last executing test programs: 2m47.043929964s ago: executing program 0 (id=1435): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x8, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2m44.771081603s ago: executing program 0 (id=1440): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000004b40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004a00)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1, &(0x7f0000000180)=""/30, 0x1e}, 0x1}, {{&(0x7f00000001c0)=@caif=@dgm, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000400)=""/161, 0xa1}], 0x3, &(0x7f00000009c0)=""/4096, 0x1000}, 0x10}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/251, 0xfb}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f0000002c00)=""/225, 0xe1}, {&(0x7f0000002d00)=""/42, 0x2a}, {&(0x7f0000002d40)=""/233, 0xe9}, {&(0x7f0000002e40)=""/118, 0x76}, {&(0x7f0000002ec0)=""/180, 0xb4}], 0xa, &(0x7f0000003140)=""/165, 0xa5}, 0x80000000}, {{&(0x7f0000003200)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003280)=""/236, 0xec}, {&(0x7f0000003380)=""/10, 0xa}, {&(0x7f00000033c0)=""/184, 0xb8}, {&(0x7f0000003480)=""/141, 0x8d}, {&(0x7f0000003540)=""/104, 0x68}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x7}, 0xfff}, {{&(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004740)=""/94, 0x5e}, {&(0x7f00000047c0)=""/123, 0x7b}, {&(0x7f0000004840)=""/217, 0xd9}, {&(0x7f0000004940)=""/73, 0x49}], 0x4}, 0x7fff}], 0x5, 0x13000, &(0x7f0000004b80)={r2, r3+10000000}) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x50, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, r4, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x9}}}}}}, 0x0) 2m44.294315525s ago: executing program 0 (id=1447): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x1, 0xfffffffd, 0x0, {0x1d, 0x0, 0x1f}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x8, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2m41.169333232s ago: executing program 0 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaa00004b26b8012ed1106811f865ae88651fbb001c0012800b00010062726964"], 0x64}}, 0x0) 2m40.961946149s ago: executing program 0 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000bcbc00"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800b00010065727370616e000014000280050016000000000008000700ffffffff08001f0006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r0, @ANYBLOB="0eee8f859c9013022d880590a4c7e660e54e88fc5cafb5b9c9f4cea112633241858adb263741a0e3456245e44e9c014665c98a9757e179248273ec58d96348898f2ca6aa105779e7504e22588060191679fb57fa6fe5660db1b96c5f506ad1b13f254792a91ef8bc6da85b00d5e8a59ac61192efcf14fe0a2f54f7cb8558e3c6edc9ccf4771b4073bb22c424d6d961eb834020a0f9acdc6d26943d6ad8a1d076eaa185bbb2b211a939d533607cb24ed02406f8694232d5859f29ba0589a527eab939c0fe27e69df1f3bb57fb35e424594efb8a49147f5ec861620c6165b76a"], 0x28}}, 0x48000) 2m40.530116066s ago: executing program 0 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x8, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2m27.659233182s ago: executing program 2 (id=1594): pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x1, 0x6537, 0x9, 0x339, 0x9, 0x3, 0x6}, 0x0, &(0x7f0000000140), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000180)={0x50000, 0x69a0, 0x9, 0x9, 0x3ff, 0x1e, 0x9, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000b27baa048aa9295bc2b681e704b1a4d640c0c15de5ff9c1b4c45", @ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="05002d00000000000500350004000000"], 0x2c}}, 0x20040000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="ff853557eeb12057ab56dba0f1c825e0199e8d4cd3571a87de1b479e07948bb5785ebca0ba8585646ff720b4af26a74083f5551facfc84beb4a32498050ef4cdf11bc66f1cec", 0x46) 2m27.499892589s ago: executing program 2 (id=1596): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x9}}) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m27.343629432s ago: executing program 2 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000580)=@newtaction={0x118, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xbc, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x8b, 0x6, "2dcece14e1e135f582667597617f24a47fd460511130a32a9cf3a22646e8d8e21a1438539d00c42cf676490355142cfcd71878b7d93bdf510a324420cd0ac634f3eefe9fe04a7a28f5bc9228e1c0f5f0b365f7c0cebd259cf68ea731f97d77cfbe7714a1212c8a6582292d7a4ef47b2aaa7e6a1d556e66d40f15d5a7284518866babd7b84b4a89"}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff3fe}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000001310a01040000000000003a210e66c1f3552b1899976700000000000008000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008804000980140000001000010000000a000000000000000000"], 0x78}}, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x4081) 2m27.184498585s ago: executing program 2 (id=1603): socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2127df8876bdfcc23dbbf121640340623bf413ff58"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 32) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) 2m27.003794872s ago: executing program 2 (id=1606): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xca, 0x4a}}}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xfff3, 0x0, 0x9, 0x5, 0x9, 0xd4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa, 0x4, 0xa0c, 0xd536, 0x3, 0x7f, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe9, 0xff7d, 0x5, 0x2, 0x3, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x33, 0x9, 0xb, 0x5, 0xc, 0x1b, 0x48, 0x18, 0x48, 0xd, 0x6, 0x24, 0x6, 0x6, 0xc, 0x12, 0x6c, 0x5, 0x3, 0x60, 0xb, 0x3, 0x1, 0x16, 0x48, 0x16, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x5, 0x1, 0x2, 0x4b276092717aca43, 0x48, 0xb, 0x3, 0x1, 0x48, 0x1b, 0x16, 0x4, 0x4, 0x12, 0x48, 0x1, 0x5, 0x1b, 0x24, 0x9, 0x18, 0x12, 0x6c, 0x16, 0x16, 0x6, 0x48, 0x1b, 0x9, 0x60, 0x24]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 2m26.659988706s ago: executing program 2 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffdd, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd28, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0xfc, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_IE={0x86, 0x2a, [@measure_req={0x26, 0x80, {0x9, 0x4, 0xf, "1a9f04e8536892694fbd1a48f3697a55a58eca12062d765418534233b5e4cf62a6ec04242f6e127d7ff6cbde2ea0afaa3a121fe6115031c31867416ea4b7ba6d40f5da0e3537f1ace7d45533c11d18d652b8f77f939d37d961aaf192f267d857b02e6bf22a31a72a41b2b28cf21ca3c4180ba9cb2e1fefffd9a1235fcc"}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) 2m25.470512416s ago: executing program 32 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x8, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2m10.806202215s ago: executing program 33 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffdd, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd28, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0xfc, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_IE={0x86, 0x2a, [@measure_req={0x26, 0x80, {0x9, 0x4, 0xf, "1a9f04e8536892694fbd1a48f3697a55a58eca12062d765418534233b5e4cf62a6ec04242f6e127d7ff6cbde2ea0afaa3a121fe6115031c31867416ea4b7ba6d40f5da0e3537f1ace7d45533c11d18d652b8f77f939d37d961aaf192f267d857b02e6bf22a31a72a41b2b28cf21ca3c4180ba9cb2e1fefffd9a1235fcc"}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) 1m15.187305986s ago: executing program 6 (id=2297): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff340001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m14.958722703s ago: executing program 6 (id=2300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100004000000000000020000000002000000070000000900010073797a300000000014000000100001"], 0x48}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42, 0x3}}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48400, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), r11) 1m14.479943866s ago: executing program 6 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x400, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x6, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x12, 0x4f, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000003340)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xa18, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e1e, 0x295e7c40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x4000800) 1m14.298031445s ago: executing program 6 (id=2310): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x84, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'syztnl2\x00', r1, 0x8000, 0x8, 0x9, 0x1, {{0x11, 0x4, 0x0, 0x2a, 0x44, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@noop, @end, @ssrr={0x89, 0x7, 0x97, [@empty]}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x4, [{@remote, 0x18}, {@multicast1, 0x8}, {@remote}, {@empty, 0x4}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000df4b00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)="79115e6e9728b00540e8faa7ea15bfa2d3b4cf", 0x13) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x94, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r11, 0x2986b594068de4d5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x25, 0x80000, 0xfffffffc) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x800) 1m13.697174767s ago: executing program 6 (id=2318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0x1}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r3, 0x0, 0xe8, 0xf7, &(0x7f0000000200)="bd39de750020b3309cd3e3eda677b7ea1e8d63eaf61f891bb7fec6ced2b099ccd755bb068bc66193aaa0713c5c6a9b5231f51146a11435394d1932540a11d2915e1323f1f600518cc20d5e0e91fe36be1288dcb0b32d1dce5d91a96cd0e2464e5af731d08f2078bbbd9952b9c889d71d23c026942e456e757246b755ca1b0389cbea695507e5b0ab154194852cb536aef72ff675b9e7ae51837449125f003bfd3637903c63378dd3395d07cde31ccbd16a7812f08a54e867d3171938a51b59e0349341e982599cea26893911a851f97c931a7535e6de02e6463f8b4ae77f7183880bc85da47c09c0", &(0x7f00000004c0)=""/247, 0x5, 0x0, 0x9c, 0x1000, &(0x7f0000000740)="3642e5d67a7019440f5f359250e18a02e91c86123b591019e925f9ef2f3f965daf68ad17e4e0dac7771f5646a12a8572747748507dce5d0ac44b6298b2964cb39aa5c91a9cc03d42f46dddcf1bc7d2db6789f57005d10400c904c3cf7ef857124eabe88949352aa599727b809d568f65778842351ab3dabf1d511c57db85dd19c95342132808cc4bc855d7e6c4d673da85534f26463f676365696faa", &(0x7f00000017c0)="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", 0x1, 0x0, 0x8}, 0x50) 1m13.287873952s ago: executing program 6 (id=2322): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4044810) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e120800060000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d", 0xa2}, {&(0x7f00000005c0)="b8cadd1b63d27c4fc2da", 0xa}, {&(0x7f0000000040)="84a33e5a63b49ad64070db02100001000685fc47dcbdcde64d23d861c56fa46597169f24bf325d642f3daec69e6e1ba23958", 0x32}], 0x3}, 0x0) 59.155419474s ago: executing program 5 (id=2440): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x8000, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2183, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r3 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000180)={'veth0\x00', @ifru_mtu=0xffffffff}) (async) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000180)={'veth0\x00', @ifru_mtu=0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x5f, 0xd, &(0x7f00000001c0)="2cffdec130148a8748d742c90677800afa5da7bcd2482fde8485acecdd41e5610d8fec79b5cd385623ae63fb091f1001c148df26169871f483b552a58d68e801a63be823d3035c872d479fbf5d37a9bdf85bc95a1e0d7ffaddd10b2d56cf73", &(0x7f0000000240)=""/13, 0x5, 0x0, 0x0, 0xc4, &(0x7f0000000280), &(0x7f00000002c0)="e75ab7d9600c6a84dd24b67d055ab386c1b849a0f83e7014f8d483216bb911575060f7626b01ab45281974f887774e91c0c0c4127451b6f9b3e0180709c050920a33f1c77862a174e75133d523c90541e062b9020f91d6bdf2cec9b7ba88d15d6e80ac4ae4073d778394af1be19e75bcdc82658c216c5b0fa16eb2afbd43c5d9da86c35a70745c104913eb829b155a92d4d583d9c27156ee570fc6072cada640c7048d5d11a97736d8e34d33ffcfb499a53912519867eb5383ca9f952d07b8958e1d95b1", 0x2, 0x0, 0x7fffffff}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x6}, &(0x7f0000000580)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x10, 0x208, 0x401, 0x6, r4}, 0x10) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000040) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000040) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000700)=""/46, &(0x7f0000000740)=0x2e) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000700)=""/46, &(0x7f0000000740)=0x2e) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000780), 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0xc0, 0x9, 0x5, @empty, @mcast2, 0x20, 0x8, 0x6, 0xfffffffb}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0xc0, 0x9, 0x5, @empty, @mcast2, 0x20, 0x8, 0x6, 0xfffffffb}}) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@ipv4_getnexthop={0x3c, 0x6a, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r6}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x3c}}, 0x44000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000009c0)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000a00)={0x0, 0xffff, 0x56, "b4fb2a23b4899e1dafb48992fd9e9bd719191ec16d05e8acc2d5b2002bbe510fc4002b23e1385b9257488b3a0e249c0d00be31ed12b5e21239f276fe78471aea3130ddd0ab79886df1f137253ddbe2d0b42af1174f88"}, 0x5e) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000a00)={0x0, 0xffff, 0x56, "b4fb2a23b4899e1dafb48992fd9e9bd719191ec16d05e8acc2d5b2002bbe510fc4002b23e1385b9257488b3a0e249c0d00be31ed12b5e21239f276fe78471aea3130ddd0ab79886df1f137253ddbe2d0b42af1174f88"}, 0x5e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a80)={r2, 0x2, 0x2, "d1674c498778f75ee7616c37a802e185ad5d54eaf407848d9b4e7faac719046369e33e95124cd8e164979a0c77c44db9bd2f6532f966ed5fe446f25cf7aadb8481d5e320df4236554cd0a6ca99357984ed9f261ea4219d358c09e8115d852b1019580550b3b06d1406f61a60a7927ca8b0fb3b"}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000b00)={r4, 0x1, 0x1, 0x9ce7}, &(0x7f0000000b40)=0x10) pipe(&(0x7f0000000b80)) (async) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x110, r10, 0xfa988000) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000bc0)={0x81, 0x7f, 0x2, 0x27, 0x2, 0x2, 0xfb, 0x81, 0x2, 0x0, 0x62, 0x0, 0x9, 0x7f}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000bc0)={0x81, 0x7f, 0x2, 0x27, 0x2, 0x2, 0xfb, 0x81, 0x2, 0x0, 0x62, 0x0, 0x9, 0x7f}, 0xe) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000c00)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000c40)=[@window, @window={0x3, 0x5, 0x9}, @sack_perm, @sack_perm, @sack_perm], 0x5) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000c40)=[@window, @window={0x3, 0x5, 0x9}, @sack_perm, @sack_perm, @sack_perm], 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000c80)) 59.019931325s ago: executing program 5 (id=2441): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000056b033950e73e87a23f19aba8e08c5d6000000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702fa43c89261eece1100000000000085000000190000009500000000000000"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) 58.986204702s ago: executing program 5 (id=2444): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48884}, 0x2008c014) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000140)={0x9, 0xe82, 0x7ff, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r7, 0xd0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x4000ab, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r11, 0x1f4d2000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r14, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="8471617f3f040000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xac, &(0x7f0000000240)=""/172, 0x41000, 0x1, '\x00', r6, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, r10, r11, r12, r14, r7], &(0x7f00000008c0)=[{0x4, 0x4, 0xd, 0x4}], 0x10, 0x9}, 0x94) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg1\x00'}) 58.527115986s ago: executing program 5 (id=2452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xee, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x0, 0x6, 0x0, {0x8, 0x1f80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x300}}, @channel_switch={0x25, 0x3, {0x0, 0xac, 0x8}}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x3f, 0x9, 0x0, @device_a, 0x0, @value, 0x100, 0x1, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x100}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x80000001}]}}, @mic={0x8c, 0x10, {0x923, "4cdd9cdcc7ac", @short="96a2414d001a045e"}}, @preq={0x82, 0x67, {{0x0, 0x1, 0x1}, 0x0, 0x2, 0x5, @broadcast, 0x5, @void, 0x3, 0x3, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x7ff}, {{0x1, 0x0, 0x1}, @device_b, 0xf50d}, {{0x1}, @device_a, 0x1}, {{}, @broadcast, 0x9}, {{}, @device_b}, {{0x0, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @device_a, 0x5}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6aca27d261e4"}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000081}, 0x4048040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000280)='\xff\xff\xff\xff\xff\xff', 0x58d800, &(0x7f00000002c0)={@align=0xffff, {0xa7f, 0x0, 0x1, 0x3}}, 0x2, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}, {[0x10, 0x80000001, 0x17a2c9bd, 0x8000]}, 0x0, 0x18, &(0x7f0000000380)=""/24}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0xfa, 0xf, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0xff, 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0xf2, 0x18, 0x13cd, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0xf7, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x2, 0x2, {{0x31, 0x4, 0x2, 0x3b, 0xc4, 0x67, 0x0, 0x5a, 0x4, 0x0, @multicast2, @multicast1, {[@generic={0x83, 0x10, "7eb4c67a79a9b1cb6b85cdc94c3e"}, @ssrr={0x89, 0x7, 0x0, [@private=0xa010100]}, @rr={0x7, 0x1f, 0x57, [@multicast2, @multicast1, @multicast1, @rand_addr=0x64010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp={0x44, 0x18, 0x39, 0x0, 0xb, [0x2, 0x2, 0x2, 0x9, 0x1]}, @lsrr={0x83, 0x7, 0x6f, [@multicast1]}, @timestamp_addr={0x44, 0xc, 0x99, 0x1, 0xe, [{@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x6, [{@loopback}, {@local, 0x8}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x6}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x6}]}, @rr={0x7, 0x13, 0xa3, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x8, 0x5, 0x10, @loopback, @private0, 0x7, 0x700, 0x6, 0x26}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={0x0, @initdev}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0x1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x258, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6gre0\x00', r5, 0x29, 0x8, 0xef, 0xfffffff1, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7800, 0x10, 0xfffffffa, 0x3ff}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001140)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e00)={0x2c8, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!