last executing test programs: 6.637290906s ago: executing program 0 (id=1874): unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}, 0xc040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0xf1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6.400060073s ago: executing program 0 (id=1879): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000201aaaaaaaaaaaa050037000000000008000200", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x4, 0x700000000000000}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX=r9], 0xfce) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082cff000000ffff0000000053ac418d389b5af9ff0004516600"/62], 0x0) socket$alg(0x26, 0x5, 0x0) 5.014883333s ago: executing program 0 (id=1892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e0000000000b9cd00", '\x00\x00=*', "1202000000040030"}, 0xfffffffffffffd48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000580)}, 0x21) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fbffffff950000020000020080c892de6b2ff4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000800) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f", 0xf00}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) 4.595831998s ago: executing program 0 (id=1898): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="024482bd3104000ed946107f2eb9d65f339780958f0dbc0cefaf1cf523a5d1874e3b2279a7397d5cbf4cb8dd8ac4b036ab9dba63c29e762c9cd8fbe648aa6a33bfd8ec66c0ad6709a3e095f78289463e6b40323574", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000002ac0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002d40)={'team0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000001800)=0x3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000700)={0x5c, r4, 0x807, 0x70bd2a, 0x35dfdbfd, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500faff60000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x22, 0x0, &(0x7f0000000080)="3d25ab555b19c4cbd0017085080040fee5a990ec7661bcf85f9871eb5f7eef2d45f0", 0x0, 0x304a0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x200000d8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, r9}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="a81824f3103b403c985b5788f0cf5aaa", 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001a"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IPSET_CMD_DEL(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000680)={r2, &(0x7f0000000580)='team\x00', 0x200, &(0x7f00000005c0)={@align=0x4, {0xba3, 0xf, 0x9, 0xd}}, 0xdf, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x6}) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000c80)=@nat={'nat\x00', 0x19, 0x2, 0x27c, [0x200000000a00, 0x0, 0x0, 0x200000000aee, 0x200000000b1e], 0x0, &(0x7f00000006c0), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x20, 0x93ab, 'pimreg\x00', 'wg1\x00', 'macvlan0\x00', 'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x2, "de6318c8c2f69bddd29192a96500f794f355e1f2f0a7b12e58d90e691697"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x60, 0x6006, 'vlan0\x00', 'bridge_slave_0\x00', 'caif0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x1fe, 0xff], 0xf6, 0xf6, 0x12e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x10001, 0x9, 0x7}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x90}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 0xffffffffffffffff}}}}]}]}, 0x2f4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r12}, 0x38) 3.383202713s ago: executing program 2 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffbffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0x0, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x200188d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="fd010000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0x25236, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.925463665s ago: executing program 2 (id=1912): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000000c0)=""/94, 0x5e}], 0x2, &(0x7f0000000180)=""/208, 0xd0}, 0x26}, {{&(0x7f0000000280)=@ax25={{0x3, @bcast}, [@rose, @bcast, @netrom, @default, @default, @default, @rose, @netrom]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/229, 0xe5}], 0x2}, 0x7f}, {{&(0x7f00000004c0)=@nfc_llcp={0x27, 0x0}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/69, 0x45}, 0x7}, {{&(0x7f0000001600)=@hci, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/119, 0x77}, {&(0x7f00000017c0)=""/38, 0x26}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/207, 0xcf}, {&(0x7f00000029c0)=""/135, 0x87}, {&(0x7f0000002a80)=""/164, 0xa4}, {&(0x7f0000002b40)=""/162, 0xa2}], 0x9, &(0x7f0000002cc0)=""/133, 0x85}, 0x8}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002d80)=""/77, 0x4d}, {&(0x7f0000002e00)=""/111, 0x6f}, {&(0x7f0000002e80)=""/105, 0x69}, {&(0x7f0000002f00)=""/89, 0x59}, {&(0x7f0000002f80)=""/144, 0x90}, {&(0x7f0000003040)=""/219, 0xdb}, {&(0x7f0000003140)=""/16, 0x10}, {&(0x7f0000003180)=""/29, 0x1d}], 0x8, &(0x7f0000003240)=""/191, 0xbf}, 0x8}, {{&(0x7f0000003300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003380)=""/216, 0xd8}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)}], 0x3}, 0x1}], 0x6, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004680)={'wlan1\x00', 0x0}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004700), r2) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x20109}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x2c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x20000000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) writev(r2, &(0x7f0000004a80)=[{&(0x7f0000004800)="ae4a6bb164f918b2ca246ccda36c71edd5211b4ed7548fb8682a8c6e936657e563f3fd575c704b44d70e62059c3de0318d22e43c2fcb553d7f052b4a7fd29a9dc95880f6780a64342a065a75226c60db9da0e154b5666ff030edc8798fc044c59cd2da9b99e45b8dd5226b82df096ebffb1be94d14d60e0fe9faaa7d6cc4ecc2db34174753a4db61c22989a93e9f13c6f5f6b74c4e4d0e7670d2100ba4827efe594eb69c1cc0aefe78b6ff87e501c6", 0xaf}, {&(0x7f00000048c0)="8a9017d6efb3b6c94d704496f47b208ac9e52d42d9e42b7064f8216f3061c3530092e672bf72f50847e9a554ef48bec064320df9457c22cf8f6ebb6c1eb3a05757fb5745e14e68491ae7bf65611482400c5b1825efb15f27f7574c6cf86975885af5f232016f4bfc42cb4efc8b343a007d43af502594792d14b9df63a05ab9c57ab20fe16813a20993ced50320934551b4c95b7867bd9ff93e91bb147b60b9e853bc624f334a4e2142112e81c4fbb6cd8372b0", 0xb3}, {&(0x7f0000004980)="a877ba6890d5c08d22e83c271295e4087e6c428ff920f6944feac66d688bd2b6df9c6132539e68ad9b7df4c64fd80884921ac5e8b19308601f5a652bf9b8b437d0579da1c0745db6716a8d7cb9ee13f2bd97335a0fb10007dcac107c4120af267ade525873b016af6ccf1c6cc05cc5a50c0e22cbd253f2c2a2db972e0d7a55422108b4e49314ba3081078067bbefcdbac42ab76c5b91bc91bec6ec430ec97abb09d4c804258eef820756cee333bffc4cd397e8fcb84ad1ee07cce0592e7cee0cd2c325a3340a", 0xc6}], 0x3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004b00), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080800}, 0x24040000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004d40)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c40)=@ipv6_delrule={0xa0, 0x21, 0x109, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004d80), r2) (async, rerun: 32) sendmsg$nfc_llcp(r2, &(0x7f0000005180)={&(0x7f0000004dc0)={0x27, r1, 0x0, 0x3, 0x4, 0xff, "47e2ed6d97d56bfd826ea07a684bfa9ca2f5804ef51b5ad7d6bd04fe5a55cdffbe6a180e257384735ffbee2f515de001610221915ce2c57417bb451dfa5557", 0x9}, 0x60, &(0x7f0000005040)=[{&(0x7f0000004e40)="25060f358256af5d850d0d6fd84a67481a1f51a3957d69f4724639421e86229e3054c11cb2d3d4cdc5c8847e0db55d8b3c5cabdea51ec04f6d29348256c59825ca25f60fd8afb8bcb1c976e0293dfc59ecb3b036df02625d5eab4e70d9366c41213010eccafe40dfb354d4190c22bcc2906f0f686aa29cc1b0fb422498b4a70fd0f475bc87119ceb4edbe35d01b409a80b221889f66d4f7530d50b06925e4909d8c4bc101e54bb4835d529795f658599", 0xb0}, {&(0x7f0000004f00)="e5668c39966fc35d12d90c296cfa76630b62a4a60e66df3111a655e3160087f4a729ed8b3dbaaaf81ab5128e51bf016d1645b37d5ed9b12bf78ee0399f94b21f87432ed14abd45127d215e0b75950034dbc73685ed85decaf40ee06c1f7977c31a1d645b9d99b81429e3461c1b544daa3e347dd27c6418483af1", 0x7a}, {&(0x7f0000004f80)="4716795aeddf34d807bf51d183331672072570d4f8b8823ec0694cfa7c7a17e85563461b6b97cb182fa3adfaf8994e9817748346ee406d48774664a999beb38932e7454201236652f2c7d40dbca94a26afd7e1d319080fbd1986418c7a9ccfa68c007acb0194acb5f65fe8b499fdda164c34df4f1901d93821c6171365592b37f8bbdad6bde94ce09b4760", 0x8b}], 0x3, &(0x7f0000005080)={0xf0, 0x225, 0x0, "e2366f82bf02ffea6c1201e69063b95bf295643e544c7340f35dfd3442fc453c0cfa1e9d83958731844bc70d598c2473a7a4247509e0408e322f0d5070d90be611c5df8a0e19735b1cb435f1904e0d9ae1c2bdb6bf59dceb8fd36f01b903201aafa3773ef3e7ea8a898bccad513406ba9973595c4fe1566a64a117459aef5c90017bc88d0cebdd518150362dde2a3def6598c9721bf451263c1386455fe168b7681818c45834e08fb188822fbb5ce4ddf303f716d5f02b1a7745e1c21a3487825ab586f1da587de64e08975113c299cb8310527bb9505e7f6d"}, 0xf0, 0x4040}, 0x4010) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000051c0)) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000005240), r6) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000005380)={&(0x7f0000005200), 0xc, &(0x7f0000005340)={&(0x7f0000005280)={0x88, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x90) (async) sendto$inet6(r2, &(0x7f00000053c0)="2dcdb88e0a3b65f6cd617b36b662a74c9696d499f9d7eb7abb4746a4fa574df1d64aaef8ea6c49c915d98d3badf32ead3f741919e73348841269fb17fc119f7be947d27f022d6738ac402e6d3b4d435affbfc4d67d4819cfaffc5bcc33ae4ca9c73b50bcc6097d1d16505ea38f8ac588f3638070b6e0e96ca452f8bb33d21a9f522dd4a1b0c3816411900686a3bbc3958eabc6eb43615f5f4887b54490e4cfda03bf386612bd3f79dd54ccd65b73a0b4a03152bb1d73", 0xb6, 0x4000044, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10, 0x13, r6, 0x63a92000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000056c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005680)={&(0x7f00000054c0)={0x1ac, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}, @NL80211_ATTR_MESH_SETUP={0x94, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x80, 0x3, "95db1197de98f9bc15b3ad988ea9e6d6546507b234a0548806cb498b0ce039bf37a6627fb8666b330cea3f374ad8e1fd4511b7624be067bfbf783b7f67ebc43f43259559a38b530ef1d673fa6757d0830f7a1612ede2ab5c7a52a931e3d31e4d3888a4d8ccbf6dd6732b44b1d10d76c9c95ef376f762f1190f7b3c42"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xfe}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4d}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x60, 0x1}, {0x12, 0x1}, {0x48, 0x1}, {0xc}, {0x18, 0x1}, {0x36, 0x1}, {0x48, 0x1}, {0x30, 0x1}, {0x2}, {0x6c}, {0x16, 0x1}, {0x48, 0x1}, {0x16}, {0x6c}, {0x30, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x6c}, {0x9}, {0x1}, {0x36, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x30, 0x1}, {0x48}, {0x2}, {0x18, 0x1}, {0x60}, {0x36, 0x1}, {0x48, 0x1}, {0x1b}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x10}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x4}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x4, 0x6c, 0x1b, 0x33, 0x18, 0x6c, 0x12, 0x24, 0x6c, 0x36, 0x24, 0x18, 0x6, 0x36, 0x30, 0x6c, 0x0, 0x1, 0xb, 0x60, 0x9, 0x24, 0x36, 0x60, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x16, 0x18, 0xb, 0x6, 0x4, 0x6, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9cc8, 0x101, 0xffff, 0xfffd, 0xfff, 0xfbc, 0x246]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2e, 0x6, 0x24, 0x16, 0x6, 0x18, 0x5, 0x9, 0x30, 0x3, 0x5, 0x6c, 0x6, 0x60, 0xc, 0x5, 0x3, 0x4, 0x48, 0xb, 0x48, 0x1b, 0x30, 0x9, 0x16, 0x16, 0x48, 0x24, 0x1b, 0x9, 0x1, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1d4c}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10004081}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005740), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000005840)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x30, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x45}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000059c0)={'sit0\x00', &(0x7f00000058c0)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x5, 0x5, {{0x33, 0x4, 0x1, 0x1c, 0xcc, 0x68, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x65, 0xffffffffffffffff, [{0x0, 0xd, "35a5765b071483bcd5f3a3"}, {0x1, 0x10, "6b6f37b5bab43dfc9a6b98a20df5"}, {0x0, 0xb, "4dfbb909b837561ef7"}, {0x0, 0x11, "c0b8d14f04d8af599913fcf4912fb4"}, {0x5, 0x8, "32290f8be0ab"}, {0x5, 0x8, "c3ff1e70bd90"}, {0x1, 0x10, "72298f436d7a07dac81f4cc6a9a0"}, {0x6, 0x6, "67f770c4"}]}, @timestamp_prespec={0x44, 0x3c, 0x1d, 0x3, 0x4, [{@remote, 0x39af}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@broadcast, 0x7}, {@local, 0x1}, {@multicast2, 0x90000}, {@private=0x3, 0x4}, {@rand_addr=0x64010100, 0x36}]}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x4}, {@broadcast, 0x81}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000005a80)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005a40)={&(0x7f0000005a00)=@delqdisc={0x34, 0x25, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xa, 0x9}, {0xb, 0x5}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xedd}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async, rerun: 32) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000005ac0)={{0xa, 0x4e21, 0x7, @private1, 0x2c5}, {0xa, 0x4e20, 0xff, @mcast1, 0x7}, 0x1, {[0x5, 0x2, 0x7, 0x8, 0x2, 0x7, 0x7fffffff, 0xcf8b]}}, 0x5c) (async, rerun: 32) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000005b40)={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}, {0xa, 0x4e21, 0x8, @loopback, 0xa}, 0x0, {[0x4, 0x81, 0x80000000, 0x5, 0x5, 0x4, 0xeaa7, 0x6]}}, 0x5c) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000005c80)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005c40)={&(0x7f0000005c00)={0x34, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x82b29502ea637530}, 0x14) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000005d00), r12) sendmsg$GTP_CMD_DELPDP(r12, &(0x7f0000005dc0)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d40)={0x3c, r13, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x20004081) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000005ec0)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005e80)={&(0x7f0000005e40)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.675217717s ago: executing program 2 (id=1915): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x40800) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x3c04, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}}, 0x2, 0x9}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async, rerun: 32) r10 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r10, r5, 0x18, 0x2014, 0x0, @value=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xc111, 0x40, 0x9, 0x0, 0x3, 0x8]}, &(0x7f0000000140)=0x78) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x80000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x701, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x19608}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={r13, &(0x7f0000000340)='$\'\x00', 0x0, &(0x7f0000000500)={@align=0x19, {0x400, 0x1000, 0x6, 0x6}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x9}) (async) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002d0007001000000000000025067c0000"], 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) 2.461755784s ago: executing program 2 (id=1918): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/153, 0x99}, 0x7df6}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 2.220220285s ago: executing program 1 (id=1920): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "910d"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x180}, 0x0) 2.03008015s ago: executing program 3 (id=1921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@local, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000000380)="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", 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x24040804) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000120c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0xc080}, 0x800) 1.405216611s ago: executing program 1 (id=1924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x1}, {&(0x7f0000002300)=""/4096, 0x1000}, &(0x7f00000033c0)=[{&(0x7f0000003300)=""/147, 0x93}], 0x1, 0x20, 0x80}}], 0x48}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) 1.404856074s ago: executing program 4 (id=1925): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0xd8, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.404531459s ago: executing program 1 (id=1926): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000000000000611174000000000006000000000000009500000000000000a7f1f760311dc27b8ba96364ee67c75fa3d15313aff9814f50ec2bb83f5f34a17614ebc4fac7d26d87fdcd717d414e8837e015e9781c7743856b23dc3bff944e923d778c7bdf1e897067c386cfe8b3eefbfea3b89210e253ebc745c1745a0ae376d80931d1741b94babb1721ce99d6b889b47a25eaf731986be0e36dd508b83d2a6938fa20fb4ce27878bc0c3ce869940a6f30113dbd0447f378880f95ce"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x63, &(0x7f00000001c0)={@multicast, @random="fd137b07da87", @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x1}}, {@llc_tr={0x11, {@llc={0x4, 0x80, "b849", "551b3150103590cc01523a1abd9cb6d0937c76b3496c0c105854eb84c36d864c514ab19d88a43c7f8866aade1e24023cbe4a6611d36c3bfb73762f1052daabb569d613cbfe368e3ec4"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x4, @empty, 0x1}}}, 0x32) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, 0x0, &(0x7f00000005c0)=0x28) getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x8, 0xfffffffffffffff9, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x2, 0x0], 0x152, 0x0, 0x0, r6}}, 0x32) 1.403990818s ago: executing program 2 (id=1927): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="92f8e16dc8f316c584d9780000000000ffff070500000400"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB="14038000", @ANYRES16], 0x14}}, 0x4000040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) read$rfkill(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x10, 0x2, 0x1000, 0x84, 0xd, 0x7, 0x9, 0x8}}}}]}, 0x58}}, 0x4c850) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write(r7, &(0x7f0000000080)="0b000300010001", 0x7) getsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast1, @multicast2, @initdev}, &(0x7f0000000140)=0xc) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x7, r2, 0x8}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) 1.317919689s ago: executing program 4 (id=1928): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xb, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.224444261s ago: executing program 1 (id=1929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000e1ffffffffffffff00000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x20, 0x70bd06, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c440}, 0xa5) 1.214426938s ago: executing program 4 (id=1930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2, 0x16, 