last executing test programs: 4.053594021s ago: executing program 3 (id=1055): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd9, 0xe5, &(0x7f0000000140)="2101bd3d2caf2deefbf7bfb4c6a0b418108dda6985cbfc81b835f70c3a4834563e7d6320d3734225b5106b41fcfe5dbf53230773293ed1ffb3bf6bdb4e2583d456994d207772a8c328b1f2c29bde10c98c299dc7b4e8d123d7aace0a4fa3fdbb6430bd601f86f69bbb648bb880248d8639fbe8bc870e7edd9f0f66d47c649e6cf64aff40fe308889035f01460e3875bdf0bf62f04257f96e45d11c3a3bf844ea1e83b6e45653f9fb9e6fecc7acb706fb4f78d663f2a72633dac6c230bff269f57e39634d59a546251aeb805545eb13635d54f98ca9a7fb5c2a", &(0x7f0000000240)=""/229, 0x2, 0x0, 0xd, 0x9d, &(0x7f0000000340)="9eafde07391f22da726643cae4", &(0x7f0000000380)="d8186cdd8b199feec417e4498f65a36f9acab16e75734d5e22a7d4aec2a0b4c611eaf6951401590b04fd654254c3f6d170404b8a5c75753890ab9dd7debd58a8c201b02abaa3b5a75f01672010066ac33fcbb64e9aec881fe1931c3ac06885b9ad016c05437c3398b4bbce2be8591a6a770e129ff814f84cab16171516c2684371bcd453ae750754f4f3aefcc325e6bdb6168b3af24ee97e57debd3bea", 0x76ebd70ec7b07c56, 0x0, 0xdca}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x8, [@volatile={0x1}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xe, 0x2, 0xe70}]}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0x1, 0x2}, {0xf, 0x6535}, {0x1, 0x3}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x1, 0x2}, {0xe}, {0x2}, {0x3, 0x5}]}, @union={0x7, 0x4, 0x0, 0x5, 0x1, 0x40, [{0x7, 0x4, 0xfff}, {0xe, 0x3, 0x1}, {0xa, 0x5, 0x8}, {0x6, 0x2, 0x8}]}, @fwd={0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x61, 0x30]}}, &(0x7f0000000700)=""/7, 0xf8, 0x7, 0x0, 0xa}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r0, 0x2, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2}], &(0x7f0000000500)='GPL\x00', 0x1ff, 0xa4, &(0x7f0000000540)=""/164, 0x41000, 0x8, '\x00', r1, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0xb, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0xffffffffffffffff, r4, r5], &(0x7f00000008c0)=[{0x5, 0x2, 0xc, 0x5}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x4, 0x1, 0xc4c785f40a6e27e}, {0x1, 0x5, 0x10, 0x5}, {0x0, 0x5, 0x3}], 0x10, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x4000, 0x0) write$tun(r6, &(0x7f0000000a40)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, @remote}}, 0x34) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000ac0)=0xf) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x3}}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x1, 0xd9}], "b1"}, @float={0x6, 0x0, 0x0, 0x10, 0x2}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x7, 0xfff}, {0x5, 0xfffffff7}, {0x7, 0xd}, {0x8, 0x9}, {0x10, 0x10000}, {0xf, 0x2}, {0xa, 0x9}]}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @fwd={0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x4}, {0x6, 0x73}, {0x6, 0x3}, {0xc, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x2b}]}, {0x0, [0x10]}}, &(0x7f0000000cc0)=""/160, 0x10b, 0xa0, 0x0, 0x40}, 0x28) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r8) connect$packet(r5, &(0x7f0000000dc0)={0x11, 0x5, r1, 0x1, 0x9, 0x6, @local}, 0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000e40), r7) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x98, r11, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x2}, 0x803) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000fc0)={0x81, {{0xa, 0x4e21, 0xb, @private1, 0xfc}}}, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001080)={r8}) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0xbc}}, 0x4008000) clock_gettime(0x3, &(0x7f0000001240)) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4015}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000013c0)={'veth0\x00'}) connect$pppoe(r12, &(0x7f0000001400)={0x18, 0x0, {0x3, @local, 'team0\x00'}}, 0x1e) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000001440)=0x6) 3.606784759s ago: executing program 3 (id=1063): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@remote, @remote, @netrom, @bcast, @bcast, @remote, @default, @bcast]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="48e0ffff0f0003050a0016000901000005cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008c0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0xc, 0xb9, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x7, 0x4, 0x1}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000300)={@private2, r4}, 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) 3.055914519s ago: executing program 3 (id=1071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x408435bc18469da3, 0xa, 0xd09a) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8095}, 0x8804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdd) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}}, 0x50) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x4000080) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 3.05325603s ago: executing program 1 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.6933839s ago: executing program 1 (id=1076): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x2b, 0x0, 0xfff3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 2.141950845s ago: executing program 2 (id=1079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf254300000008000300", @ANYRES32=r5], 0x28}}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7, 0x3}]}}, 0x0, 0x26}, 0x20) 2.086379537s ago: executing program 3 (id=1080): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8840) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0xb03, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) 2.00476785s ago: executing program 2 (id=1082): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00018000"], 0x24}}, 0x20008000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x7, @private2, 0xf}}, 0x0, 0x0, 0x31, 0x0, "411d5287b1dde76c222384e8f22f06ab36941eda42aa38794ddcb3793a5a8ee19680ca3a70d848a0befe8aaffdbcb08627556f201a253d041c5e899002e9b4a795201e0409447ca820a036deddf9051f"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x290, r4, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x24c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':)$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'g\'./\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ']}&.%-$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "4691109286ec3ab29132c1bcef8f50b736e66f91e065c7e59df5b5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "14b2a2a74a9e9b7e85de554703a8032b30fbd67cce2bbe6be45ce722f52e30b75be5531bbbe203024a30a10ae838cde5f29630fc844e7d4762d25a2a70d194671841415e773601126fd0fb8c2c729f5d7fc008dc729ba9d1118913d006b28b2ba1fb"}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "d3a39b1306c4740b990dd0ac31f48f5395927d295b9f2b0136e68c7253c9dc2a7ee487b4b235435b3d6c6278699e53c4edb6f94eeaf540758dfcbc37376df08d147725e601eea0d474727915acfd66c0d8588363b34de36208ca7d5c0fc866a6de2fd31f24315a085c285f30307bafd08b189cd1b0017402d727f6e97c326dd987434ad13561eefed04d88e40c58c61f9394de853f0599acab4bedd160e0ac1ef8b10dd5dd6d41c312df880d43941c6e7e6902"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20054004) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2400c098}, 0x4000010) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000180)={{}, {0x77}, 0x107, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="9c0a4abf66e47968095cd0230fdc750846d69c6fb7647fc5d433d0633635ac4b09", 0x21, 0x0, &(0x7f0000000540)={0x2, 0x176, {0x0, 0xc, 0x79, "763f4708b6b9c24a29c91a0ff1428cc5e5111924a2bd677aaec3f82efcd1f637c38f18f21f029e7ca7b6f8904fa23a11ebb33c35af73ce65b37ef110146ab96d71f0433b1d6d981679bf58bf7c842e40dc7475b99ffbd405b29343dbb25d8522808eeb866a6a9dc5fa21e4f00349cd71b15f6aff0b765ebf29", 0xf0, "598cbc523c5a6123665d898b1f014310d2d55a90be548fdb51cf25ae6103d27d2b8328cce1034aa67dfc5e164156a144c40e8043580877d9db66cab40bd5feff92a329be8f20c6c2b0957230fa8d1f088b29d87a66f21b2acf0ae6b35256a92ea7e9db0b0ec311aabd1c70e068ccb26f902c6139378d1a12efda4f3c130292bbf20c8eda3101dd3c9c247230bc2f5b84498fc671d360cf21975d31e816eaabc5e7eeb46de0f1251583b0e2360546434d4aac062a6bbd6abfe30d3322ac4cbd144325e11a51acb5a1db7b182ed47db4d7b6354d3e84f5ea32de072c56f7385054e0c1b17bde5a6cfeef7cc4275a88446e"}, 0xd8, "2cd5f1e192e8171fd8ad357c3979ea0213140181853c86350bf4e610626a658ed732f11fbd4c2b68795c931a0153dac42cd60c75299f82b2b7efdbe2b86c9751b70080176f2e497bceca9741da3f7e540bda0990de78e11954b7fde1773a17fb6686f6a0ec23bae1825dcbfb3b2a7cdeb3c812a38d7729eca48fae9e7940468a94764d18633d312c9c6abd7fb0bb6be7dba66f175112bee5e604f010d6212c7c4ae3d971f10651d4cd49b56072e5f861db919cf08fd57d1bf1e3e68f6638251abd98327188bf3825271cd20f9103b32e256e34c88d8dcfbf"}, 0x25a}) 1.758160125s ago: executing program 1 (id=1084): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async, rerun: 64) r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000300)=0x3) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) (rerun: 64) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000500)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x7}, {0xb}, {0x17, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40800) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004b00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xffffff00, 0xffffff00, 0x7f]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x5c}}, 0x4) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) (async, rerun: 64) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r8 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000340)=0x8) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) 1.672117883s ago: executing program 1 (id=1086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x38e28000) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r6, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200408c0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x400, 0x70bd2d, 0x3, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x38e28000) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r6, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200408c0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) (async) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x400, 0x70bd2d, 0x3, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) 1.394212968s ago: executing program 0 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r5) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r6, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x1, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0xffff, 0xffff}, {0x10df9503e0faab14}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "8c85093ed8d2b31de8387583ab6cb9e6"}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6c}}, @TCA_RATE={0x6, 0x5, {0x9a, 0x40}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES8=r12, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) mmap(&(0x7f0000713000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0xec67a000) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r14, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r15, 0x1, 0x70bd21, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) 1.112506175s ago: executing program 1 (id=1089): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='\v', 0x1}], 0x1, &(0x7f0000000180), 0x0, 0x4014}, 0x2c0408d0) 1.079578601s ago: executing program 2 (id=1090): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x800, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) shutdown(r0, 0x1) (async) sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x800, 0x0, 0x0) (async) 1.037114776s ago: executing program 0 (id=1091): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xac, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x79, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac, {0x4, 0x3}}, 0x2, @random=0x1, 0x8086, @val, @val, @val={0x3, 0x1, 0x4}, @void, @val={0x6, 0x2, 0x6}, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xff, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4}}, @void, [{0xdd, 0x14, "9502e60a2a947c576ebe627541ea6a64cd6df7d3"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8004, 0x400003, 0xc6b, 0x602, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x3}, 0x50) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.036244984s ago: executing program 3 (id=1092): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x207, 0x7, 0x6c, 0x3, 0x0, @remote}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x801}], 0x1, &(0x7f00000010c0)}, 0x9fc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b113a00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r5 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000900)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b0b"}, @fastopen={0x22, 0x12, "f4c8b08f05d6ee1ff82c637ecaa5144f"}]}}}}}}, 0x5e) 1.036004882s ago: executing program 4 (id=1093): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xe4, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xa, 0xffff}, {0x0, 0x1}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf4, 0x7f, 0xb89, 0x0, 0x1, 0x1, 0x2da, 0x9}}, {0x16, 0x2, [0x431c, 0xff00, 0x400, 0x10, 0xf620, 0xfa5, 0x0, 0x0, 0xd]}}, {{0x1c, 0x1, {0x9, 0xd, 0x5, 0x7, 0x0, 0x10001, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x5, 0x2, 0xfe01, 0x2b64, 0x0, 0x0, 0x8, 0x8}}, {0x14, 0x2, [0x1, 0xffff, 0x0, 0x4, 0xfff7, 0x6, 0x7, 0xf]}}, {{0x1c, 0x1, {0x1, 0x9, 0x7f, 0x6571, 0x2, 0x2, 0xf, 0x9}}, {0x16, 0x2, [0x1, 0x3, 0x4, 0x94a4, 0x0, 0x7fff, 0x7, 0x7, 0xd7b]}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40081}, 0x44880) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r4, 0xfffffff9, 0x10}, 0xc) 850.270226ms ago: executing program 0 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000d65b"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000001040)={0x5b0, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x52c, 0x8, 0x0, 0x1, [{0x420, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x3a4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x9}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x42}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "00a4944294d55f56e4a91fe8879b8303f5e69a4bad38aae3047a40ad6d8a9c9b"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "76608e290c21ea6501e67a6b257e342d4c7809ef5aec1e80f5f6694b673b8b87"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a3175ef188fe2e56562501bc278adac5d3868bf9474323799784ab7f02c27ed"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040091) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) 841.433434ms ago: executing program 1 (id=1095): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x7}}, 0x9, 0x10}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000001c0)="9f9553") (async) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000001c0)="9f9553") bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) 836.805752ms ago: executing program 4 (id=1096): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) 670.419559ms ago: executing program 4 (id=1097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018006000100", @ANYRES32=r3, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) 668.863283ms ago: executing program 0 (id=1098): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x19, @none, 0x0, 0x2}, 0xe) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000500)={{r3}, "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"}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) connect$vsock_stream(r4, 0x0, 0x0) (async) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001500)={0x642, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x88f7b000) (async) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r8, 0x89e7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) 664.92269ms ago: executing program 2 (id=1099): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x40000220) 641.071659ms ago: executing program 3 (id=1100): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4146, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) (async) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) 506.280838ms ago: executing program 2 (id=1101): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x70, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40480c0}, 0x80) (async) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0), 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 485.692996ms ago: executing program 4 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) socket(0x2b, 0x80801, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x110, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) 477.438892ms ago: executing program 0 (id=1103): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 245.685611ms ago: executing program 2 (id=1104): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008005, &(0x7f0000e68000)={0x2, 0x4e1e, @local}, 0xfffffffffffffeb1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r6], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x1, @default, @bpq0, 0x6, 'syz0\x00', @default, 0xf44, 0x4, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000500)={0x0, 0x5, @status={[0x60, 0xffffffffffffff72, 0xfffffffffffffffe, 0x0, 0x9, 0x3]}, [0xb, 0x5, 0xffffffffffff8001, 0x1ff, 0x2, 0x71495d02, 0x8, 0x8, 0x4, 0x1e, 0x9, 0x2fa0000000000, 0x7, 0x4, 0x8, 0x80000000, 0x7, 0x8000000000000001, 0xb1, 0x100, 0x596a0e7e, 0x0, 0x9, 0x400, 0x0, 0xa, 0x7, 0x100000000, 0x3, 0x4000000, 0xff, 0x0, 0x344, 0x100000000, 0x14f6, 0x6, 0x7fffffffffffffff, 0x7, 0x2, 0x0, 0x5, 0x5, 0xfff, 0x6, 0x1, 0x80, 0x6, 0x1, 0x6, 0x6, 0x5, 0x6, 0x0, 0x5, 0x1, 0xff, 0x4, 0x8, 0x8, 0x11, 0x5, 0x7ff, 0x0, 0x470]}) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) write(r8, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) 245.249548ms ago: executing program 4 (id=1105): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00df6727bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="80008e040a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r8, &(0x7f0000000380)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r2, @ANYBLOB="006ed725b100677265000c000280060010004e220000bde0df5a272a698a174b0c5c72ac6292a909d2238587732bf22d0c0aa641082cbe4f28a57603faf597d8b4d93dd57f39f0de2531cd48af1031cbdabe63183595917a000f3129dcec8c36d999f80a42053a40b39163ac6b5d58826b80b5e2ca7d744c39474e44571204e632ae1d2e9edd241faaaf5600"/149], 0x38}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00df6727bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="80008e040a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) sendmmsg$inet6(r8, &(0x7f0000000380)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) (async) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r2, @ANYBLOB="006ed725b100677265000c000280060010004e220000bde0df5a272a698a174b0c5c72ac6292a909d2238587732bf22d0c0aa641082cbe4f28a57603faf597d8b4d93dd57f39f0de2531cd48af1031cbdabe63183595917a000f3129dcec8c36d999f80a42053a40b39163ac6b5d58826b80b5e2ca7d744c39474e44571204e632ae1d2e9edd241faaaf5600"/149], 0x38}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) (async) 151.469032ms ago: executing program 0 (id=1106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_hsr\x00', 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000180)="bc33f8de6b49e05c05d297ca8353d69f6ed0cc56194da8a84b8773d6b92c4cb549907a860b528ead215244da09bc312a87a387952e831ff3413c891eca196be2340c112ade5e5b9b5bd3953b78cb4bad1996d2c12e6dfe62acc6a16705d5022c2a49f3", 0x63) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_hsr\x00', 0x4}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000180)="bc33f8de6b49e05c05d297ca8353d69f6ed0cc56194da8a84b8773d6b92c4cb549907a860b528ead215244da09bc312a87a387952e831ff3413c891eca196be2340c112ade5e5b9b5bd3953b78cb4bad1996d2c12e6dfe62acc6a16705d5022c2a49f3", 0x63) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) 0s ago: executing program 4 (id=1107): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 80.654659][ T5818] cgroup: Unknown subsys name 'net' [ 80.771023][ T5818] cgroup: Unknown subsys name 'cpuset' [ 80.780691][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.507121][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.267270][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.279646][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.287541][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.304632][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.313721][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.322037][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.328927][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.331965][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.337201][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.345221][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.351199][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.358595][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.365301][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.378993][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.407123][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.409821][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.414605][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.429435][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.442329][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.444978][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.450003][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.469899][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.477365][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.489794][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.497996][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.170526][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 86.243308][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.312699][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.464827][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.482618][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.608745][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.615989][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.624199][ T5835] bridge_slave_0: entered allmulticast mode [ 86.631741][ T5835] bridge_slave_0: entered promiscuous mode [ 86.645937][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.653183][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.660740][ T5830] bridge_slave_0: entered allmulticast mode [ 86.668111][ T5830] bridge_slave_0: entered promiscuous mode [ 86.693823][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.701297][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.708991][ T5835] bridge_slave_1: entered allmulticast mode [ 86.716220][ T5835] bridge_slave_1: entered promiscuous mode [ 86.735824][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.743718][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.751186][ T5830] bridge_slave_1: entered allmulticast mode [ 86.758535][ T5830] bridge_slave_1: entered promiscuous mode [ 86.888038][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.895214][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.903455][ T5832] bridge_slave_0: entered allmulticast mode [ 86.911224][ T5832] bridge_slave_0: entered promiscuous mode [ 86.923670][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.947309][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.954488][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.962063][ T5836] bridge_slave_0: entered allmulticast mode [ 86.969845][ T5836] bridge_slave_0: entered promiscuous mode [ 86.980766][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.990857][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.998446][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.005638][ T5832] bridge_slave_1: entered allmulticast mode [ 87.013275][ T5832] bridge_slave_1: entered promiscuous mode [ 87.022918][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.062445][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.069882][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.077340][ T5836] bridge_slave_1: entered allmulticast mode [ 87.084680][ T5836] bridge_slave_1: entered promiscuous mode [ 87.093772][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.175565][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.184464][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.192953][ T5828] bridge_slave_0: entered allmulticast mode [ 87.202021][ T5828] bridge_slave_0: entered promiscuous mode [ 87.212019][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.219631][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.227175][ T5828] bridge_slave_1: entered allmulticast mode [ 87.235265][ T5828] bridge_slave_1: entered promiscuous mode [ 87.282264][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.294994][ T5830] team0: Port device team_slave_0 added [ 87.305751][ T5830] team0: Port device team_slave_1 added [ 87.351616][ T5835] team0: Port device team_slave_0 added [ 87.360929][ T5835] team0: Port device team_slave_1 added [ 87.371729][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.419808][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.429953][ T5844] Bluetooth: hci0: command tx timeout [ 87.492414][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.505906][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.515562][ T5844] Bluetooth: hci1: command tx timeout [ 87.521021][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.551982][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.559148][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.586285][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.597052][ T5844] Bluetooth: hci2: command tx timeout [ 87.597166][ T5831] Bluetooth: hci4: command tx timeout [ 87.602679][ T5844] Bluetooth: hci3: command tx timeout [ 87.644124][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.651662][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.678050][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.691060][ T5832] team0: Port device team_slave_0 added [ 87.699721][ T5832] team0: Port device team_slave_1 added [ 87.707831][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.714802][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.740821][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.777906][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.784919][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.811172][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.844231][ T5828] team0: Port device team_slave_0 added [ 87.852539][ T5836] team0: Port device team_slave_0 added [ 87.866455][ T5836] team0: Port device team_slave_1 added [ 87.886733][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.893866][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.920169][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.932970][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.940101][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.966163][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.979289][ T5828] team0: Port device team_slave_1 added [ 88.026179][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.033346][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.060008][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.127504][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.134498][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.160625][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.185151][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.192341][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.218462][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.231166][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.238360][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.264463][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.281574][ T5830] hsr_slave_0: entered promiscuous mode [ 88.288400][ T5830] hsr_slave_1: entered promiscuous mode [ 88.358541][ T5835] hsr_slave_0: entered promiscuous mode [ 88.365127][ T5835] hsr_slave_1: entered promiscuous mode [ 88.372111][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.378038][ T5835] Cannot create hsr debugfs directory [ 88.446696][ T5828] hsr_slave_0: entered promiscuous mode [ 88.453607][ T5828] hsr_slave_1: entered promiscuous mode [ 88.460252][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 88.466002][ T5828] Cannot create hsr debugfs directory [ 88.480867][ T5832] hsr_slave_0: entered promiscuous mode [ 88.488204][ T5832] hsr_slave_1: entered promiscuous mode [ 88.494386][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 88.500377][ T5832] Cannot create hsr debugfs directory [ 88.563332][ T5836] hsr_slave_0: entered promiscuous mode [ 88.570095][ T5836] hsr_slave_1: entered promiscuous mode [ 88.576323][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 88.583339][ T5836] Cannot create hsr debugfs directory [ 89.145436][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.161135][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.172293][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.192648][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.258905][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.273559][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.289655][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.313608][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.404999][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.417688][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.431397][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.442470][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.507124][ T5844] Bluetooth: hci0: command tx timeout [ 89.544386][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.589487][ T5844] Bluetooth: hci1: command tx timeout [ 89.599878][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.636381][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.644936][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.657467][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.667524][ T52] Bluetooth: hci3: command tx timeout [ 89.677423][ T5844] Bluetooth: hci4: command tx timeout [ 89.682880][ T5844] Bluetooth: hci2: command tx timeout [ 89.705867][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.722725][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.730231][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.789207][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.796376][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.830205][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.838400][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.851599][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.864570][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.876176][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.955403][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.985130][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.992346][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.010273][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.017495][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.031735][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.106679][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.144253][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.151454][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.228963][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.236170][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.342870][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.431717][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.451501][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.506239][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.513448][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.546145][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.562200][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.569605][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.583515][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.648926][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.656153][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.686353][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.693607][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.748671][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.859340][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.888347][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.021528][ T5835] veth0_vlan: entered promiscuous mode [ 91.041111][ T5830] veth0_vlan: entered promiscuous mode [ 91.100686][ T5835] veth1_vlan: entered promiscuous mode [ 91.125253][ T5830] veth1_vlan: entered promiscuous mode [ 91.149219][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.261468][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.283222][ T5830] veth0_macvtap: entered promiscuous mode [ 91.295757][ T5828] veth0_vlan: entered promiscuous mode [ 91.313372][ T5830] veth1_macvtap: entered promiscuous mode [ 91.334837][ T5835] veth0_macvtap: entered promiscuous mode [ 91.353516][ T5828] veth1_vlan: entered promiscuous mode [ 91.365619][ T5835] veth1_macvtap: entered promiscuous mode [ 91.389270][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425940][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.459902][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.474951][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.489283][ T1310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.501047][ T1310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.526108][ T1310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537430][ T1310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561694][ T5836] veth0_vlan: entered promiscuous mode [ 91.585646][ T5828] veth0_macvtap: entered promiscuous mode [ 91.588442][ T5844] Bluetooth: hci0: command tx timeout [ 91.605654][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.625145][ T5828] veth1_macvtap: entered promiscuous mode [ 91.639205][ T5836] veth1_vlan: entered promiscuous mode [ 91.669691][ T5844] Bluetooth: hci1: command tx timeout [ 91.686076][ T1310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737917][ T1310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747341][ T5844] Bluetooth: hci2: command tx timeout [ 91.752797][ T5844] Bluetooth: hci4: command tx timeout [ 91.755366][ T1310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.758948][ T52] Bluetooth: hci3: command tx timeout [ 91.774820][ T1310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793302][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.836584][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.932108][ T1310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.946419][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.955153][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.969273][ T5836] veth0_macvtap: entered promiscuous mode [ 91.989563][ T1310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.999501][ T1310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.020722][ T5836] veth1_macvtap: entered promiscuous mode [ 92.037241][ T1310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085148][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.097848][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.146593][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.156195][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.162795][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.185351][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.217684][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.227631][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.261345][ T1310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.272510][ T1310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283829][ T1310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317717][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.325573][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.335674][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.364458][ T1310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.379526][ T5832] veth0_vlan: entered promiscuous mode [ 92.495868][ T5832] veth1_vlan: entered promiscuous mode [ 92.499125][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.527362][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.683657][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.726658][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.801766][ T5832] veth0_macvtap: entered promiscuous mode [ 92.860335][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 92.872162][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.886136][ T5832] veth1_macvtap: entered promiscuous mode [ 92.886211][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.900235][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.004520][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.072172][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.150954][ T3486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173793][ T3486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.238145][ T3486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.259300][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.312046][ T5982] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 93.539425][ T5993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12'. [ 93.667689][ T5844] Bluetooth: hci0: command tx timeout [ 93.693818][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.741844][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.747091][ T5844] Bluetooth: hci1: command tx timeout [ 93.784085][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 93.830108][ T5844] Bluetooth: hci4: command tx timeout [ 93.837513][ T5844] Bluetooth: hci2: command tx timeout [ 93.843107][ T5844] Bluetooth: hci3: command tx timeout [ 93.860916][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.928757][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.003513][ T6017] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 94.039661][ T6017] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 94.123157][ T6021] netlink: 'syz.3.18': attribute type 16 has an invalid length. [ 94.154596][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.164093][ T6021] netlink: 'syz.3.18': attribute type 17 has an invalid length. [ 94.175717][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.195179][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 94.255413][ T6020] team0: Device wireguard0 is of different type [ 94.325500][ T6021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.461247][ T6027] netlink: 'syz.0.21': attribute type 12 has an invalid length. [ 94.475034][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21'. [ 94.666321][ T6034] Bluetooth: MGMT ver 1.23 [ 94.682566][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.986171][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 95.065855][ T6054] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.085965][ T6052] vxcan2: entered allmulticast mode [ 95.103837][ T6054] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.115707][ T6058] Zero length message leads to an empty skb [ 95.159222][ T6056] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 95.182803][ T6059] netlink: 168 bytes leftover after parsing attributes in process `syz.2.28'. [ 95.439172][ T6067] bond1 (unregistering): Released all slaves [ 95.506305][ T6077] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.35'. [ 95.831156][ T6088] warning: `syz.4.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.900038][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 96.256522][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.301447][ T1340] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.322627][ T1340] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.340499][ T1340] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.362687][ T1340] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.504830][ T1340] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.517942][ T6122] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 96.530145][ T1340] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.557595][ T1340] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.578888][ T1340] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.731936][ T6128] openvswitch: netlink: IP tunnel dst address not specified [ 97.010432][ T6136] macsec1: entered promiscuous mode [ 97.357069][ T24] cfg80211: failed to load regulatory.db [ 97.671448][ T6172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.920883][ T6180] netlink: 'syz.1.70': attribute type 12 has an invalid length. [ 97.948195][ T6180] __nla_validate_parse: 8 callbacks suppressed [ 97.948216][ T6180] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.70'. [ 97.966359][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 97.998401][ T6185] openvswitch: netlink: Flow key attr not present in new flow. [ 98.097570][ T6187] netlink: 2 bytes leftover after parsing attributes in process `syz.1.72'. [ 98.340408][ T6199] netlink: 64 bytes leftover after parsing attributes in process `syz.1.76'. [ 98.393098][ T6199] tipc: Started in network mode [ 98.398122][ T6199] tipc: Node identity 2e9ad0ffa763, cluster identity 4711 [ 98.405686][ T6199] tipc: Enabled bearer , priority 0 [ 98.429477][ T6199] syzkaller0: entered promiscuous mode [ 98.435022][ T6199] syzkaller0: entered allmulticast mode [ 98.479353][ T6199] syzkaller0: mtu less than device minimum [ 98.486693][ T6198] tipc: Resetting bearer [ 98.520216][ T6198] tipc: Disabling bearer [ 98.812566][ T6217] syzkaller0: entered allmulticast mode [ 98.875851][ T6219] ip6t_srh: unknown srh invflags 4000 [ 99.093267][ T6231] netlink: 'syz.3.88': attribute type 11 has an invalid length. [ 99.133987][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.88'. [ 99.207945][ T6237] x_tables: duplicate underflow at hook 2 [ 99.294851][ T6240] tc_dump_action: action bad kind [ 99.357663][ T6240] netlink: 'syz.3.91': attribute type 63 has an invalid length. [ 99.495764][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.94'. [ 99.547877][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 99.701127][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 99.813722][ T6265] tipc: Started in network mode [ 99.829358][ T6265] tipc: Node identity e21f59a0ac58, cluster identity 4711 [ 99.847982][ T6265] tipc: Enabled bearer , priority 0 [ 99.863965][ T6265] syzkaller0: entered promiscuous mode [ 99.885644][ T6265] syzkaller0: entered allmulticast mode [ 99.928506][ T6273] netlink: 'syz.1.101': attribute type 13 has an invalid length. [ 100.009221][ T6273] veth0_macvtap: left promiscuous mode [ 100.018074][ T6273] macvtap0: entered allmulticast mode [ 100.036657][ T6273] macvtap0: refused to change device tx_queue_len [ 100.055068][ T6281] netlink: 'syz.2.103': attribute type 6 has an invalid length. [ 100.084230][ T6280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.102'. [ 100.125529][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.102'. [ 100.159141][ T6264] tipc: Resetting bearer [ 100.214010][ T6264] tipc: Disabling bearer [ 100.422994][ T6298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.108249][ T6325] : entered promiscuous mode [ 101.295879][ T6343] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.469872][ T6347] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 101.581245][ T6355] Cannot find add_set index 2 as target [ 101.676449][ T6357] vlan2: entered allmulticast mode [ 101.693700][ T6357] : entered allmulticast mode [ 101.931412][ T6366] syz.3.126 uses obsolete (PF_INET,SOCK_PACKET) [ 102.621522][ T6383] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 102.631267][ T6383] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 102.819622][ T6397] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 102.861975][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.909489][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.917095][ T6397] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.932348][ T6397] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 102.965704][ T6402] veth3: entered promiscuous mode [ 102.974019][ T6402] bond1: (slave veth3): Enslaving as an active interface with a down link [ 102.991649][ T6403] vlan2: entered allmulticast mode [ 102.999340][ T6403] bond1: entered allmulticast mode [ 103.038751][ T6397] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.240137][ T6410] can: request_module (can-proto-0) failed. [ 103.433852][ T6384] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 103.455541][ T6384] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 103.646543][ T6428] syzkaller0: entered promiscuous mode [ 103.652878][ T6428] syzkaller0: entered allmulticast mode [ 103.692626][ T6427] tipc: Started in network mode [ 103.701405][ T6427] tipc: Node identity 12d3e69d628, cluster identity 4711 [ 103.724698][ T6427] tipc: Enabled bearer , priority 0 [ 103.734628][ T6421] tipc: Resetting bearer [ 103.786700][ T6438] netlink: 'syz.1.146': attribute type 30 has an invalid length. [ 103.797554][ T6421] tipc: Disabling bearer [ 103.802459][ T6438] __nla_validate_parse: 11 callbacks suppressed [ 103.802494][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.890463][ T6438] netlink: 'syz.1.146': attribute type 30 has an invalid length. [ 103.904932][ T6440] syzkaller0: entered promiscuous mode [ 103.920974][ T6440] syzkaller0: entered allmulticast mode [ 103.936970][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 104.229590][ T6462] openvswitch: netlink: Message has 592 unknown bytes. [ 104.267258][ T6462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.350838][ T6455] v: renamed from vlan0 [ 104.627217][ T5844] Bluetooth: hci4: command tx timeout [ 104.694114][ T6478] xt_l2tp: v2 doesn't support IP mode [ 104.726021][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 104.835296][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 105.008131][ T6495] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 