{}\'/[-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(+[/+\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x74, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "f850aa475fb7c05c0e07842cdb7f67bd7f419afbcea8c47c55013ee691b3f372a3b285d59d449a45b4bc1b4926111f68116fe1c99b631a7331dc85f652ed40233d0f4a8afbc4138807e7411c1d57af37785c8a00aba24b85d99f7af1ea6b207db20e16452645ec6c6c45"}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x800}, 0x1) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000001180)=@gcm_256={{0x303}, "6c8799a4c1e0b9b4", "498c50fbe380c2cd23c748081488d4d0f5d93a9a0aa6fa473bcf9656fcf3b415", "f2ad6e1d", "88a8e20e6258a7fa"}, 0x38) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r14, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001300)={r3, r12, 0x25, 0x16, @void}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, 0x0, 0xa09, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040041}, 0x1) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f00000014c0), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r15, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40804) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000019c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001680)={0x2c8, r16, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x53}]}, @NL80211_ATTR_NAN_FUNC={0x144, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffeffff}, @NL80211_NAN_FUNC_SERVICE_INFO={0xee, 0xb, "b1d8185209695632c77690245ba07b214de47a6fe5b0e989b897b8cf241af559c87b257a9f55c3dbc416f95321126b77fb83ac1a5341cb2b851c5d2ce3ac8624ced596daa08cec838c79435584c4f8c2883541dee7fcaec11ba827409d6297b3c71dd7ba0500a0653c78c075ce2673690a55c4b31882364f6db9820ef9fbc7852d462e11da7736768a401241d99f9b7a291b21c455f65cc32755515c6c7377802a86e96a7b540c535da24287d32c6f15770ee9556f87e8d6e9c87090cb954676fd7196cbb1954d4b899dd774fa7dac45b2ae6535e75741552f53e99b1ea676ac4d55c0af27aded1494df"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1c, 0xb, "bf082b70165d96400ea36b029b50442c944139841ae3480e"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xf9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x144, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}, @NL80211_NAN_FUNC_SERVICE_INFO={0x101, 0xb, "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"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x34}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x45}, 0x20000010) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001a00)=0x0, &(0x7f0000001a40)=0x4) sendmsg$xdp(r3, &(0x7f0000001fc0)={&(0x7f0000001a80)={0x2c, 0x8, r17, 0x36}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001ac0)="5801c16cb654fed070d9edc03eb093156f438edc65f795246bb8fbe82ba64e63a537b560861ba7cb78f9151d2ed3e41584d1208f776a1151e6bdffb7277034b5e1d61e4fe5b095c3a3a354bdfbb77f6d5a7a3d8fe85df9084391686c51bb47d9e67b74cae7db10518365332a0953ad5bdb4d86fee59e8fb9324247d31c1f7401276b30d54ebe4cebcd1b9a10b6cc4c8609f327e40174596c3dab2db38a90a1d1925c1b0802be14c381e0556f56b531e5182adae42d6711ea944401725056080e6008807042675e802a313e5c94462ee66f47", 0xd2}, {&(0x7f0000001bc0)="78c8636475029c46922348ac85867636cfe43b54e795eadd6f2a56f66d563ca358c8c78e7312e38c2a8b4f129e0179268a58564da72c86129edcf5fa5fd100b7e4b5e1f067bccaca28d4df7ed59eea1337e89f1a1528129e8506bbe3d59bb61843ff6abbc6d845caae9c6aa557511f2118f327d8734d9905a86dc903d70c48c7cbb6f35b578ea7aece9fefcfc7cabe162373427c43e526f244d0b4f9008b92ff1c8858d253487d72476484febe7f3d62d14f65", 0xb3}, {&(0x7f0000001c80)="88b4e8652d7a00a4931550b3c8929d02bdaf0c08", 0x14}, {&(0x7f0000001cc0)="2f6c1e018c7abf4c66a8ecc00c1aaa0cffca841207f5dbc8a19bba4ee41953428bd5b4aed3e65e8d6acb7ead452cf747663aeadde558f8343e76e9b9c3072086291f09459204fe1894f8dd0bd57f2fc2dc695916877d3c53f534e2f77efd21bdf26acc235d3c31bdde0beb0c44b136572a654d135d67e5d4afadaae41137e585fc55071fead0c910ff05e54dd26ef90dae6351a0cd8cc193f5e7960d6175215ece85e5", 0xa3}, {&(0x7f0000001d80)="08224b2cffb841a7cad3c54b48d0da4193555da05aa97bc6cac444c39dc59b27cd4818cc5741e40f335da32fb5ac47dffb772c10cc41a875ecaf6011ada6e70152e7707650565de9561e4df7a87423362261603bf9e89e470498508a44aa14566be75afe742e7962c36d3318c9170acf0b27b9b8643499f2961ed6e7a695648b5b0ef2abef67a9bf66d940717343680628a66186eaf2ae6c97271cb4f937c9b3739344f543363fccfa476b2a9362b1d0b02bcb1f897edc68dc4bcadf276eda085d92c24ce913dc9727fca120d2de0ef28132302f61f31ba4bab6c86ccdab948899243044f4d8ca817f40eab0cdcf834e46ccad46", 0xf4}, {&(0x7f0000001e80)="7ff37f83e43335db2274567dd257c06458e2789b71ddaedebf681b06d7578a085445cb4decd5a12627e9c0db6f3f369f76259cc5fba852a78c8e8913e3f52b2062e4d248b7679e4b62f42489cb95d3fc8b4b87667955ad11a2c72a2d3b25edc10241a73d6e0f9c9cfcaa70fb65e467b2a21e10e11756fa9e70adf98e08cd131e49298e2b493b3d5a8613f14eacfd35e893f321b1d5", 0x95}], 0x6, 0x0, 0x0, 0x4014}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002080)={'erspan0\x00', &(0x7f0000002000)={'tunl0\x00', r8, 0x8000, 0x7800, 0x400, 0x10001, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0x61, [@rand_addr=0x64010102, @local, @rand_addr=0x64010102]}]}}}}}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf8, 0x78}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44) 57.760716402s ago: executing program 34 (id=2322): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4044810) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e120800060000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d", 0xa2}, {&(0x7f00000005c0)="b8cadd1b63d27c4fc2da", 0xa}, {&(0x7f0000000040)="84a33e5a63b49ad64070db02100001000685fc47dcbdcde64d23d861c56fa46597169f24bf325d642f3daec69e6e1ba23958", 0x32}], 0x3}, 0x0) 55.455162849s ago: executing program 5 (id=2463): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000500)=0x2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0xf0, 0x0, 0xffffffff, 0xf0, 0xf0, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1d, @ipv6=@loopback, @ipv6=@remote, @gre_key=0x4, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e20, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @port=0x4e22, @icmp_id=0x66}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0x0, 0xff], [0xff, 0xff], 'bond_slave_0\x00', 'ip6_vti0\x00', {}, {}, 0x3b, 0xff, 0x6, 0x2c}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xc, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@mcast2, @icmp_id=0x64, @gre_key=0xfbff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x7d, &(0x7f0000000700)={r9, 0xfffff801, 0x11e2000, 0x62f, 0x300, 0x2, 0x1, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000580)={r9, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x84) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x47, 0x9, {{0x20, 0x4, 0x1, 0x6, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0xb, 0x15, [@remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0xd, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7f}, {@local, 0xc}, {@local, 0x6}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x48, [@rand_addr=0x64010100, @rand_addr=0x64010102, @multicast2]}, @end, @lsrr={0x83, 0x7, 0xb, [@loopback]}, @timestamp_prespec={0x44, 0x1c, 0x32, 0x3, 0x4, [{@loopback, 0x4}, {@multicast1, 0x8000}, {@empty, 0x6}]}]}}}}}) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10) 54.482829394s ago: executing program 5 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe7, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd9, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x2f, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0xc7, 0x3, 0xc}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x23, 0x5f, [@multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1, @remote, @local]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}, "bc"}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) socket(0x25, 0xa, 0x80000001) getsockopt$inet_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="c5a1ed4b3f75892c100a46486af9adf540bc130400ef93357be826ed4fd65e6c96b000c1fe2ab6a7c2d133465c77b1aef19530e94fce60cec939e37398c3e15ad793cb70"], 0x7c}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400000000f0800014000000000180005800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a3bcce879ae90029e76ab6b2a24acf49493369583e0dc08d516972c92682fef902197d2ad15ccc088528a75a068aab5d87bd4d66f5b3e2d6bd18f5c562bc534a96e802992988f965f487af2c0c39f9dc2f116f6"], 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r6, 0x4, r6}, 0x10) ioctl$sock_ifreq(r5, 0x8911, &(0x7f0000000200)={'pim6reg0\x00', @ifru_map={0x1, 0x1, 0x200, 0x8, 0x5, 0x8}}) 39.409193442s ago: executing program 35 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe7, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd9, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x2f, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0xc7, 0x3, 0xc}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x23, 0x5f, [@multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1, @remote, @local]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}, "bc"}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) socket(0x25, 0xa, 0x80000001) getsockopt$inet_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="c5a1ed4b3f75892c100a46486af9adf540bc130400ef93357be826ed4fd65e6c96b000c1fe2ab6a7c2d133465c77b1aef19530e94fce60cec939e37398c3e15ad793cb70"], 0x7c}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400000000f0800014000000000180005800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a3bcce879ae90029e76ab6b2a24acf49493369583e0dc08d516972c92682fef902197d2ad15ccc088528a75a068aab5d87bd4d66f5b3e2d6bd18f5c562bc534a96e802992988f965f487af2c0c39f9dc2f116f6"], 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r6, 0x4, r6}, 0x10) ioctl$sock_ifreq(r5, 0x8911, &(0x7f0000000200)={'pim6reg0\x00', @ifru_map={0x1, 0x1, 0x200, 0x8, 0x5, 0x8}}) 15.449110802s ago: executing program 4 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x40}}, 0x0) 15.299458593s ago: executing program 4 (id=2788): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xc8, 0x4c) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 13.864791986s ago: executing program 4 (id=2803): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000440)=0x101, 0x31) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'ipvlan1\x00', @random="26055c52ce4c"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 13.170795293s ago: executing program 4 (id=2809): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x6) 13.041216174s ago: executing program 4 (id=2811): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'pimreg\x00', {}, 0x5}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x1, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x0, 0x29f4}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmmsg(r0, &(0x7f0000000140), 0x0, 0x4800) 12.869336033s ago: executing program 4 (id=2813): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f00000003c0)=@newtclass={0x8b0, 0x28, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xe}, {0xfff2, 0xfff1}, {0x3, 0x7}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x858, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x7fffffff, 0x9, 0x1, 0x40, 0x0, 0x100, 0x8001, 0x0, 0xaca, 0x1, 0x1, 0x9, 0x8, 0xfffffffb, 0x3, 0x1, 0x0, 0xff, 0x9, 0x71de, 0x4, 0x117f, 0x7ff, 0x0, 0x7fffffff, 0x8f7b, 0x445a9eca, 0xe8b, 0x1ff, 0x6, 0x8, 0xfffffffa, 0x0, 0x80000000, 0x1, 0x9, 0x200, 0x7ff, 0x6, 0x5, 0x9, 0x2, 0x2, 0x101, 0x3, 0xffff8000, 0x0, 0x3, 0x8, 0x7, 0xd28, 0x7, 0x7, 0xfffffff7, 0x5, 0xa4, 0xffffffff, 0xd, 0x0, 0x101, 0x8, 0x6, 0x65e, 0x6, 0x400, 0x7, 0x9, 0x7, 0x2, 0x5, 0xc0000, 0x82, 0x7, 0x101, 0x1, 0x7, 0x4f742ccb, 0x9, 0x8, 0x6, 0x3, 0x7, 0x9, 0x8, 0x6, 0xb, 0xc4, 0x7, 0x7fffffff, 0x7, 0x6, 0x80, 0x400, 0x401, 0x6, 0xa20, 0xc436, 0x2, 0x5, 0x0, 0x1000, 0xffffffff, 0x4, 0x1, 0xfffffffd, 0x2, 0x40, 0x7e5, 0x3, 0x81, 0xff, 0x9, 0x5c, 0x39293ee0, 0x1, 0xf, 0x6, 0x3, 0x1, 0x80000000, 0x3, 0x3ff, 0x7d5, 0x8, 0x41e8af8d, 0x31, 0xdd, 0x4, 0x5, 0x4, 0xc7df, 0x6, 0x8000, 0x5, 0x6, 0x0, 0x3, 0xd, 0xffc, 0x9, 0x4, 0x4, 0x7, 0x10001, 0x59000000, 0x2, 0x7, 0x1000, 0x7, 0x4, 0x10001, 0x0, 0x8, 0x1c, 0x3, 0x96, 0x4, 0x3, 0x3, 0x3, 0x9, 0xc, 0x7, 0x930, 0x2, 0x1, 0x0, 0x6604, 0x0, 0x1, 0x5, 0x6, 0x2, 0x56, 0x6, 0x9, 0x7ae0, 0x200, 0x2, 0xfbf, 0x7fff, 0x8000, 0xff, 0x0, 0x8, 0x9, 0x3, 0x9, 0x9, 0x5, 0xffffffff, 0x2, 0x5296, 0x1, 0xc, 0x7, 0x5, 0x9, 0x5, 0x2, 0x1e5540f5, 0xfffff7e3, 0xaef3, 0x5, 0x1, 0x7, 0x57, 0x1, 0x9, 0xd72, 0xce20, 0x0, 0xe71, 0xff, 0x4, 0x1, 0xeb2f, 0x8000, 0x5, 0x2, 0x4, 0xffffffff, 0xdb20, 0x2, 0x5, 0x2ea00000, 0x3, 0xa, 0x4e09e43d, 0x2bc, 0x1, 0x8, 0x2, 0x6, 0x3, 0x80000001, 0x9, 0x1, 0xfffffce3, 0x10, 0x4be, 0x9, 0xffffe744, 0x0, 0x5, 0xbb2, 0xa, 0x2, 0x2, 0x6, 0x4, 0x5, 0x4, 0x1, 0x2]}, @TCA_HTB_RATE64={0xc, 0x6, 0xfffffffffffff800}, @TCA_HTB_PARMS={0x30, 0x1, {{0xf, 0x2, 0x7ff, 0x4, 0x7b, 0x1}, {0x1, 0x0, 0x7, 0xfff, 0x1, 0x4}, 0x5, 0x5, 0x5, 0x3ff, 0x7}}, @TCA_HTB_CTAB={0x404, 0x3, [0xb, 0x4, 0x4, 0x7ff, 0x800, 0x1, 0x101, 0x6, 0x5, 0x4, 0x10, 0x3, 0x9, 0x7, 0x8000, 0x40, 0x4, 0x6, 0x0, 0x2, 0x1ff, 0x2, 0xd, 0x7, 0x9, 0x6, 0x5, 0x3, 0x3, 0x1, 0x28, 0x7, 0x7, 0x2, 0x608, 0x8, 0x0, 0xa, 0x800, 0x0, 0x8000, 0x3, 0x2, 0x6, 0x9, 0x40, 0x1, 0x7, 0x8, 0x0, 0x7, 0x1000, 0x8, 0x2, 0x7, 0x8, 0x7, 0x7, 0x0, 0x3, 0x6, 0x7fffffff, 0x400, 0x6, 0x0, 0xb, 0x200, 0x4, 0xb, 0x4c53, 0x2, 0xf, 0x10000000, 0x0, 0x3ff, 0x1, 0x2, 0x0, 0x8, 0x7, 0x2, 0x1, 0x3, 0x4, 0x0, 0xe, 0x3, 0x4, 0x4, 0x3, 0xcd, 0xc, 0x9, 0x6, 0xb1, 0x6, 0x1, 0x9, 0x9, 0x2, 0x4, 0x3, 0x2, 0x0, 0x100, 0xffffff66, 0x1, 0x3703, 0x7, 0x3, 0x5, 0xffffffff, 0xffffffff, 0x7, 0x80000000, 0x495, 0x6, 0x6, 0x2, 0x8001, 0x1000, 0x8, 0xe56, 0x7, 0x92, 0xe, 0xff6, 0x7, 0x5, 0x1ff, 0x1, 0x7, 0x4e, 0xe, 0x5, 0x3ff, 0x5, 0xca35, 0x7, 0x6, 0x4, 0xfffffffd, 0x1, 0x8000, 0x1, 0x0, 0xdf3, 0x4, 0x10, 0xf, 0x3, 0xe, 0x7, 0x1, 0x0, 0xffffffff, 0x2, 0x0, 0x7, 0xa, 0x1ff, 0x0, 0x80000000, 0x2b83, 0x8000, 0x78, 0x7f, 0x80000000, 0x3, 0x5, 0x7fffffff, 0x1ff, 0xc6, 0x8000, 0x1000, 0x1, 0x3, 0x4, 0x4, 0xffffffff, 0x6, 0x7, 0x2, 0x3, 0x6, 0xfffffe02, 0xa9d, 0x9, 0xff, 0x293a, 0x10001, 0x8, 0x4, 0x2, 0xc0000000, 0x0, 0x8001, 0x5, 0x2, 0x0, 0x9, 0x7f, 0x7, 0xfffffff9, 0x2, 0xa9, 0x80, 0x4, 0x2, 0x7f, 0xff, 0x7, 0x5, 0x7f, 0x4, 0xffffff7d, 0x9, 0x9, 0x7ff, 0x7, 0x8, 0x8000, 0x2, 0x3, 0xffffffff, 0x80, 0x9, 0x140, 0x9, 0x8, 0x800, 0x9, 0x7, 0x0, 0x9, 0x0, 0x4, 0xc, 0xffffffff, 0xb3, 0x974d, 0x0, 0x9, 0x1, 0x7, 0xfffffff9, 0x50, 0x894c, 0x9, 0x7fc00, 0x6, 0x62, 0x7, 0x7f, 0x3, 0x3]}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_cbs={0x8}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000001) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd14", 0x3}, {0x0}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "9c1bbd165dfac921", "f91de8e4eca1b0d6a800afd99db880e0", "bb8deb71", "11c86af173126276"}, 0x28) 2.802581032s ago: executing program 7 (id=2895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000390400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2.323675279s ago: executing program 7 (id=2899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000028000180140004000000000000000000000001080700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x95e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x250, 0x1398, 0x1398, 0x250, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xf8, 0x140}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd59) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000028000180140004000000000000000000000001080700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x95e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x250, 0x1398, 0x1398, 0x250, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xf8, 0x140}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd59) (async) 1.918454326s ago: executing program 8 (id=2901): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x1, 0x0, 0xa}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}]}, 0x74}}, 0x41) bind$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @short={0x2, 0x1, 0x555d}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x206, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r3 = accept4(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80, 0x80c00) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000400)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000440)=0x1, 0x4) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000480)) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000680)={@private0, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x98}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10000}, 0x0) connect$phonet_pipe(r3, &(0x7f0000000840)={0x23, 0xe7, 0x2}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000880)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff2c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) close(r9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8018, r3}, 0x18) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000c00)={0x1058, 0x14, 0x200, 0x70bd25, 0x25dfdbfd, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "baba051be83927ade910f5f14bd8fa006724774fe055ee1d1569d35d2c895eacb0fc2b9d065d155d296ba244d44ca1c5528691a869"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1058}, 0x1, 0x0, 0x0, 0x4c040}, 0x800) write$tun(0xffffffffffffffff, &(0x7f0000001d00)={@val={0x0, 0x88f8}, @val={0x3, 0x0, 0xff01, 0x3, 0x4, 0x3}, @mpls={[{0xffff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x5}, {0x6d83, 0x0, 0x1}, {0x2}, {0xc, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="5223bb8a27c9a758b3e45201e850aadd2287e78168bb8cec8a459d030f1129d7b1a7c6f8b7791dabdb6e2a3d892d348d436b5945cf00869526d78603b8d5bd98b7e63c936fb722d920dcd7ffedefde0c7a12126f83d986b75ab403d21fbfb60e94bfa1afb74c7c6204e4a1e81d2813039efbde33795787788fa7fc8d417c7e1bedd671026b033d766f5762c65bf1b3da66f88b52dbb6040b7b31cea996"}}, 0xcf) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7e5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.800598597s ago: executing program 7 (id=2902): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000240)={{0xd2, @empty, 0x4e24, 0x1, 'lblcr\x00', 0x17, 0xbc, 0x37}, {@loopback, 0x4e20, 0x3, 0x9, 0x4, 0x2}}, 0x44) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="08001e0000030600cdfd2f00400045a3002600630000401190780a010104ffffffff4e264e2000129078628100008a0000003de7"], 0x34) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.635166676s ago: executing program 8 (id=2903): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb050018000000000000000e0000000c000027d05d41fc576a3d000800000f0400000000005f00"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_tracing={0x1a, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="183500000500000000000000000000009500000000000000346afeff0800000018220000", @ANYRES32=r2, @ANYBLOB="00000000080000008520000004000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x4f, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x3, 0x10, 0xd9, 0x3dcd}, 0x10, 0x155d8, 0xffffffffffffffff, 0x1, &(0x7f0000001500)=[r1, r1, r1, r1, r1], &(0x7f0000001540)=[{0x2, 0x5, 0x9, 0x8}], 0x10, 0x7}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000003b80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r2, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.544912496s ago: executing program 1 (id=2905): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.522887357s ago: executing program 8 (id=2906): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x1, 0x8000, 0x20}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x26, &(0x7f0000000300)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10}, @generic={0x4, 0x2, 0x7, 0x1f, 0xfffffff4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfb}}], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r1, r1, r1], &(0x7f0000000540)=[{0x3, 0x4, 0x3, 0x9}, {0x0, 0x4, 0x3, 0x6}, {0x2, 0x4, 0x4, 0x9}, {0x4, 0x5, 0x6, 0xc}, {0x0, 0x5, 0xd, 0x8}]}, 0x94) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r3, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000006c0)=[0x2], 0x100000000}}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (rerun: 32) 1.367526299s ago: executing program 8 (id=2907): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}}, 0x20}}, 0x0) 1.366221118s ago: executing program 1 (id=2908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x2000000, 0x0, 0x2700, 0x0, 0x0, 0xfffffffe}}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0xff, @remote, 0x4e20, 0x1, 'dh\x00', 0x4, 0xb7, 0x42}, {@remote, 0x4e24, 0x2, 0x0, 0x5, 0xc7}}, 0x44) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1401000029000100000000000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r1, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) ioctl$AUTOFS_IOC_READY(r5, 0x400442c9, 0x200000f3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x58, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa1b3c829edcb97f5, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x80000000, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x22}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x627fda81}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x58}, 0x1, 0x0, 0x0, 0x34000180}, 0x4040800) sendmsg$AUDIT_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfc, {0x80, 0x1, 0x2, r10, 0xfffffffa, 0xffff0082, 0xfffffff9, 0xc, 0x0, 0x5, 0x6dc7}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x200088d0}, 0xf2a2a36da0fab279) 1.30989272s ago: executing program 8 (id=2909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000300)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x40081) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0x40000f, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x48090) listen(0xffffffffffffffff, 0x4) 1.179568442s ago: executing program 3 (id=2910): ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0xe, 0x5, 0x1, 0x1, 0x81, 0x1a, 0x1a, "88eb58717d37a98a306dadb3a1dbad1e005739f5", "5680804cca9dde301e061f3cc971d04fe318b688"}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) 1.048349712s ago: executing program 1 (id=2911): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x5e}, 0xfffffffffffffffd, 0x0, 0x480000000, 0x42, 0x29, 0x100000001, 0x5, 0x9}}], 0x58}, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x6, 0x4) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendto$inet6(r4, &(0x7f00000001c0)="a8fdff78152d5c0821a22ef958a11226dc09066e0fca48fe0603f895266904e112a1bfba9429de347c51ee5c2a037892b81a6b19", 0x34, 0x4000000, &(0x7f0000000200)={0xa, 0x4e20, 0x5, @mcast1, 0x101}, 0x1c) (async) write(r4, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) getsockopt$inet6_int(r4, 0x29, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa9eaa0180c200000281000200000c010000e0110100006b59debd54c4670a"], &(0x7f0000000180)={0x1, 0x2, [0x980, 0xc62, 0xfa8, 0xbd4]}) 1.047664334s ago: executing program 3 (id=2912): r0 = socket(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x0, 0xcb) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r0) 866.790662ms ago: executing program 1 (id=2913): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0500"], 0x10) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'wg2\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffffdffc, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="490365a59684"}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001005000000000000de6c04aec9", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r12, @ANYBLOB="08000a008c6da2052b09dfc75ed96cb27942c0efbbc7aa9866a0c3283e3b622d", @ANYRES64=0x0, @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r10, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r15, 0x1, 0x85, 0x6, @broadcast}, 0x14) 770.929025ms ago: executing program 3 (id=2914): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004100010029bd70000400000003000000f5a419de100001800c001080050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c001}, 0x4008094) 687.598561ms ago: executing program 7 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2e4, 0x32, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@typed={0x23, 0x158, 0x0, 0x0, @binary="c1c689b5bfe39882b2ba93eac0740382abd097f6585a6be9ae51e863ddc003"}, @nested={0x159, 0xb4, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x110}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="4e94b5f157e31aa95593387bce1e2813c13ed4f52b3280f57e4b7df91993b225c59e06abe5aaa476102c1c9055dc70865632a8b32d7027b932a97f1a617a615abf97ea16ff37a5e7d19876af5f7aaaf01942d8ad83e4cb0a561018567c02dcb8e625c6ea8ea459ee4fb1b60219023f326d9592e8f33f2b5aa9c9d8985dfb31f3d78d8bfc15b3de82967ba44b21530245023a5024bc1e947aec399da2ede47338663792aa0adac627c4f9bdd09e06fa69549f42645327fc61a60f2b924ed913f64637372cc0c523230ce8c5e729ae611f95", @nested={0x4, 0xd6}, @typed={0x8, 0x16, 0x0, 0x0, @fd}, @generic="9680766b14027f4698732a45b1512a694e4bdb0f375727f3db53a31921cbee042ecce463e792d257c01a48ecbf834f26d2a6a9950f56544f535ee501d8378b3ed313992dee797cf8090021c41f24a956740e9a0439a069e4"]}, @generic="afc165606d94e5f0d4e19197d6330638bbb2901fb3d0f94344d3514a9152f4e2ea7c4c1c82e664d2ccb3805ac5053572c9805aff0fbe689ec8778a76a9c1e6ae94414af1d43ece64a301239bf574950d4d540ac1eea01fed1a3f68217507a03c9b945167dc1fc1", @typed={0xdd, 