0x2, 0x2, 0x18, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2c, 0x3507}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@rand_addr=0x64010101, 0x2b, 0x14, 0x10}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x2, 0x5c, 0x2, 0x60000000}, @sadb_x_sec_ctx={0x8, 0x18, 0x1, 0xf6, 0x35, "363d9fcf852c50195a6b4750e7c6bddf3f1a4b77c7c981158543aa8413bd644f840204b0c624fa53658769bbc5f1c6ddf95394fcd5"}]}, 0xc0}}, 0x5c76e48e249437e1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) select(0x40, &(0x7f0000000000)={0xffffffffffffffa3, 0x4, 0x81, 0x7f, 0x5, 0xda, 0x40, 0x100}, &(0x7f0000000140)={0x8000, 0x6, 0x8, 0x7, 0x5, 0x4, 0x2, 0x6}, &(0x7f0000000180)={0x5, 0x73, 0x1f4, 0xc8, 0x2, 0x0, 0x5, 0x10000}, &(0x7f0000000200)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fc0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)={0xffffffffffffff78, 0x19, 0x15, 0x70bd30, 0x25dfdbfd, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0xa0, 0x9, 0x0, 0x1, [@nested={0x8, 0x8c, 0x0, 0x1, [@nested={0x4, 0xc2}]}, @generic="cd6e0f2f1ea05ddd48465717c0364e60854367f2420d771c17b3ee95f134cdf372107a5747b15da70c7c4347041b4e723907ac557259ee7b5cab5eaf94581110c5239026ff70a8389e68fefa0912be996c1e696e7b4eca0647825a15a865d8b0de7a442f2609affb79c8a3da23b5280ed798c48cbcb72d5162ee701a66f5726085ec709f1fb2d8032233d7ee06f4656f292aeb31"]}]}, 0xbc}], 0x1}, 0x0) 901.684926ms ago: executing program 1 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) 901.072799ms ago: executing program 3 (id=1932): r0 = socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x77e4, 0x9}}], 0x38, 0x4855}, 0x24008002) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc8, &(0x7f0000000300)=""/200}, 0x94) 769.158739ms ago: executing program 4 (id=1933): r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@empty, 0x4e21, 0xffce, 0x4e23, 0x20, 0x2, 0xe0, 0x60, 0x3c, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffe}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) unshare(0x22020600) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0xe0, 0x6a91}, {0x7, 0x40, 0x0, 0x8}]}) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x9, 0x67, {{0x10, 0x4, 0x2, 0x8, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0x5d, [@private=0xa010102, @broadcast, @loopback, @remote, @broadcast, @rand_addr=0x64010100, @loopback, @local, @empty, @loopback]}]}}}}}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000200)={0x64b, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x68}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000002ec0)={{r6, &(0x7f0000000000)='-$@{-\xb3/,\x00', 0x240001, &(0x7f0000000040)={@align=0x100, {0x9, 0x4f, 0x8, 0x6}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x22f5}, 0x2, &(0x7f0000002e80)=[{0x3, 0x5, &(0x7f0000000340)='od\x95\x82\b\x00\x00\x00L\xee{\xf03\xc2\xab\xdelD^\xb9S\xf3\xcd\x17\x03', &(0x7f0000001dc0)="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", 0x1000}, {0x2, 0x2, &(0x7f0000002dc0)='\x00\x00', &(0x7f0000002e00)="4a318339e241c54f63fef05cafa0bcbba6162e56c8efe21cc99403f7edf6990608e65bb6e7af7cd12b8ede1cbbb9b0aa492ea8feb3e5c913b69be6ac89554ea271b832a744df1d63b473bc7b9289dc0bb73d69642653d82470c06fae299e2f0aadb7db3a3074", 0x66, 0x20}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r9, 0x1, "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", "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"}, [0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x2, 0x100000000b859, 0x8, 0x5, 0x0, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x9, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x0, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f38, 0xfffffffffffffc00, 0x6, 0x9, 0x3, 0x7, 0x4, 0x3, 0x5, 0x3, 0x9, 0xe93, 0x100000000, 0xffffffffffffff9b]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000900)={r9, 0xa038, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0xda1, '\x00', r5, r10, 0x5, 0x5}, 0x50) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r11, 0x118, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 745.727187ms ago: executing program 1 (id=1934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x1c, 0x18, 0x1, 0xfffffffc, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x5, 0x32}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9b}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xe976e0ab393ca9ac}, 0x4040) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) 629.351081ms ago: executing program 3 (id=1935): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000240)="5038c685e4", &(0x7f00000003c0)=@udp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 448.925039ms ago: executing program 3 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth0\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) close(r1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) close(r3) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x7697) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x8, 0xfe6, 0x5, 0x9}, 0x8) 414.258033ms ago: executing program 2 (id=1937): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/153, 0x99}, 0x7df6}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 290.002426ms ago: executing program 4 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x2c}}, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x2c}}, 0x40800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) 262.705591ms ago: executing program 3 (id=1939): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0xfb0f}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x101, @remote}]}, &(0x7f0000000280)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', r7, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="810902000000000000000300000008000100000000001c0007"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 195.4288ms ago: executing program 4 (id=1940): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000480)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 89.806646ms ago: executing program 0 (id=1941): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x7, 0x0, 0x7}, 0x10) close(0x3) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x5, 0x889, 0x4, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x2b, 0x2, 0x0, 0x0, "41675c1763c2eefcb145020d6c595bc1ea3fcbdaa1c10dd7f214940441d95d7e7dece9c1556bf58e1943eeb1ecef6b0bf7bc643ac4819e9ddd97ddb47d9a8a73"}}, 0x80}}, 0x0) accept4(r3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x5, 0x1, 0x2, 0xfff, 0x5, 0x6, 0x9}, &(0x7f0000000100)={0x7, 0x4, 0x8242, 0xf1d, 0x637e5314, 0x3, 0x2, 0x1}, &(0x7f0000000140)={0xffff, 0xf, 0xa, 0x0, 0x0, 0xfffffffffffffff8, 0x8, 0x2a7}, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 89.142575ms ago: executing program 3 (id=1942): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, {0x17, 0x4, 0x0, @loopback}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffcec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 0 (id=1943): socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.868401][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.133677][ T9156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.384080][ T9208] netlink: 72 bytes leftover after parsing attributes in process `syz.4.836'. [ 234.444963][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 234.508812][ T6860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.654155][ T9217] syzkaller1: entered promiscuous mode [ 234.695218][ T9217] syzkaller1: entered allmulticast mode [ 234.881527][ T9233] netlink: 'syz.0.840': attribute type 13 has an invalid length. [ 234.890626][ T9234] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 234.890626][ T9234] Please contact the netfilter-devel mailing list or update your nftables rules. [ 234.924034][ T9233] netlink: 'syz.0.840': attribute type 17 has an invalid length. [ 234.975321][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.982897][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.987780][ T9236] openvswitch: netlink: Missing key (keys=40, expected=100) [ 235.439334][ T9232] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 235.441830][ T9233] lo: left promiscuous mode [ 235.456401][ T9233] lo: left allmulticast mode [ 235.464796][ T9233] tunl0: left promiscuous mode [ 235.471986][ T9233] tunl0: left allmulticast mode [ 235.480259][ T9233] gre0: left promiscuous mode [ 235.485262][ T9233] gre0: left allmulticast mode [ 235.508559][ T9233] gretap0: left promiscuous mode [ 235.513598][ T9233] gretap0: left allmulticast mode [ 235.543673][ T9233] erspan0: left promiscuous mode [ 235.551868][ T9233] erspan0: left allmulticast mode [ 235.568637][ T9233] ip_vti0: left promiscuous mode [ 235.573875][ T9233] ip_vti0: left allmulticast mode [ 235.581766][ T9233] ip6_vti0: left promiscuous mode [ 235.587887][ T9233] ip6_vti0: left allmulticast mode [ 235.595257][ T9233] sit0: left promiscuous mode [ 235.602504][ T9233] sit0: left allmulticast mode [ 235.615293][ T9233] ip6tnl0: left promiscuous mode [ 235.621422][ T9233] ip6tnl0: left allmulticast mode [ 235.629451][ T9233] ip6gre0: left promiscuous mode [ 235.634523][ T9233] ip6gre0: left allmulticast mode [ 235.646811][ T9233] syz_tun: left promiscuous mode [ 235.652938][ T9233] syz_tun: left allmulticast mode [ 235.670387][ T9233] ip6gretap0: left promiscuous mode [ 235.675812][ T9233] ip6gretap0: left allmulticast mode [ 235.727525][ T9233] vcan0: left promiscuous mode [ 235.732931][ T9233] vcan0: left allmulticast mode [ 235.743169][ T9233] team0: left promiscuous mode [ 235.750441][ T9233] team0: left allmulticast mode [ 235.757853][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.771421][ T9233] nlmon0: left promiscuous mode [ 235.778594][ T9233] nlmon0: left allmulticast mode [ 235.785477][ T9233] vxcan0: left promiscuous mode [ 235.801250][ T9233] vxcan0: left allmulticast mode [ 235.842854][ T9233] vxcan1: left promiscuous mode [ 235.849497][ T9233] vxcan1: left allmulticast mode [ 235.858388][ T9233] veth0: left promiscuous mode [ 235.863819][ T9233] veth0: left allmulticast mode [ 236.435479][ T9233] veth1: left promiscuous mode [ 236.440849][ T9233] veth1: left allmulticast mode [ 238.106723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.115235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.125124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.134860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.143214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.151987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.160275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.168550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.536033][ T9233] wg0: left promiscuous mode [ 238.554095][ T9233] wg0: left allmulticast mode [ 238.582286][ T9233] wg1: left promiscuous mode [ 238.591579][ T9233] wg1: left allmulticast mode [ 238.602790][ T9233] wg2: left promiscuous mode [ 238.610182][ T9233] wg2: left allmulticast mode [ 238.624717][ T9233] veth0_to_bridge: left promiscuous mode [ 238.630864][ T9233] veth0_to_bridge: left allmulticast mode [ 238.642145][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.649462][ T9233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.659843][ T9233] veth1_to_bridge: left promiscuous mode [ 238.665570][ T9233] veth1_to_bridge: left allmulticast mode [ 238.676010][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.683404][ T9233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.693319][ T9233] veth0_to_bond: left promiscuous mode [ 238.699455][ T9233] veth0_to_bond: left allmulticast mode [ 238.707364][ T9233] bond_slave_0: left promiscuous mode [ 238.714024][ T9233] bond_slave_0: left allmulticast mode [ 238.720890][ T9233] veth1_to_bond: left promiscuous mode [ 238.726728][ T9233] veth1_to_bond: left allmulticast mode [ 238.734076][ T9233] bond_slave_1: left promiscuous mode [ 238.739605][ T9233] bond_slave_1: left allmulticast mode [ 238.745920][ T9233] veth0_to_team: left promiscuous mode [ 238.752165][ T9233] veth0_to_team: left allmulticast mode [ 238.759535][ T9233] team_slave_0: left promiscuous mode [ 238.764947][ T9233] team_slave_0: left allmulticast mode [ 238.773132][ T9233] veth1_to_team: left promiscuous mode [ 238.778985][ T9233] veth1_to_team: left allmulticast mode [ 238.786600][ T9233] team_slave_1: left promiscuous mode [ 238.792078][ T9233] team_slave_1: left allmulticast mode [ 238.801054][ T9233] veth0_to_batadv: left promiscuous mode [ 238.807194][ T9233] veth0_to_batadv: left allmulticast mode [ 238.814894][ T9233] batadv_slave_0: left promiscuous mode [ 238.820682][ T9233] batadv_slave_0: left allmulticast mode [ 238.829175][ T9233] veth1_to_batadv: left promiscuous mode [ 238.834892][ T9233] veth1_to_batadv: left allmulticast mode [ 238.842714][ T9233] batadv_slave_1: left promiscuous mode [ 238.848425][ T9233] batadv_slave_1: left allmulticast mode [ 238.855894][ T9233] xfrm0: left promiscuous mode [ 238.861133][ T9233] xfrm0: left allmulticast mode [ 238.867899][ T9233] veth0_to_hsr: left promiscuous mode [ 238.873317][ T9233] veth0_to_hsr: left allmulticast mode [ 238.882488][ T9233] veth1_to_hsr: left promiscuous mode [ 238.888089][ T9233] veth1_to_hsr: left allmulticast mode [ 238.896588][ T9233] hsr0: left promiscuous mode [ 238.901379][ T9233] hsr0: left allmulticast mode [ 238.907756][ T9233] hsr_slave_0: left allmulticast mode [ 238.914409][ T9233] hsr_slave_1: left allmulticast mode [ 238.922471][ T9233] veth1_virt_wifi: left promiscuous mode [ 238.928552][ T9233] veth1_virt_wifi: left allmulticast mode [ 238.935764][ T9233] veth0_virt_wifi: left promiscuous mode [ 238.941695][ T9233] veth0_virt_wifi: left allmulticast mode [ 238.950469][ T9233] virt_wifi0: left promiscuous mode [ 238.955820][ T9233] virt_wifi0: left allmulticast mode [ 238.969909][ T9233] veth1_vlan: left promiscuous mode [ 238.975171][ T9233] veth1_vlan: left allmulticast mode [ 238.984779][ T9233] vlan0: left promiscuous mode [ 238.990486][ T9233] vlan0: left allmulticast mode [ 239.000370][ T9233] vlan1: left promiscuous mode [ 239.005395][ T9233] vlan1: left allmulticast mode [ 239.012884][ T9233] veth1_vlan: entered promiscuous mode [ 239.020268][ T9233] veth1_vlan: entered allmulticast mode [ 239.027054][ T9233] macvlan0: left promiscuous mode [ 239.032337][ T9233] macvlan0: left allmulticast mode [ 239.038174][ T9233] veth1_vlan: left allmulticast mode [ 239.045252][ T9233] veth1_vlan: entered allmulticast mode [ 239.051402][ T9233] macvlan1: left promiscuous mode [ 239.057171][ T9233] macvlan1: left allmulticast mode [ 239.062549][ T9233] veth1_vlan: left allmulticast mode [ 239.069830][ T9233] ipvlan0: left promiscuous mode [ 239.074817][ T9233] ipvlan0: left allmulticast mode [ 239.084105][ T9233] ipvlan1: left promiscuous mode [ 239.089383][ T9233] ipvlan1: left allmulticast mode [ 239.094452][ T9233] veth0_vlan: left allmulticast mode [ 239.102234][ T9233] veth1_macvtap: left promiscuous mode [ 239.107847][ T9233] veth1_macvtap: left allmulticast mode [ 239.114822][ T9233] veth0_macvtap: left promiscuous mode [ 239.121895][ T9233] veth0_macvtap: left allmulticast mode [ 239.136059][ T9233] veth0_macvtap: entered promiscuous mode [ 239.142905][ T9233] veth0_macvtap: entered allmulticast mode [ 239.149857][ T9233] macvtap0: left promiscuous mode [ 239.155190][ T9233] macvtap0: left allmulticast mode [ 239.160734][ T9233] veth0_macvtap: left allmulticast mode [ 239.174533][ T9233] veth1_macvtap: entered promiscuous mode [ 239.181028][ T9233] veth1_macvtap: entered allmulticast mode [ 239.187461][ T9233] macsec0: left promiscuous mode [ 239.192638][ T9233] macsec0: left allmulticast mode [ 239.197897][ T9233] veth1_macvtap: left allmulticast mode [ 239.205729][ T9233] geneve0: left promiscuous mode [ 239.210854][ T9233] geneve0: left allmulticast mode [ 239.218281][ T9233] geneve1: left promiscuous mode [ 239.223601][ T9233] geneve1: left allmulticast mode [ 239.231592][ T9233] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 239.238801][ T9233] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 239.247078][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.258975][ T9233] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 239.266056][ T9233] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 239.274472][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.285850][ T9233] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 239.293591][ T9233] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 239.301214][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.313225][ T9233] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 239.320451][ T9233] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 239.328509][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.340670][ T9233] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 239.347568][ T9233] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 239.355839][ T9233] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 239.362916][ T9233] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 239.371145][ T9233] gretap1: left promiscuous mode [ 239.376322][ T9233] gretap1: left allmulticast mode [ 239.387368][ T9233] bond1: left promiscuous mode [ 239.392324][ T9233] bond1: left allmulticast mode [ 239.398710][ T9233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.406738][ T9233] vlan2: left promiscuous mode [ 239.411580][ T9233] bridge0: left promiscuous mode [ 239.418660][ T9233] vlan2: left allmulticast mode [ 239.423690][ T9233] bridge0: left allmulticast mode [ 239.431496][ T9233] ipip0: left promiscuous mode [ 239.436567][ T9233] ipip0: left allmulticast mode [ 239.443248][ T9233] bond2: left promiscuous mode [ 239.449012][ T9233] bond2: left allmulticast mode [ 239.454970][ T9233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.463102][ T9233] ip6gre1: left promiscuous mode [ 239.469694][ T9233] ip6gre1: left allmulticast mode [ 239.483726][ T9233] batadv1: left promiscuous mode [ 239.489884][ T9233] batadv1: left allmulticast mode [ 239.496285][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.504332][ T9233] >: left promiscuous mode [ 239.508993][ T9233] >: left allmulticast mode [ 239.516697][ T9233] net_ratelimit: 34 callbacks suppressed [ 239.516720][ T9233] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 239.563759][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.578448][ T9250] ip6erspan1: entered allmulticast mode [ 239.590653][ T9256] tipc: Resetting bearer [ 239.636579][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.680183][ T9256] tipc: Resetting bearer [ 239.772571][ T9269] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 239.892773][ T9272] bridge0: port 3(dummy0) entered blocking state [ 239.903198][ T9272] bridge0: port 3(dummy0) entered disabled state [ 239.915252][ T9272] dummy0: entered promiscuous mode [ 239.924418][ T9272] bridge0: port 