105.041068][ T6495] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.159893][ T6502] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 105.235534][ T6502] netlink: 100 bytes leftover after parsing attributes in process `syz.1.162'. [ 105.367325][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 105.388482][ T6502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.620729][ T6523] tipc: Enabled bearer , priority 0 [ 105.628377][ T6523] syzkaller0: entered promiscuous mode [ 105.633900][ T6523] syzkaller0: entered allmulticast mode [ 105.678213][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 105.694453][ T6534] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 105.722541][ T6529] vxcan1: mtu less than device minimum [ 105.739457][ T6522] tipc: Resetting bearer [ 105.788496][ T6522] tipc: Disabling bearer [ 106.168850][ T6551] vlan1: entered allmulticast mode [ 106.174147][ T6551] veth0_vlan: entered allmulticast mode [ 106.267234][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.318630][ T6557] netlink: 288 bytes leftover after parsing attributes in process `syz.0.175'. [ 106.445529][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 106.483840][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 106.842174][ T6579] netlink: 'syz.2.179': attribute type 4 has an invalid length. [ 107.044442][ T6591] syzkaller1: entered promiscuous mode [ 107.056896][ T6591] syzkaller1: entered allmulticast mode [ 107.262050][ T6600] syz_tun: entered allmulticast mode [ 107.297042][ T6600] dvmrp8: entered allmulticast mode [ 107.356258][ T6599] syz_tun: left allmulticast mode [ 107.513335][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.521260][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.989530][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.008907][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.150599][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.196882][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.215354][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.233280][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.255331][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.275097][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.375653][ T6645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.420381][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.430352][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.614488][ T6658] netlink: 'syz.2.200': attribute type 21 has an invalid length. [ 108.647021][ T6658] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.727930][ T6658] Bluetooth: MGMT ver 1.23 [ 109.055611][ T6683] Bluetooth: MGMT ver 1.23 [ 109.273956][ T6693] bond1: Unable to set down delay as MII monitoring is disabled [ 109.308994][ T6693] bond1 (unregistering): Released all slaves [ 109.422971][ T6707] __nla_validate_parse: 1 callbacks suppressed [ 109.422989][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 109.580279][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 109.959559][ T6727] tipc: Started in network mode [ 109.964504][ T6727] tipc: Node identity 02ad53f497ca, cluster identity 4711 [ 109.990934][ T6727] tipc: Enabled bearer , priority 0 [ 110.014149][ T6727] syzkaller0: entered promiscuous mode [ 110.020957][ T6727] syzkaller0: entered allmulticast mode [ 110.045138][ T6727] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 110.101215][ T6727] tipc: Resetting bearer [ 110.137452][ T6726] tipc: Resetting bearer [ 110.184265][ T6726] tipc: Disabling bearer [ 110.637155][ T6764] tc_dump_action: action bad kind [ 111.188877][ T6792] tc_dump_action: action bad kind [ 111.269111][ T6798] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 111.304782][ T6798] bond1: entered promiscuous mode [ 111.310619][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.451732][ T6803] bond1: (slave bridge1): making interface the new active one [ 111.459601][ T6803] bridge1: entered promiscuous mode [ 111.473952][ T6803] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.226120][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.242842][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.250180][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.492872][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.506345][ T6854] netlink: 48 bytes leftover after parsing attributes in process `syz.2.256'. [ 112.617168][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.654110][ T6864] netlink: 156 bytes leftover after parsing attributes in process `syz.3.261'. [ 112.677314][ T6866] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 112.701384][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 112.719002][ T6866] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 112.814559][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.873856][ T6871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.884528][ T6871] bond2: (slave bond3): making interface the new active one [ 112.892030][ T6879] netlink: 288 bytes leftover after parsing attributes in process `syz.4.265'. [ 112.903412][ T6871] bond2: (slave bond3): Enslaving as an active interface with an up link [ 112.921723][ T6866] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.934228][ T6866] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 113.010958][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'. [ 113.033208][ T6883] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.266'. [ 113.592758][ T5947] IPVS: starting estimator thread 0... [ 113.655488][ T6919] openvswitch: netlink: Message has 4 unknown bytes. [ 113.710246][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.277'. [ 113.727243][ T6917] IPVS: using max 28 ests per chain, 67200 per kthread [ 114.546480][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.566912][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.675395][ T6975] gretap0: entered promiscuous mode [ 114.686956][ T6975] vlan2: entered promiscuous mode [ 114.938970][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 114.978579][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 115.526419][ T7022] sctp: [Deprecated]: syz.1.307 (pid 7022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.526419][ T7022] Use struct sctp_sack_info instead [ 116.134413][ T7059] netlink: 'syz.3.318': attribute type 5 has an invalid length. [ 116.244010][ T7065] batadv_slave_1: entered promiscuous mode [ 116.297629][ T7063] batadv_slave_1: left promiscuous mode [ 116.387555][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 116.558569][ T7082] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 116.698671][ T7091] netlink: 228 bytes leftover after parsing attributes in process `syz.4.331'. [ 116.719025][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 116.741627][ T7091] netlink: 80 bytes leftover after parsing attributes in process `syz.4.331'. [ 116.807413][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 116.923864][ T7102] syzkaller0: entered promiscuous mode [ 116.955390][ T7102] syzkaller0: entered allmulticast mode [ 117.051886][ T7106] tipc: Enabled bearer , priority 0 [ 117.067875][ T7106] syzkaller0: entered promiscuous mode [ 117.073444][ T7106] syzkaller0: entered allmulticast mode [ 117.136084][ T7106] tipc: Resetting bearer [ 117.203821][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 117.255991][ T7105] tipc: Resetting bearer [ 117.271414][ T7105] tipc: Disabling bearer [ 117.282826][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.339'. [ 118.002494][ T7157] netlink: 'syz.3.353': attribute type 8 has an invalid length. [ 118.389835][ T7180] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 119.225703][ T7230] netlink: 'syz.4.374': attribute type 3 has an invalid length. [ 119.234978][ T7230] netlink: 'syz.4.374': attribute type 2 has an invalid length. [ 119.430188][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 119.474193][ T7240] nbd: illegal input index 2958377 [ 119.488808][ T7238] nbd: illegal input index 2958377 [ 119.616694][ T7250] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 119.634741][ T7250] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 119.657141][ T7249] tipc: Enabled bearer , priority 0 [ 119.740096][ T7256] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 119.757047][ T7256] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 120.226297][ T7281] 8021q: VLANs not supported on ip6_vti0 [ 120.255607][ T7287] trusted_key: syz.1.391 sent an empty control message without MSG_MORE. [ 120.735347][ T7307] bond0: entered promiscuous mode [ 120.741118][ T7307] bond_slave_0: entered promiscuous mode [ 120.753292][ T7307] bond_slave_1: entered promiscuous mode [ 120.767194][ T7307] batadv0: entered promiscuous mode [ 120.781846][ T7307] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 120.793810][ T7307] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 120.795901][ T7313] __nla_validate_parse: 39 callbacks suppressed [ 120.795921][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 120.835838][ T5995] tipc: Node number set to 2314850559 [ 120.893739][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.401'. [ 121.098847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804725f000: rx timeout, send abort [ 121.143010][ T7327] netlink: 196 bytes leftover after parsing attributes in process `syz.1.406'. [ 121.181415][ T7327] syzkaller1: entered promiscuous mode [ 121.193055][ T7327] syzkaller1: entered allmulticast mode [ 121.244603][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.303919][ T7327] bond0: (slave rose0): Enslaving as an active interface with an up link [ 121.599608][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804725ec00: rx timeout, send abort [ 121.608079][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804725f000: abort rx timeout. Force session deactivation [ 122.107936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804725ec00: abort rx timeout. Force session deactivation [ 122.395855][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 122.427706][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 122.607177][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 122.962710][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 123.077093][ T7415] delete_channel: no stack [ 123.114954][ T7425] delete_channel: no stack [ 123.365311][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 123.540919][ T7443] openvswitch: netlink: Message has 2712 unknown bytes. [ 123.636472][ T7448] pimreg: entered allmulticast mode [ 123.673391][ T7455] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 123.684770][ T7455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.438'. [ 123.726357][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.782342][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 123.880030][ T3538] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.880114][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.897387][ T3538] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.897436][ T3538] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.897473][ T3538] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.952720][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.961040][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.969372][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.977662][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 123.985955][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 