0x42, 0x0, 0x0, @binary="7e1b28979323f78d5aa4aa5db59804369a33df47778828667646618d9424cca5b188c4c95036ee8c2ee490aaa3201c621ba55aacd56ae0844e8e2649b19edfb17a87f09680ca4d93eb0c3b07ea4de6cd8ecacb41e767dfd64eeab9c1475f99b592b4d0f6af18c43f635960c82d11fa9f81430b40e77d8299fc2ca3109ea70d64551df856f21a3d82359814cc1c2c85681898f14e9d278310d1555deeecd737ae0249d647b7fc3aec696b8207d9dba4e0f1a5ef6f775347c9dcd0edfb7d2f71e220ed10b77757f76af221c6c8a5f0e05542671ccb399f44a852"}, @nested={0x8, 0x15c, 0x0, 0x1, [@nested={0x4, 0x6b}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000050}, 0x8084) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000003640)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x83ee}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)="82", 0x1}], 0x1}}], 0x1, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffb}}, 0xe8) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x6, 0x80000000, 0x9, 0x80000002}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2e4, 0x32, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@typed={0x23, 0x158, 0x0, 0x0, @binary="c1c689b5bfe39882b2ba93eac0740382abd097f6585a6be9ae51e863ddc003"}, @nested={0x159, 0xb4, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x110}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="4e94b5f157e31aa95593387bce1e2813c13ed4f52b3280f57e4b7df91993b225c59e06abe5aaa476102c1c9055dc70865632a8b32d7027b932a97f1a617a615abf97ea16ff37a5e7d19876af5f7aaaf01942d8ad83e4cb0a561018567c02dcb8e625c6ea8ea459ee4fb1b60219023f326d9592e8f33f2b5aa9c9d8985dfb31f3d78d8bfc15b3de82967ba44b21530245023a5024bc1e947aec399da2ede47338663792aa0adac627c4f9bdd09e06fa69549f42645327fc61a60f2b924ed913f64637372cc0c523230ce8c5e729ae611f95", @nested={0x4, 0xd6}, @typed={0x8, 0x16, 0x0, 0x0, @fd}, @generic="9680766b14027f4698732a45b1512a694e4bdb0f375727f3db53a31921cbee042ecce463e792d257c01a48ecbf834f26d2a6a9950f56544f535ee501d8378b3ed313992dee797cf8090021c41f24a956740e9a0439a069e4"]}, @generic="afc165606d94e5f0d4e19197d6330638bbb2901fb3d0f94344d3514a9152f4e2ea7c4c1c82e664d2ccb3805ac5053572c9805aff0fbe689ec8778a76a9c1e6ae94414af1d43ece64a301239bf574950d4d540ac1eea01fed1a3f68217507a03c9b945167dc1fc1", @typed={0xdd, 0x42, 0x0, 0x0, @binary="7e1b28979323f78d5aa4aa5db59804369a33df47778828667646618d9424cca5b188c4c95036ee8c2ee490aaa3201c621ba55aacd56ae0844e8e2649b19edfb17a87f09680ca4d93eb0c3b07ea4de6cd8ecacb41e767dfd64eeab9c1475f99b592b4d0f6af18c43f635960c82d11fa9f81430b40e77d8299fc2ca3109ea70d64551df856f21a3d82359814cc1c2c85681898f14e9d278310d1555deeecd737ae0249d647b7fc3aec696b8207d9dba4e0f1a5ef6f775347c9dcd0edfb7d2f71e220ed10b77757f76af221c6c8a5f0e05542671ccb399f44a852"}, @nested={0x8, 0x15c, 0x0, 0x1, [@nested={0x4, 0x6b}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000050}, 0x8084) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r3, &(0x7f0000003640)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x83ee}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)="82", 0x1}], 0x1}}], 0x1, 0x20000000) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x6, 0x80000000, 0x9, 0x80000002}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) (async) 639.13667ms ago: executing program 3 (id=2916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x8000, 0x209, 0x40, 0x23d, 0x6, 0x1, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x48, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x76ea, @mcast1, 0x1000}, @in6={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00', 0x80000001}]}, &(0x7f0000000140)=0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r1, 0x80, 0x3, 0x5}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r1, 0x20, 0x6f, "37bbffb8b6e11d993fc582874a4e3abdd662a32144f29aa49dc15bd8113d2249010c50496e638f2da8926bd3b88b8d39aea2ae79265e88adc7eaeab001744ebeb49118cf49251f5ef6f5fdb346045bf9311bd07c7144882379e5586b08108da86b572ffa71b04c856bddcbf639c984"}, 0x77) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000380)={@multicast1, @private=0xa010100, 0x1, "06e67dd04bdbbccd19d71e7f9e34b51f1756246321d4d0a6e7affc07fb7ab475", 0x7, 0xa, 0x4, 0x4}, 0x3c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r2, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r4, 0x4, 0x6}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000480)={r2, @in={{0x2, 0x4e20, @broadcast}}, [0x100000000, 0x8000, 0x498569f6, 0x8000, 0x3, 0x7, 0x0, 0xd77, 0x1, 0x0, 0x1, 0x6e4, 0x1, 0x5, 0x4]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000005c0)={r5, 0xffffffba}, &(0x7f0000000600)=0x8) getpeername$netlink(r3, &(0x7f0000000640), &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000006c0)={r5, @in6={{0xa, 0x4e22, 0x7ff, @mcast2, 0x2}}, 0x3, 0x8001, 0x1, 0x10000, 0x80000001}, &(0x7f0000000780)=0x98) r6 = socket$unix(0x1, 0x7314566c360afb36, 0x0) recvmsg$unix(r6, &(0x7f0000000a80)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f00000008c0)}], 0x2, &(0x7f0000000940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x40000120) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000ac0)=0x18, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000b00)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000d00)={r4, 0x7d5}, &(0x7f0000000d40)=0x8) ioctl$F2FS_IOC_DECOMPRESS_FILE(r13, 0xf517, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000d80)={0x40}, 0x8) setsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, &(0x7f0000000dc0)=0x4, 0x4) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r7) sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r14, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x5) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, &(0x7f0000000f40)={0x100000000, 0x1, 0x3, 0x1, 0x0, [0x800, 0x1, 0x4, 0x10000]}) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000f80)={@local, @broadcast}, 0xc) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r15, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r16, 0x608, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000) 492.122805ms ago: executing program 3 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7f}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 379.660311ms ago: executing program 1 (id=2918): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/118, 0x76}], 0x3, 0x8, 0x0) mmap(&(0x7f0000683000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x80000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) (async) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/118, 0x76}], 0x3, 0x8, 0x0) (async) mmap(&(0x7f0000683000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x80000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) 379.294583ms ago: executing program 7 (id=2919): socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet6(0xa, 0x1, 0x0) listen(r6, 0xb) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) 242.011203ms ago: executing program 1 (id=2920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/cgroup\x00') socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 228.728852ms ago: executing program 8 (id=2921): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0x10}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd50, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000100100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 159.503136ms ago: executing program 3 (id=2922): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x2, 0x3, 0xff80000000000000, 0xfffffffffffffff7}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='pim6reg1\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x21a4, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&%\x1a.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']!*$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff1043}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\\/\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.+%}-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "517bfc8ada89d165d72cdba430ab029a02f7439cc563e6554dcd3501"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe21c}]}]}, 0x21a4}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 7 (id=2923): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00010d000000fcdbdf25770000000800ef00050000000500ee000500000094caaec3f86d60806faa08f0421aef74d919058d5b4a7d2e9ec1c184fddf00f7b8200d1cdad6f4222cda00961e915efd79c0346d72f7b181abcc67a48f01757c962d85234b9420d2544fb643ce7dfd42ff729a902e76e80a0084f9db305be8e2af830d82e4afd307419034ad94e4d91d876d87e891d239002a6d65699d37a7991c223ccc7ae5e75cea0e970551e9de9e1871e666fa050a0a1ed41decb74d092207485cfe1b25a07b4a8d4e7092cbc9b66e012eee86cffe1182daa9c164c3f02a50d1c22defff2d8607151f923db99169069dce0000255a43c3d0"], 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x80c0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000600020000000200"/26], 0x20}, 0x1, 0x0, 0x0, 0x40000040}, 0x4044000) socket(0x1e, 0x5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, 0x0, 0x0) recvmsg$unix(r11, 0x0, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe) kernel console output (not intermixed with test programs): 002926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.060907][T10772] IPVS: using max 29 ests per chain, 69600 per kthread [ 237.114448][T10782] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1379'. [ 237.194153][T10784] netlink: 'syz.2.1378': attribute type 16 has an invalid length. [ 237.202129][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1378'. [ 237.354295][T10798] netlink: 'syz.2.1382': attribute type 21 has an invalid length. [ 237.416860][T10798] netlink: 'syz.2.1382': attribute type 22 has an invalid length. [ 237.426454][T10798] netlink: 'syz.2.1382': attribute type 23 has an invalid length. [ 237.434317][T10798] netlink: 'syz.2.1382': attribute type 25 has an invalid length. [ 237.442165][T10798] netlink: 'syz.2.1382': attribute type 26 has an invalid length. [ 237.450018][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'. [ 237.469664][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 237.567068][T10804] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 237.586492][T10804] team0: Port device dummy0 added [ 237.689976][T10665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.053610][T10825] syzkaller0: entered promiscuous mode [ 238.059158][T10825] syzkaller0: entered allmulticast mode [ 238.229861][T10837] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 239.037595][T10873] raw_sendmsg: syz.1.1403 forgot to set AF_INET. Fix it! [ 239.183118][T10877] geneve4: entered promiscuous mode [ 239.193745][T10877] geneve4: entered allmulticast mode [ 239.232271][T10881] ip6gre1: entered promiscuous mode [ 239.263814][T10881] ip6gre1: entered allmulticast mode [ 239.289544][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.310987][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.338508][T10884] syzkaller0: entered promiscuous mode [ 239.357094][T10884] syzkaller0: entered allmulticast mode [ 239.372121][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.381751][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.696866][T10908] netlink: ct family unspecified [ 239.721928][T10908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.962251][T10920] geneve3: entered promiscuous mode [ 240.131249][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.316335][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.846522][T10965] tipc: Started in network mode [ 240.869517][T10965] tipc: Node identity 9e27e579fe3f, cluster identity 4711 [ 240.915122][T10965] tipc: Enabled bearer , priority 0 [ 241.087408][T10971] syzkaller0: entered promiscuous mode [ 241.093622][T10971] syzkaller0: entered allmulticast mode [ 241.099999][T10971] tipc: Resetting bearer [ 241.156103][T10961] tipc: Resetting bearer [ 243.102872][T10961] tipc: Disabling bearer [ 243.125825][T10989] syzkaller0: entered promiscuous mode [ 243.131794][T10989] syzkaller0: entered allmulticast mode [ 243.223969][ T6255] tipc: Node number set to 1612244345 [ 243.406156][T11006] __nla_validate_parse: 8 callbacks suppressed [ 243.406177][T11006] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1441'. [ 243.526326][T11007] syzkaller1: entered promiscuous mode [ 243.533359][T11007] syzkaller1: entered allmulticast mode [ 243.576719][T11006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.654353][T11016] tcf_pedit_act: 7 callbacks suppressed [ 243.654372][T11016] tc action pedit 'at' offset 4 out of bounds [ 244.286470][T11038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.301761][T11038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.774847][T11021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.925002][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1451'. [ 246.997657][T11062] netlink: 'syz.1.1452': attribute type 3 has an invalid length. [ 247.208203][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'. [ 247.264788][T11074] veth3: entered promiscuous mode [ 247.269900][T11074] veth3: entered allmulticast mode [ 247.491504][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 247.668675][T11099] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1465'. [ 247.704331][T11100] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1465'. [ 247.857169][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 247.867752][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 247.932074][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 248.052029][T11124] xt_cgroup: xt_cgroup: no path or classid specified [ 248.565593][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 248.593737][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 248.837651][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 248.846988][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 249.153170][T11175] xt_CT: No such helper "snmp" [ 249.340668][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 250.046407][T11221] netlink: 'syz.2.1499': attribute type 9 has an invalid length. [ 250.119745][T11221] syzkaller1: entered promiscuous mode [ 250.144043][T11221] syzkaller1: entered allmulticast mode [ 250.193150][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 250.584538][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 250.746974][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 250.784022][T11256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1505'. [ 250.945355][T11265] macvlan2: entered promiscuous mode [ 250.950728][T11265] macvlan2: entered allmulticast mode [ 250.958244][T11265] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 250.966902][T11265] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 250.976792][T11265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.988397][T11265] team0: Port device macvlan2 added [ 251.011688][T11265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.200277][T11276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.218131][T11278] wg2 speed is unknown, defaulting to 1000 [ 251.225349][T11278] wg2 speed is unknown, defaulting to 1000 [ 251.232064][T11278] wg2 speed is unknown, defaulting to 1000 [ 251.428066][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 251.610441][T11278] infiniband syz2: set down [ 251.615435][ T5744] wg2 speed is unknown, defaulting to 1000 [ 251.615439][T11278] infiniband syz2: added wg2 [ 251.636004][T11278] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 251.651138][T11278] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 251.668478][T11278] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 251.709251][T11278] RDS/IB: syz2: added [ 251.713347][T11278] smc: adding ib device syz2 with port count 1 [ 251.720956][T11278] smc: ib device syz2 port 1 has no pnetid [ 251.727146][ T6255] wg2 speed is unknown, defaulting to 1000 [ 251.734579][T11278] wg2 speed is unknown, defaulting to 1000 [ 252.163604][T11278] wg2 speed is unknown, defaulting to 1000 [ 253.082532][T11278] wg2 speed is unknown, defaulting to 1000 [ 253.359816][T11342] netlink: 'syz.2.1526': attribute type 83 has an invalid length. [ 253.714026][T11278] wg2 speed is unknown, defaulting to 1000 [ 254.318849][T11278] wg2 speed is unknown, defaulting to 1000 [ 254.581469][T11388] __nla_validate_parse: 35 callbacks suppressed [ 254.581488][T11388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1537'. [ 254.726554][T11397] netlink: 'syz.4.1539': attribute type 21 has an invalid length. [ 254.735110][T11397] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1539'. [ 254.787893][T11393] xt_hashlimit: size too large, truncated to 1048576 [ 255.504546][T11409] xt_socket: unknown flags 0x8 [ 255.791727][T11401] wg2 speed is unknown, defaulting to 1000 [ 255.816970][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 256.053115][T11447] netlink: 'syz.3.1551': attribute type 9 has an invalid length. [ 256.110897][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 256.359303][T11465] netlink: 'syz.3.1555': attribute type 4 has an invalid length. [ 256.728592][T11485] tipc: Enabled bearer , priority 0 [ 256.968552][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 256.989904][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 257.581678][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.632582][T11513] bond6 (unregistering): Released all slaves [ 258.129823][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 258.151805][T11540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1571'. [ 258.163895][T11540] netlink: 'syz.2.1571': attribute type 9 has an invalid length. [ 258.397145][T11552] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 258.562949][T11558] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1577'. [ 258.666028][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 259.347778][T11593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.378542][T11596] syzkaller0: entered promiscuous mode [ 259.385863][T11596] syzkaller0: entered allmulticast mode [ 259.693426][T11607] batadv_slave_0: entered promiscuous mode [ 260.041641][T11595] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 260.070103][T11595] team0: Port device dummy0 added [ 260.147005][T11595] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 260.182029][T11595] team0: Port device dummy0 removed [ 260.819122][T11648] __nla_validate_parse: 1 callbacks suppressed [ 260.819142][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1602'. [ 260.895659][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 260.920237][T11654] openvswitch: netlink: IP tunnel dst address not specified [ 261.001623][T11665] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 261.039575][T11665] macvlan3: entered promiscuous mode [ 261.045514][T11665] macvlan3: entered allmulticast mode [ 261.052950][T11665] bond6: entered promiscuous mode [ 261.060088][T11665] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 261.079188][T11665] bond6: left promiscuous mode [ 261.094115][T11667] nft_compat: unsupported protocol 1 [ 261.689084][T11643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.847569][T11682] netlink: ct family unspecified [ 261.853287][T11682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.865477][T11686] openvswitch: netlink: Key type 119 is out of range max 32 [ 261.940128][T11691] SET target dimension over the limit! [ 262.019237][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 262.243494][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 262.370697][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1617'. [ 262.531299][T11715] syzkaller0: entered promiscuous mode [ 262.544778][T11715] syzkaller0: entered allmulticast mode [ 262.777564][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.792436][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.825119][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.838948][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.848951][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.060221][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 263.471332][T11754] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1630'. [ 263.493215][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 263.815131][T11780] syzkaller1: entered promiscuous mode [ 263.845223][T11780] syzkaller1: entered allmulticast mode [ 263.905587][T11782] xt_hashlimit: invalid interval [ 263.912024][T11782] netlink: 'syz.4.1637': attribute type 30 has an invalid length. [ 264.018234][T11724] wg2 speed is unknown, defaulting to 1000 [ 264.326334][T11795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1640'. [ 264.341678][T11795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1640'. [ 264.496699][T11801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.030534][ T4943] Bluetooth: hci5: command tx timeout [ 267.040185][T11824] netlink: 'syz.1.1649': attribute type 2 has an invalid length. [ 267.102642][ T4943] Bluetooth: hci5: command tx timeout [ 267.579583][T11847] netlink: 'syz.4.1657': attribute type 75 has an invalid length. [ 267.620604][T11830] syzkaller0: entered promiscuous mode [ 267.628703][T11830] syzkaller0: entered allmulticast mode [ 267.642429][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.649720][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.656413][T11847] __nla_validate_parse: 1 callbacks suppressed [ 267.656464][T11847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1657'. [ 267.657382][T11724] bridge_slave_0: entered allmulticast mode [ 267.680100][T11724] bridge_slave_0: entered promiscuous mode [ 267.755789][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.763035][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.770718][T11724] bridge_slave_1: entered allmulticast mode [ 267.778240][T11724] bridge_slave_1: entered promiscuous mode [ 