 466.469447][T15508] __dev_notify_flags+0x18d/0x2e0 [ 466.475124][T15508] netif_change_flags+0xe8/0x1a0 [ 466.480615][T15508] dev_change_flags+0x130/0x260 [ 466.486002][T15508] dev_ioctl+0x7b4/0x1150 [ 466.490971][T15508] sock_do_ioctl+0x22c/0x300 [ 466.496107][T15508] sock_ioctl+0x576/0x790 [ 466.500990][T15508] __se_sys_ioctl+0xfc/0x170 [ 466.506146][T15508] do_syscall_64+0xfa/0xfa0 [ 466.511203][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.517630][T15508] [ 466.517630][T15508] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 466.525688][T15508] validate_chain+0xb9b/0x2140 [ 466.530993][T15508] __lock_acquire+0xab9/0xd20 [ 466.536212][T15508] lock_acquire+0x120/0x360 [ 466.541245][T15508] _raw_spin_lock_bh+0x36/0x50 [ 466.546558][T15508] nr_del_node+0x517/0x8d0 [ 466.551584][T15508] nr_rt_ioctl+0x989/0xd50 [ 466.556701][T15508] sock_do_ioctl+0xdc/0x300 [ 466.561827][T15508] sock_ioctl+0x576/0x790 [ 466.566692][T15508] __se_sys_ioctl+0xfc/0x170 [ 466.571842][T15508] do_syscall_64+0xfa/0xfa0 [ 466.576888][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.583403][T15508] [ 466.583403][T15508] other info that might help us debug this: [ 466.583403][T15508] [ 466.593982][T15508] Chain exists of: [ 466.593982][T15508] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 466.593982][T15508] [ 466.607824][T15508] Possible unsafe locking scenario: [ 466.607824][T15508] [ 466.615287][T15508] CPU0 CPU1 [ 466.620744][T15508] ---- ---- [ 466.626156][T15508] lock(&nr_node->node_lock); [ 466.631026][T15508] lock(nr_node_list_lock); [ 466.638541][T15508] lock(&nr_node->node_lock); [ 466.646543][T15508] lock(nr_neigh_list_lock); [ 466.651411][T15508] [ 466.651411][T15508] *** DEADLOCK *** [ 466.651411][T15508] [ 466.659790][T15508] 2 locks held by syz.1.2415/15508: [ 466.665022][T15508] #0: ffffffff8f426d38 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0 [ 466.674461][T15508] #1: ffff888028407d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 466.684632][T15508] [ 466.684632][T15508] stack backtrace: [ 466.690625][T15508] CPU: 0 UID: 0 PID: 15508 Comm: syz.1.2415 Not tainted syzkaller #0 PREEMPT(full) [ 466.690651][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.690665][T15508] Call Trace: [ 466.690675][T15508] [ 466.690686][T15508] dump_stack_lvl+0x189/0x250 [ 466.690719][T15508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.690745][T15508] ? __pfx__printk+0x10/0x10 [ 466.690766][T15508] ? print_lock_name+0xde/0x100 [ 466.690787][T15508] print_circular_bug+0x2ee/0x310 [ 466.690813][T15508] check_noncircular+0x134/0x160 [ 466.690841][T15508] validate_chain+0xb9b/0x2140 [ 466.690876][T15508] __lock_acquire+0xab9/0xd20 [ 466.690897][T15508] ? nr_del_node+0x517/0x8d0 [ 466.690919][T15508] lock_acquire+0x120/0x360 [ 466.690937][T15508] ? nr_del_node+0x517/0x8d0 [ 466.690961][T15508] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.690986][T15508] ? do_raw_spin_unlock+0x122/0x240 [ 466.691012][T15508] ? nr_neigh_get_dev+0xbd/0x140 [ 466.691039][T15508] ? nr_del_node+0x517/0x8d0 [ 466.691062][T15508] _raw_spin_lock_bh+0x36/0x50 [ 466.691087][T15508] ? nr_del_node+0x517/0x8d0 [ 466.691110][T15508] nr_del_node+0x517/0x8d0 [ 466.691137][T15508] nr_rt_ioctl+0x989/0xd50 [ 466.691169][T15508] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 466.691193][T15508] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.691228][T15508] ? apparmor_capable+0x137/0x1b0 [ 466.691254][T15508] ? capable+0x89/0xe0 [ 466.691274][T15508] ? nr_ioctl+0x1b1/0x3b0 [ 466.691295][T15508] sock_do_ioctl+0xdc/0x300 [ 466.691325][T15508] ? __pfx_sock_do_ioctl+0x10/0x10 [ 466.691358][T15508] sock_ioctl+0x576/0x790 [ 466.691384][T15508] ? __pfx_sock_ioctl+0x10/0x10 [ 466.691410][T15508] ? __fget_files+0x3a0/0x420 [ 466.691428][T15508] ? __fget_files+0x2a/0x420 [ 466.691447][T15508] ? bpf_lsm_file_ioctl+0x9/0x20 [ 466.691470][T15508] ? __pfx_sock_ioctl+0x10/0x10 [ 466.691495][T15508] __se_sys_ioctl+0xfc/0x170 [ 466.691520][T15508] do_syscall_64+0xfa/0xfa0 [ 466.691550][T15508] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.691577][T15508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.691602][T15508] ? clear_bhb_loop+0x60/0xb0 [ 466.691623][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.691642][T15508] RIP: 0033:0x7f2f92d8f749 [ 466.691661][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.691680][T15508] RSP: 002b:00007f2f93b96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.691702][T15508] RAX: ffffffffffffffda RBX: 00007f2f92fe6270 RCX: 00007f2f92d8f749 [ 466.691717][T15508] RDX: 0000200000000240 RSI: 000000000000890c RDI: 0000000000000009 [ 466.691729][T15508] RBP: 00007f2f92e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 466.691741][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.691755][T15508] R13: 00007f2f92fe6308 R14: 00007f2f92fe6270 R15: 00007ffdd4a00568 [ 466.691779][T15508] [ 467.055475][T15504] : entered promiscuous mode [ 467.080887][T15506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2415'. [ 467.092405][T15506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2415'.