124.001467][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 124.021957][ T7456] netlink: 'syz.2.442': attribute type 14 has an invalid length. [ 124.749159][ T7508] Illegal XDP return value 4294967289 on prog (id 105) dev N/A, expect packet loss! [ 124.789354][ T7510] : entered promiscuous mode [ 125.765059][ T7559] openvswitch: netlink: IP tunnel dst address not specified [ 125.835693][ T7563] __nla_validate_parse: 69 callbacks suppressed [ 125.835714][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 126.013579][ T7573] netlink: 152 bytes leftover after parsing attributes in process `syz.1.469'. [ 126.263250][ T7573] netlink: 80 bytes leftover after parsing attributes in process `syz.1.469'. [ 126.777686][ T7607] dvmrp0: entered allmulticast mode [ 126.831310][ T7614] tipc: Started in network mode [ 126.855534][ T7614] tipc: Node identity 1e8d50e2188f, cluster identity 4711 [ 126.886183][ T7614] tipc: Enabled bearer , priority 0 [ 126.919872][ T7615] syzkaller0: entered promiscuous mode [ 126.943005][ T7615] syzkaller0: entered allmulticast mode [ 127.187569][ T7615] tipc: Resetting bearer [ 127.279992][ T7615] tipc: Disabling bearer [ 127.295089][ T7640] netlink: 132 bytes leftover after parsing attributes in process `syz.4.482'. [ 127.348476][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'. [ 127.560552][ T7649] tipc: Enabling of bearer rejected, already enabled [ 127.576531][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 127.605281][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 127.657387][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 127.730561][ T7659] tipc: Resetting bearer [ 127.920722][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'. [ 127.941816][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 128.143890][ T7680] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.150709][ T7677] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.548737][ T7702] vxcan2: entered allmulticast mode [ 128.644842][ T7704] batman_adv: batadv0: Adding interface: dummy0 [ 128.673464][ T7704] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.762415][ T7704] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 129.014153][ T7721] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 129.033098][ T7721] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.051758][ T7721] gretap1: entered promiscuous mode [ 129.058672][ T7721] gretap1: entered allmulticast mode [ 129.174510][ T7734] vxcan1: tx address claim with different name [ 129.285656][ T7725] syzkaller0: entered promiscuous mode [ 129.320719][ T7725] syzkaller0: entered allmulticast mode [ 129.359522][ T7738] tc_dump_action: action bad kind [ 129.596137][ T7756] validate_nla: 59 callbacks suppressed [ 129.596156][ T7756] netlink: 'syz.1.513': attribute type 6 has an invalid length. [ 129.648485][ T7758] netlink: 'syz.2.514': attribute type 11 has an invalid length. [ 130.918644][ T7781] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 131.051857][ T7773] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 131.071993][ T7773] bond2 (unregistering): Released all slaves [ 131.182652][ T7795] __nla_validate_parse: 7 callbacks suppressed [ 131.182684][ T7795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 131.387454][ T7802] netlink: 'syz.3.523': attribute type 11 has an invalid length. [ 131.425770][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.523'. [ 131.610628][ T7813] lo speed is unknown, defaulting to 1000 [ 131.670361][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 131.716948][ T7813] lo speed is unknown, defaulting to 1000 [ 131.742418][ T7813] lo speed is unknown, defaulting to 1000 [ 131.791330][ T7822] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 131.803082][ T7826] netlink: 'syz.4.528': attribute type 2 has an invalid length. [ 131.956613][ T7822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.030193][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 132.192097][ T7825] veth5: entered promiscuous mode [ 132.308870][ T7837] netlink: 284 bytes leftover after parsing attributes in process `syz.1.532'. [ 132.555083][ T7813] infiniband sz1: set active [ 132.561663][ T24] lo speed is unknown, defaulting to 1000 [ 132.579437][ T7813] infiniband sz1: added lo [ 132.601814][ T7813] sz1: rxe_create_cq: returned err = -12 [ 132.613094][ T7843] netlink: 'syz.1.535': attribute type 16 has an invalid length. [ 132.628939][ T7813] infiniband sz1: Couldn't create ib_mad CQ [ 132.635300][ T7813] infiniband sz1: Couldn't open port 1 [ 132.643278][ T7843] netlink: 'syz.1.535': attribute type 17 has an invalid length. [ 132.737036][ T7843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.788446][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 132.861609][ T7813] RDS/IB: sz1: added [ 132.884668][ T7813] smc: adding ib device sz1 with port count 1 [ 132.905014][ T7813] smc: ib device sz1 port 1 has no pnetid [ 132.912804][ T7858] tunl0: entered promiscuous mode [ 132.957351][ T7858] netlink: 'syz.4.534': attribute type 3 has an invalid length. [ 132.991342][ T7858] netlink: 9 bytes leftover after parsing attributes in process `syz.4.534'. [ 133.024951][ T918] lo speed is unknown, defaulting to 1000 [ 133.044687][ T7813] lo speed is unknown, defaulting to 1000 [ 133.103658][ T7867] netlink: 'syz.1.539': attribute type 21 has an invalid length. [ 133.125687][ T7867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.539'. [ 133.258254][ T7867] netlink: 3 bytes leftover after parsing attributes in process `syz.1.539'. [ 133.276116][ T7871] netlink: 'syz.4.541': attribute type 21 has an invalid length. [ 133.292484][ T7871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.541'. [ 133.849750][ T7894] bond0: entered promiscuous mode [ 133.895353][ T7894] bond_slave_0: entered promiscuous mode [ 133.915083][ T7894] bond_slave_1: entered promiscuous mode [ 133.948529][ T7894] batadv0: entered promiscuous mode [ 133.969594][ T7894] debugfs: 'hsr1' already exists in 'hsr' [ 134.003319][ T7894] Cannot create hsr debugfs directory [ 134.023076][ T7894] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 134.059376][ T7813] lo speed is unknown, defaulting to 1000 [ 134.217959][ T7912] sctp: [Deprecated]: syz.0.549 (pid 7912) Use of int in max_burst socket option. [ 134.217959][ T7912] Use struct sctp_assoc_value instead [ 134.848344][ T7813] lo speed is unknown, defaulting to 1000 [ 135.115803][ T7952] raw_sendmsg: syz.1.559 forgot to set AF_INET. Fix it! [ 135.579839][ T7975] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 135.631501][ T7978] Cannot find set identified by id 1 to match [ 135.943789][ T7983] bond1: Unable to set up delay as MII monitoring is disabled [ 135.991041][ T7983] bond1 (unregistering): Released all slaves [ 136.094298][ T7813] lo speed is unknown, defaulting to 1000 [ 136.381354][ T8019] __nla_validate_parse: 5 callbacks suppressed [ 136.381372][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.573'. [ 136.421581][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.573'. [ 136.809404][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.866276][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.887651][ T8040] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.917398][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.927864][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 136.953789][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.964269][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.973622][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 136.991443][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 137.002404][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 137.010800][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 137.021049][ T8037] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 137.036872][ T7813] lo speed is unknown, defaulting to 1000 [ 137.273022][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 137.514400][ T8060] can: request_module (can-proto-0) failed. [ 137.553840][ T8070] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.580568][ T8073] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.587'. [ 137.692072][ T8078] x_tables: duplicate underflow at hook 1 [ 137.825781][ T8085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.590'. [ 138.027651][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 138.314762][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.321337][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.322661][ T8109] netlink: 56 bytes leftover after parsing attributes in process `syz.4.594'. [ 138.947315][ T5844] Bluetooth: hci1: command tx timeout [ 140.256191][ T8103] bridge5: entered promiscuous mode [ 140.262742][ T8103] bridge5: entered allmulticast mode [ 140.271418][ T8103] team0: Port device bridge5 added [ 140.518823][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.599'. [ 140.630317][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.602'. [ 141.255809][ T8180] ipt_rpfilter: unknown options [ 141.442043][ T8187] __nla_validate_parse: 10 callbacks suppressed [ 141.442064][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 141.657215][ T8196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.682864][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.718122][ T8200] bridge_slave_1: left allmulticast mode [ 141.723859][ T8200] bridge_slave_1: left promiscuous mode [ 141.740751][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.787800][ T8200] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 142.013856][ T8217] netlink: 'syz.3.623': attribute type 11 has an invalid length. [ 142.056532][ T8222] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.625'. [ 142.068794][ T8217] netlink: 224 bytes leftover after parsing attributes in process `syz.3.623'. [ 142.277435][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 142.347769][ T8241] IPv6: NLM_F_REPLACE set, but no existing node found! [ 142.583797][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 142.647366][ T8256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.745797][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 142.877948][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 143.175789][ T8281] Cannot find add_set index 2 as target [ 143.193179][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.642'. [ 143.195560][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 143.217808][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 143.349677][ T8287] openvswitch: netlink: Flow key attr not present in new flow. [ 143.530777][ T8307] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.605234][ T8308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.769697][ T918] lo speed is unknown, defaulting to 1000 [ 144.348328][ T8348] 8021q: VLANs not supported on ip_vti0 [ 144.496476][ T8357] Cannot find del_set index 0 as target [ 144.590966][ T8363] validate_nla: 44 callbacks suppressed [ 144.590986][ T8363] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 144.857879][ T8372] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 144.883014][ T8376] netlink: 'syz.1.663': attribute type 12 has an invalid length. [ 144.897367][ T8372] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 145.105995][ T8390] vlan2: entered promiscuous mode [ 145.111585][ T8390] vlan2: entered allmulticast mode [ 145.117435][ T8390] hsr_slave_1: entered allmulticast mode [ 145.248796][ T8397] delete_channel: no stack [ 145.851396][ T8434] : renamed from hsr0 [ 145.939772][ T8437] netlink: 