267.842431][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.876437][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.963822][T11859] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.1660'. [ 267.976361][T11724] team0: Port device team_slave_0 added [ 267.993760][T11724] team0: Port device team_slave_1 added [ 268.056692][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 268.066500][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 268.076640][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 268.085798][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.097297][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.126683][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.141717][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.148721][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.174953][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.271665][T11724] hsr_slave_0: entered promiscuous mode [ 268.278696][T11724] hsr_slave_1: entered promiscuous mode [ 268.287171][T11724] debugfs: 'hsr0' already exists in 'hsr' [ 268.297084][T11724] Cannot create hsr debugfs directory [ 268.361453][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 268.372163][T11873] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.565797][T11878] Cannot find add_set index 46338 as target [ 268.609003][T11880] netlink: 'syz.1.1667': attribute type 39 has an invalid length. [ 268.845056][T11724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.878589][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.892684][T11724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.978332][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.995983][T11724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.055409][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.080473][T11724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.105075][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.151549][T11892] netlink: 'syz.1.1671': attribute type 4 has an invalid length. [ 269.181043][ T4943] Bluetooth: hci5: command tx timeout [ 269.375055][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 269.399337][T11914] syzkaller1: entered promiscuous mode [ 269.406273][T11914] syzkaller1: entered allmulticast mode [ 269.457154][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.480415][T11724] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.539558][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.546847][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.670328][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.677647][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.717724][T11924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1677'. [ 270.433742][T11964] netlink: 'syz.4.1684': attribute type 20 has an invalid length. [ 270.441821][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 270.522718][T11964] netlink: 'syz.4.1684': attribute type 20 has an invalid length. [ 270.530736][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 270.582370][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.892391][T11990] bridge_slave_1: left allmulticast mode [ 270.898191][T11990] bridge_slave_1: left promiscuous mode [ 270.904427][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.931263][T11990] bridge_slave_0: left allmulticast mode [ 270.942339][T11990] bridge_slave_0: left promiscuous mode [ 270.958056][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.098026][T11997] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 271.126560][T11724] veth0_vlan: entered promiscuous mode [ 271.140321][T11997] nbd: couldn't find a device at index 16 [ 271.162800][T11724] veth1_vlan: entered promiscuous mode [ 271.247803][T11724] veth0_macvtap: entered promiscuous mode [ 271.265706][ T4943] Bluetooth: hci5: command tx timeout [ 271.296374][T11724] veth1_macvtap: entered promiscuous mode [ 271.316789][T11724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.331361][T11724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.346016][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.356661][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.366365][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.376519][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.011555][T12006] syzkaller1: entered promiscuous mode [ 272.048197][T12006] syzkaller1: entered allmulticast mode [ 272.329733][T12017] netlink: 'syz.4.1695': attribute type 5 has an invalid length. [ 272.371944][ T370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.390035][ T370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.497393][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.505761][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.661934][T12031] bond5: Invalid ad_actor_system MAC address. [ 272.668318][T12031] bond5: option ad_actor_system: invalid value (1) [ 272.679128][T12031] bond5 (unregistering): Released all slaves [ 272.718131][T12034] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 272.988381][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.004342][T12045] __nla_validate_parse: 1 callbacks suppressed [ 273.004360][T12045] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1703'. [ 273.019729][T12045] unsupported nlmsg_type 40 [ 273.047640][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.079389][T12050] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 273.087054][T12043] bond0: entered promiscuous mode [ 273.087121][T12043] bond_slave_0: entered promiscuous mode [ 273.088147][T12043] bond_slave_1: entered promiscuous mode [ 273.088360][T12043] bond2: entered promiscuous mode [ 273.129232][T12043] batadv0: entered promiscuous mode [ 273.136706][T12043] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 273.147252][T12051] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 273.155661][T12043] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 273.189906][T12043] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 273.236431][T12043] bond0: left promiscuous mode [ 273.241287][T12043] bond_slave_0: left promiscuous mode [ 273.246959][T12043] bond_slave_1: left promiscuous mode [ 273.252604][T12043] bond2: left promiscuous mode [ 273.281976][T12043] batadv0: left promiscuous mode [ 273.302343][ T7626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.373062][T12057] openvswitch: netlink: IP tunnel dst address not specified [ 273.380676][T12057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.390979][T12053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1706'. [ 273.414072][T12059] xt_ecn: cannot match TCP bits for non-tcp packets [ 273.421831][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 273.502300][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.522657][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.637528][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 273.650642][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 273.759912][T12069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.768541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.776841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.786282][T12071] erspan0: entered promiscuous mode [ 273.792283][T12071] erspan0: entered allmulticast mode [ 273.805668][T12071] netlink: 'syz.1.1712': attribute type 8 has an invalid length. [ 274.218481][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 274.227467][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 274.292454][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'. [ 274.390304][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1721'. [ 274.590240][T12110] pim6reg1: entered promiscuous mode [ 274.597071][T12114] xt_bpf: check failed: parse error [ 274.603033][T12110] pim6reg1: entered allmulticast mode [ 274.842784][T12120] syzkaller0: entered promiscuous mode [ 274.848603][T12120] syzkaller0: entered allmulticast mode [ 275.272483][T12142] xt_l2tp: v2 tid > 0xffff: 1114244 [ 277.358049][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.405704][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.419665][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.429348][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.458746][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.709336][T12128] smc: net device team0 applied user defined pnetid SYZ2 [ 278.226478][T12160] bond0: invalid NS target ff00:0:29bd:7000:1dc:df25:: specified for addition [ 278.268844][T12160] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 278.299893][T12157] ipt_rpfilter: unknown options [ 278.383024][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'. [ 278.659805][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 278.688066][T12186] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 278.823024][T12194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1745'. [ 278.854362][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 279.011026][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 279.015364][T12144] wg2 speed is unknown, defaulting to 1000 [ 279.034886][T12200] netlink: 'syz.1.1747': attribute type 5 has an invalid length. [ 279.052726][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'. [ 279.084080][T12203] bond6 (unregistering): Released all slaves [ 279.447445][T12214] netlink: 'syz.4.1751': attribute type 2 has an invalid length. [ 279.503770][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.511273][ T5627] Bluetooth: hci6: command tx timeout [ 279.587795][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.624772][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.640223][T12181] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 279.666721][T12181] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 279.694112][T12181] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 279.712119][T12181] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.735566][T12181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 279.901485][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.946569][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.957054][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.965812][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.978613][T12181] wlan1 speed is unknown, defaulting to 1000 [ 279.993819][T12181] wlan1 speed is unknown, defaulting to 1000 [ 280.010011][T12181] wlan1 speed is unknown, defaulting to 1000 [ 280.562586][T12244] team0 (unregistering): Port device team_slave_0 removed [ 280.592269][T12244] team0 (unregistering): Port device team_slave_1 removed [ 280.741130][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.763090][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.808632][T12144] bridge_slave_0: entered allmulticast mode [ 280.829750][T12144] bridge_slave_0: entered promiscuous mode [ 280.857716][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.875725][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.890477][T12144] bridge_slave_1: entered allmulticast mode [ 280.899510][T12144] bridge_slave_1: entered promiscuous mode [ 280.988739][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.003528][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.107469][T12270] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 281.162524][T12270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.186526][T12144] team0: Port device team_slave_0 added [ 281.196600][T12144] team0: Port device team_slave_1 added [ 281.293459][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.300483][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.328376][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.342506][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.350029][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.395402][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.564093][T12288] netlink: 'syz.3.1768': attribute type 2 has an invalid length. [ 281.582347][ T5627] Bluetooth: hci6: command tx timeout [ 281.598321][T12288] : entered promiscuous mode [ 281.634188][T12144] hsr_slave_0: entered promiscuous mode [ 281.652800][T12144] hsr_slave_1: entered promiscuous mode [ 281.664511][T12144] debugfs: 'hsr0' already exists in 'hsr' [ 281.677636][T12144] Cannot create hsr debugfs directory [ 281.713711][T12290] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 281.882162][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 281.913316][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 281.923160][T12290] bond9: entered promiscuous mode [ 281.928778][T12290] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.996590][T12297] dvmrp0: entered allmulticast mode [ 282.002121][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 282.053231][T12290] bond9: (slave bridge0): making interface the new active one [ 282.060783][T12290] bridge0: entered promiscuous mode [ 282.068181][T12290] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 282.165874][T12300] macsec1: entered promiscuous mode [ 282.171510][T12300] bridge0: entered promiscuous mode [ 282.177140][T12300] macsec1: entered allmulticast mode [ 282.183722][T12300] bridge0: entered allmulticast mode [ 282.190128][T12300] bridge0: port 3(macsec1) entered blocking state [ 282.197443][T12300] bridge0: port 3(macsec1) entered disabled state [ 282.234648][T12300] bridge0: left allmulticast mode [ 282.291271][T12305] "syz.4.1774" (12305) uses obsolete ecb(arc4) skcipher [ 282.302697][ T5744] bridge0: left promiscuous mode [ 282.728990][T12315] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1777'. [ 282.905793][T12320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.001834][T12144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.030105][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.042110][T12144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.064715][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.089399][T12144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.116556][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.132521][T12144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.164118][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.428906][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.447968][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.483784][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.491147][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.546371][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.553720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.584555][T12348] netlink: 'syz.1.1787': attribute type 64 has an invalid length. [ 283.662201][ T5627] Bluetooth: hci6: command tx timeout [ 284.090723][T12369] __nla_validate_parse: 2 callbacks suppressed [ 284.090744][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 284.143134][T12369] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 284.274274][T12376] netlink: 'syz.5.1795': attribute type 30 has an invalid length. [ 284.470752][T12387] bridge_slave_1: left allmulticast mode [ 284.476720][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.529496][T12387] bridge_slave_0: left allmulticast mode [ 284.535219][T12387] bridge_slave_0: left promiscuous mode [ 284.541030][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.559099][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 284.582691][T12390] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1799'. [ 284.709211][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.938646][T12411] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 284.990747][T12411] bond5: entered promiscuous mode [ 284.996710][T12411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.018701][T12417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1804'. [ 285.029322][T12412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.097593][T12412] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 285.107997][T12412] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 285.122541][T12412] bond5: (slave ip6gre3): making interface the new active one [ 285.130073][T12412] ip6gre3: entered promiscuous mode [ 285.137268][T12412] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 285.231372][T12144] veth0_vlan: entered promiscuous mode [ 285.286972][T12144] veth1_vlan: entered promiscuous mode [ 285.386875][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 285.492773][T12144] veth0_macvtap: entered promiscuous mode [ 285.534417][T12144] veth1_macvtap: entered promiscuous mode [ 285.541912][T12439] netlink: 'syz.5.1807': attribute type 1 has an invalid length. [ 285.563500][T12439] netlink: 'syz.5.1807': attribute type 2 has an invalid length. [ 285.578756][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 285.685482][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.710622][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.743784][ T5627] Bluetooth: hci6: command tx timeout [ 285.852686][ T370] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.866655][ T370] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.889428][T12455] netlink: 'syz.5.1814': attribute type 1 has an invalid length. [ 286.024827][T12455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.082721][T12455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 286.114269][ T370] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.134945][T12455] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.148982][T12455] bond1: (slave batadv1): making interface the new active one [ 286.158932][T12455] batadv1: entered promiscuous mode [ 286.167022][T12455] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 286.217608][ T370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.333617][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.341502][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.416727][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1820'. [ 286.475425][T12472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.489586][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 286.581293][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.605755][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.808368][T12487] sctp: [Deprecated]: syz.3.1823 (pid 12487) Use of int in maxseg socket option. [ 286.808368][T12487] Use struct sctp_assoc_value instead [ 286.877267][T12494] netlink: 'syz.1.1826': attribute type 2 has an invalid length. [ 287.245061][T12516] net_ratelimit: 98 callbacks suppressed [ 287.245085][T12516] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 287.311091][T12515] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 287.343488][T12515] syzkaller0: entered promiscuous mode [ 287.349036][T12515] syzkaller0: entered allmulticast mode [ 287.429904][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 287.462281][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1836'. [ 287.785227][T12528] syzkaller0: entered promiscuous mode [ 287.802525][T12528] syzkaller0: entered allmulticast mode [ 288.369472][T12562] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 289.055126][T12587] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.273168][T12615] __nla_validate_parse: 10 callbacks suppressed [ 289.273223][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 289.396439][T12587] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.791634][T12587] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.827309][T12634] xt_time: unknown flags 0xf4 [ 289.835582][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 289.939462][T12634] tipc: Disabling bearer [ 289.950521][T12634] team0 (unregistering): Port device team_slave_0 removed [ 289.978019][T12634] team0 (unregistering): Port device team_slave_1 removed [ 290.135336][T12587] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.231865][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.485746][T12653] ip6t_srh: unknown srh invflags 4000 [ 290.727186][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1872'. [ 291.336690][T12693] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 291.413751][T12693] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.725497][T12709] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 292.187077][T12722] pimreg: entered allmulticast mode [ 292.210465][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.226826][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.238915][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.249002][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.351877][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 292.798759][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1898'. [ 292.815244][T12719] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 292.823435][T12719] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 292.905843][T12743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1899'. [ 293.895200][T12772] syzkaller0: entered promiscuous mode [ 293.900747][T12772] syzkaller0: entered allmulticast mode [ 294.430528][ T5635] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 294.492929][ T5635] CPU: 1 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 294.492961][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 294.492991][ T5635] Call Trace: [ 294.492999][ T5635] [ 294.493008][ T5635] dump_stack_lvl+0xe8/0x150 [ 294.493042][ T5635] dump_header+0xd3/0x4b0 [ 294.493070][ T5635] oom_kill_process+0x3ab/0x970 [ 294.493092][ T5635] out_of_memory+0x1064/0x1480 [ 294.493108][ T5635] ? try_charge_memcg+0xbca/0x1590 [ 294.493151][ T5635] ? __pfx_out_of_memory+0x10/0x10 [ 294.493167][ T5635] ? do_raw_spin_unlock+0xf5/0x210 [ 294.493198][ T5635] try_charge_memcg+0xc74/0x1590 [ 294.493235][ T5635] ? __pfx_try_charge_memcg+0x10/0x10 [ 294.493256][ T5635] ? percpu_ref_tryget+0x15/0x180 [ 294.493311][ T5635] ? charge_memcg+0x20/0x2b0 [ 294.493337][ T5635] charge_memcg+0x19c/0x2b0 [ 294.493363][ T5635] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 294.493387][ T5635] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 