3(dummy0) entered blocking state [ 239.931050][ T9272] bridge0: port 3(dummy0) entered forwarding state [ 240.020751][ T9274] bond4: (slave bridge2): making interface the new active one [ 240.038722][ T9274] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 240.049796][ T9282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.853'. [ 240.069486][ T9276] dummy0: left promiscuous mode [ 240.100094][ T9276] bridge0: port 3(dummy0) entered disabled state [ 240.210639][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.673919][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.765144][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.859'. [ 240.784217][ T9309] netlink: 43 bytes leftover after parsing attributes in process `syz.0.859'. [ 240.794421][ T9309] netlink: 'syz.0.859': attribute type 5 has an invalid length. [ 240.802363][ T9309] netlink: 43 bytes leftover after parsing attributes in process `syz.0.859'. [ 241.028365][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 241.637485][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.712400][ T6860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.751256][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.169459][ T6003] tipc: Resetting bearer [ 243.481253][ T9327] netlink: 292 bytes leftover after parsing attributes in process `syz.3.864'. [ 243.520049][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 243.686216][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 243.740912][ T9343] lo: left promiscuous mode [ 243.758308][ T9344] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 243.789949][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.808929][ T9339] netlink: 348 bytes leftover after parsing attributes in process `syz.1.863'. [ 243.839895][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 243.981513][ T9343] tunl0: left promiscuous mode [ 243.998800][ T9343] gre0: left promiscuous mode [ 244.038504][ T9343] gretap0: left promiscuous mode [ 244.061910][ T9343] erspan0: left promiscuous mode [ 244.078661][ T9343] ip_vti0: left promiscuous mode [ 244.096787][ T9343] ip6_vti0: left promiscuous mode [ 244.106942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.116547][ T9343] sit0: left promiscuous mode [ 244.132394][ T9343] ip6tnl0: left promiscuous mode [ 244.178363][ T9343] ip6gre0: left promiscuous mode [ 244.194052][ T9343] bridge0: left promiscuous mode [ 244.216926][ T9343] dummy0: left promiscuous mode [ 244.241013][ T9343] nlmon0: left promiscuous mode [ 244.247882][ T9343] veth0: left promiscuous mode [ 244.269790][ T9343] veth1: left promiscuous mode [ 244.299984][ T9343] wg0: left promiscuous mode [ 244.321228][ T9343] wg1: left promiscuous mode [ 244.337383][ T9343] wg2: left promiscuous mode [ 244.343725][ T9343] veth0_to_bridge: left promiscuous mode [ 244.354252][ T9343] veth1_to_bridge: left promiscuous mode [ 244.363190][ T9343] veth0_to_bond: left promiscuous mode [ 244.373120][ T9343] : left promiscuous mode [ 244.383898][ T9343] veth1_to_bond: left promiscuous mode [ 244.400019][ T9343] bond_slave_1: left promiscuous mode [ 244.407515][ T9343] veth0_to_team: left promiscuous mode [ 244.427026][ T9343] team_slave_0: left promiscuous mode [ 244.441445][ T9343] team_slave_1: left promiscuous mode [ 244.458256][ T9343] veth0_to_batadv: left promiscuous mode [ 244.473894][ T9343] batadv_slave_0: left promiscuous mode [ 244.494968][ T9343] veth1_to_batadv: left promiscuous mode [ 244.520648][ T9343] batadv_slave_1: left promiscuous mode [ 244.538507][ T9343] xfrm0: left promiscuous mode [ 244.551237][ T9343] veth0_to_hsr: left promiscuous mode [ 244.560787][ T9343] veth1_to_hsr: left promiscuous mode [ 244.568943][ T9343] hsr0: left promiscuous mode [ 244.574632][ T9343] veth1_virt_wifi: left promiscuous mode [ 244.582604][ T9343] veth0_virt_wifi: left promiscuous mode [ 244.592960][ T9343] vlan0: left promiscuous mode [ 244.600722][ T9343] vlan1: left promiscuous mode [ 244.607182][ T9343] macvlan0: left promiscuous mode [ 244.627032][ T9343] macvlan1: left promiscuous mode [ 244.635056][ T9343] ipvlan0: left promiscuous mode [ 244.653025][ T9343] ipvlan1: left promiscuous mode [ 244.663644][ T9343] geneve0: left promiscuous mode [ 244.669565][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.684901][ T9343] geneve1: left promiscuous mode [ 244.691684][ T9343] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 244.707516][ T9343] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 244.722374][ T9343] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 244.735294][ T9343] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 244.744758][ T9343] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 244.775641][ T9343] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 244.799778][ T9343] veth2: left promiscuous mode [ 244.813936][ T9343] veth3: left promiscuous mode [ 244.828014][ T6860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.839519][ T9343] bond1: left promiscuous mode [ 244.850971][ T9343] geneve2: left promiscuous mode [ 244.872318][ T9343] mac80211_hwsim hwsim13 wlan2: left promiscuous mode [ 244.885769][ T9343] gretap1: left promiscuous mode [ 244.925248][ T9343] bond0: left promiscuous mode [ 245.204478][ T9370] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3553961618/3553961620 [ 245.253141][ T9380] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 245.312986][ T9386] __nla_validate_parse: 6 callbacks suppressed [ 245.313006][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 245.369634][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'. [ 245.397694][ T9380] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 245.509793][ T9385] lo: left promiscuous mode [ 245.576069][ T9385] lo: left allmulticast mode [ 245.627814][ T9385] tunl0: left promiscuous mode [ 245.652641][ T9385] tunl0: left allmulticast mode [ 245.679155][ T9392] netlink: 104 bytes leftover after parsing attributes in process `syz.3.879'. [ 245.714605][ T9385] gre0: left promiscuous mode [ 245.746373][ T9385] gre0: left allmulticast mode [ 245.804283][ T9385] gretap0: left promiscuous mode [ 245.823006][ T9385] gretap0: left allmulticast mode [ 245.848458][ T9385] erspan0: left promiscuous mode [ 245.856055][ T9385] erspan0: left allmulticast mode [ 245.915925][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.931860][ T9385] ip_vti0: left promiscuous mode [ 245.944417][ T9385] ip_vti0: left allmulticast mode [ 245.967863][ T9385] ip6_vti0: left promiscuous mode [ 245.973090][ T9385] ip6_vti0: left allmulticast mode [ 245.993811][ T9385] sit0: left promiscuous mode [ 246.000691][ T9385] sit0: left allmulticast mode [ 246.021703][ T9385] ip6tnl0: left promiscuous mode [ 246.038578][ T9385] ip6tnl0: left allmulticast mode [ 246.047817][ T9385] ip6gre0: left promiscuous mode [ 246.054058][ T9385] ip6gre0: left allmulticast mode [ 246.064914][ T9385] syz_tun: left promiscuous mode [ 246.072983][ T9385] syz_tun: left allmulticast mode [ 246.086749][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.094682][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.119513][ T9385] vcan0: left promiscuous mode [ 246.124476][ T9385] vcan0: left allmulticast mode [ 246.137346][ T9385] bond0: left promiscuous mode [ 246.149313][ T9385] bond0: left allmulticast mode [ 246.163544][ T9385] team0: left promiscuous mode [ 246.170545][ T9385] team0: left allmulticast mode [ 246.321940][ T9385] nlmon0: left promiscuous mode [ 246.333961][ T9385] nlmon0: left allmulticast mode [ 246.345496][ T9385] vxcan0: left promiscuous mode [ 246.356265][ T9385] vxcan0: left allmulticast mode [ 246.370532][ T9385] vxcan1: left promiscuous mode [ 246.383288][ T9385] vxcan1: left allmulticast mode [ 246.396891][ T9385] veth0: left promiscuous mode [ 246.401839][ T9385] veth0: left allmulticast mode [ 246.412295][ T9385] veth1: left promiscuous mode [ 246.426438][ T9385] veth1: left allmulticast mode [ 246.451807][ T9385] wg0: left promiscuous mode [ 246.466485][ T9385] wg0: left allmulticast mode [ 246.479536][ T9385] wg2: left promiscuous mode [ 246.491914][ T9385] wg2: left allmulticast mode [ 246.511719][ T9385] veth0_to_bridge: left promiscuous mode [ 246.518163][ T9385] veth0_to_bridge: left allmulticast mode [ 246.534632][ T9385] veth1_to_bridge: left promiscuous mode [ 246.550415][ T9385] veth1_to_bridge: left allmulticast mode [ 246.626987][ T9385] veth0_to_bond: left promiscuous mode [ 246.632641][ T9385] veth0_to_bond: left allmulticast mode [ 246.662101][ T9385] : left promiscuous mode [ 246.676758][ T9385] : left allmulticast mode [ 246.709512][ T9385] veth1_to_bond: left promiscuous mode [ 246.732006][ T9385] veth1_to_bond: left allmulticast mode [ 246.760104][ T9385] bond_slave_1: left promiscuous mode [ 246.774066][ T9385] bond_slave_1: left allmulticast mode [ 246.799735][ T9385] veth0_to_team: left promiscuous mode [ 246.813559][ T9385] veth0_to_team: left allmulticast mode [ 246.824335][ T9385] team_slave_0: left promiscuous mode [ 246.840964][ T9385] team_slave_0: left allmulticast mode [ 246.873643][ T9385] veth1_to_team: left promiscuous mode [ 246.887801][ T9385] veth1_to_team: left allmulticast mode [ 246.913223][ T9385] team_slave_1: left promiscuous mode [ 246.926882][ T9385] team_slave_1: left allmulticast mode [ 246.956680][ T9385] veth0_to_batadv: left promiscuous mode [ 246.976802][ T9385] veth0_to_batadv: left allmulticast mode [ 246.988285][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.001528][ T9385] batadv_slave_0: left promiscuous mode [ 247.016712][ T9385] batadv_slave_0: left allmulticast mode [ 247.032303][ T9385] veth1_to_batadv: left promiscuous mode [ 247.046441][ T9385] veth1_to_batadv: left allmulticast mode [ 247.056887][ T9385] batadv_slave_1: left promiscuous mode [ 247.066165][ T9385] batadv_slave_1: left allmulticast mode [ 247.089537][ T9385] xfrm0: left promiscuous mode [ 247.094510][ T9385] xfrm0: left allmulticast mode [ 247.109113][ T9385] veth0_to_hsr: left promiscuous mode [ 247.121204][ T9385] veth0_to_hsr: left allmulticast mode [ 247.186946][ T9385] veth1_to_hsr: left promiscuous mode [ 247.192595][ T9385] veth1_to_hsr: left allmulticast mode [ 247.240963][ T9385] hsr0: left promiscuous mode [ 247.256560][ T9385] hsr0: left allmulticast mode [ 247.261468][ T9385] hsr_slave_0: left allmulticast mode [ 247.268396][ T9385] hsr_slave_1: left allmulticast mode [ 247.280102][ T9385] veth1_virt_wifi: left promiscuous mode [ 247.286250][ T9385] veth1_virt_wifi: left allmulticast mode [ 247.305251][ T9385] veth0_virt_wifi: left promiscuous mode [ 247.313560][ T9385] veth0_virt_wifi: left allmulticast mode [ 247.327029][ T9385] virt_wifi0: left promiscuous mode [ 247.332409][ T9385] virt_wifi0: left allmulticast mode [ 247.421426][ T9385] vlan0: left promiscuous mode [ 247.436480][ T9385] vlan0: left allmulticast mode [ 247.457021][ T9385] vlan1: left promiscuous mode [ 247.467510][ T9385] vlan1: left allmulticast mode [ 247.493691][ T9385] macvlan0: left promiscuous mode [ 247.507748][ T9385] macvlan0: left allmulticast mode [ 247.530952][ T9385] veth1_vlan: left allmulticast mode [ 247.543515][ T9385] macvlan1: left promiscuous mode [ 247.549732][ T9385] macvlan1: left allmulticast mode [ 247.567308][ T9385] ipvlan0: left promiscuous mode [ 247.573104][ T9385] ipvlan0: left allmulticast mode [ 247.606923][ T9385] ipvlan1: left promiscuous mode [ 247.626576][ T9385] ipvlan1: left allmulticast mode [ 247.631733][ T9385] veth0_vlan: left allmulticast mode [ 247.697439][ T9385] veth0_macvtap: left allmulticast mode [ 247.703596][ T9385] macvtap0: left promiscuous mode [ 247.716199][ T9385] macvtap0: left allmulticast mode [ 247.728436][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.741948][ T9385] veth1_macvtap: left allmulticast mode [ 247.756537][ T9385] macsec0: left promiscuous mode [ 247.762754][ T9385] macsec0: left allmulticast mode [ 247.774538][ T9385] geneve0: left promiscuous mode [ 247.786410][ T9385] geneve0: left allmulticast mode [ 247.816985][ T9385] geneve1: left promiscuous mode [ 247.831616][ T9385] geneve1: left allmulticast mode [ 247.843930][ T9385] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 247.859446][ T9385] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 247.878352][ T9385] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 247.885825][ T9385] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 247.904578][ T9385] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 247.913017][ T9385] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 247.928296][ T9385] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 247.935700][ T9385] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 247.960386][ T9385] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 247.967364][ T9385] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 247.977343][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.993665][ T9385] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 248.000775][ T9385] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 248.011378][ T9385] geneve2: left promiscuous mode [ 248.019012][ T9385] geneve2: left allmulticast mode [ 248.030245][ T9385] bond1: left promiscuous mode [ 248.035553][ T9385] bond1: left allmulticast mode [ 248.045965][ T9385] veth2: left promiscuous mode [ 248.051902][ T9385] veth2: left allmulticast mode [ 248.057058][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.064189][ T9385] pimreg: left promiscuous mode [ 248.070957][ T9385] pimreg: left allmulticast mode [ 248.081111][ T9385] bridge0: left allmulticast mode [ 248.086760][ T9385] macsec1: left promiscuous mode [ 248.092208][ T9385] macsec1: left allmulticast mode [ 248.102933][ T9385] bond2: left promiscuous mode [ 248.111252][ T9385] bond2: left allmulticast mode [ 248.132262][ T9385] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 248.140438][ T9385] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 248.152429][ T9385] bridge1: left promiscuous mode [ 248.158243][ T9385] bridge1: left allmulticast mode [ 248.167624][ T9385] ip6tnl1: left promiscuous mode [ 248.173219][ T9385] ip6tnl1: left allmulticast mode [ 248.182494][ T9385] tipc: Resetting bearer [ 248.204763][ T9385] syzkaller0: left promiscuous mode [ 248.216350][ T9385] syzkaller0: left allmulticast mode [ 248.225070][ T9385] ip6tnl2: left promiscuous mode [ 248.233665][ T9385] ip6tnl2: left allmulticast mode [ 248.247163][ T9385] vxlan0: left promiscuous mode [ 248.252669][ T9385] vxlan0: left allmulticast mode [ 248.262281][ T9385] bond3: left promiscuous mode [ 248.271119][ T9385] : left promiscuous mode [ 248.275960][ T9385] bond3: left allmulticast mode [ 248.281958][ T9385] : left allmulticast mode [ 248.389547][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.401837][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.425234][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.464665][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.513555][ T9430] tipc: Enabling of bearer rejected, already enabled [ 248.555994][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.599972][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.634082][ T9430] +: renamed from syzkaller0 [ 248.657232][ T9430] tipc: Disabling bearer [ 248.687218][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.715682][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.019731][ T9449] syzkaller0: entered promiscuous mode [ 249.025622][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 249.049011][ T9449] syzkaller0: entered allmulticast mode [ 249.059665][ T9460] netlink: 112 bytes leftover after parsing attributes in process `syz.3.896'. [ 249.070616][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.520614][ T9480] x_tables: duplicate underflow at hook 1 [ 249.865185][ T9483] syzkaller0: entered promiscuous mode [ 249.895522][ T9483] syzkaller0: entered allmulticast mode [ 249.951566][ T9503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.907'. [ 250.109605][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.155685][ T9494] "syz.0.906" (9494) uses obsolete ecb(arc4) skcipher [ 250.797983][ T6869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.159825][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.795358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.060599][ T9566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.923'. [ 252.084272][ T9568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.923'. [ 252.186959][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.199296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.207977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.663098][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 253.234135][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.869309][ T6869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.879670][ T9565] lo speed is unknown, defaulting to 1000 [ 253.900201][ T9565] lo speed is unknown, defaulting to 1000 [ 253.971910][ T9565] lo speed is unknown, defaulting to 1000 [ 254.018556][ T9565] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 254.079535][ T9577] sctp: [Deprecated]: syz.1.927 (pid 9577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.079535][ T9577] Use struct sctp_sack_info instead [ 254.099401][ T9565] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 254.132266][ T9565] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 254.203070][ T9565] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.268877][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.311629][ T9565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 254.401934][ T9587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.617340][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 254.629911][ T9582] lo speed is unknown, defaulting to 1000 [ 254.645811][ T9598] macsec0: left promiscuous mode [ 254.699450][ T9602] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 254.757896][ T9565] lo speed is unknown, defaulting to 1000 [ 254.916776][ T9565] lo speed is unknown, defaulting to 1000 [ 255.019283][ T9602] bond5: (slave gretap1): making interface the new active one [ 255.019905][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 255.040914][ T9602] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 255.055312][ T9565] lo speed is unknown, defaulting to 1000 [ 255.126743][ T9609] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 255.194331][ T9565] lo speed is unknown, defaulting to 1000 [ 255.371319][ T9565] lo speed is unknown, defaulting to 1000 [ 255.614480][ T9625] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 255.724203][ T9625] IPVS: Scheduler module ip_vs_ not found [ 255.818131][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.939'. [ 255.870846][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.939'. [ 