'syz.4.684': attribute type 29 has an invalid length. [ 145.963878][ T8440] ipt_ECN: cannot use operation on non-tcp rule [ 146.254880][ T8457] netlink: 'syz.3.690': attribute type 33 has an invalid length. [ 146.280705][ T8457] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 146.484753][ T8478] __nla_validate_parse: 19 callbacks suppressed [ 146.484773][ T8478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.695'. [ 146.532773][ T8478] unsupported nlmsg_type 40 [ 146.561406][ T8484] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.696'. [ 146.900733][ T8509] netlink: 52 bytes leftover after parsing attributes in process `syz.0.702'. [ 146.920085][ T8508] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 146.930266][ T8511] netlink: 72 bytes leftover after parsing attributes in process `syz.2.704'. [ 146.977679][ T8502] veth3: entered promiscuous mode [ 147.111595][ T8508] veth3: entered promiscuous mode [ 147.159941][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 147.192303][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 147.203923][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 147.551518][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 147.572079][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 147.754531][ T8562] netlink: zone id is out of range [ 147.914210][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 148.190283][ T8580] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 148.245422][ T8584] netlink: 'syz.2.724': attribute type 3 has an invalid length. [ 148.513030][ T8605] Cannot find set identified by id 1 to match [ 149.260206][ T8615] sctp: [Deprecated]: syz.2.731 (pid 8615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.260206][ T8615] Use struct sctp_sack_info instead [ 149.603373][ T8637] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 150.306073][ T8656] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 150.450987][ T8672] syzkaller0: entered promiscuous mode [ 150.456550][ T8672] syzkaller0: entered allmulticast mode [ 150.529194][ T8678] validate_nla: 5 callbacks suppressed [ 150.529218][ T8678] netlink: 'syz.1.750': attribute type 29 has an invalid length. [ 150.552140][ T8682] netlink: 'syz.1.750': attribute type 29 has an invalid length. [ 150.581363][ T8678] unsupported nla_type 58 [ 150.762748][ T8692] sctp: [Deprecated]: syz.1.753 (pid 8692) Use of int in maxseg socket option. [ 150.762748][ T8692] Use struct sctp_assoc_value instead [ 151.285273][ T8722] gretap1: entered promiscuous mode [ 151.327070][ T8722] gretap1: entered allmulticast mode [ 151.399312][ T8731] IPv6: sit1: Disabled Multicast RS [ 151.405837][ T8731] sit1: entered allmulticast mode [ 151.489519][ T8738] netlink: 'syz.3.764': attribute type 11 has an invalid length. [ 151.510327][ T8735] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 151.525450][ T8735] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 151.777787][ T8756] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 151.785536][ T8756] __nla_validate_parse: 11 callbacks suppressed [ 151.785556][ T8756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.768'. [ 151.859050][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 151.915201][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.998213][ T8763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.771'. [ 152.007536][ T8771] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 152.018333][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 152.019982][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 152.116346][ T8769] syzkaller0: entered promiscuous mode [ 152.142852][ T8769] syzkaller0: entered allmulticast mode [ 152.254956][ T8781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.777'. [ 152.380335][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 153.168386][ T8834] netlink: 'syz.0.792': attribute type 5 has an invalid length. [ 153.179047][ T8834] netlink: 140 bytes leftover after parsing attributes in process `syz.0.792'. [ 153.378844][ T8848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.793'. [ 153.473456][ T8854] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 153.487554][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.529490][ T8858] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 153.531344][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.544703][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.571282][ T8854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.580942][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.406241][ T8917] bridge_slave_0: invalid flags given to default FDB implementation [ 154.504027][ T8920] netlink: 212 bytes leftover after parsing attributes in process `syz.1.818'. [ 154.509344][ T8921] sctp: [Deprecated]: syz.0.817 (pid 8921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.509344][ T8921] Use struct sctp_sack_info instead [ 154.642276][ T8925] veth0_virt_wifi: entered allmulticast mode [ 154.722937][ T30] audit: type=1804 audit(1763209887.388:2): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.820" name="/newroot/187/cgroup.controllers" dev="tmpfs" ino=969 res=1 errno=0 [ 154.760929][ T8925] team0: Port device veth0_virt_wifi added [ 154.828001][ T30] audit: type=1800 audit(1763209887.388:3): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.820" name="cgroup.controllers" dev="tmpfs" ino=969 res=0 errno=0 [ 155.609381][ T8982] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.590695][ T9024] syzkaller0: entered promiscuous mode [ 156.600257][ T9024] syzkaller0: entered allmulticast mode [ 156.621819][ T9024] openvswitch: netlink: Message has 592 unknown bytes. [ 156.639525][ T9024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.891689][ T9044] validate_nla: 2 callbacks suppressed [ 156.891708][ T9044] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 156.906485][ T9044] netlink: 'syz.4.855': attribute type 3 has an invalid length. [ 156.915669][ T9044] __nla_validate_parse: 3 callbacks suppressed [ 156.915685][ T9044] netlink: 224 bytes leftover after parsing attributes in process `syz.4.855'. [ 157.116120][ T9050] erspan0: entered allmulticast mode [ 157.156447][ T9050] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 157.171779][ T9057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.860'. [ 157.285462][ T9057] batman_adv: batadv0: Removing interface: dummy0 [ 157.405977][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 157.453482][ T9068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.455968][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 157.497738][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.707455][ T9081] syzkaller0: entered promiscuous mode [ 157.727151][ T9081] syzkaller0: entered allmulticast mode [ 157.757315][ T9081] 0: reclassify loop, rule prio 0, protocol 800 [ 157.769010][ T9081] xt_hashlimit: invalid rate [ 157.890288][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805178f000: rx timeout, send abort [ 157.898925][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805178f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.206608][ T9103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.213973][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 158.911855][ T9147] netlink: 'syz.0.888': attribute type 58 has an invalid length. [ 158.926458][ T9142] IPv4: Oversized IP packet from 127.202.26.0 [ 158.933789][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 159.010872][ T9153] netlink: 244 bytes leftover after parsing attributes in process `syz.3.887'. [ 159.027752][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 159.757566][ T9193] tc_dump_action: action bad kind [ 159.768458][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.901'. [ 159.833358][ T9193] xt_TCPMSS: Only works on TCP SYN packets [ 159.893870][ T9199] netlink: 52 bytes leftover after parsing attributes in process `syz.0.902'. [ 159.998592][ T9201] tipc: Enabled bearer , priority 0 [ 160.029841][ T9201] syzkaller0: entered promiscuous mode [ 160.042919][ T9201] syzkaller0: entered allmulticast mode [ 160.070873][ T9201] tipc: Resetting bearer [ 160.089127][ T9200] tipc: Resetting bearer [ 160.166631][ T9200] tipc: Disabling bearer [ 160.207948][ T9217] veth0: entered promiscuous mode [ 160.247333][ T9213] veth0: left promiscuous mode [ 160.376452][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 160.513815][ T9230] bond1: up delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 160.560223][ T9230] bond1: peer notification delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 160.599896][ T9230] bond1: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 160.629873][ T9230] bond1 (unregistering): Released all slaves [ 160.782672][ T9247] bond0: (slave bond_slave_1): Releasing backup interface [ 160.821745][ T9247] bond_slave_1 (unregistering): left promiscuous mode [ 161.392719][ T9281] vlan2: entered promiscuous mode [ 161.400569][ T9281] vlan2: entered allmulticast mode [ 161.405756][ T9281] hsr_slave_1: entered allmulticast mode [ 161.420395][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.609700][ T9307] IPv6: sit1: Disabled Multicast RS [ 161.616066][ T9307] sit1: entered allmulticast mode [ 161.752245][ T9301] IPv6: sit1: Disabled Multicast RS [ 161.778222][ T9301] sit1: entered allmulticast mode [ 162.164635][ T9333] syzkaller1: entered promiscuous mode [ 162.176993][ T9333] syzkaller1: entered allmulticast mode [ 162.190171][ T9333] __nla_validate_parse: 7 callbacks suppressed [ 162.190193][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 162.280420][ T9344] netlink: 72 bytes leftover after parsing attributes in process `syz.2.943'. [ 162.337049][ T9344] netlink: 72 bytes leftover after parsing attributes in process `syz.2.943'. [ 162.638368][ T9369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.920305][ T9383] only policy match revision 0 supported [ 162.920327][ T9383] unable to load match [ 163.152246][ T9392] tap0: tun_chr_ioctl cmd 1074025678 [ 163.174199][ T9392] tap0: group set to 0 [ 163.313488][ T9411] xt_hashlimit: size too large, truncated to 1048576 [ 163.584687][ T9425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.626509][ T9429] netlink: 9 bytes leftover after parsing attributes in process `syz.0.967'. [ 163.641137][ T9429] netlink: 9 bytes leftover after parsing attributes in process `syz.0.967'. [ 163.775182][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.890860][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.911248][ T9433] 8021q: VLANs not supported on syzkaller0 [ 163.924057][ T9444] netlink: 60 bytes leftover after parsing attributes in process `syz.0.971'. [ 163.934958][ T9444] netlink: 124 bytes leftover after parsing attributes in process `syz.0.971'. [ 164.198806][ T9459] netlink: 'syz.1.975': attribute type 21 has an invalid length. [ 165.591491][ T9487] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 165.707853][ T9491] bond1 (unregistering): Released all slaves [ 165.851857][ T9492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.529509][ T9547] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 166.650688][ T9547] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.683492][ T9547] bond2: (slave lo): Enslaving as a backup interface with an up link [ 166.701531][ T9547] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.140235][ T9568] netlink: 'syz.1.1003': attribute type 8 has an invalid length. [ 167.506156][ T9582] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 