294.493415][ T5635] swap_cache_alloc_folio+0x4de/0x990 [ 294.493447][ T5635] swap_cache_read_folio+0x44/0x120 [ 294.493470][ T5635] swap_cluster_readahead+0x3a0/0x640 [ 294.493495][ T5635] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 294.493524][ T5635] ? rcu_is_watching+0x15/0xb0 [ 294.493562][ T5635] ? get_vma_policy+0x27b/0x3c0 [ 294.493591][ T5635] swapin_readahead+0x19a/0xc10 [ 294.493613][ T5635] ? swap_table_get+0x1e/0x260 [ 294.493632][ T5635] ? swap_table_get+0x1e/0x260 [ 294.493651][ T5635] ? __pfx_swapin_readahead+0x10/0x10 [ 294.493674][ T5635] ? swap_table_get+0x1e/0x260 [ 294.493690][ T5635] ? swap_table_get+0x1e/0x260 [ 294.493704][ T5635] ? swap_table_get+0x1e/0x260 [ 294.493722][ T5635] ? swap_table_get+0x216/0x260 [ 294.493741][ T5635] ? swap_cache_get_folio+0x2e7/0x2f0 [ 294.493766][ T5635] do_swap_page+0x455/0x5060 [ 294.493810][ T5635] ? __pte_offset_map+0x29/0x240 [ 294.493836][ T5635] ? __lock_acquire+0x683/0x2cf0 [ 294.493860][ T5635] ? do_swap_page+0x124/0x5060 [ 294.493889][ T5635] ? __pfx_do_swap_page+0x10/0x10 [ 294.493920][ T5635] ? __pte_offset_map+0x1ae/0x240 [ 294.493944][ T5635] ? pte_offset_map_rw_nolock+0xea/0x160 [ 294.493966][ T5635] handle_mm_fault+0x124c/0x3080 [ 294.493998][ T5635] ? handle_mm_fault+0xec/0x3080 [ 294.494026][ T5635] ? __pfx_handle_mm_fault+0x10/0x10 [ 294.494043][ T5635] ? lock_vma_under_rcu+0x45a/0x500 [ 294.494090][ T5635] do_user_addr_fault+0xa4d/0x1340 [ 294.494128][ T5635] ? trace_page_fault_user+0x84/0x1e0 [ 294.494158][ T5635] exc_page_fault+0x6a/0xc0 [ 294.494190][ T5635] asm_exc_page_fault+0x26/0x30 [ 294.494211][ T5635] RIP: 0033:0x7fecb2b5e6ce [ 294.494229][ T5635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.494245][ T5635] RSP: 002b:00007fff206212d8 EFLAGS: 00010246 [ 294.494262][ T5635] RAX: 0000000000000000 RBX: 0000555594ddb500 RCX: 00007fecb2b5e6ce [ 294.494284][ T5635] RDX: 00007fff20621330 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.494295][ T5635] RBP: 00007fff2062139c R08: 0000000000000000 R09: 0000000000000000 [ 294.494306][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 294.494317][ T5635] R13: 00000000000927c0 R14: 0000000000047c1f R15: 00007fff206213f0 [ 294.494347][ T5635] [ 294.495454][ T5635] memory: usage 307200kB, limit 307200kB, failcnt 612 [ 294.842987][ T5635] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 294.851276][ T5635] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 294.858714][ T5635] Memory cgroup stats for /syz1: [ 294.859176][ T5635] cache 0 [ 294.868494][ T5635] rss 0 [ 294.871558][ T5635] rss_huge 0 [ 294.874842][ T5635] shmem 0 [ 294.877812][ T5635] mapped_file 0 [ 294.881468][ T5635] dirty 0 [ 294.884539][ T5635] writeback 0 [ 294.887892][ T5635] workingset_refault_anon 13 [ 294.893071][ T5635] workingset_refault_file 0 [ 294.897728][ T5635] swap 180224 [ 294.901210][ T5635] swapcached 262144 [ 294.905071][ T5635] pgpgin 41133 [ 294.908566][ T5635] pgpgout 41126 [ 294.912261][ T5635] pgfault 71590 [ 294.915773][ T5635] pgmajfault 9 [ 294.919259][ T5635] inactive_anon 4096 [ 294.923693][ T5635] active_anon 24576 [ 294.927553][ T5635] inactive_file 0 [ 294.931462][ T5635] active_file 0 [ 294.935488][ T5635] unevictable 0 [ 294.939031][ T5635] hierarchical_memory_limit 314572800 [ 294.946341][ T5635] hierarchical_memsw_limit 9223372036854771712 [ 294.955603][ T5635] total_cache 0 [ 294.959510][ T5635] total_rss 0 [ 294.964290][ T5635] total_rss_huge 0 [ 294.968164][ T5635] total_shmem 0 [ 294.972116][ T5635] total_mapped_file 0 [ 294.976186][ T5635] total_dirty 0 [ 294.979789][ T5635] total_writeback 0 [ 295.001897][ T5635] total_workingset_refault_anon 13 [ 295.024509][ T5635] total_workingset_refault_file 0 [ 295.038799][ T5635] total_swap 180224 [ 295.043344][ T5635] total_swapcached 262144 [ 295.047797][ T5635] total_pgpgin 41133 [ 295.054483][ T5635] total_pgpgout 41126 [ 295.058557][ T5635] total_pgfault 71590 [ 295.075759][ T5635] total_pgmajfault 9 [ 295.089896][ T5635] total_inactive_anon 4096 [ 295.094805][ T5635] total_active_anon 24576 [ 295.108780][ T5635] total_inactive_file 0 [ 295.113407][ T5635] total_active_file 0 [ 295.117458][ T5635] total_unevictable 0 [ 295.121776][ T5635] anon_cost 0 [ 295.125182][ T5635] file_cost 0 [ 295.128530][ T5635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1904,pid=12754,uid=0 [ 295.147015][ T5635] Memory cgroup out of memory: Killed process 12754 (syz.1.1904) total-vm:102436kB, anon-rss:1252kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 298.151525][T12800] smc: net device vlan1 applied user defined pnetid SYZ2 [ 298.196712][T12800] smc: net device vlan1 erased user defined pnetid SYZ2 [ 298.336283][T12815] netlink: 'syz.6.1920': attribute type 4 has an invalid length. [ 298.401096][T12818] netlink: 'syz.6.1920': attribute type 4 has an invalid length. [ 298.593969][T12825] __nla_validate_parse: 4 callbacks suppressed [ 298.594016][T12825] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1919'. [ 298.722988][ T1023] batadv1: left promiscuous mode [ 298.957997][T12836] xt_hashlimit: max too large, truncated to 1048576 [ 298.978635][T12836] No such timeout policy "syz1" [ 299.078940][T12803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.222624][ T1023] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 299.237902][ T6255] wlan1 speed is unknown, defaulting to 1000 [ 299.251742][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1926'. [ 299.345558][T12848] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 299.449293][ T30] audit: type=1804 audit(1784735069.758:5): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1929" name="/newroot/41/cgroup.controllers" dev="tmpfs" ino=228 res=1 errno=0 [ 299.535338][ T30] audit: type=1800 audit(1784735069.758:6): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1929" name="cgroup.controllers" dev="tmpfs" ino=228 res=0 errno=0 [ 299.929322][T12868] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1934'. [ 300.084659][T12884] netlink: 'syz.1.1939': attribute type 10 has an invalid length. [ 300.102599][T12884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.113193][T12884] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 300.254753][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1942'. [ 300.345677][T12897] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1944'. [ 300.358771][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'. [ 300.435930][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 300.462051][T12899] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1943'. [ 300.482080][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1944'. [ 300.530041][T12901] netlink: 'syz.1.1945': attribute type 1 has an invalid length. [ 300.587310][T12905] openvswitch: netlink: IPv4 tun info is not correct [ 300.608409][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1945'. [ 300.620489][T12905] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.674091][T12901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.893577][T12955] bond7: Removing last ns target with arp_interval on [ 302.106446][T12935] bond13 (unregistering): Released all slaves [ 302.121251][T12967] netlink: 'syz.6.1965': attribute type 1 has an invalid length. [ 302.204413][T12967] bond1: entered promiscuous mode [ 302.210125][T12967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.230361][T12973] netlink: 'syz.5.1967': attribute type 1 has an invalid length. [ 302.239394][T12974] netlink: 'syz.5.1967': attribute type 1 has an invalid length. [ 302.374562][T12973] bond3: entered promiscuous mode [ 302.404159][T12973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.447720][T12982] syzkaller0: entered promiscuous mode [ 302.480290][T12982] syzkaller0: entered allmulticast mode [ 302.521976][ T6255] IPVS: starting estimator thread 0... [ 302.528035][T12990] IPVS: ip_vs_add_dest(): server weight less than zero [ 302.803076][T12991] IPVS: using max 26 ests per chain, 62400 per kthread [ 302.804088][T13002] tc action pedit 'at' offset 4 out of bounds [ 302.993897][T13000] block nbd1: server does not support multiple connections per device. [ 303.014736][T13000] block nbd1: shutting down sockets [ 303.052071][T13014] openvswitch: netlink: Key type 142 is out of range max 32 [ 303.225767][T13023] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 303.294270][T13023] bond8: entered promiscuous mode [ 303.299936][T13023] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.449802][T13038] macvtap1: entered promiscuous mode [ 303.456058][T13038] macvtap1: entered allmulticast mode [ 303.463107][T13038] veth1_vlan: entered allmulticast mode [ 303.469741][T13036] tipc: Enabled bearer , priority 10 [ 303.488014][T13038] macvtap2: entered promiscuous mode [ 303.493851][T13038] macvtap2: entered allmulticast mode [ 303.613688][T13043] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 303.656745][T13044] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 304.338609][T13078] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 304.367924][T13082] netlink: 'syz.5.1998': attribute type 21 has an invalid length. [ 304.514457][T13082] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 304.526152][T13082] bond4 (unregistering): Released all slaves [ 304.556562][T13089] ip6tnl2: entered allmulticast mode [ 304.562537][T13086] veth0_to_batadv: default FDB implementation only supports local addresses [ 307.196891][T13074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.523359][T13123] __nla_validate_parse: 7 callbacks suppressed [ 307.523381][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2010'. [ 307.590560][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 307.601512][T13129] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2008'. [ 307.746669][T13134] syzkaller1: entered promiscuous mode [ 307.752247][T13134] syzkaller1: entered allmulticast mode [ 307.769028][T13138] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 307.824340][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2012'. [ 307.839494][T13142] netlink: 'syz.5.2015': attribute type 1 has an invalid length. [ 307.849072][T13142] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2015'. [ 307.862007][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 307.961446][T13137] bond2: Invalid ad_actor_system MAC address. [ 307.968496][T13137] bond2: option ad_actor_system: invalid value (1) [ 307.985630][T13137] bond2 (unregistering): Released all slaves [ 308.207419][T13162] syzkaller1: entered promiscuous mode [ 308.213381][T13162] syzkaller1: entered allmulticast mode [ 308.224864][T13164] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 308.335848][T13164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.357360][T13162] netlink: 'syz.4.2019': attribute type 11 has an invalid length. [ 308.365252][T13162] netlink: 'syz.4.2019': attribute type 4 has an invalid length. [ 308.373017][T13162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2019'. [ 308.400784][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'. [ 308.483195][T13164] bond8: (slave veth5): Enslaving as an active interface with a down link [ 308.499749][T13171] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 308.920975][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2027'. [ 308.936514][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2027'. [ 308.946960][T13191] syzkaller0: entered promiscuous mode [ 308.952569][T13191] syzkaller0: entered allmulticast mode [ 308.965601][T13191] netlink: 'syz.6.2028': attribute type 14 has an invalid length. [ 309.213598][T13168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.246593][T13186] netlink: 'syz.1.2026': attribute type 2 has an invalid length. [ 309.394114][T13203] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 309.461965][T13201] netlink: 'syz.5.2031': attribute type 11 has an invalid length. [ 309.556051][T13215] netlink: 'syz.3.2036': attribute type 26 has an invalid length. [ 309.587060][T13215] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 309.597295][T13218] netlink: 'syz.5.2037': attribute type 2 has an invalid length. [ 309.605866][T13215] netlink: 'syz.3.2036': attribute type 26 has an invalid length. [ 309.646290][T13215] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 309.707013][T13225] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 309.925920][T13246] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 309.933279][T13240] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 310.321641][T13260] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 310.721102][T13286] syzkaller0: entered promiscuous mode [ 310.727089][T13286] syzkaller0: entered allmulticast mode [ 311.003761][T13303] bond4: option mode: invalid value (128) [ 311.011809][T13303] bond4 (unregistering): Released all slaves [ 311.175660][T13315] veth5: entered promiscuous mode [ 311.454193][T13323] batman_adv: batadv0: Adding interface: bond0 [ 311.460958][T13323] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.487969][T13323] batman_adv: batadv0: Interface activated: bond0 [ 311.808232][T13334] netlink: 'syz.5.2068': attribute type 2 has an invalid length. [ 312.171629][T13359] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 312.209697][T13362] openvswitch: netlink: Missing key (keys=40, expected=100) [ 312.218254][T13359] bond13: entered promiscuous mode [ 312.223972][T13359] 8021q: adding VLAN 0 to HW filter on device bond13 [ 312.228627][T13341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.256464][T13362] openvswitch: netlink: Missing key (keys=40, expected=100) [ 312.369861][T13359] 8021q: adding VLAN 0 to HW filter on device bond13 [ 312.379345][T13359] bond13: (slave vti1): The slave device specified does not support setting the MAC address [ 312.389506][T13359] bond13: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 312.402236][T13359] bond13: (slave vti1): making interface the new active one [ 312.409590][T13359] vti1: entered promiscuous mode [ 312.416411][T13359] bond13: (slave vti1): Enslaving as an active interface with an up link [ 312.631037][T13384] __nla_validate_parse: 24 callbacks suppressed [ 312.631059][T13384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2081'. [ 312.711340][T13384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.774741][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2085'. [ 312.817245][T13394] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 312.849052][T13394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2086'. [ 312.924533][T13400] netlink: 'syz.6.2084': attribute type 21 has an invalid length. [ 312.932435][T13400] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2084'. [ 312.941583][T13400] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2084'. [ 313.091045][T13411] netlink: 'syz.1.2089': attribute type 23 has an invalid length. [ 313.397883][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 313.492396][T13421] bond9: option xmit_hash_policy: invalid value (64) [ 313.513746][T13421] bond9 (unregistering): Released all slaves [ 314.246917][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 314.256411][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 316.259286][T13418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.280687][T13495] validate_nla: 1 callbacks suppressed [ 316.280707][T13495] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 316.335004][T13495] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2112'. [ 316.382611][T13495] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 316.429974][T13495] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2112'. [ 316.518800][T13504] netlink: 'syz.6.2114': attribute type 1 has an invalid length. [ 316.998463][T13535] netlink: 'syz.5.2125': attribute type 64 has an invalid length. [ 317.084210][T13535] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 317.096428][T13542] bridge0: port 1(veth1_to_bridge) entered blocking state [ 317.103734][T13542] bridge0: port 1(veth1_to_bridge) entered disabled state [ 317.124363][T13542] veth1_to_bridge: entered allmulticast mode [ 317.132189][T13542] veth1_to_bridge: entered promiscuous mode [ 317.235050][T13549] netlink: 'syz.6.2128': attribute type 2 has an invalid length. [ 317.249319][T13549] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 317.583556][T13565] bridge_slave_0: invalid flags given to default FDB implementation [ 317.646086][T13568] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 317.683309][T13568] __nla_validate_parse: 8 callbacks suppressed [ 317.683329][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'. [ 317.729206][T13568] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 317.737010][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'. [ 317.919153][T13582] netlink: 'syz.5.2142': attribute type 10 has an invalid length. [ 318.244173][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 318.503826][T13615] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2152'. [ 318.600014][T13615] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2152'. [ 318.936818][T13635] ip6_vti0: entered promiscuous mode [ 318.944979][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 319.378153][T13645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 319.402141][T13645] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 319.418340][T13645] gretap2: entered promiscuous mode [ 319.429851][T13645] gretap2: entered allmulticast mode [ 319.619240][T13652] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 319.658348][T13652] netlink: 'syz.5.2164': attribute type 2 has an invalid length. [ 319.676946][T13650] syzkaller0: entered promiscuous mode [ 319.694803][T13650] syzkaller0: entered allmulticast mode [ 320.336092][T13673] syzkaller0: entered promiscuous mode [ 320.355327][T13673] syzkaller0: entered allmulticast mode [ 320.425175][T13690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2174'. [ 320.797289][T13701] syzkaller0: entered promiscuous mode [ 320.828869][T13701] syzkaller0: entered allmulticast mode [ 320.835144][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2179'. [ 321.003104][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'. [ 321.085437][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.108808][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.226109][T13712] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 321.339225][T13734] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 321.453763][T13724] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 321.653765][T13737] tipc: Started in network mode [ 321.686540][T13737] tipc: Node identity 2e4c8d9107cb, cluster identity 4711 [ 321.719957][T13737] tipc: Enabled bearer , priority 0 [ 321.878825][T13747] syzkaller0: entered promiscuous mode [ 321.882021][T13758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2190'. [ 321.884365][T13747] syzkaller0: entered allmulticast mode [ 321.904086][T13736] tipc: Resetting bearer [ 321.982719][T13736] tipc: Disabling bearer [ 322.058740][T13760] bond9: invalid ARP target 0.0.0.0 specified for addition [ 322.066847][T13760] bond9: option arp_ip_target: invalid value (0) [ 322.101008][T13760] bond9 (unregistering): Released all slaves [ 322.211610][ T5288] veth0_vlan: left promiscuous mode [ 322.277696][ T5359] veth0_vlan: entered promiscuous mode [ 322.730986][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2197'. [ 325.397101][T13785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.616621][T13830] vlan2: entered promiscuous mode [ 325.626702][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2203'. [ 325.636062][T13830] geneve1: entered promiscuous mode [ 325.643436][T13830] vlan2: entered allmulticast mode [ 325.648745][T13830] geneve1: entered allmulticast mode [ 325.694393][T13832] IPVS: Error connecting to the multicast addr [ 326.051249][T13858] validate_nla: 2 callbacks suppressed [ 326.051269][T13858] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 326.111372][T13853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 326.234047][T13863] veth1_to_bond: entered allmulticast mode [ 326.259752][T13863] veth1_to_bond: left allmulticast mode [ 326.292275][T13872] netlink: 'syz.4.2217': attribute type 12 has an invalid length. [ 326.651520][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 326.765043][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 327.239797][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2229'. [ 327.253039][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 327.262729][T13914] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2229'. [ 327.538982][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.554481][T13945] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 327.716057][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 327.749115][T13945] 8021q: adding VLAN 0 to HW filter on device bond14 [ 327.771153][T13954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2235'. [ 327.789163][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'. [ 327.972185][T13962] syzkaller0: entered promiscuous mode [ 328.000329][T13962] syzkaller0: entered allmulticast mode [ 328.014658][T13964] netlink: 'syz.5.2239': attribute type 3 has an invalid length. [ 328.022520][T13964] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2239'. [ 328.319365][T13980] sctp: [Deprecated]: syz.1.2243 (pid 13980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.319365][T13980] Use struct sctp_sack_info instead [ 328.579993][T13992] netlink: 'syz.1.2246': attribute type 11 has an invalid length. [ 328.789603][T14000] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2248'. [ 328.812756][T14001] netlink: 'syz.1.2250': attribute type 3 has an invalid length. [ 329.061319][T14013] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 329.408444][T14025] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2255'. [ 