255.881112][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 255.968345][ T9634] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 256.196962][ T9647] pim6reg1: entered promiscuous mode [ 256.207344][ T9647] pim6reg1: entered allmulticast mode [ 256.270262][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.277199][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.408235][ T9660] netlink: 'syz.4.945': attribute type 30 has an invalid length. [ 256.444063][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 257.057747][ T9692] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.137052][ T9692] ip6gre1: entered promiscuous mode [ 257.145835][ T9692] ip6gre1: entered allmulticast mode [ 257.157593][ T9697] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 257.237105][ T50] block nbd1: Receive control failed (result -32) [ 257.409387][ T9704] netlink: 56 bytes leftover after parsing attributes in process `syz.3.954'. [ 257.635073][ T9705] ipip0: left promiscuous mode [ 257.661492][ T9705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.693063][ T9705] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 257.767965][ T6883] lo speed is unknown, defaulting to 1000 [ 257.964841][ T9707] gretap0: entered promiscuous mode [ 257.995996][ T9707] vlan2: entered promiscuous mode [ 258.003669][ T9727] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 258.092193][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 258.262232][ T9727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.292366][ T9731] bond7: entered promiscuous mode [ 258.326510][ T9731] bond7: entered allmulticast mode [ 258.882051][ T9765] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 258.937380][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 258.969926][ T9765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.968'. [ 258.987678][ T9770] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 259.019086][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 259.082789][ T9778] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 259.098340][ T9770] bond2: entered promiscuous mode [ 259.104293][ T9770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.114175][ T9772] bond2: entered allmulticast mode [ 259.191884][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 259.203316][ T50] Bluetooth: hci3: link tx timeout [ 259.217150][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.230286][ T9778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.277594][ T9781] bond6: (slave veth3): Enslaving as an active interface with a down link [ 259.319148][ T9778] vlan2: entered allmulticast mode [ 259.349776][ T9778] bond6: (slave vlan2): making interface the new active one [ 259.359824][ T9778] vlan2: entered promiscuous mode [ 259.365070][ T9778] bridge0: entered promiscuous mode [ 259.372028][ T9778] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 259.646588][ T9797] netlink: 'syz.1.976': attribute type 8 has an invalid length. [ 259.714378][ T9799] validate_nla: 1 callbacks suppressed [ 259.714403][ T9799] netlink: 'syz.3.977': attribute type 4 has an invalid length. [ 259.769189][ T9802] netlink: 'syz.3.977': attribute type 4 has an invalid length. [ 259.852478][ T9801] lo speed is unknown, defaulting to 1000 [ 259.929054][ T9806] netlink: 112 bytes leftover after parsing attributes in process `syz.0.978'. [ 260.379248][ T9827] sctp: [Deprecated]: syz.4.984 (pid 9827) Use of int in max_burst socket option. [ 260.379248][ T9827] Use struct sctp_assoc_value instead [ 260.676457][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 260.709743][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 260.933306][ T5636] block nbd2: Receive control failed (result -32) [ 260.972175][ T9845] syz_tun: entered allmulticast mode [ 261.211381][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.990'. [ 261.306914][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 261.373875][ T9853] syzkaller0: entered promiscuous mode [ 261.381822][ T9853] syzkaller0: entered allmulticast mode [ 261.550928][ T9870] netlink: 'syz.4.995': attribute type 8 has an invalid length. [ 261.653235][ T9878] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 261.673001][ T24] IPVS: starting estimator thread 0... [ 261.778187][ T9881] IPVS: using max 27 ests per chain, 64800 per kthread [ 264.499035][ T9870] bond0: entered promiscuous mode [ 264.504460][ T9870] bond_slave_0: entered promiscuous mode [ 264.512543][ T9870] gretap0: entered promiscuous mode [ 264.519261][ T9870] dummy0: entered promiscuous mode [ 264.531512][ T9870] hsr1: entered promiscuous mode [ 264.772942][ T9900] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 264.793375][ T9901] netlink: 'syz.1.1001': attribute type 31 has an invalid length. [ 264.955674][ T9900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.960605][ T9908] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 265.018245][ T9908] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 265.055174][ T9906] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 265.140925][ T9906] pim6reg0: linktype set to 774 [ 265.289253][ T9923] bond6: (slave ip6gretap0): making interface the new active one [ 265.303407][ T9923] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 266.002631][ T9964] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 266.088152][ T9949] bridge0: left promiscuous mode [ 266.103512][ T9949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.122556][ T9949] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.282013][ T9949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.295821][ T9949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.310038][ T9974] netlink: 'syz.1.1021': attribute type 2 has an invalid length. [ 266.325052][ T9974] __nla_validate_parse: 4 callbacks suppressed [ 266.325072][ T9974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1021'. [ 266.344857][ T9949] veth1_vlan: left promiscuous mode [ 266.361512][ T9949] veth0_vlan: left promiscuous mode [ 266.371459][ T9949] veth0_vlan: entered promiscuous mode [ 266.389841][ T9949] veth1_vlan: entered promiscuous mode [ 266.423165][ T9949] veth1_macvtap: left promiscuous mode [ 266.453522][ T9949] veth0_macvtap: left promiscuous mode [ 266.477593][ T9949] veth0_macvtap: entered promiscuous mode [ 266.493030][ T9949] veth1_macvtap: entered promiscuous mode [ 266.510821][ T9949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.525581][ T9949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.536519][ T9949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.550488][ T9949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.575623][ T9949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.627075][ T9949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.659586][ T9949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.682230][ T9949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.699842][ T9949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.750875][ T9964] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 266.756884][ T29] bridge0: entered promiscuous mode [ 266.916773][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.924042][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.938575][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.945812][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.017570][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.032376][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.049637][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.082875][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.102201][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.112567][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.223943][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.261989][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.310031][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.360991][ T5836] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.369356][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.615047][T10020] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 267.654346][T10020] syzkaller1: entered promiscuous mode [ 267.674937][T10020] syzkaller1: entered allmulticast mode [ 268.107640][ T5836] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 268.349680][ T5836] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 268.575372][T10048] syzkaller0: entered promiscuous mode [ 268.604872][T10048] syzkaller0: entered allmulticast mode [ 268.663011][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 268.859531][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1036'. [ 269.011121][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1041'. [ 269.135714][ T30] audit: type=1107 audit(1782652480.477:3): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ăj2:/56Oie_Nk+ɝx [ 269.135714][ T30] -Mڐ!4✾zVu5nC L B.L aF=IM6CF9P<ڰ?j"AGz-BRnaT\ʽם MJeS`{t:*[NNQ,ع}2:* =jy+=2V^G' [ 269.427061][T10086] netlink: 'syz.0.1044': attribute type 7 has an invalid length. [ 269.435884][T10086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1044'. [ 270.075685][T10101] openvswitch: netlink: Missing key (keys=40, expected=100) [ 270.300338][T10116] syzkaller1: entered promiscuous mode [ 270.321703][T10116] syzkaller1: entered allmulticast mode [ 270.848100][ T14] vlan2: left promiscuous mode [ 271.280681][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'. [ 271.387186][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 272.033162][T10170] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 272.149832][T10177] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 272.714252][T10194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1072'. [ 272.758387][T10194] netlink: 'syz.0.1072': attribute type 7 has an invalid length. [ 272.780183][T10194] netlink: 'syz.0.1072': attribute type 8 has an invalid length. [ 272.821597][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 272.838103][T10202] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1073'. [ 272.929648][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 273.490006][T10232] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1080'. [ 273.642972][T10234] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 273.653262][T10234] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1081'. [ 273.902270][T10238] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 274.052863][T10242] syzkaller0: entered promiscuous mode [ 274.086945][T10242] syzkaller0: entered allmulticast mode [ 274.182134][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 274.345701][T10260] geneve3: entered promiscuous mode [ 274.406711][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 274.983719][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 275.270308][T10304] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1096'. [ 275.537941][T10310] tipc: Enabled bearer , priority 0 [ 275.579154][T10309] tipc: Disabling bearer [ 275.732480][T10319] unsupported nlmsg_type 40 [ 276.309099][T10315] nbd0: detected capacity change from 0 to 63 [ 276.344656][ T50] block nbd0: Receive control failed (result -32) [ 276.358739][T10317] block nbd0: NBD_DISCONNECT [ 276.366981][ T25] block nbd0: Dead connection, failed to find a fallback [ 276.376018][ T25] block nbd0: shutting down sockets [ 276.382144][T10317] block nbd0: Send disconnect failed -32 [ 276.392565][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.402489][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 276.423820][ T1588] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 276.438945][ T1588] Buffer I/O error on dev nbd0, logical block 1, async page read [ 276.448131][ T1588] Buffer I/O error on dev nbd0, logical block 2, async page read [ 276.458168][ T1588] Buffer I/O error on dev nbd0, logical block 3, async page read [ 276.470281][ T1588] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 276.480200][ T1588] Buffer I/O error on dev nbd0, logical block 0, async page read [ 276.488269][ T1588] Buffer I/O error on dev nbd0, logical block 1, async page read [ 276.499397][ T1588] Buffer I/O error on dev nbd0, logical block 2, async page read [ 276.507711][ T1588] Buffer I/O error on dev nbd0, logical block 3, async page read [ 276.519752][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 276.531191][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 276.539471][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 276.552654][ T1588] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.581952][ T1588] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 276.593874][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 276.604245][ T1588] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.614687][ T1588] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.624418][ T1588] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.639246][ T9278] ldm_validate_partition_table(): Disk read failed. [ 276.649109][ T9278] Dev nbd0: unable to read RDB block 0 [ 276.660213][ T9278] nbd0: unable to read partition table [ 276.680996][ T9278] ldm_validate_partition_table(): Disk read failed. [ 276.691312][ T9278] Dev nbd0: unable to read RDB block 0 [ 276.701674][ T9278] nbd0: unable to read partition table [ 276.928370][T10352] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 276.964062][T10355] bridge0: port 3(batadv1) entered disabled state [ 276.971368][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.979506][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.011952][T10355] bridge0: left promiscuous mode [ 277.250958][T10358] "syz.4.1106" (10358) uses obsolete ecb(arc4) skcipher [ 277.753782][T10395] __nla_validate_parse: 3 callbacks suppressed [ 277.753803][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 277.833221][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 277.864845][T10395] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 277.911496][T10395] netlink: 'syz.2.1116': attribute type 2 has an invalid length. [ 278.231484][T10410] netlink: 'syz.3.1119': attribute type 10 has an invalid length. [ 278.361773][T10410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.385591][T10410] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 278.521481][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.558153][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 278.570323][T10432] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1124'. [ 278.591278][T10430] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 278.673304][T10436] ipt_ECN: cannot use operation on non-tcp rule [ 278.859739][T10413] veth3: left allmulticast mode [ 278.867418][T10413] bond3: left promiscuous mode [ 278.874414][T10413] bond3: left allmulticast mode [ 278.883911][T10413] ip6erspan1: left allmulticast mode [ 278.925717][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 278.937249][T10426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.003772][T10438] sit0: left allmulticast mode [ 279.034725][T10438] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 279.056801][T10438] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1124'. [ 279.109151][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.122354][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.267492][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.289879][ T14] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.304139][ T14] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.373246][T10447] bond4: Removing last arp target with arp_interval on [ 279.399866][ T14] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.435687][ T14] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.458599][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.519862][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 279.535100][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 279.594286][ T14] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.604379][ T14] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.617208][ T14] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.651378][T10455] netlink: 'syz.1.1130': attribute type 83 has an invalid length. [ 279.663855][ T14] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.713372][T10457] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 279.716513][T10458] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 279.762450][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1132'. [ 279.905966][T10472] tap0: tun_chr_ioctl cmd 2147767507 [ 279.946790][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.005370][T10476] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.1135'. [ 280.028266][T10476] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 280.046314][T10476] openvswitch: netlink: Message has 512 unknown bytes. [ 280.286956][T10488] bridge3: entered promiscuous mode [ 280.300882][T10488] bridge3: entered allmulticast mode [ 280.582245][T10506] netlink: 'syz.3.1142': attribute type 11 has an invalid length. [ 280.953825][T10528] netlink: 'syz.2.1147': attribute type 8 has an invalid length. [ 281.780799][T10561] vlan4: entered promiscuous mode [ 281.824622][T10573] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 282.293011][T10593] netlink: 'syz.0.1161': attribute type 1 has an invalid length. [ 282.384614][T10592] syzkaller0: entered promiscuous mode [ 282.400060][T10592] syzkaller0: entered allmulticast mode [ 282.445947][T10595] netdevsim0: renamed from batadv0 (while UP) [ 282.476058][T10595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.564718][T10593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.785790][T10590] lo speed is unknown, defaulting to 1000 [ 286.152633][T10623] macsec1: entered promiscuous mode [ 286.219506][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.247626][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.299473][T10637] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 286.355424][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.374623][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.394781][T10637] dummy0: left allmulticast mode [ 286.407412][T10640] __nla_validate_parse: 11 callbacks suppressed [ 286.407435][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 286.585856][T10649] lo speed is unknown, defaulting to 1000 [ 286.821012][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 287.040321][T10635] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 287.892249][T10690] syzkaller0: entered promiscuous mode [ 287.899314][T10690] syzkaller0: entered allmulticast mode [ 287.907227][T10699] IPv6: addrconf: prefix option has invalid lifetime [ 288.045757][T10702] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 288.154722][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1184'. [ 288.172987][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 288.435517][T10719] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 