167.546429][ T9586] __nla_validate_parse: 9 callbacks suppressed [ 167.546448][ T9586] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1007'. [ 167.613863][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 167.956909][ T9594] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.002824][ T9594] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 168.027322][ T9594] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 168.109081][ T9602] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.125828][ T9602] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 168.149140][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 168.174453][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 168.417975][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 168.668318][ T9646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1025'. [ 169.259279][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1035'. [ 169.275549][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 169.349454][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 169.552634][ T9701] netlink: 'syz.2.1041': attribute type 3 has an invalid length. [ 169.591112][ T9708] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 169.602948][ T9708] veth0_virt_wifi: entered allmulticast mode [ 169.673404][ T9708] team0: Port device veth0_virt_wifi added [ 169.750665][ T9718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1047'. [ 170.241875][ T9737] delete_channel: no stack [ 170.270376][ T9748] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 170.309031][ T9748] batadv0: entered promiscuous mode [ 170.314317][ T9748] batadv0: entered allmulticast mode [ 170.339585][ T9748] bridge0: port 2(batadv0) entered blocking state [ 170.367346][ T9748] bridge0: port 2(batadv0) entered disabled state [ 170.421625][ T9757] pimreg: entered allmulticast mode [ 170.447108][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 170.456682][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 170.469871][ T9757] dvmrp6: entered allmulticast mode [ 170.484777][ T9755] pimreg: left allmulticast mode [ 170.634759][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.662612][ T9768] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 170.728668][ T9771] netlink: 'syz.0.1064': attribute type 3 has an invalid length. [ 170.757633][ T9775] pim6reg1: entered promiscuous mode [ 170.762991][ T9775] pim6reg1: entered allmulticast mode [ 170.780225][ T9772] team0: No ports can be present during mode change [ 170.787683][ T9783] team0: No ports can be present during mode change [ 171.367643][ T9806] IPVS: Scheduler module ip_vs_sip not found [ 171.926922][ T9802] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 172.178042][ T9845] xt_policy: neither incoming nor outgoing policy selected [ 172.486439][ T9871] xt_hashlimit: size too large, truncated to 1048576 [ 172.869875][ T9892] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 172.877504][ T9892] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 173.201812][ T9897] __nla_validate_parse: 15 callbacks suppressed [ 173.201832][ T9897] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1090'. [ 173.242942][ T9904] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1092'. [ 173.252610][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 173.568920][ T9917] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 173.590258][ T9917] nbd: error processing sock list [ 173.595896][ T9917] block nbd0: shutting down sockets [ 173.812935][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 174.094327][ T9947] ipvlan0: entered promiscuous mode [ 174.167601][ T9947] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 174.216879][ T9957] [ 174.219290][ T9957] ====================================================== [ 174.226444][ T9957] WARNING: possible circular locking dependency detected [ 174.233518][ T9957] syzkaller #0 Not tainted [ 174.237961][ T9957] ------------------------------------------------------ [ 174.244995][ T9957] syz.2.1104/9957 is trying to acquire lock: [ 174.250993][ T9957] ffffffff8f426458 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0 [ 174.260365][ T9957] [ 174.260365][ T9957] but task is already holding lock: [ 174.267751][ T9957] ffff88805832de70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 174.277018][ T9957] [ 174.277018][ T9957] which lock already depends on the new lock. [ 174.277018][ T9957] [ 174.287435][ T9957] [ 174.287435][ T9957] the existing dependency chain (in reverse order) is: [ 174.296457][ T9957] [ 174.296457][ T9957] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 174.304470][ T9957] lock_acquire+0x120/0x360 [ 174.309600][ T9957] _raw_spin_lock_bh+0x36/0x50 [ 174.314907][ T9957] nr_rt_device_down+0x12a/0x720 [ 174.320463][ T9957] nr_device_event+0x137/0x150 [ 174.325762][ T9957] notifier_call_chain+0x1b6/0x3e0 [ 174.331409][ T9957] netif_close_many+0x29c/0x410 [ 174.336824][ T9957] netif_close+0x158/0x210 [ 174.341774][ T9957] dev_close+0x10a/0x220 [ 174.346550][ T9957] bpq_device_event+0x377/0x6a0 [ 174.351931][ T9957] notifier_call_chain+0x1b6/0x3e0 [ 174.357572][ T9957] netif_close_many+0x29c/0x410 [ 174.362957][ T9957] netif_close+0x158/0x210 [ 174.367903][ T9957] dev_close+0x10a/0x220 [ 174.372665][ T9957] bond_setup_by_slave+0x5f/0x3f0 [ 174.378325][ T9957] bond_enslave+0x6ca/0x38a0 [ 174.383494][ T9957] bond_do_ioctl+0x635/0x9b0 [ 174.388613][ T9957] bond_siocdevprivate+0x17e/0x350 [ 174.394250][ T9957] dev_ifsioc+0xb57/0xf00 [ 174.399116][ T9957] dev_ioctl+0x84c/0x1150 [ 174.403975][ T9957] sock_ioctl+0x719/0x790 [ 174.408831][ T9957] __se_sys_ioctl+0xfc/0x170 [ 174.413949][ T9957] do_syscall_64+0xfa/0xfa0 [ 174.418984][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.425404][ T9957] [ 174.425404][ T9957] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 174.433238][ T9957] lock_acquire+0x120/0x360 [ 174.438277][ T9957] _raw_spin_lock_bh+0x36/0x50 [ 174.443658][ T9957] nr_rt_device_down+0xa9/0x720 [ 174.449050][ T9957] nr_device_event+0x137/0x150 [ 174.454339][ T9957] notifier_call_chain+0x1b6/0x3e0 [ 174.460068][ T9957] netif_close_many+0x29c/0x410 [ 174.465455][ T9957] netif_close+0x158/0x210 [ 174.470401][ T9957] dev_close+0x10a/0x220 [ 174.475166][ T9957] bpq_device_event+0x377/0x6a0 [ 174.480545][ T9957] notifier_call_chain+0x1b6/0x3e0 [ 174.486187][ T9957] netif_close_many+0x29c/0x410 [ 174.491570][ T9957] netif_close+0x158/0x210 [ 174.496536][ T9957] dev_close+0x10a/0x220 [ 174.501335][ T9957] bond_setup_by_slave+0x5f/0x3f0 [ 174.507008][ T9957] bond_enslave+0x6ca/0x38a0 [ 174.512174][ T9957] bond_do_ioctl+0x635/0x9b0 [ 174.517316][ T9957] bond_siocdevprivate+0x17e/0x350 [ 174.523063][ T9957] dev_ifsioc+0xb57/0xf00 [ 174.528281][ T9957] dev_ioctl+0x84c/0x1150 [ 174.533164][ T9957] sock_ioctl+0x719/0x790 [ 174.538077][ T9957] __se_sys_ioctl+0xfc/0x170 [ 174.543227][ T9957] do_syscall_64+0xfa/0xfa0 [ 174.548271][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.554724][ T9957] [ 174.554724][ T9957] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 174.562650][ T9957] validate_chain+0xb9b/0x2140 [ 174.567955][ T9957] __lock_acquire+0xab9/0xd20 [ 174.573253][ T9957] lock_acquire+0x120/0x360 [ 174.578337][ T9957] _raw_spin_lock_bh+0x36/0x50 [ 174.583636][ T9957] nr_del_node+0x517/0x8d0 [ 174.588580][ T9957] nr_rt_ioctl+0x989/0xd50 [ 174.593527][ T9957] sock_do_ioctl+0xdc/0x300 [ 174.598561][ T9957] sock_ioctl+0x576/0x790 [ 174.603421][ T9957] __se_sys_ioctl+0xfc/0x170 [ 174.608540][ T9957] do_syscall_64+0xfa/0xfa0 [ 174.613576][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.620036][ T9957] [ 174.620036][ T9957] other info that might help us debug this: [ 174.620036][ T9957] [ 174.630287][ T9957] Chain exists of: [ 174.630287][ T9957] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 174.630287][ T9957] [ 174.644131][ T9957] Possible unsafe locking scenario: [ 174.644131][ T9957] [ 174.651611][ T9957] CPU0 CPU1 [ 174.656991][ T9957] ---- ---- [ 174.662360][ T9957] lock(&nr_node->node_lock); [ 174.667143][ T9957] lock(nr_node_list_lock); [ 174.674349][ T9957] lock(&nr_node->node_lock); [ 174.681662][ T9957] lock(nr_neigh_list_lock); [ 174.686357][ T9957] [ 174.686357][ T9957] *** DEADLOCK *** [ 174.686357][ T9957] [ 174.694530][ T9957] 2 locks held by syz.2.1104/9957: [ 174.699646][ T9957] #0: ffffffff8f4264b8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0 [ 174.709075][ T9957] #1: ffff88805832de70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 174.718760][ T9957] [ 174.718760][ T9957] stack backtrace: [ 174.724762][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.2.1104 Not tainted syzkaller #0 PREEMPT(full) [ 174.724782][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.724799][ T9957] Call Trace: [ 174.724807][ T9957] [ 174.724815][ T9957] dump_stack_lvl+0x189/0x250 [ 174.724844][ T9957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.724867][ T9957] ? __pfx__printk+0x10/0x10 [ 174.724885][ T9957] ? print_lock_name+0xde/0x100 [ 174.724903][ T9957] print_circular_bug+0x2ee/0x310 [ 174.724927][ T9957] check_noncircular+0x134/0x160 [ 174.724950][ T9957] validate_chain+0xb9b/0x2140 [ 174.724980][ T9957] __lock_acquire+0xab9/0xd20 [ 174.724998][ T9957] ? nr_del_node+0x517/0x8d0 [ 174.725018][ T9957] lock_acquire+0x120/0x360 [ 174.725033][ T9957] ? nr_del_node+0x517/0x8d0 [ 174.725053][ T9957] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.725076][ T9957] ? do_raw_spin_unlock+0x122/0x240 [ 174.725099][ T9957] ? nr_neigh_get_dev+0xbd/0x140 [ 174.725121][ T9957] ? nr_del_node+0x517/0x8d0 [ 174.725140][ T9957] _raw_spin_lock_bh+0x36/0x50 [ 174.725161][ T9957] ? nr_del_node+0x517/0x8d0 [ 174.725181][ T9957] nr_del_node+0x517/0x8d0 [ 174.725203][ T9957] nr_rt_ioctl+0x989/0xd50 [ 174.725228][ T9957] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 174.725246][ T9957] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.725274][ T9957] ? apparmor_capable+0x137/0x1b0 [ 174.725297][ T9957] ? capable+0x89/0xe0 [ 174.725314][ T9957] ? nr_ioctl+0x1b1/0x3b0 [ 174.725331][ T9957] sock_do_ioctl+0xdc/0x300 [ 174.725354][ T9957] ? __pfx_sock_do_ioctl+0x10/0x10 [ 174.725383][ T9957] sock_ioctl+0x576/0x790 [ 174.725404][ T9957] ? __pfx_sock_ioctl+0x10/0x10 [ 174.725426][ T9957] ? __fget_files+0x3a0/0x420 [ 174.725441][ T9957] ? __fget_files+0x2a/0x420 [ 174.725457][ T9957] ? bpf_lsm_file_ioctl+0x9/0x20 [ 174.725476][ T9957] ? __pfx_sock_ioctl+0x10/0x10 [ 174.725496][ T9957] __se_sys_ioctl+0xfc/0x170 [ 174.725520][ T9957] do_syscall_64+0xfa/0xfa0 [ 174.725545][ T9957] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.725568][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.725584][ T9957] ? clear_bhb_loop+0x60/0xb0 [ 174.725603][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.725619][ T9957] RIP: 0033:0x7f9d9938f6c9 [ 174.725636][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.725650][ T9957] RSP: 002b:00007f9d9a279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.725668][ T9957] RAX: ffffffffffffffda RBX: 00007f9d995e6090 RCX: 00007f9d9938f6c9 [ 174.725680][ T9957] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000006 [ 174.725691][ T9957] RBP: 00007f9d99411f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.725701][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.725710][ T9957] R13: 00007f9d995e6128 R14: 00007f9d995e6090 R15: 00007ffeb62fdf68 [ 174.725730][ T9957] [ 175.111108][ T9947] tipc: Failed to remove unknown binding: 66,1,1/0:2381771793/2381771795