329.443086][T14025] syzkaller0: entered promiscuous mode [ 329.449045][T14025] syzkaller0: entered allmulticast mode [ 329.927620][T14059] GUP no longer grows the stack in syz.5.2264 (14059): 200000003000-20000000a000 (200000001000) [ 329.968379][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.5.2264 Not tainted syzkaller #0 PREEMPT(full) [ 329.968406][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 329.968419][T14059] Call Trace: [ 329.968428][T14059] [ 329.968438][T14059] dump_stack_lvl+0xe8/0x150 [ 329.968475][T14059] __get_user_pages+0x238c/0x2720 [ 329.968515][T14059] ? __gup_longterm_locked+0xc3b/0x15c0 [ 329.968559][T14059] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 329.968605][T14059] __gup_longterm_locked+0xd52/0x15c0 [ 329.968632][T14059] ? lock_acquire+0x106/0x350 [ 329.968691][T14059] gup_fast_fallback+0x1d8c/0x20e0 [ 329.968711][T14059] ? lockdep_hardirqs_on+0x7a/0x110 [ 329.968780][T14059] ? __pfx_gup_fast_fallback+0x10/0x10 [ 329.968805][T14059] ? is_valid_gup_args+0x11f/0x200 [ 329.968829][T14059] ? get_user_pages_fast+0x4d/0xb0 [ 329.968853][T14059] __iov_iter_get_pages_alloc+0x378/0xa40 [ 329.968892][T14059] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 329.968929][T14059] iov_iter_get_pages2+0x5e/0xa0 [ 329.968962][T14059] __se_sys_vmsplice+0x7b5/0x1660 [ 329.969016][T14059] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 329.969068][T14059] ? __pfx_futex_wake+0x10/0x10 [ 329.969181][T14059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.969218][T14059] do_syscall_64+0x174/0x580 [ 329.969237][T14059] ? trace_irq_disable+0x3b/0x140 [ 329.969264][T14059] ? clear_bhb_loop+0x40/0x90 [ 329.969291][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.969313][T14059] RIP: 0033:0x7f318dd9de99 [ 329.969333][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.969352][T14059] RSP: 002b:00007f318ebb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 329.969374][T14059] RAX: ffffffffffffffda RBX: 00007f318e026090 RCX: 00007f318dd9de99 [ 329.969390][T14059] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 329.969404][T14059] RBP: 00007f318de33eaf R08: 0000000000000000 R09: 0000000000000000 [ 329.969417][T14059] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 329.969430][T14059] R13: 00007f318e026128 R14: 00007f318e026090 R15: 00007fff29588648 [ 329.969465][T14059] [ 330.239433][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'. [ 330.428484][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2262'. [ 330.580367][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2271'. [ 330.644155][T14093] rdma_rxe: rxe_newlink: failed to add wg2 [ 330.924959][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 331.436901][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'. [ 331.796574][T14127] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 331.813070][T14127] NCSI netlink: No device for ifindex 0 [ 331.860125][T14132] netlink: 'syz.6.2287': attribute type 1 has an invalid length. [ 331.916565][T14132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.061122][T14132] bond3: (slave gretap1): making interface the new active one [ 332.090031][T14132] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 332.247608][T14151] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 332.267312][T14151] syzkaller1: linktype set to 823 [ 332.294739][T14156] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 332.405295][T14162] macvlan0: entered promiscuous mode [ 332.414823][T14162] netlink: 'syz.1.2295': attribute type 33 has an invalid length. [ 332.530842][T14162] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 332.545094][T14162] bond9 (unregistering): Released all slaves [ 332.929302][T14174] __nla_validate_parse: 3 callbacks suppressed [ 332.929323][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2298'. [ 333.113607][T14179] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 333.149402][T14179] veth0: entered promiscuous mode [ 333.154269][T14185] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 333.177939][T14185] netlink: 'syz.4.2299': attribute type 2 has an invalid length. [ 333.182151][T14178] veth0: left promiscuous mode [ 333.224508][T14185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.337120][T14190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2301'. [ 333.618489][T14201] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 333.653626][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.664472][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.694905][ T6255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.803041][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.875985][T14217] netlink: 'syz.6.2310': attribute type 83 has an invalid length. [ 333.924499][T14220] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2311'. [ 333.959554][T14220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2311'. [ 334.013561][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'. [ 334.039058][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2310'. [ 334.082975][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'. [ 334.132194][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.458389][T14242] syzkaller1: entered promiscuous mode [ 334.485512][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2317'. [ 334.544407][T14242] syzkaller1: entered allmulticast mode [ 334.915162][T14261] netlink: 'syz.6.2322': attribute type 21 has an invalid length. [ 334.962940][T14264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2323'. [ 335.654870][T14290] netlink: 'syz.1.2327': attribute type 39 has an invalid length. [ 335.890065][T14304] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2331'. [ 337.491963][T14373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.626886][T14378] syz_tun: entered allmulticast mode [ 337.687657][T14384] syz_tun: left allmulticast mode [ 337.911216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.931141][T14390] gretap0: entered promiscuous mode [ 337.941500][T14390] vlan2: entered promiscuous mode [ 337.995581][T14392] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 338.161803][T14402] __nla_validate_parse: 2 callbacks suppressed [ 338.161862][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 338.184611][T14402] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2354'. [ 338.474675][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 338.486975][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2360'. [ 338.497337][T14419] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2360'. [ 338.512022][T14418] netlink: 'syz.3.2359': attribute type 3 has an invalid length. [ 338.755077][T14434] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 338.986717][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2365'. [ 339.413641][T14463] IPVS: Unknown mcast interface: caif0 [ 339.582652][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2373'. [ 339.594376][T14474] syzkaller0: entered promiscuous mode [ 339.643278][T14474] syzkaller0: entered allmulticast mode [ 339.660104][T14476] : renamed from bond0 [ 339.757853][T14481] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 339.956434][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'. [ 339.965511][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'. [ 340.562100][T14536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.572282][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2395'. [ 340.976638][T14555] netlink: ct family unspecified [ 340.983674][T14555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.996360][T14555] tipc: Enabled bearer , priority 0 [ 341.095602][T14555] syzkaller0: entered promiscuous mode [ 341.101809][T14555] syzkaller0: entered allmulticast mode [ 341.107964][T14555] tipc: Resetting bearer [ 341.394924][ T36] tipc: Resetting bearer [ 341.410646][T14571] pim6reg: entered allmulticast mode [ 341.422030][T14552] tipc: Resetting bearer [ 343.598056][T14552] tipc: Disabling bearer [ 343.610451][T14576] syzkaller0: entered promiscuous mode [ 343.617723][T14576] syzkaller0: entered allmulticast mode [ 344.188334][T14593] __nla_validate_parse: 1 callbacks suppressed [ 344.188371][T14593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2410'. [ 344.270655][T14597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2411'. [ 344.932678][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'. [ 344.948776][T14627] batadv_slave_0: entered promiscuous mode [ 345.027855][T14630] tipc: Enabled bearer , priority 0 [ 345.114340][T14635] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 345.126667][T14635] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2421'. [ 345.169328][T14630] syzkaller0: entered promiscuous mode [ 345.174889][T14630] syzkaller0: entered allmulticast mode [ 345.181196][T14630] tipc: Resetting bearer [ 345.247105][ T36] tipc: Resetting bearer [ 345.265718][T14628] tipc: Resetting bearer [ 345.515550][T14618] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 345.697051][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2422'. [ 345.714351][T14649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2423'. [ 345.967743][T14655] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2423'. [ 346.036192][T14656] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2423'. [ 346.551613][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.701039][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 347.539195][T14628] tipc: Disabling bearer [ 347.588973][T14654] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 347.600404][T14654] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 347.609151][T14655] gretap0: entered promiscuous mode [ 347.614717][T14656] 0ªî{X¹¦: renamed from gretap0 [ 347.633940][T14656] 0ªî{X¹¦: left promiscuous mode [ 347.639501][T14656] 0ªî{X¹¦: entered allmulticast mode [ 347.647460][T14656] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 347.827746][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 347.924176][T14672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.013515][T14681] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2432'. [ 348.295350][T14693] syzkaller0: entered promiscuous mode [ 348.300893][T14693] syzkaller0: entered allmulticast mode [ 348.315956][T14693] netlink: 'syz.5.2433': attribute type 26 has an invalid length. [ 348.406013][T14698] veth1_to_bond: entered allmulticast mode [ 348.412545][T14698] veth1_to_bond: entered promiscuous mode [ 348.447028][T14698] xt_hashlimit: size too large, truncated to 1048576 [ 348.489156][T14701] syzkaller0: entered promiscuous mode [ 348.494689][T14701] syzkaller0: entered allmulticast mode [ 348.502822][T14702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.529949][T14701] tc action pedit offset must be on 32 bit boundaries [ 348.702652][T14705] netlink: 'syz.5.2437': attribute type 9 has an invalid length. [ 348.752914][T14697] veth1_to_bond: left promiscuous mode [ 348.758559][T14697] veth1_to_bond: left allmulticast mode [ 348.869181][T14713] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.168714][T14723] netlink: 'syz.5.2444': attribute type 1 has an invalid length. [ 349.262704][T14723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.319985][T14734] __nla_validate_parse: 1 callbacks suppressed [ 349.320005][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2448'. [ 349.466476][T14743] x_tables: duplicate underflow at hook 2 [ 349.658371][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2453'. [ 349.667414][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 350.460140][ T4943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.474454][ T4943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.483029][ T4943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.495226][ T4943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.504110][ T4943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.108828][T14764] wg2 speed is unknown, defaulting to 1000 [ 351.346061][T14764] wlan1 speed is unknown, defaulting to 1000 [ 351.724093][T14764] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.731817][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.739046][T14764] bridge_slave_0: entered allmulticast mode [ 351.747303][T14764] bridge_slave_0: entered promiscuous mode [ 351.756474][T14764] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.764159][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.771744][T14764] bridge_slave_1: entered allmulticast mode [ 351.779598][T14764] bridge_slave_1: entered promiscuous mode [ 351.805116][T14788] bond0 (unregistering): Released all slaves [ 351.887580][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.902102][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.947606][T14764] team0: Port device team_slave_0 added [ 351.957192][T14764] team0: Port device team_slave_1 added [ 351.995740][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.004407][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.032896][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.051400][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.058477][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.085794][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.164301][T14764] hsr_slave_0: entered promiscuous mode [ 352.172622][T14764] hsr_slave_1: entered promiscuous mode [ 352.179161][T14764] debugfs: 'hsr0' already exists in 'hsr' [ 352.185548][T14764] Cannot create hsr debugfs directory [ 352.383149][T14745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.413713][T14764] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.472797][T14764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.504536][T14764] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.541031][ T5627] Bluetooth: hci7: command tx timeout [ 352.596476][T14764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.610364][T14764] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.635159][T14764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.652718][T14764] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.685501][T14764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.856437][T14764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.948790][T14764] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.990844][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.998029][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.022180][T14829] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2467'. [ 353.075858][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.083028][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.430370][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 354.177294][T14764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.269082][T14884] syzkaller0: entered promiscuous mode [ 354.278500][T14884] syzkaller0: entered allmulticast mode [ 354.329470][T14884] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 354.347612][T14884] team0: Device ipvlan2 is already an upper device of the team interface [ 354.379316][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'. [ 354.463201][ T5627] block nbd2: Receive control failed (result -107) [ 354.621410][ T5627] Bluetooth: hci7: command tx timeout [ 354.882684][T14906] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 355.277974][T14764] veth0_vlan: entered promiscuous mode [ 355.796180][T14764] veth1_vlan: entered promiscuous mode [ 355.943962][T14764] veth0_macvtap: entered promiscuous mode [ 355.986633][T14764] veth1_macvtap: entered promiscuous mode [ 356.035705][T14764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.078970][T14764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.127367][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.141533][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.229377][T14936] netlink: 'syz.4.2491': attribute type 10 has an invalid length. [ 356.285523][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.299690][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.502386][T14944] netlink: 'syz.3.2495': attribute type 11 has an invalid length. [ 356.508272][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.541135][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.633245][T14947] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2496'. [ 356.667416][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.675375][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.683793][T14947] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 356.702339][ T5627] Bluetooth: hci7: command tx timeout [ 356.732948][T14947] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.856421][T14950] bond9: (slave gretap3): making interface the new active one [ 356.920562][T14950] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 357.349743][T14968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2502'. [ 357.426673][T14968] syzkaller1: entered promiscuous mode [ 357.447469][T14968] syzkaller1: entered allmulticast mode [ 357.534535][T14975] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2503'. [ 357.760527][T14978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2506'. [ 358.026059][T14989] netlink: 'syz.1.2510': attribute type 17 has an invalid length. [ 358.044031][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 358.073021][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 358.087840][T14984] syzkaller0: entered promiscuous mode [ 358.093373][T14984] syzkaller0: entered allmulticast mode [ 358.138209][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.781799][ T5627] Bluetooth: hci7: command tx timeout [ 360.773526][T15017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2516'. [ 360.803847][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2516'. [ 360.856538][T15032] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 360.905873][T15033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 360.948507][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2520'. [ 361.369362][T15054] netlink: 'syz.4.2526': attribute type 62 has an invalid length. [ 361.380970][T15054] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2526'. [ 361.567230][T15060] netlink: 'syz.4.2527': attribute type 9 has an invalid length. [ 361.588427][T15056] xt_CT: No such helper "pptp" [ 361.675976][T15056] policy can only be matched on NF_INET_PRE_ROUTING [ 361.675999][T15056] unable to load match [ 362.087998][T15073] nbd: couldn't find device at index 1 [ 363.091380][T15122] openvswitch: netlink: Missing key (keys=40, expected=100) [ 363.393611][T15137] netlink: 'syz.7.2548': attribute type 13 has an invalid length. [ 363.434595][T15137] gretap0: refused to change device tx_queue_len [ 363.455390][T15137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 363.693308][T15152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.821208][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.233296][T15173] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2561'. [ 364.338408][T15177] rdma_rxe: rxe_newlink: failed to add wg2 [ 365.271946][T15222] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 365.282818][T15222] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.290550][T15222] gretap0: entered promiscuous mode [ 365.295907][T15222] gretap0: entered allmulticast mode [ 365.707620][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2584'. [ 365.744177][T15244] openvswitch: netlink: IPv4 tun info is not correct [ 366.333018][T15278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2591'. [ 366.432498][T15226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.456779][T15226] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 366.638231][T15226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.663624][T15226] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 366.706685][T15226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.712654][T15226] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 366.737107][T15226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.743082][T15226] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 366.862676][T15226] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 366.868659][T15226] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 366.900062][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 367.053755][T15226] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 367.070828][T15226] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 367.081278][ T9724] wlan1 speed is unknown, defaulting to 1000 [ 367.088630][ T9724] syz1: Port: 1 Link DOWN [ 367.184017][T15226] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 367.204362][T15226] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 367.719144][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 367.790787][T15337] macvlan0: left promiscuous mode [ 367.797054][T15337] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 367.804831][T15337] netlink: 'syz.4.2603': attribute type 2 has an invalid length. [ 368.904093][ T4943] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 368.972304][ T4943] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 368.983343][ T4943] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 369.001102][ T4943] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 369.008775][ T4943] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 369.049562][ T4943] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 369.057428][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 369.089548][ T4943] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 369.097065][ T4943] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 369.098129][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 369.106297][ T4943] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 369.122018][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 369.134153][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 