288.694083][T10725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1188'. [ 288.882040][T10727] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1188'. [ 288.892383][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 288.914799][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 291.644932][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1189'. [ 291.662214][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 291.741558][T10731] ip6gre2: entered promiscuous mode [ 291.761083][T10731] ip6gre2: entered allmulticast mode [ 291.830910][T10742] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 291.852796][T10742] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1191'. [ 291.989155][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 292.293078][T10759] veth9: entered allmulticast mode [ 292.315963][T10759] bond8: (slave veth9): Enslaving as an active interface with an up link [ 292.353819][T10750] bond8 (unregistering): (slave veth9): Releasing backup interface [ 292.392984][T10750] bond8 (unregistering): Released all slaves [ 292.540404][T10770] bond8 (unregistering): Released all slaves [ 292.852058][T10792] sctp: [Deprecated]: syz.2.1207 (pid 10792) Use of int in maxseg socket option. [ 292.852058][T10792] Use struct sctp_assoc_value instead [ 292.964024][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 293.222680][T10806] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1213'. [ 293.332595][T10811] tipc: Enabling of bearer rejected, already enabled [ 293.371285][T10810] gre0: entered promiscuous mode [ 293.387163][T10810] gre0: entered allmulticast mode [ 293.606455][T10823] netlink: 'syz.4.1217': attribute type 13 has an invalid length. [ 293.629610][T10823] netlink: 'syz.4.1217': attribute type 17 has an invalid length. [ 294.044563][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.054206][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.431701][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 294.476724][T10836] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 294.740319][T10820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.767510][T10820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.678415][ T9416] lo speed is unknown, defaulting to 1000 [ 295.681451][T10823] lo: left allmulticast mode [ 295.705642][T10823] tunl0: left allmulticast mode [ 295.722401][T10823] gre0: left allmulticast mode [ 295.738714][T10823] gretap0: left allmulticast mode [ 295.751215][T10823] erspan0: left allmulticast mode [ 295.761728][T10823] ip_vti0: left allmulticast mode [ 295.768963][T10823] ip6_vti0: left allmulticast mode [ 295.775983][T10823] sit0: left allmulticast mode [ 295.785779][T10823] ip6tnl0: left allmulticast mode [ 295.793086][T10823] ip6gre0: left allmulticast mode [ 295.799978][T10823] syz_tun: left allmulticast mode [ 295.811661][T10823] ip6gretap0: left allmulticast mode [ 295.827694][T10823] bridge0: left promiscuous mode [ 295.832877][T10823] vcan0: left allmulticast mode [ 295.839199][T10823] bond0: left allmulticast mode [ 295.845341][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.854142][T10823] dummy0: left allmulticast mode [ 295.861719][T10823] nlmon0: left allmulticast mode [ 295.868927][T10823] batadv0: left allmulticast mode [ 295.875387][T10823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.883716][T10823] vxcan0: left allmulticast mode [ 295.890594][T10823] vxcan1: left allmulticast mode [ 295.898128][T10823] veth0: left allmulticast mode [ 295.904568][T10823] veth1: left allmulticast mode [ 295.911960][T10823] wg0: left allmulticast mode [ 295.920229][T10823] wg1: left allmulticast mode [ 295.927680][T10823] wg2: left allmulticast mode [ 295.934227][T10823] veth0_to_bridge: left allmulticast mode [ 295.943806][T10823] veth1_to_bridge: left allmulticast mode [ 295.954226][T10823] veth0_to_bond: left allmulticast mode [ 295.961627][T10823] bond_slave_0: left allmulticast mode [ 295.968598][T10823] veth1_to_bond: left allmulticast mode [ 295.975705][T10823] bond_slave_1: left allmulticast mode [ 295.982281][T10823] veth0_to_team: left allmulticast mode [ 295.989887][T10823] team_slave_0: left allmulticast mode [ 295.996521][T10823] veth1_to_team: left allmulticast mode [ 296.003919][T10823] team_slave_1: left allmulticast mode [ 296.010422][T10823] veth0_to_batadv: left allmulticast mode [ 296.018724][T10823] batadv_slave_0: left allmulticast mode [ 296.025200][T10823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.033868][T10823] veth1_to_batadv: left allmulticast mode [ 296.041291][T10823] batadv_slave_1: left allmulticast mode [ 296.047846][T10823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.056415][T10823] xfrm0: left allmulticast mode [ 296.063115][T10823] veth0_to_hsr: left allmulticast mode [ 296.072173][T10823] veth1_to_hsr: left allmulticast mode [ 296.080407][T10823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.091361][T10823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.102037][T10823] hsr0: left allmulticast mode [ 296.107419][T10823] hsr_slave_0: left allmulticast mode [ 296.112909][T10823] hsr_slave_1: left allmulticast mode [ 296.120531][T10823] veth1_virt_wifi: left allmulticast mode [ 296.128682][T10823] veth0_virt_wifi: left allmulticast mode [ 296.135698][T10823] virt_wifi0: left allmulticast mode [ 296.149121][T10823] veth1_vlan: left promiscuous mode [ 296.154760][T10823] veth1_vlan: left allmulticast mode [ 296.162565][T10823] veth0_vlan: left promiscuous mode [ 296.169724][T10823] veth0_vlan: entered promiscuous mode [ 296.175522][T10823] vlan0: left allmulticast mode [ 296.182681][T10823] vlan1: left allmulticast mode [ 296.189529][T10823] veth1_vlan: entered promiscuous mode [ 296.195064][T10823] veth1_vlan: entered allmulticast mode [ 296.200956][T10823] macvlan0: left allmulticast mode [ 296.206949][T10823] veth1_vlan: left allmulticast mode [ 296.215709][T10823] veth1_vlan: entered allmulticast mode [ 296.222088][T10823] macvlan1: left allmulticast mode [ 296.227676][T10823] veth1_vlan: left allmulticast mode [ 296.234631][T10823] ipvlan0: left allmulticast mode [ 296.241678][T10823] ipvlan1: left allmulticast mode [ 296.246971][T10823] veth0_vlan: left allmulticast mode [ 296.254071][T10823] veth1_macvtap: left promiscuous mode [ 296.260140][T10823] veth1_macvtap: left allmulticast mode [ 296.269011][T10823] veth0_macvtap: left promiscuous mode [ 296.274707][T10823] veth0_macvtap: left allmulticast mode [ 296.282181][T10823] veth0_macvtap: entered promiscuous mode [ 296.288589][T10823] veth0_macvtap: entered allmulticast mode [ 296.294498][T10823] macvtap0: left allmulticast mode [ 296.299847][T10823] veth0_macvtap: left allmulticast mode [ 296.314328][T10823] veth1_macvtap: entered promiscuous mode [ 296.320448][T10823] veth1_macvtap: entered allmulticast mode [ 296.326633][T10823] macsec0: left allmulticast mode [ 296.331891][T10823] veth1_macvtap: left allmulticast mode [ 296.339229][T10823] geneve0: left allmulticast mode [ 296.347307][T10823] geneve1: left allmulticast mode [ 296.355647][T10823] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 296.363861][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.376889][T10823] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 296.384488][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.397530][T10823] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 296.405262][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.418394][T10823] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 296.427179][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.440467][T10823] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 296.448912][T10823] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 296.459075][T10823] syztnl1: left allmulticast mode [ 296.466008][T10823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.480893][T10823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.492131][T10823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.508612][T10823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.522727][T10823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.532762][T10823] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 296.551810][ T5956] bridge0: entered promiscuous mode [ 296.730971][ T809] lo speed is unknown, defaulting to 1000 [ 296.748795][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.756634][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.798411][T10849] netlink: 4116 bytes leftover after parsing attributes in process `syz.4.1225'. [ 296.828798][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.836131][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.039000][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 297.111963][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 297.152748][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 297.167375][T10859] netlink: 'syz.2.1227': attribute type 18 has an invalid length. [ 297.227257][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.314509][T10874] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 297.448926][T10872] veth4: entered allmulticast mode [ 297.470112][T10872] bond8: (slave veth4): Enslaving as an active interface with an up link [ 297.522194][T10877] bond8 (unregistering): (slave veth4): Releasing backup interface [ 297.561147][T10877] bond8 (unregistering): Released all slaves [ 297.985946][T10904] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1237'. [ 298.457571][T10919] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1242'. [ 298.585678][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 298.750612][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 299.148701][T10958] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1250'. [ 299.243306][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1253'. [ 299.363069][T10965] macvtap1: entered promiscuous mode [ 299.376577][T10965] vlan0: entered promiscuous mode [ 299.400507][T10965] vlan0: left promiscuous mode [ 299.948436][T10993] bond3: option xmit_hash_policy: invalid value (10) [ 299.977001][T10993] bond3 (unregistering): Released all slaves [ 300.267377][T11012] netlink: 'syz.3.1265': attribute type 5 has an invalid length. [ 300.835384][T11038] vlan2: entered promiscuous mode [ 300.840889][T11038] bridge0: entered promiscuous mode [ 301.102447][T11053] netlink: 'syz.3.1274': attribute type 15 has an invalid length. [ 301.151573][T11055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.397640][T11065] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 301.455638][T11067] ipt_ECN: cannot use operation on non-tcp rule [ 301.504354][T11062] bond2: left promiscuous mode [ 301.693674][T11076] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 301.865905][T11069] bond7: (slave geneve4): making interface the new active one [ 301.897282][T11069] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 301.940483][T11081] __nla_validate_parse: 5 callbacks suppressed [ 301.940504][T11081] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1284'. [ 301.968602][ T76] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.004563][T11077] bond7 (unregistering): (slave geneve4): Releasing active interface [ 302.032405][T11077] bond7 (unregistering): Released all slaves [ 302.138901][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 302.157838][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 302.189776][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 302.237172][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 302.263642][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 302.284476][T11089] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1287'. [ 302.304988][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 302.317660][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 302.332362][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 303.013718][T11078] batman_adv: netdevsim0: Interface deactivated: batadv_slave_0 [ 303.038810][T11078] batman_adv: netdevsim0: Interface deactivated: batadv_slave_1 [ 303.729738][ T76] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.752662][ T76] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.765688][ T76] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.796685][ T76] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.826201][ T76] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.908163][ T76] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.946554][ T76] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.974544][ T76] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.993496][ T76] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.014034][ T76] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 304.024565][ T76] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.035769][T11100] netlink: 'syz.4.1289': attribute type 49 has an invalid length. [ 304.199689][T11105] SET target dimension over the limit! [ 304.208112][T11108] syzkaller0: entered promiscuous mode [ 304.223832][T11108] syzkaller0: entered allmulticast mode [ 304.759791][T11139] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 304.863147][T11139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.062537][T11144] bond3: (slave veth9): Enslaving as an active interface with a down link [ 305.325631][T11163] syzkaller0: entered promiscuous mode [ 305.348040][T11163] syzkaller0: entered allmulticast mode [ 305.458330][T11176] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 305.502511][T11176] bridge0: left allmulticast mode [ 305.707779][T11178] bridge0: port 3(syz_tun) entered disabled state [ 305.729350][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.737219][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.118087][ T76] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.137941][ T76] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.157838][ T76] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.182955][ T76] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.205160][ T76] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.224802][ T76] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.315790][ T76] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.325373][ T76] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.334772][ T76] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.354999][ T76] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.399955][ T76] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.421508][ T76] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.565086][T11205] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 306.705182][T11205] veth5: entered allmulticast mode [ 306.821903][T11206] ip6tnl0: left allmulticast mode [ 306.833644][T11206] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 307.242484][T11232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.319827][T11234] netlink: 'syz.4.1321': attribute type 3 has an invalid length. [ 307.322407][ T5956] IPVS: starting estimator thread 0... [ 307.346404][T11234] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 307.377470][T11234] __nla_validate_parse: 198 callbacks suppressed [ 307.377489][T11234] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1321'. [ 307.467347][T11236] IPVS: using max 33 ests per chain, 79200 per kthread [ 308.166914][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1330'. [ 308.562402][T11294] lo speed is unknown, defaulting to 1000 [ 308.641482][T11305] atomic_op ffff888030bfd998 conn xmit_atomic 0000000000000000 [ 308.740365][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 308.912281][T11326] af_packet: tpacket_rcv: packet too big, clamped from 280 to 4294967272. macoff=96 [ 309.139484][T11337] sctp: [Deprecated]: syz.1.1345 (pid 11337) Use of int in maxseg socket option. [ 309.139484][T11337] Use struct sctp_assoc_value instead [ 309.380789][T11344] bond0: (slave bond_slave_1): Releasing backup interface [ 309.742082][T11349] : renamed from bond_slave_0 [ 309.798771][T11361] netlink: 'syz.4.1352': attribute type 13 has an invalid length. [ 310.255398][T11389] syz_tun: left promiscuous mode [ 310.261449][T11389] bridge0: port 3(syz_tun) entered disabled state [ 310.277080][T11389] bridge_slave_0: left promiscuous mode [ 310.283670][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.294774][T11389] bridge_slave_1: left promiscuous mode [ 310.301743][T11389] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.318115][T11389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.334347][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 310.513054][T11393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1357'. [ 310.566515][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 310.605406][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 310.627025][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 310.665446][T11401] netlink: 'syz.2.1360': attribute type 6 has an invalid length. [ 310.694722][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 310.743351][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 310.797659][T11396] lo speed is unknown, defaulting to 1000 [ 311.757094][T11439] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 313.770933][T11408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.928796][T11476] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 313.979446][T11481] netlink: 'syz.3.1378': attribute type 13 has an invalid length. [ 313.987971][T11481] netlink: 'syz.3.1378': attribute type 17 has an invalid length. [ 314.004907][T11481] gre0: left promiscuous mode [ 314.016788][T11481] gre0: left allmulticast mode [ 314.162630][T11485] __nla_validate_parse: 2 callbacks suppressed [ 314.162652][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 314.185576][T11493] sock: sock_timestamping_bind_phc: sock not bind to device [ 315.036861][T11481] bridge3: left promiscuous mode [ 315.042084][T11481] bridge3: left allmulticast mode [ 315.049095][T11481] vlan4: left promiscuous mode [ 315.057946][T11481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.068404][T11481] veth4: left allmulticast mode [ 315.108879][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 315.297398][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 315.363367][T11513] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 315.425746][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 315.542294][T11519] xt_hashlimit: size too large, truncated to 1048576 [ 315.613237][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.618537][T11523] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:27409 [ 315.638445][T11525] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 315.653545][T11530] netlink: 'syz.1.1389': attribute type 11 has an invalid length. [ 315.662635][T11530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1389'. [ 315.676662][T11530] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1389'. [ 316.502167][T11573] tipc: Enabling of bearer rejected, already enabled [ 317.707885][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.142462][T11610] pim6reg: entered allmulticast mode [ 320.160694][T11610] pim6reg: left allmulticast mode [ 320.221295][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'. [ 320.475865][T11642] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1408'. [ 320.514494][T11638] syzkaller0: entered promiscuous mode [ 320.534243][T11638] syzkaller0: entered allmulticast mode [ 320.581942][T11638] xt_hashlimit: size too large, truncated to 1048576 [ 320.741918][T11663] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1411'. [ 320.995338][T11672] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 321.028320][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.2.1413 Not tainted syzkaller #0 PREEMPT(full) [ 321.028348][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.028378][T11672] Call Trace: [ 321.028386][T11672] [ 321.028393][T11672] dump_stack_lvl+0xe8/0x150 [ 321.028423][T11672] sysfs_warn_dup+0x8e/0xa0 [ 321.028453][T11672] sysfs_do_create_link_sd+0xc0/0x110 [ 321.028474][T11672] device_add_class_symlinks+0x1cf/0x240 [ 321.028500][T11672] device_add+0x467/0xb80 [ 321.028526][T11672] wiphy_register+0x1fc8/0x2ff0 [ 321.028568][T11672] ? __pfx_wiphy_register+0x10/0x10 [ 321.028594][T11672] ? __pfx_netdev_run_todo+0x10/0x10 [ 321.028616][T11672] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 321.028647][T11672] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 321.028695][T11672] ieee80211_register_hw+0x3d3d/0x4a50 [ 321.028746][T11672] ? ieee80211_register_hw+0x19d1/0x4a50 [ 321.028810][T11672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 321.028851][T11672] ? __asan_memset+0x22/0x50 [ 321.028883][T11672] ? __hrtimer_setup+0x1b7/0x260 [ 321.028911][T11672] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 321.028939][T11672] mac80211_hwsim_new_radio+0x3238/0x5680 [ 321.028997][T11672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 321.029018][T11672] ? kstrndup+0xbd/0x160 [ 321.029047][T11672] ? kstrndup+0xbd/0x160 [ 321.029072][T11672] hwsim_new_radio_nl+0xd8b/0xf90 [ 321.029125][T11672] genl_family_rcv_msg_doit+0x233/0x340 [ 321.029167][T11672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.029214][T11672] ? bpf_lsm_capable+0x9/0x20 [ 321.029234][T11672] ? security_capable+0x7e/0x2c0 [ 321.029267][T11672] genl_rcv_msg+0x614/0x7a0 [ 321.029306][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.029336][T11672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.029388][T11672] netlink_rcv_skb+0x226/0x4a0 [ 321.029414][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.029447][T11672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.029491][T11672] ? down_read+0x2be/0x330 [ 321.029520][T11672] genl_rcv+0x28/0x40 [ 321.029547][T11672] netlink_unicast+0x7bb/0x940 [ 321.029584][T11672] netlink_sendmsg+0x813/0xb40 [ 321.029621][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.029644][T11672] ? irqentry_exit+0x218/0x8f0 [ 321.029688][T11672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.029726][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.029750][T11672] sock_sendmsg_nosec+0x13a/0x180 [ 321.029784][T11672] ____sys_sendmsg+0x54e/0x850 [ 321.029816][T11672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.029851][T11672] ? import_iovec+0x73/0xa0 [ 321.029879][T11672] ___sys_sendmsg+0x2a5/0x360 [ 321.029898][T11672] ? __lock_acquire+0x683/0x2cf0 [ 321.029920][T11672] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.029943][T11672] ? futex_wait+0x2a2/0x390 [ 321.029997][T11672] ? __fget_files+0x2a/0x420 [ 321.030015][T11672] ? __fget_files+0x3a2/0x420 [ 321.030041][T11672] __x64_sys_sendmsg+0x1b1/0x290 [ 321.030063][T11672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.030100][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.030119][T11672] do_syscall_64+0x174/0x580 [ 321.030136][T11672] ? trace_irq_disable+0x3b/0x140 [ 321.030154][T11672] ? clear_bhb_loop+0x40/0x90 [ 321.030179][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.030198][T11672] RIP: 0033:0x7f589ab9ce59 [ 321.030216][T11672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.030232][T11672] RSP: 002b:00007f589b9f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.030254][T11672] RAX: ffffffffffffffda RBX: 00007f589ae15fa0 RCX: 00007f589ab9ce59 [ 321.030267][T11672] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 321.030280][T11672] RBP: 00007f589ac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.030290][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.030300][T11672] R13: 00007f589ae16038 R14: 00007f589ae15fa0 R15: 00007ffd6c8ffa18 [ 321.030330][T11672] [ 321.562495][T11675] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 321.592749][T11683] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1416'. [ 321.625838][T11683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.852615][T11690] syzkaller0: entered promiscuous mode [ 321.862405][T11690] syzkaller0: entered allmulticast mode [ 321.937692][T11695] syzkaller0: entered promiscuous mode [ 321.961394][T11695] syzkaller0: entered allmulticast mode [ 322.142852][T11709] IPVS: stopping master sync thread 8505 ... [ 322.242416][T11717] netlink: 424 bytes leftover after parsing attributes in process `syz.4.1423'. [ 322.299044][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 322.597966][T11735] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1426'. [ 322.611528][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 322.626812][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 322.731041][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1428'. [ 322.892143][T11743] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 322.924424][T11743] netlink: 'syz.4.1428': attribute type 2 has an invalid length. [ 323.243986][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.283905][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.425042][T11778] netlink: 'syz.2.1438': attribute type 4 has an invalid length. [ 323.438725][T11777] netlink: 'syz.2.1438': attribute type 4 has an invalid length. [ 323.556248][T11775] bridge3: entered promiscuous mode [ 323.595856][T11775] bridge3: entered allmulticast mode [ 323.956789][T11785] lo speed is unknown, defaulting to 1000 [ 324.098012][T11808] sctp: [Deprecated]: syz.2.1444 (pid 11808) Use of int in maxseg socket option. [ 324.098012][T11808] Use struct sctp_assoc_value instead [ 324.474056][T11823] veth1_to_bond: left promiscuous mode [ 324.493102][T11823] veth1_to_bond: left allmulticast mode [ 324.538173][T11833] bridge4: entered promiscuous mode [ 324.543611][T11833] bridge4: entered allmulticast mode [ 325.540551][T11875] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 325.653219][T11878] __nla_validate_parse: 6 callbacks suppressed [ 325.653241][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 325.690399][T11878] netlink: 'syz.4.1461': attribute type 15 has an invalid length. [ 325.782330][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 325.966947][T11882] netlink: 'syz.4.1463': attribute type 29 has an invalid length. [ 325.986517][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 325.995823][T11887] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1464'. [ 326.007826][T11882] netlink: 'syz.4.1463': attribute type 29 has an invalid length. [ 326.031041][T11883] hsr0: entered promiscuous mode [ 326.041926][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.063395][T11883] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.080526][T11882] netlink: 'syz.4.1463': attribute type 29 has an invalid length. [ 326.095585][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.116000][T11882] netlink: 'syz.4.1463': attribute type 29 has an invalid length. [ 326.132144][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.150764][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.185089][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 326.426628][ T6003] wlan1: Trigger new scan to find an IBSS to join [ 326.493376][T11895] veth0_to_team: left allmulticast mode [ 326.790948][ T6003] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.813830][ T6003] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.959375][T11912] bond8: entered promiscuous mode [ 326.970635][T11912] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.008535][ T6003] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.030895][ T6003] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.102520][T11915] ipvlan3: entered allmulticast mode [ 327.109296][T11915] bond8: entered allmulticast mode [ 327.679853][T11950] block nbd0: server does not support multiple connections per device. [ 327.699431][T11950] block nbd0: shutting down sockets [ 327.761353][T11952] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.937288][T11952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.953753][T11952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.968842][T11952] veth1_vlan: left promiscuous mode [ 327.975438][T11952] veth0_vlan: left promiscuous mode [ 327.984832][T11952] veth0_vlan: entered promiscuous mode [ 327.994409][T11952] veth1_vlan: entered promiscuous mode [ 328.004425][T11952] veth1_macvtap: left promiscuous mode [ 328.011336][T11952] veth0_macvtap: left promiscuous mode [ 328.018851][T11952] veth0_macvtap: entered promiscuous mode [ 328.026516][T11952] veth1_macvtap: entered promiscuous mode [ 328.038872][T11952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.047533][T11952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.055880][T11952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.064724][T11952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.078898][T11952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.091297][T11952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.100872][T11952] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.111643][T11952] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 328.133472][T11950] lo: Caught tx_queue_len zero misconfig [ 328.172194][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.179497][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.193850][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.201200][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.298347][ T6002] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.336553][ T6002] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.478398][ T6002] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.501358][ T6002] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.617395][T11978] syzkaller0: entered promiscuous mode [ 328.625586][T11978] syzkaller0: entered allmulticast mode [ 328.822865][T12000] block nbd0: Unsupported socket: should be TCP or UNIX. [ 329.079283][T12015] bond0: Caught tx_queue_len zero misconfig [ 329.104559][T12018] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 329.245854][T12025] x_tables: duplicate underflow at hook 2 [ 329.390581][ T6002] wlan1: Trigger new scan to find an IBSS to join [ 329.423838][T12039] syzkaller1: tun_chr_ioctl cmd 3489698846 [ 329.431467][T12039] syzkaller1: tun_chr_ioctl cmd 3288372251 [ 329.438817][T12039] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 329.445157][T12039] syzkaller1: linktype set to 825 [ 329.709075][T12056] validate_nla: 27 callbacks suppressed [ 329.709091][T12056] netlink: 'syz.3.1507': attribute type 49 has an invalid length. [ 332.426607][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 332.435601][ T6002] wlan1: Trigger new scan to find an IBSS to join [ 332.546878][T12043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.562996][T12080] __nla_validate_parse: 39 callbacks suppressed [ 332.563020][T12080] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1513'. [ 332.924438][T12101] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 332.949832][T12098] lo speed is unknown, defaulting to 1000 [ 332.980610][T12105] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1520'. [ 333.051769][T12106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1521'. [ 333.172467][T12106] bond5: Unable to set up delay as MII monitoring is disabled [ 333.434775][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.448835][T12106] bond5 (unregistering): Released all slaves [ 333.684560][T12122] syzkaller1: entered promiscuous mode [ 333.705764][T12122] syzkaller1: entered allmulticast mode [ 334.689995][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 334.719831][T12162] sctp: [Deprecated]: syz.0.1536 (pid 12162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.719831][T12162] Use struct sctp_sack_info instead [ 335.328277][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 335.680374][T12182] syzkaller1: entered promiscuous mode [ 335.687047][T12182] syzkaller1: entered allmulticast mode [ 335.880760][T12189] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1541'. [ 335.968147][T12204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1543'. [ 336.334010][T12219] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1548'. [ 336.548849][T12221] bond5: entered promiscuous mode [ 336.554126][T12221] bond5: entered allmulticast mode [ 336.561027][T12221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.571275][T10842] IPVS: starting estimator thread 0... [ 336.608029][T12217] lo speed is unknown, defaulting to 1000 [ 336.686195][T12231] IPVS: using max 33 ests per chain, 79200 per kthread [ 336.727289][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 336.752260][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 336.857423][T12234] lo speed is unknown, defaulting to 1000 [ 336.914234][T12234] lo speed is unknown, defaulting to 1000 [ 336.968624][T12234] lo speed is unknown, defaulting to 1000 [ 337.017465][T12245] syzkaller0: entered promiscuous mode [ 337.023042][T12245] syzkaller0: entered allmulticast mode [ 337.330032][T12252] siw: device registration error -23 [ 337.598345][T12265] __nla_validate_parse: 3 callbacks suppressed [ 337.598375][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 337.658481][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'. [ 337.694330][ T30] audit: type=1107 audit(1782652549.037:4): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='QXf.ϊ#J1mHh|YHz{fz\2P|1QO%PfEhpDh˺!{' [ 337.771851][T12271] xt_hashlimit: size too large, truncated to 1048576 [ 337.837487][T12273] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 337.858980][T12265] bond9: entered promiscuous mode [ 337.864769][T12265] 8021q: adding VLAN 0 to HW filter on device bond9 [ 337.900142][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.909252][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.972964][T12234] infiniband syz1: set active [ 337.983606][T12274] @0: renamed from bond_slave_1 (while UP) [ 338.002499][T12234] infiniband syz1: added lo [ 338.067435][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 338.080368][T12234] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 338.127096][T12234] infiniband syz1: Couldn't open port 1 [ 338.198510][ T6858] lo speed is unknown, defaulting to 1000 [ 338.211759][T12234] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 338.263375][T12234] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 338.290605][T12234] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 338.321665][T12282] : entered promiscuous mode [ 338.553424][T12234] RDS/IB: syz1: added [ 338.570000][T12234] smc: adding ib device syz1 with port count 1 [ 338.585766][T12234] smc: ib device syz1 port 1 has no pnetid [ 338.620520][T10842] lo speed is unknown, defaulting to 1000 [ 338.644372][T12234] lo speed is unknown, defaulting to 1000 [ 338.952931][T12309] syzkaller1: entered promiscuous mode [ 338.981300][T12309] syzkaller1: entered allmulticast mode [ 339.531010][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 339.635185][T12234] lo speed is unknown, defaulting to 1000 [ 339.933772][T12334] lo speed is unknown, defaulting to 1000 [ 339.955814][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'. [ 339.980680][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'. [ 340.279031][T12334] lo speed is unknown, defaulting to 1000 [ 340.320744][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1582'. [ 341.049859][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1587'. [ 341.071268][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 341.112575][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 341.129869][T12234] lo speed is unknown, defaulting to 1000 [ 341.626277][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 341.952238][T12234] lo speed is unknown, defaulting to 1000 [ 342.438141][T12234] lo speed is unknown, defaulting to 1000 [ 342.790410][T12234] lo speed is unknown, defaulting to 1000 [ 343.116363][T12418] __nla_validate_parse: 3 callbacks suppressed [ 343.116386][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 343.243113][T12405] lo speed is unknown, defaulting to 1000 [ 343.375693][T12427] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 343.454144][T12430] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 343.526409][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'. [ 343.706243][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 343.761827][T12438] veth13: entered allmulticast mode [ 344.070622][T12445] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1601'. [ 344.102618][T12446] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 344.116716][T12446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.143934][T12446] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 344.360229][T12456] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 344.375403][T12458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1603'. [ 344.401472][T12458] netlink: 243 bytes leftover after parsing attributes in process `syz.3.1603'. [ 344.707563][T12456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.764608][T12462] bond7: (slave veth13): Enslaving as an active interface with a down link [ 344.804257][T12465] bond7: (slave dummy0): making interface the new active one [ 344.828230][T12465] dummy0: entered promiscuous mode [ 344.833970][T12465] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 344.891222][T12470] ip6gre1: entered promiscuous mode [ 344.900947][T12470] ip6gre1: entered allmulticast mode [ 344.954403][T12475] vlan2: entered promiscuous mode [ 345.395498][T12494] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 345.550398][T12494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.615886][T12501] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 345.646646][ T6003] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 345.787959][ T6002] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 345.826893][T12512] xt_hashlimit: max too large, truncated to 1048576 [ 345.850784][T12512] No such timeout policy "syz1" [ 345.861251][T12510] macvtap1: entered promiscuous mode [ 345.868823][T12510] vlan0: entered promiscuous mode [ 345.880999][T12510] vlan0: left promiscuous mode [ 345.951109][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.033812][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.052691][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.260153][T12530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1619'. [ 346.632648][T12547] syzkaller1: entered promiscuous mode [ 346.657249][T12547] syzkaller1: entered allmulticast mode [ 347.298554][T12574] lo speed is unknown, defaulting to 1000 [ 347.801336][T12596] syzkaller0: entered promiscuous mode [ 347.826471][T12596] syzkaller0: entered allmulticast mode [ 348.037647][T12604] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 348.059206][T12604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1634'. [ 348.283178][T12610] netlink: 2588 bytes leftover after parsing attributes in process `syz.1.1637'. [ 351.232571][T12640] bond8: option downdelay: invalid value (18446744073709551487) [ 351.296977][T12640] bond8: option downdelay: allowed values 0 - 2147483647 [ 351.339475][T12640] bond8 (unregistering): Released all slaves [ 351.685098][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1644'. [ 351.791923][T12673] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1645'. [ 351.888330][T12669] tipc: Enabling of bearer rejected, failed to enable media [ 351.968293][T12681] syzkaller0: entered promiscuous mode [ 351.989880][T12681] syzkaller0: entered allmulticast mode [ 352.148038][T12693] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 352.172630][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 352.371479][T12695] ip6tnl4: entered allmulticast mode [ 352.735856][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 352.761706][T12721] SET target dimension over the limit! [ 352.978637][T12717] ip6gre2: entered promiscuous mode [ 352.998371][T12717] ip6gre2: entered allmulticast mode [ 353.207181][T12741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1656'. [ 353.541240][T12761] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 354.144647][T12786] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1666'. [ 354.160884][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 354.173883][T12786] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 354.184288][T12786] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 354.217252][T12786] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 354.399138][T12793] vlan3: entered allmulticast mode [ 354.407498][T12793] veth0_to_bond: entered allmulticast mode [ 354.445473][T12795] bond7: option updelay: invalid value (18446744073709518847) [ 354.453973][T12795] bond7: option updelay: allowed values 0 - 2147483647 [ 354.470615][T12795] bond7 (unregistering): Released all slaves [ 354.500522][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 355.472936][T12829] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 355.517283][ T1328] bond6: (slave dummy0): link status up again after 0 ms [ 355.551142][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.585666][T12838] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 355.602286][ T1328] bond6: (slave dummy0): link status up again after 0 ms [ 355.627645][ T6001] bond6: (slave dummy0): link status up again after 0 ms [ 355.655563][ T6001] bond6: (slave dummy0): failed to get link speed/duplex [ 355.818090][ T6001] bond6: (slave dummy0): failed to get link speed/duplex [ 355.956647][ T1328] bond6: (slave dummy0): failed to get link speed/duplex [ 355.983275][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1687'. [ 355.997100][ T14] dummy0: left promiscuous mode [ 356.096333][ T1328] bond6: (slave dummy0): failed to get link speed/duplex [ 356.227370][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 356.252328][T12879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1689'. [ 356.300185][T12881] ip6gre0: entered promiscuous mode [ 356.315849][T12881] ip6gre0: entered allmulticast mode [ 356.856031][T12902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.998748][T12921] netlink: 'syz.0.1700': attribute type 21 has an invalid length. [ 357.193748][T12926] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 357.206680][T12926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1701'. [ 357.229088][T12926] : entered promiscuous mode [ 357.246537][T12926] bond3: (slave ): Releasing active interface [ 357.262852][T12931] netlink: 'syz.4.1704': attribute type 2 has an invalid length. [ 357.492168][T12942] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1708'. [ 357.500186][T12943] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1707'. [ 357.526642][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 357.656642][T12948] syz1: rxe_newlink: already configured on lo [ 357.679818][T12948] lo speed is unknown, defaulting to 1000 [ 357.825814][ T808] lo speed is unknown, defaulting to 1000 [ 357.955348][T12957] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.023492][T12957] bond7: (slave lo): Enslaving as an active interface with an up link [ 358.237670][T12967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.252256][T12942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.585296][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1716'. [ 359.887597][T13006] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 360.041007][T13008] block nbd0: not configured, cannot reconfigure [ 360.062493][T13007] block nbd0: not configured, cannot reconfigure [ 360.103305][T13017] netlink: 'syz.0.1723': attribute type 11 has an invalid length. [ 360.126515][T13017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1723'. [ 360.157995][T13017] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 360.273535][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.309853][T13017] team0: Port device netdevsim1 added [ 360.460305][T13031] syzkaller0: entered promiscuous mode [ 360.488704][T13031] syzkaller0: entered allmulticast mode [ 360.558932][T13033] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 360.566917][ T6001] net_ratelimit: 36 callbacks suppressed [ 360.566937][ T6001] bond6: (slave dummy0): failed to get link speed/duplex [ 360.593058][T13041] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1731'. [ 360.610049][T13040] xt_hashlimit: size too large, truncated to 1048576 [ 360.625005][T13033] netlink: 'syz.0.1729': attribute type 2 has an invalid length. [ 360.729658][T13046] netlink: 'syz.3.1732': attribute type 11 has an invalid length. [ 360.748735][T13046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1732'. [ 360.801825][T13042] pimreg0: tun_chr_ioctl cmd 1074025677 [ 360.817943][T13042] pimreg0: linktype set to 787 [ 360.911353][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.983638][T13044] bridge_slave_0 (unregistering): left allmulticast mode [ 361.027353][T13044] bridge_slave_0 (unregistering): left promiscuous mode [ 361.058814][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.093525][T13054] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 361.139326][T13054] netlink: 'syz.2.1735': attribute type 2 has an invalid length. [ 361.322613][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 361.343437][T13066] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1734'. [ 361.499329][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 361.515758][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 361.579547][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 361.617228][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 361.756222][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 361.876282][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 362.007529][T13099] geneve3: entered promiscuous mode [ 362.037224][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 362.237633][ T6001] bond6: (slave dummy0): failed to get link speed/duplex [ 362.279771][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 362.344367][T13112] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 362.367611][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 362.437686][T13118] syzkaller0: entered promiscuous mode [ 362.450965][T13118] syzkaller0: entered allmulticast mode [ 362.496390][ T6001] bond6: (slave dummy0): failed to get link speed/duplex [ 362.510672][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 362.511553][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 362.593550][T13127] xt_TCPMSS: Only works on TCP SYN packets [ 362.631415][T13126] bridge_slave_1: left allmulticast mode [ 362.642571][T13126] bridge_slave_1: left promiscuous mode [ 362.659128][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.919234][T13142] syzkaller1: entered promiscuous mode [ 362.925108][T13142] syzkaller1: entered allmulticast mode [ 362.942517][T13142] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 363.011832][T13146] xt_CONNSECMARK: invalid mode: 254 [ 364.561489][T13223] geneve1: entered promiscuous mode [ 364.567725][T13223] geneve1: left allmulticast mode [ 364.667725][T13228] netlink: 'syz.2.1785': attribute type 10 has an invalid length. [ 364.675763][T13228] veth0_to_bond: left allmulticast mode [ 364.727246][T13221] netlink: 'syz.4.1782': attribute type 12 has an invalid length. [ 364.735524][T13221] __nla_validate_parse: 7 callbacks suppressed [ 364.735547][T13221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1782'. [ 365.130336][T13253] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 365.185801][T13255] sctp: [Deprecated]: syz.3.1790 (pid 13255) Use of int in max_burst socket option. [ 365.185801][T13255] Use struct sctp_assoc_value instead [ 365.448791][T13267] syzkaller0: entered promiscuous mode [ 365.460056][T13267] syzkaller0: entered allmulticast mode [ 365.766510][ T14] net_ratelimit: 25 callbacks suppressed [ 365.766535][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 365.881072][T13283] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 365.900748][T13283] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 365.916548][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 365.928348][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 366.036517][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 366.159101][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 366.308218][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 366.447216][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 366.585653][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 366.748323][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 366.808277][T13333] lo: left promiscuous mode [ 366.820634][T13333] tunl0: left promiscuous mode [ 366.834778][T13333] gre0: left promiscuous mode [ 366.884712][T13333] gretap0: left promiscuous mode [ 366.990282][T13333] erspan0: left promiscuous mode [ 367.052186][T13333] ip_vti0: left promiscuous mode [ 367.094572][T13333] ip6_vti0: left promiscuous mode [ 367.142793][T13333] sit0: left promiscuous mode [ 367.206549][T13333] ip6tnl0: left promiscuous mode [ 367.255911][T13333] ip6gre0: left promiscuous mode [ 367.287410][T13333] ip6gretap0: left promiscuous mode [ 367.322353][T13333] vcan0: left promiscuous mode [ 367.338142][T13333] bond0: left promiscuous mode [ 367.355327][T13333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.373950][T13333] team0: left promiscuous mode [ 367.386656][T13333] syz_tun: left promiscuous mode [ 367.402033][T13333] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.417809][T13333] dummy0: left promiscuous mode [ 367.435746][T13333] nlmon0: left promiscuous mode [ 367.449524][T13333] netdevsim0: left promiscuous mode [ 367.473221][T13333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.494830][T13333] veth0: left promiscuous mode [ 367.511751][T13333] veth1: left promiscuous mode [ 367.535072][T13333] wg0: left promiscuous mode [ 367.582691][T13333] wg2: left promiscuous mode [ 367.613729][T13333] veth1_to_bridge: left promiscuous mode [ 367.669078][T13333] veth0_to_bond: left promiscuous mode [ 367.715824][T13333] bond_slave_0: left promiscuous mode [ 367.741745][T13333] bond_slave_1: left promiscuous mode [ 367.782982][T13333] veth0_to_team: left promiscuous mode [ 367.804608][T13333] team_slave_0: left promiscuous mode [ 367.868096][T13333] veth1_to_team: left promiscuous mode [ 367.882481][T13333] team_slave_1: left promiscuous mode [ 367.927754][T13333] veth0_to_batadv: left promiscuous mode [ 367.937857][T13333] batadv_slave_0: left promiscuous mode [ 367.953439][T13333] batman_adv: netdevsim0: Interface activated: batadv_slave_0 [ 367.973887][T13333] veth1_to_batadv: left promiscuous mode [ 367.991311][T13333] batadv_slave_1: left promiscuous mode [ 367.998567][T13333] batman_adv: netdevsim0: Interface activated: batadv_slave_1 [ 368.007208][T13333] xfrm0: left promiscuous mode [ 368.014226][T13333] veth0_to_hsr: left promiscuous mode [ 368.023919][T13333] veth1_to_hsr: left promiscuous mode [ 368.032768][T13333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.044508][T13333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.055388][T13333] hsr0: left promiscuous mode [ 368.062876][T13333] veth1_virt_wifi: left promiscuous mode [ 368.071616][T13333] veth0_virt_wifi: left promiscuous mode [ 368.079702][T13333] veth1_vlan: left promiscuous mode [ 368.090912][T13333] vlan0: left promiscuous mode [ 368.105556][T13333] vlan1: left promiscuous mode [ 368.112674][T13333] veth1_vlan: entered promiscuous mode [ 368.119276][T13333] macvlan0: left promiscuous mode [ 368.130024][T13333] macvlan1: left promiscuous mode [ 368.138117][T13333] ipvlan0: left promiscuous mode [ 368.145360][T13333] ipvlan1: left promiscuous mode [ 368.153398][T13333] veth1_macvtap: left promiscuous mode [ 368.162351][T13333] veth0_macvtap: left promiscuous mode [ 368.169960][T13333] veth0_macvtap: entered promiscuous mode [ 368.176545][T13333] macvtap0: left promiscuous mode [ 368.184444][T13333] geneve0: left promiscuous mode [ 368.193573][T13333] geneve1: left promiscuous mode [ 368.201975][T13333] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 368.211555][T13333] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 368.291221][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.298518][ T6001] bridge0: port 2(bridge_slave_1) entered listening state [ 368.492370][ T14] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.527756][ T14] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.581099][ T14] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.613490][ T14] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.652306][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 368.715140][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 368.751748][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 368.780478][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 369.408235][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 369.486406][T13427] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1831'. [ 369.527044][T13427] 0X: renamed from batadv0 (while UP) [ 369.621956][T13427] 0X: entered allmulticast mode [ 369.855875][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 370.075517][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 370.090640][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 370.816495][ T12] net_ratelimit: 16 callbacks suppressed [ 370.816517][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 370.894271][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1845'. [ 370.978430][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 371.116842][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 371.129082][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 371.256176][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 371.395828][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1850'. [ 371.405680][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1850'. [ 371.425132][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 371.434575][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 371.444042][T13502] netlink: 'syz.3.1852': attribute type 6 has an invalid length. [ 371.476232][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 371.816456][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 372.019819][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 372.083666][T13521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1859'. [ 372.177321][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 372.193115][T13527] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 372.245192][T13534] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 372.376875][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 372.465184][T13551] veth5: entered allmulticast mode [ 372.549642][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 372.793306][T13571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.965615][T13582] sctp: [Deprecated]: syz.4.1873 (pid 13582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.965615][T13582] Use struct sctp_sack_info instead [ 373.321741][ T5287] veth0_vlan: left promiscuous mode [ 373.355964][T10842] veth0_vlan: entered promiscuous mode [ 373.768890][T13611] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 373.820609][T13611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.901048][T13611] bond10: (slave veth13): Enslaving as an active interface with a down link [ 374.053507][T13635] GUP no longer grows the stack in syz.1.1886 (13635): 200000003000-20000000a000 (200000001000) [ 374.067438][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.1.1886 Not tainted syzkaller #0 PREEMPT(full) [ 374.067470][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.067492][T13635] Call Trace: [ 374.067501][T13635] [ 374.067511][T13635] dump_stack_lvl+0xe8/0x150 [ 374.067627][T13635] __get_user_pages+0x238c/0x2720 [ 374.067685][T13635] ? __gup_longterm_locked+0xc3b/0x15c0 [ 374.067746][T13635] __gup_longterm_locked+0xd52/0x15c0 [ 374.067781][T13635] ? lock_acquire+0x106/0x350 [ 374.067845][T13635] gup_fast_fallback+0x1d8c/0x20e0 [ 374.067873][T13635] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.068078][T13635] ? __pfx_gup_fast_fallback+0x10/0x10 [ 374.068110][T13635] ? __resched_curr+0x23e/0x530 [ 374.068145][T13635] ? is_valid_gup_args+0x11f/0x200 [ 374.068177][T13635] ? get_user_pages_fast+0x4d/0xb0 [ 374.068218][T13635] __iov_iter_get_pages_alloc+0x378/0xa40 [ 374.068344][T13635] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 374.068394][T13635] iov_iter_get_pages2+0x5e/0xa0 [ 374.068423][T13635] __se_sys_vmsplice+0x7b5/0x1660 [ 374.068473][T13635] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 374.068504][T13635] ? __pfx_futex_wake+0x10/0x10 [ 374.068557][T13635] ? __sys_bpf+0xa9f/0xd90 [ 374.068618][T13635] ? 