369.147788][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 369.175452][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 369.409205][T15374] netlink: 'syz.7.2614': attribute type 1 has an invalid length. [ 369.417010][T15374] netlink: 'syz.7.2614': attribute type 2 has an invalid length. [ 369.428258][T15380] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2615'. [ 369.449358][T15380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 369.755483][ T5642] bond6: (slave syz_tun): Releasing backup interface [ 370.156577][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2620'. [ 370.726749][T15406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.991715][T15367] wg2 speed is unknown, defaulting to 1000 [ 371.167120][T15427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.181063][ T4943] Bluetooth: hci9: command tx timeout [ 371.260999][ T4943] Bluetooth: hci8: command tx timeout [ 371.584222][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 371.641869][T15367] wlan1 speed is unknown, defaulting to 1000 [ 371.739273][T15365] wg2 speed is unknown, defaulting to 1000 [ 371.844356][T15469] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2629'. [ 371.892535][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 371.968293][T15475] bond0: (slave ip6gre0): Error: Device type is different from other slaves [ 372.003574][T15478] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 372.020995][T15478] netlink: 'syz.4.2630': attribute type 2 has an invalid length. [ 372.304286][T15493] netlink: 'syz.4.2634': attribute type 2 has an invalid length. [ 372.336094][T15493] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 372.347649][T15365] wlan1 speed is unknown, defaulting to 1000 [ 372.377916][T15497] netlink: 'syz.1.2635': attribute type 21 has an invalid length. [ 372.386691][T15497] netlink: 'syz.1.2635': attribute type 22 has an invalid length. [ 372.395266][T15497] netlink: 'syz.1.2635': attribute type 23 has an invalid length. [ 372.403876][T15497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2635'. [ 372.609390][T15503] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 372.642887][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 372.686993][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 372.935270][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2640'. [ 373.044219][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.061790][T15367] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.069160][T15367] bridge_slave_0: entered allmulticast mode [ 373.077246][T15367] bridge_slave_0: entered promiscuous mode [ 373.093914][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.101702][T15367] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.109017][T15367] bridge_slave_1: entered allmulticast mode [ 373.117140][T15367] bridge_slave_1: entered promiscuous mode [ 373.229044][T15367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.261254][ T4943] Bluetooth: hci9: command tx timeout [ 373.336235][T15367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.345492][ T4943] Bluetooth: hci8: command tx timeout [ 373.398363][T15535] bridge_slave_1: left allmulticast mode [ 373.404471][T15535] bridge_slave_1: left promiscuous mode [ 373.410314][T15535] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.441637][T15535] bridge_slave_0: left allmulticast mode [ 373.454164][T15535] bridge_slave_0: left promiscuous mode [ 373.460027][T15535] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.576797][T15367] team0: Port device team_slave_0 added [ 373.648516][T15367] team0: Port device team_slave_1 added [ 373.697944][ T30] audit: type=1804 audit(1784735144.008:7): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2647" name="/newroot/599/cgroup.controllers" dev="tmpfs" ino=3066 res=1 errno=0 [ 373.751681][ T30] audit: type=1800 audit(1784735144.038:8): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2647" name="cgroup.controllers" dev="tmpfs" ino=3066 res=0 errno=0 [ 373.783236][T15367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.790249][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.851610][T15367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.856545][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 373.868550][T15367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.878187][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.904660][T15367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.019186][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.026494][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.033856][T15365] bridge_slave_0: entered allmulticast mode [ 374.056738][T15365] bridge_slave_0: entered promiscuous mode [ 374.074465][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.081670][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.088956][T15365] bridge_slave_1: entered allmulticast mode [ 374.096905][T15365] bridge_slave_1: entered promiscuous mode [ 374.142313][T15367] hsr_slave_0: entered promiscuous mode [ 374.159073][T15367] hsr_slave_1: entered promiscuous mode [ 374.167282][T15367] debugfs: 'hsr0' already exists in 'hsr' [ 374.173094][T15367] Cannot create hsr debugfs directory [ 374.210577][T15365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.223940][T15365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.286615][T15365] team0: Port device team_slave_0 added [ 374.295934][T15365] team0: Port device team_slave_1 added [ 374.388113][T15365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.395524][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.422298][T15365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.435437][T15365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.442843][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.470213][T15365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.519861][T15567] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2650'. [ 374.785129][T15365] hsr_slave_0: entered promiscuous mode [ 374.792622][T15365] hsr_slave_1: entered promiscuous mode [ 374.807754][T15365] debugfs: 'hsr0' already exists in 'hsr' [ 374.813891][T15365] Cannot create hsr debugfs directory [ 374.822854][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2652'. [ 375.380787][ T4943] Bluetooth: hci9: command tx timeout [ 375.477638][ T4943] Bluetooth: hci8: command tx timeout [ 375.594133][T15367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 375.622702][T15367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.636192][T15367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 375.669041][T15367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.777713][T15367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 375.788799][T15367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.843618][T15367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 375.857084][T15367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.187986][T15365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.347736][T15367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.369965][T15367] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.390331][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.397543][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.446254][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.453488][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.651668][T15640] __nla_validate_parse: 2 callbacks suppressed [ 376.651687][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 376.654601][T15637] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 376.829607][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2670'. [ 376.859596][T15365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.128058][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2673'. [ 377.137394][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2672'. [ 377.151313][T15659] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2673'. [ 377.346035][T15365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.502264][ T4943] Bluetooth: hci9: command tx timeout [ 377.503503][ T50] Bluetooth: hci8: command tx timeout [ 377.529430][T15365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.566919][T15367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.955138][T15367] veth0_vlan: entered promiscuous mode [ 377.969249][T15367] veth1_vlan: entered promiscuous mode [ 378.024015][T15367] veth0_macvtap: entered promiscuous mode [ 378.037019][T15367] veth1_macvtap: entered promiscuous mode [ 378.056027][T15367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.072379][T15367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.086576][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.095385][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.118027][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.133688][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.134219][T15661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.146025][T15686] validate_nla: 2 callbacks suppressed [ 380.146045][T15686] netlink: 'syz.7.2678': attribute type 23 has an invalid length. [ 380.248320][T15365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.295277][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.325319][T15365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.347970][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.400863][T15365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.414667][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.425883][T15697] syzkaller1: entered promiscuous mode [ 380.433909][T15700] netlink: 'syz.1.2681': attribute type 83 has an invalid length. [ 380.442357][T15697] syzkaller1: entered allmulticast mode [ 380.455572][T15365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.496212][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.550647][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.558523][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.673585][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.706804][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.788512][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.847265][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.869872][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.877159][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.961172][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.968420][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.127384][T15726] netlink: 'syz.7.2688': attribute type 1 has an invalid length. [ 381.136754][T15726] netlink: 208 bytes leftover after parsing attributes in process `syz.7.2688'. [ 381.263097][T15728] netlink: 'syz.1.2690': attribute type 10 has an invalid length. [ 381.275537][T15728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.292935][T15728] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.326744][T15728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.339228][T15728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.376274][T15728] bond0 (unregistering): (slave bond2): Releasing backup interface [ 381.403781][T15728] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 381.417871][T15728] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 381.441122][T15728] bond0 (unregistering): Released all slaves [ 382.162855][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2697'. [ 382.186993][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2697'. [ 382.227049][T15365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.416575][T15734] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 382.422574][T15734] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 382.444262][T15365] veth0_vlan: entered promiscuous mode [ 382.467056][T15365] veth1_vlan: entered promiscuous mode [ 382.486788][T15734] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 382.495684][T15734] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 382.557738][T15365] veth0_macvtap: entered promiscuous mode [ 382.602652][T15365] veth1_macvtap: entered promiscuous mode [ 382.632812][T15365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.666575][T15365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.732203][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.797375][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.817273][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.826859][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.998613][T15795] netlink: 'syz.7.2707': attribute type 1 has an invalid length. [ 383.031453][T15795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.081971][T15791] bond0: entered allmulticast mode [ 383.087686][T15791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.139879][T15801] vlan3: entered promiscuous mode [ 383.144986][T15801] bridge0: entered promiscuous mode [ 383.176606][T15800] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.408913][T15809] veth1_to_bond: entered promiscuous mode [ 383.416702][T15807] veth1_to_bond: entered allmulticast mode [ 383.453532][T15807] syzkaller1: entered promiscuous mode [ 383.459057][T15807] syzkaller1: entered allmulticast mode [ 383.470998][T15807] veth1_to_bond: left allmulticast mode [ 383.476625][T15807] veth1_to_bond: left promiscuous mode [ 383.500027][ T370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.514344][ T370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.573562][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.583422][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.659473][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.896576][ T4943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.907944][ T4943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.916217][ T4943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.924674][ T4943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.967470][ T4943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.338663][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2716'. [ 384.465407][T15826] macvtap1: entered promiscuous mode [ 384.470838][T15826] vlan0: entered promiscuous mode [ 384.476458][T15826] macvtap1: entered allmulticast mode [ 384.494578][T15826] vlan0: entered allmulticast mode [ 384.501669][T15826] veth0_vlan: entered allmulticast mode [ 384.509049][T15843] netlink: 64755 bytes leftover after parsing attributes in process `syz.3.2717'. [ 384.523852][T15843] netlink: 'syz.3.2717': attribute type 27 has an invalid length. [ 384.531727][T15843] netlink: 'syz.3.2717': attribute type 4 has an invalid length. [ 384.539485][T15843] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2717'. [ 384.557700][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 385.282793][T15865] syzkaller0: entered promiscuous mode [ 385.292507][T15865] syzkaller0: entered allmulticast mode [ 385.535635][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2726'. [ 385.545345][T15819] wg2 speed is unknown, defaulting to 1000 [ 385.882860][T15891] syzkaller0: entered promiscuous mode [ 385.888415][T15891] syzkaller0: entered allmulticast mode [ 385.917776][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 385.927333][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 385.952697][T15819] wlan1 speed is unknown, defaulting to 1000 [ 386.140890][ T50] Bluetooth: hci4: command tx timeout [ 386.177826][T15894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.346383][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 386.364427][T15909] openvswitch: netlink: Missing key (keys=40, expected=80) [ 386.721735][T15819] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.752323][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.766097][T15819] bridge_slave_0: entered allmulticast mode [ 386.782337][T15819] bridge_slave_0: entered promiscuous mode [ 386.791648][T15819] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.820140][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.848430][T15819] bridge_slave_1: entered allmulticast mode [ 386.884902][T15819] bridge_slave_1: entered promiscuous mode [ 387.035879][T15819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.093639][T15819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.187639][T15819] team0: Port device team_slave_0 added [ 387.208572][T15819] team0: Port device team_slave_1 added [ 387.306598][T15819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.317742][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.372906][T15964] netlink: 'syz.7.2750': attribute type 1 has an invalid length. [ 387.397154][T15819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.485455][T15964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.494189][T15819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.510336][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.586642][T15819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.621409][T15969] __nla_validate_parse: 1 callbacks suppressed [ 387.621428][T15969] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2752'. [ 387.676566][T15819] hsr_slave_0: entered promiscuous mode [ 387.692832][T15819] hsr_slave_1: entered promiscuous mode [ 387.702289][T15819] debugfs: 'hsr0' already exists in 'hsr' [ 387.709552][T15819] Cannot create hsr debugfs directory [ 387.758041][T15968] syzkaller0: entered promiscuous mode [ 387.763587][T15968] syzkaller0: entered allmulticast mode [ 387.790601][ T50] block nbd3: Receive control failed (result -32) [ 388.335069][ T50] Bluetooth: hci4: command tx timeout [ 390.382350][ T50] Bluetooth: hci4: command tx timeout [ 390.831580][T16006] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2763'. [ 390.890408][T16006] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2763'. [ 391.439631][T16031] netlink: 'syz.3.2771': attribute type 63 has an invalid length. [ 391.490198][T16027] netlink: 'syz.4.2768': attribute type 10 has an invalid length. [ 391.499115][T16027] ipt_REJECT: TCP_RESET invalid for non-tcp [ 391.908754][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2777'. [ 392.069609][T15819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 392.103543][T15819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.121879][T15819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.153798][T16061] openvswitch: netlink: Missing key (keys=40, expected=100) [ 392.162090][T15819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.172879][T15819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.197319][T15819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.209857][T15819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.242433][T16064] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 392.257427][T15819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.477074][T15819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.517233][T15819] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.544808][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.562161][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.575877][ T50] Bluetooth: hci4: command tx timeout [ 392.615894][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.623202][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.730743][T15819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.741868][T15819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.051952][T16102] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 393.054189][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2792'. [ 393.075283][T16106] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 393.098717][T16104] block nbd4: Unsupported socket: should be TCP or UNIX. [ 393.698523][T16137] IPVS: set_ctl: invalid protocol: 12 172.20.20.28:20002 [ 393.724047][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 393.838683][T16137] macvtap1: entered promiscuous mode [ 393.844047][T16137] vlan0: entered promiscuous mode [ 393.849473][T16137] macvtap1: entered allmulticast mode [ 393.854981][T16137] vlan0: entered allmulticast mode [ 393.860121][T16137] veth0_vlan: entered allmulticast mode [ 394.305712][T16153] ipvlan1: entered promiscuous mode [ 394.476417][T15819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.582200][T16159] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2805'. [ 394.591223][T16159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 394.632302][T15819] veth0_vlan: entered promiscuous mode [ 394.657076][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2806'. [ 394.671317][T15819] veth1_vlan: entered promiscuous mode [ 394.799925][T15819] veth0_macvtap: entered promiscuous mode [ 394.832062][T16168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.955944][T15819] veth1_macvtap: entered promiscuous mode [ 395.018331][T15819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.037651][T15819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.055118][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.076128][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.129275][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.157902][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.279157][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.307044][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.377455][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2814'. [ 395.394779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.438415][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.590933][T16197] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 395.707114][T16203] sctp: [Deprecated]: syz.1.2818 (pid 16203) Use of int in max_burst socket option. [ 395.707114][T16203] Use struct sctp_assoc_value instead [ 395.982119][T16213] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 395.992722][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2821'. [ 396.002809][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2821'. [ 