0xffffffffff600000 [ 374.068673][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.068719][T13635] do_syscall_64+0x174/0x580 [ 374.068739][T13635] ? trace_irq_disable+0x3b/0x140 [ 374.068762][T13635] ? clear_bhb_loop+0x40/0x90 [ 374.068791][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.068813][T13635] RIP: 0033:0x7f49e5f9ce59 [ 374.068833][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.068852][T13635] RSP: 002b:00007f49e6ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 374.068877][T13635] RAX: ffffffffffffffda RBX: 00007f49e6215fa0 RCX: 00007f49e5f9ce59 [ 374.068893][T13635] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 374.068907][T13635] RBP: 00007f49e6032e6f R08: 0000000000000000 R09: 0000000000000000 [ 374.068921][T13635] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 374.068933][T13635] R13: 00007f49e6216038 R14: 00007f49e6215fa0 R15: 00007ffe3d166298 [ 374.068978][T13635] [ 375.219670][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 375.229814][T13680] netlink: 'syz.1.1896': attribute type 13 has an invalid length. [ 375.241458][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 375.270932][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 375.289984][T13690] __nla_validate_parse: 7 callbacks suppressed [ 375.290006][T13690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1898'. [ 375.837370][ T12] net_ratelimit: 23 callbacks suppressed [ 375.837392][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 376.004104][ T6019] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.018275][T13687] infiniband syz0: set active [ 376.028694][ T6019] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.038179][T13687] infiniband syz0: added xfrm0 [ 376.043237][ T5956] xfrm0 speed is unknown, defaulting to 1000 [ 376.049957][ T6019] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.064875][ T6019] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.096760][ T6019] bond6: (slave dummy0): failed to get link speed/duplex [ 376.127333][T13687] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 376.143279][T13687] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 376.167631][T13687] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 376.266700][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 376.308146][T13687] RDS/IB: syz0: added [ 376.317413][T13687] smc: adding ib device syz0 with port count 1 [ 376.337431][T13687] smc: ib device syz0 port 1 has no pnetid [ 376.357626][T10842] xfrm0 speed is unknown, defaulting to 1000 [ 376.379820][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 376.397116][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 376.470445][T13732] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 376.531501][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1908'. [ 376.641857][T13732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.656991][T13742] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 376.675025][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 376.684317][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 376.772504][T13742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.841700][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 376.862620][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.919039][T13738] bond8: (slave team0): Enslaving as an active interface with an up link [ 376.949055][T13746] bond8: entered promiscuous mode [ 376.956217][T13746] team0: entered promiscuous mode [ 376.966002][T13746] team_slave_0: entered promiscuous mode [ 376.985654][T13746] team_slave_1: entered promiscuous mode [ 376.997552][T13746] bond8: entered allmulticast mode [ 377.005022][T13746] team0: entered allmulticast mode [ 377.018381][T13746] team_slave_0: entered allmulticast mode [ 377.024200][T13746] team_slave_1: entered allmulticast mode [ 377.048957][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 377.079122][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 377.216884][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 377.272105][T13767] xt_l2tp: invalid flags combination: 8 [ 377.299359][T13767] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.1916'. [ 377.337201][T13767] netlink: zone id is out of range [ 377.354196][T13767] netlink: set zone limit has 4 unknown bytes [ 377.373846][T13764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 377.397916][T13774] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 377.524577][ T5956] lo speed is unknown, defaulting to 1000 [ 377.533551][T13775] tunl0: Caught tx_queue_len zero misconfig [ 377.558389][ T5956] syz2: Port: 1 Link DOWN [ 377.655822][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 377.808017][T13784] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.110553][T13793] rdma_op ffff8880553f29f0 conn xmit_rdma 0000000000000000 [ 378.276769][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 378.397799][T13798] veth0_to_batadv: left allmulticast mode [ 379.005396][T13823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.014829][T13823] IPv6: NLM_F_CREATE should be set when creating new route [ 379.022215][T13823] IPv6: NLM_F_CREATE should be set when creating new route [ 379.024097][T13687] xfrm0 speed is unknown, defaulting to 1000 [ 379.029614][T13823] IPv6: NLM_F_CREATE should be set when creating new route [ 379.052032][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 379.071876][T13823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.086216][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 379.105402][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 379.128886][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 379.149612][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.157077][T13823] netlink: 'syz.1.1934': attribute type 50 has an invalid length. [ 379.177209][T13823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.199524][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 379.538253][T13844] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 379.624749][T13844] bond8: entered promiscuous mode [ 379.630799][T13844] bond8: entered allmulticast mode [ 379.637519][T13844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.670749][T13846] erspan1: entered allmulticast mode [ 379.702454][T13846] bond8: (slave erspan1): making interface the new active one [ 379.724543][T13846] erspan1: entered promiscuous mode [ 379.733699][T13846] [ 379.736229][T13846] ============================================ [ 379.742423][T13846] WARNING: possible recursive locking detected [ 379.748627][T13846] syzkaller #0 Not tainted [ 379.753078][T13846] -------------------------------------------- [ 379.759459][T13846] syz.4.1940/13846 is trying to acquire lock: [ 379.765664][T13846] ffff88807c559158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 379.775737][T13846] [ 379.775737][T13846] but task is already holding lock: [ 379.783150][T13846] ffff88807cd9e958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 379.793167][T13846] [ 379.793167][T13846] other info that might help us debug this: [ 379.801275][T13846] Possible unsafe locking scenario: [ 379.801275][T13846] [ 379.808846][T13846] CPU0 [ 379.812150][T13846] ---- [ 379.815445][T13846] lock(&qdisc_xmit_lock_key#4); [ 379.820508][T13846] lock(&qdisc_xmit_lock_key#4); [ 379.825565][T13846] [ 379.825565][T13846] *** DEADLOCK *** [ 379.825565][T13846] [ 379.833754][T13846] May be due to missing lock nesting notation [ 379.833754][T13846] [ 379.842166][T13846] 9 locks held by syz.4.1940/13846: [ 379.847394][T13846] #0: ffffffff9034adc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 379.857017][T13846] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 379.866116][T13846] #2: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 379.876303][T13846] #3: ffff88807fbec228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 379.888977][T13846] #4: ffff88807cd9e958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 379.899310][T13846] #5: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 379.908326][T13846] #6: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 379.918108][T13846] #7: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 379.928083][T13846] #8: ffff88802ab49228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 379.940820][T13846] [ 379.940820][T13846] stack backtrace: [ 379.946768][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.4.1940 Not tainted syzkaller #0 PREEMPT(full) [ 379.946793][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.946805][T13846] Call Trace: [ 379.946812][T13846] [ 379.946821][T13846] dump_stack_lvl+0xe8/0x150 [ 379.946847][T13846] print_deadlock_bug+0x279/0x290 [ 379.946872][T13846] __lock_acquire+0x24df/0x2cf0 [ 379.946894][T13846] ? __pfx_netif_skb_features+0x10/0x10 [ 379.946915][T13846] ? __nf_conntrack_find_get+0xfd1/0x1200 [ 379.947037][T13846] ? __lock_acquire+0x683/0x2cf0 [ 379.947056][T13846] ? sch_direct_xmit+0x15f/0x4c0 [ 379.947083][T13846] lock_acquire+0x106/0x350 [ 379.947099][T13846] ? sch_direct_xmit+0x15f/0x4c0 [ 379.947133][T13846] _raw_spin_lock+0x2e/0x40 [ 379.947208][T13846] ? sch_direct_xmit+0x15f/0x4c0 [ 379.947234][T13846] sch_direct_xmit+0x15f/0x4c0 [ 379.947264][T13846] ? __pfx_sch_direct_xmit+0x10/0x10 [ 379.947296][T13846] __dev_queue_xmit+0x1754/0x37f0 [ 379.947316][T13846] ? __bfs+0x153/0x290 [ 379.947332][T13846] ? __pfx_hlock_conflict+0x10/0x10 [ 379.947358][T13846] ? __pfx_usage_match+0x10/0x10 [ 379.947376][T13846] ? __dev_queue_xmit+0x29b/0x37f0 [ 379.947397][T13846] ? lockdep_unlock+0x5d/0xd0 [ 379.947411][T13846] ? __lock_acquire+0x13e8/0x2cf0 [ 379.947429][T13846] ? __pfx___dev_queue_xmit+0x10/0x10 [ 379.947464][T13846] ? ip_finish_output2+0x972/0x10b0 [ 379.947483][T13846] ip_finish_output2+0xbda/0x10b0 [ 379.947499][T13846] ? ip_finish_output2+0x3de/0x10b0 [ 379.947519][T13846] ip_output+0x29f/0x450 [ 379.947544][T13846] ? ip_output+0x5a/0x450 [ 379.947569][T13846] iptunnel_xmit+0x626/0xd10 [ 379.947631][T13846] ip_tunnel_xmit+0x195b/0x2040 [ 379.947667][T13846] ? irqentry_exit+0x218/0x8f0 [ 379.947702][T13846] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 379.947730][T13846] ? __pfx_gre_build_header+0x10/0x10 [ 379.947796][T13846] ? kfree+0x1c5/0x640 [ 379.947825][T13846] ? pskb_expand_head+0x469/0x13a0 [ 379.947869][T13846] __gre_xmit+0x19e/0x240 [ 379.947909][T13846] ? __pfx___gre_xmit+0x10/0x10 [ 379.947936][T13846] erspan_xmit+0xad5/0x1590 [ 379.947965][T13846] ? __pfx_erspan_xmit+0x10/0x10 [ 379.947993][T13846] dev_hard_start_xmit+0x2cd/0x830 [ 379.948020][T13846] sch_direct_xmit+0x257/0x4c0 [ 379.948050][T13846] ? __pfx_sch_direct_xmit+0x10/0x10 [ 379.948077][T13846] ? do_set_master+0x500/0x720 [ 379.948098][T13846] __dev_queue_xmit+0x1754/0x37f0 [ 379.948124][T13846] ? __dev_queue_xmit+0x29b/0x37f0 [ 379.948148][T13846] ? __pfx___dev_queue_xmit+0x10/0x10 [ 379.948175][T13846] ? rcu_is_watching+0x15/0xb0 [ 379.948205][T13846] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 379.948231][T13846] ? trace_kmem_cache_alloc+0x29/0xe0 [ 379.948255][T13846] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 379.948283][T13846] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 379.948308][T13846] ? local_lock_release+0x9c/0x160 [ 379.948435][T13846] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 379.948466][T13846] ? __alloc_skb+0x4cc/0x7a0 [ 379.948483][T13846] ? alb_send_lp_vid+0x14e/0x550 [ 379.948583][T13846] alb_send_lp_vid+0x348/0x550 [ 379.948622][T13846] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 379.948653][T13846] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 379.948684][T13846] alb_send_learning_packets+0x12c/0x300 [ 379.948713][T13846] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 379.948743][T13846] ? alb_swap_mac_addr+0x230/0x340 [ 379.948772][T13846] alb_fasten_mac_swap+0x45d/0xf70 [ 379.948800][T13846] ? dev_addr_mod+0x1ba/0x350 [ 379.948842][T13846] bond_alb_handle_active_change+0xc85/0xf50 [ 379.948873][T13846] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 379.948901][T13846] ? __hw_addr_add_ex+0x182/0x520 [ 379.948931][T13846] ? __local_bh_enable_ip+0xd0/0x130 [ 379.948973][T13846] bond_change_active_slave+0x1098/0x36d0 [ 379.949026][T13846] ? __pfx_do_sync_core+0x10/0x10 [ 379.949068][T13846] ? smp_call_function_many_cond+0x112a/0x14b0 [ 379.949088][T13846] ? __pfx_bond_change_active_slave+0x10/0x10 [ 379.949113][T13846] ? __pfx_do_sync_core+0x10/0x10 [ 379.949143][T13846] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 379.949161][T13846] ? bond_start_xmit+0x92/0x19e0 [ 379.949185][T13846] ? __pfx___text_poke+0x10/0x10 [ 379.949224][T13846] bond_select_active_slave+0x8a6/0xcd0 [ 379.949253][T13846] ? __pfx_bond_select_active_slave+0x10/0x10 [ 379.949285][T13846] bond_enslave+0x239c/0x3b10 [ 379.949309][T13846] ? sock_def_readable+0xae/0x550 [ 379.949342][T13846] ? __pfx_bond_enslave+0x10/0x10 [ 379.949373][T13846] ? __pfx___dev_notify_flags+0x10/0x10 [ 379.949389][T13846] ? __dev_change_flags+0x64b/0x820 [ 379.949407][T13846] ? mutex_is_locked+0x17/0x50 [ 379.949429][T13846] do_set_master+0x563/0x720 [ 379.949450][T13846] rtnl_newlink_create+0x641/0xb00 [ 379.949473][T13846] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 379.949493][T13846] ? __pfx___mutex_lock+0x10/0x10 [ 379.949513][T13846] ? ns_capable+0x89/0xe0 [ 379.949539][T13846] rtnl_newlink+0x167f/0x1bd0 [ 379.949562][T13846] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.949576][T13846] ? do_syscall_64+0x174/0x580 [ 379.949591][T13846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.949636][T13846] ? kasan_quarantine_put+0xbb/0x1f0 [ 379.949672][T13846] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.949701][T13846] ? nlmon_xmit+0xb0/0x100 [ 379.949744][T13846] ? kmem_cache_free+0x182/0x650 [ 379.949767][T13846] ? __lock_acquire+0x683/0x2cf0 [ 379.949787][T13846] ? __dev_queue_xmit+0x29b/0x37f0 [ 379.949810][T13846] ? __local_bh_enable_ip+0xd0/0x130 [ 379.949836][T13846] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.949861][T13846] ? __dev_queue_xmit+0x29b/0x37f0 [ 379.949880][T13846] ? __local_bh_enable_ip+0xd0/0x130 [ 379.949904][T13846] ? __dev_queue_xmit+0x29b/0x37f0 [ 379.949927][T13846] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 379.949983][T13846] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.949998][T13846] rtnetlink_rcv_msg+0x802/0xc00 [ 379.950027][T13846] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 379.950054][T13846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.950080][T13846] ? ref_tracker_free+0x689/0x830 [ 379.950170][T13846] ? __pfx_ref_tracker_free+0x10/0x10 [ 379.950200][T13846] netlink_rcv_skb+0x226/0x4a0 [ 379.950246][T13846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.950275][T13846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.950299][T13846] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.950318][T13846] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.950340][T13846] netlink_unicast+0x7bb/0x940 [ 379.950362][T13846] netlink_sendmsg+0x813/0xb40 [ 379.950406][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.950425][T13846] ? kasan_save_free_info+0x40/0x50 [ 379.950450][T13846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.950519][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.950538][T13846] sock_sendmsg_nosec+0x13a/0x180 [ 379.950584][T13846] ____sys_sendmsg+0x54e/0x850 [ 379.950606][T13846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.950629][T13846] ? import_iovec+0x73/0xa0 [ 379.950649][T13846] ___sys_sendmsg+0x2a5/0x360 [ 379.950668][T13846] ? __lock_acquire+0x683/0x2cf0 [ 379.950687][T13846] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.950708][T13846] ? tomoyo_path_number_perm+0x219/0x5f0 [ 379.950761][T13846] ? __fget_files+0x2a/0x420 [ 379.950784][T13846] ? __fget_files+0x3a2/0x420 [ 379.950806][T13846] __x64_sys_sendmsg+0x1b1/0x290 [ 379.950826][T13846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.950844][T13846] ? kfree+0x4d/0x640 [ 379.950871][T13846] ? __pfx_kcov_ioctl+0x10/0x10 [ 379.950905][T13846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.950923][T13846] do_syscall_64+0x174/0x580 [ 379.950941][T13846] ? clear_bhb_loop+0x40/0x90 [ 379.950962][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.950980][T13846] RIP: 0033:0x7fad5879ce59 [ 379.951000][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.951016][T13846] RSP: 002b:00007fad569d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.951037][T13846] RAX: ffffffffffffffda RBX: 00007fad58a16090 RCX: 00007fad5879ce59 [ 379.951056][T13846] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 379.951068][T13846] RBP: 00007fad58832e6f R08: 0000000000000000 R09: 0000000000000000 [ 379.951079][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.951090][T13846] R13: 00007fad58a16128 R14: 00007fad58a16090 R15: 00007ffed4c1f968 [ 379.951112][T13846] [ 380.767966][T13846] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 380.833674][T13854] syz.4.1940 (13854) used obsolete PPPIOCDETACH ioctl [ 380.900193][T13846] syz.4.1940 (13846) used greatest stack depth: 17832 bytes left [ 380.917877][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.937127][ T12] net_ratelimit: 19 callbacks suppressed [ 380.937157][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 381.056362][ T6019] bond6: (slave dummy0): failed to get link speed/duplex [ 381.166331][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 381.286236][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 381.396380][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 381.516437][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 381.627031][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 381.736268][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 381.846487][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 381.956255][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 386.049951][ T6019] net_ratelimit: 36 callbacks suppressed [ 386.049975][ T6019] bond6: (slave dummy0): failed to get link speed/duplex [ 386.176167][ T6003] bond6: (slave dummy0): failed to get link speed/duplex [ 386.287516][ T6019] bond6: (slave dummy0): failed to get link speed/duplex [ 386.406610][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 386.516479][ T14] bond6: (slave dummy0): failed to get link speed/duplex [ 386.627040][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 386.736618][ T6019] bond6: (slave dummy0): failed to get link speed/duplex [ 386.846455][ T36] bond6: (slave dummy0): failed to get link speed/duplex [ 386.956225][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 387.066358][ T6001] bond6: (slave dummy0): failed to get link speed/duplex