396.600579][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.626439][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.636821][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.648526][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.656361][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.852812][T16234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2828'. [ 397.122225][T16247] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2832'. [ 398.062543][T16286] netlink: 'syz.1.2841': attribute type 9 has an invalid length. [ 398.157640][T16291] __nla_validate_parse: 1 callbacks suppressed [ 398.157663][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 398.307122][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2842'. [ 398.343114][T16300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2846'. [ 398.370279][T16300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2846'. [ 398.374339][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2842'. [ 398.522488][T16227] wg2 speed is unknown, defaulting to 1000 [ 398.702247][ T4943] Bluetooth: hci2: command tx timeout [ 398.969215][T16227] wlan1 speed is unknown, defaulting to 1000 [ 399.128572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.201173][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2853'. [ 399.324207][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2854'. [ 399.364643][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2856'. [ 399.519688][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2857'. [ 399.875786][T16357] syzkaller0: entered promiscuous mode [ 399.899559][T16357] syzkaller0: entered allmulticast mode [ 400.079772][T16227] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.092238][T16227] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.104397][T16227] bridge_slave_0: entered allmulticast mode [ 400.139649][T16227] bridge_slave_0: entered promiscuous mode [ 400.165247][T16227] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.172925][T16227] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.180248][T16227] bridge_slave_1: entered allmulticast mode [ 400.189094][T16227] bridge_slave_1: entered promiscuous mode [ 400.199204][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2867'. [ 400.211325][T16371] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 400.268360][T16371] team0: Port device dummy0 added [ 400.291027][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.306578][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.383147][T16227] team0: Port device team_slave_0 added [ 400.392060][T16227] team0: Port device team_slave_1 added [ 400.424388][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.433556][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.472969][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.486900][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.494867][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.521991][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.593252][T16378] hsr_slave_1 (unregistering): left promiscuous mode [ 400.643823][T16227] hsr_slave_0: entered promiscuous mode [ 400.650602][T16227] hsr_slave_1: entered promiscuous mode [ 400.658022][T16227] debugfs: 'hsr0' already exists in 'hsr' [ 400.664121][T16227] Cannot create hsr debugfs directory [ 400.781096][ T4943] Bluetooth: hci2: command tx timeout [ 401.069874][T16227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.082466][T16227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.300360][T16227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.378169][T16227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.706311][T16227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.725125][T16227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.746707][T16411] netlink: 'syz.1.2876': attribute type 4 has an invalid length. [ 402.012692][T16227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.045854][T16227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.436655][T16453] xt_l2tp: invalid flags combination: 8 [ 402.608146][T16456] pimreg: entered allmulticast mode [ 402.862062][ T4943] Bluetooth: hci2: command tx timeout [ 404.918914][T16426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.937192][T16442] __nla_validate_parse: 4 callbacks suppressed [ 404.937214][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 404.944448][ T4943] Bluetooth: hci2: command tx timeout [ 404.984359][T16227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.039672][T16227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.076425][T16227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.103613][T16227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.149584][T16227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.188952][T16227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.201225][T16227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.220717][T16227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.329480][T16489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.345599][T16489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.359301][T16489] bond0 (unregistering): Released all slaves [ 405.457797][T16496] Cannot find add_set index 2 as target [ 405.481600][T16227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.560318][T16227] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.583955][ T3405] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 405.610516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.617885][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.748116][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.756255][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.936563][T16489] netlink: 524 bytes leftover after parsing attributes in process `syz.8.2896'. [ 405.969664][T16506] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 406.010380][T16506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2898'. [ 406.019371][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2900'. [ 406.062453][T16496] syzkaller1: entered promiscuous mode [ 406.068007][T16496] syzkaller1: entered allmulticast mode [ 406.279405][T16525] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2902'. [ 406.345772][T16527] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 406.691047][T16547] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2908'. [ 406.875537][T16553] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 406.883342][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 406.993997][T16227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.274238][T16575] openvswitch: netlink: IP tunnel dst address not specified [ 407.399568][T16581] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 407.420587][T16582] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 407.896013][T16227] veth0_vlan: entered promiscuous mode [ 407.908052][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 407.917376][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 407.941499][T16227] veth1_vlan: entered promiscuous mode [ 408.010661][ T31] INFO: task syz.2.1609:11676 blocked for more than 143 seconds. [ 408.018465][ T31] Not tainted syzkaller #0 [ 408.031931][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.061301][ T31] task:syz.2.1609 state:D stack:26672 pid:11676 tgid:11675 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 408.091620][ T31] Call Trace: [ 408.094985][ T31] [ 408.097968][ T31] __schedule+0x17d9/0x56c0 [ 408.102689][ T31] ? __lock_acquire+0x683/0x2cf0 [ 408.120265][ T31] ? __lock_acquire+0x683/0x2cf0 [ 408.146488][T16227] veth0_macvtap: entered promiscuous mode [ 408.149161][T16608] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2923'. [ 408.166973][ T31] ? __pfx___schedule+0x10/0x10 [ 408.179390][ T31] ? schedule+0x90/0x2b0 [ 408.190800][ T31] schedule+0x164/0x2b0 [ 408.202345][T16227] veth1_macvtap: entered promiscuous mode [ 408.209530][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.216821][ T31] __mutex_lock+0x7bf/0x1550 [ 408.226174][ T31] ? __mutex_lock+0x5d4/0x1550 [ 408.231610][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 408.237433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.243932][ T31] ? net_generic+0x1e/0x240 [ 408.248719][ T31] ? net_generic+0x1e/0x240 [ 408.261932][ T31] ? net_generic+0x1e/0x240 [ 408.266783][ T31] ? net_generic+0x1e/0x240 [ 408.272028][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 408.279453][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 408.285487][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.288374][T16227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.299341][ T31] ? bpf_lsm_capable+0x9/0x20 [ 408.305942][ T31] ? security_capable+0x7e/0x2c0 [ 408.311669][ T31] genl_rcv_msg+0x614/0x7a0 [ 408.316327][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.323781][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 408.336658][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 408.345087][ T31] ? __asan_memcpy+0x40/0x70 [ 408.349944][ T31] ? __skb_clone+0x5c/0x6c0 [ 408.355443][ T31] netlink_rcv_skb+0x226/0x4a0 [ 408.360480][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.366902][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.372879][ T31] ? down_read+0x2be/0x330 [ 408.377490][ T31] genl_rcv+0x28/0x40 [ 408.382412][T16227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.397776][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.400606][ T31] netlink_unicast+0x7bb/0x940 [ 408.411313][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.411400][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.411442][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.445269][ T31] netlink_sendmsg+0x813/0xb40 [ 408.450249][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.456636][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.476812][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.482176][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 408.487327][ T31] ____sys_sendmsg+0x54e/0x850 [ 408.492667][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.498135][ T31] ? import_iovec+0x73/0xa0 [ 408.502812][ T31] ___sys_sendmsg+0x2a5/0x360 [ 408.507534][ T31] ? __lock_acquire+0x683/0x2cf0 [ 408.512529][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.517772][ T31] ? futex_wait+0x2a2/0x390 [ 408.526387][ T31] ? __fget_files+0x2a/0x420 [ 408.531149][ T31] ? __fget_files+0x3a2/0x420 [ 408.535880][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 408.540844][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.546359][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.552497][ T31] do_syscall_64+0x174/0x580 [ 408.557159][ T31] ? trace_irq_disable+0x3b/0x140 [ 408.562222][ T31] ? clear_bhb_loop+0x40/0x90 [ 408.566939][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.583381][ T31] RIP: 0033:0x7f264819de99 [ 408.587863][ T31] RSP: 002b:00007f26463f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.596288][ T31] RAX: ffffffffffffffda RBX: 00007f2648425fa0 RCX: 00007f264819de99 [ 408.604281][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 408.612289][ T31] RBP: 00007f2648233eaf R08: 0000000000000000 R09: 0000000000000000 [ 408.620307][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.628303][ T31] R13: 00007f2648426038 R14: 00007f2648425fa0 R15: 00007ffc4d555c08 [ 408.637096][ T31] [ 408.640286][ T31] [ 408.640286][ T31] Showing all locks held in the system: [ 408.648068][ T31] 3 locks held by kworker/u8:0/12: [ 408.653214][ T31] #0: ffff888032f5e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.670482][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 408.679635][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 408.702236][ T31] 1 lock held by ksoftirqd/0/15: [ 408.707480][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 408.718406][ T31] 1 lock held by khungtaskd/31: [ 408.723757][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 408.734517][ T31] 3 locks held by kworker/u8:2/36: [ 408.739679][ T31] #0: ffff888032f5e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.751299][ T31] #1: ffffc90000ac7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.764155][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 408.773736][ T31] 2 locks held by kworker/u8:3/48: [ 408.778866][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.791793][ T31] #1: ffffc90000b87c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.814434][ T31] 2 locks held by kworker/u8:8/1023: [ 408.819785][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.831517][ T31] #1: ffffc90005417c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.843267][ T31] 6 locks held by kworker/u8:10/3405: [ 408.848670][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 408.858630][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 408.867660][ T31] #2: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 408.877658][ T31] #3: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 408.887644][ T31] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 408.897362][ T31] #5: ffff8880b87281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x420 [ 408.908013][ T31] 2 locks held by getty/5384: [ 408.922630][ T31] #0: ffff8880330990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.933465][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 408.945208][ T31] 3 locks held by kworker/0:4/5719: [ 408.951472][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.966334][ T31] #1: ffffc90003fafc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 408.980443][ T31] #2: ffff888056ceb250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 408.992935][ T31] 2 locks held by syz.0.1463/11093: [ 408.998582][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.007795][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 409.018894][ T31] 2 locks held by syz.2.1609/11676: [ 409.024530][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.034784][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 409.045741][ T31] 3 locks held by syz.6.2322/14258: [ 409.051063][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.059305][ T31] #1: ffff888078e9e6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 409.070223][ T31] #2: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 409.081332][ T31] 2 locks held by syz.5.2476/14863: [ 409.086572][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.095268][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 409.106581][ T31] 3 locks held by syz-executor/16227: [ 409.112448][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 409.122304][ T31] #1: ffff88802b7ad610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 409.132190][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 409.144545][ T31] 2 locks held by syz.8.2921/16598: [ 409.149794][ T31] #0: ffff88803665bbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 409.168941][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 409.202828][ T31] [ 409.205229][ T31] ============================================= [ 409.205229][ T31] [ 409.213749][ T31] NMI backtrace for cpu 0 [ 409.213772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.213795][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 409.213808][ T31] Call Trace: [ 409.213816][ T31] [ 409.213824][ T31] dump_stack_lvl+0xe8/0x150 [ 409.213888][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 409.214024][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.214058][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 409.214091][ T31] sys_info+0x135/0x170 [ 409.214116][ T31] watchdog+0xfd7/0x1030 [ 409.214159][ T31] ? watchdog+0x1c7/0x1030 [ 409.214191][ T31] kthread+0x388/0x470 [ 409.214222][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.214244][ T31] ? __pfx_kthread+0x10/0x10 [ 409.214275][ T31] ret_from_fork+0x514/0xb70 [ 409.214326][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 409.214356][ T31] ? __switch_to+0xc89/0x1420 [ 409.214386][ T31] ? __pfx_kthread+0x10/0x10 [ 409.214417][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.214455][ T31] [ 409.214463][ T31] Sending NMI from CPU 0 to CPUs 1: [ 409.335234][ C1] NMI backtrace for cpu 1 [ 409.335255][ C1] CPU: 1 UID: 0 PID: 15808 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 409.335278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 409.335291][ C1] RIP: 0010:macvlan_broadcast+0x5a6/0x630 [ 409.335430][ C1] Code: da 26 fb e9 17 ff ff ff e8 17 da 26 fb eb 05 e8 10 da 26 fb 4c 8b 7c 24 38 49 ff c7 49 81 ff 00 01 00 00 74 0a e8 fa d9 26 fb 96 fb ff ff e8 f0 d9 26 fb 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 [ 409.335449][ C1] RSP: 0018:ffffc90000a084e8 EFLAGS: 00000246 [ 409.335475][ C1] RAX: ffffffff869f9786 RBX: 0000000000000000 RCX: ffff88801e715d00 [ 409.335490][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 409.335503][ C1] RBP: 0000000000000004 R08: ffff88804de16f1f R09: 1ffff11009bc2de3 [ 409.335518][ C1] R10: dffffc0000000000 R11: ffffed1009bc2de4 R12: 0000000000000000 [ 409.335532][ C1] R13: 1ffff1100e4d8dd8 R14: dffffc0000000000 R15: 000000000000007d [ 409.335547][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 409.335564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.335579][ C1] CR2: 00007f168c2ebe80 CR3: 000000006a508000 CR4: 00000000003526f0 [ 409.335597][ C1] Call Trace: [ 409.335605][ C1] [ 409.335621][ C1] macvlan_start_xmit+0x2bf/0x5f0 [ 409.335650][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 409.335718][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 409.335740][ C1] ? __lock_acquire+0x683/0x2cf0 [ 409.335776][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 409.335798][ C1] ? ___neigh_create+0x1cd2/0x22b0 [ 409.335831][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 409.335855][ C1] ? neigh_resolve_output+0x428/0x720 [ 409.335885][ C1] ? eth_header+0x11b/0x200 [ 409.335944][ C1] ? __asan_memcpy+0x40/0x70 [ 409.335985][ C1] ? ip6_output+0x11e/0x540 [ 409.336009][ C1] ip6_output+0x337/0x540 [ 409.336034][ C1] ? __pfx_ip6_output+0x10/0x10 [ 409.336057][ C1] ndisc_send_skb+0xcb2/0x1650 [ 409.336143][ C1] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 409.336181][ C1] ? ndisc_send_skb+0x203/0x1650 [ 409.336216][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 409.336248][ C1] ? __pfx_dst_output+0x10/0x10 [ 409.336293][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 409.336322][ C1] ? call_timer_fn+0xd4/0x5e0 [ 409.336352][ C1] ? lock_acquire+0x106/0x350 [ 409.336381][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 409.336410][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.336437][ C1] call_timer_fn+0x192/0x5e0 [ 409.336473][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 409.336500][ C1] ? call_timer_fn+0xd4/0x5e0 [ 409.336529][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 409.336566][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.336595][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 409.336624][ C1] __run_timer_base+0x652/0x8b0 [ 409.336652][ C1] ? ktime_get+0x45/0x220 [ 409.336684][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 409.336715][ C1] ? ktime_get+0x1f5/0x220 [ 409.336741][ C1] ? lapic_next_event+0x11/0x20 [ 409.336763][ C1] run_timer_softirq+0xb7/0x170 [ 409.336793][ C1] handle_softirqs+0x225/0x840 [ 409.336825][ C1] ? __irq_exit_rcu+0xca/0x220 [ 409.336852][ C1] __irq_exit_rcu+0xca/0x220 [ 409.336875][ C1] irq_exit_rcu+0x9/0x30 [ 409.336896][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.336927][ C1] [ 409.336933][ C1] [ 409.336941][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.336965][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 409.336989][ C1] Code: 8b 3d d4 2e 89 0c 48 89 de 5b e9 a3 01 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 78 4e a6 11 65 8b 15 99 4e a6 11 81 e2 00 01 ff 00 74 [ 409.337006][ C1] RSP: 0018:ffffc900033cf618 EFLAGS: 00000297 [ 409.337024][ C1] RAX: ffffffff820a3a6d RBX: 000000000000000d RCX: ffff88801e715d00 [ 409.337038][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.337050][ C1] RBP: ffffc900033cf730 R08: ffffea00004d15f7 R09: 1ffffd400009a2be [ 409.337066][ C1] R10: dffffc0000000000 R11: fffff9400009a2bf R12: ffffc900033cf910 [ 409.337082][ C1] R13: ffffc900033cf808 R14: dffffc0000000000 R15: ffffc900033cf7a0 [ 409.337102][ C1] ? folios_put_refs+0x67d/0xb30 [ 409.337139][ C1] folios_put_refs+0x67d/0xb30 [ 409.337162][ C1] ? x64_sys_call+0x221a/0x2240 [ 409.337180][ C1] ? do_syscall_64+0x174/0x580 [ 409.337197][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.337225][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 409.337252][ C1] ? free_swap_cache+0x109/0x300 [ 409.337275][ C1] free_pages_and_swap_cache+0x2ba/0x490 [ 409.337301][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 409.337323][ C1] ? free_pgd_range+0x1356/0x13c0 [ 409.337365][ C1] ? __virt_addr_valid+0x137/0x390 [ 409.337390][ C1] ? __virt_addr_valid+0x137/0x390 [ 409.337428][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 409.337466][ C1] tlb_finish_mmu+0xf4/0x220 [ 409.337499][ C1] exit_mmap+0x4b2/0x9f0 [ 409.337524][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 409.337562][ C1] ? __pfx_exit_aio+0x10/0x10 [ 409.337611][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 409.337644][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 409.337670][ C1] __mmput+0x118/0x420 [ 409.337692][ C1] exit_mm+0x221/0x2d0 [ 409.337723][ C1] do_exit+0x6cd/0x2360 [ 409.337757][ C1] ? __pfx_do_exit+0x10/0x10 [ 409.337784][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.337813][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.337844][ C1] do_group_exit+0x22d/0x2f0 [ 409.337874][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.337896][ C1] __x64_sys_exit_group+0x3f/0x40 [ 409.337926][ C1] x64_sys_call+0x221a/0x2240 [ 409.337944][ C1] do_syscall_64+0x174/0x580 [ 409.337962][ C1] ? trace_irq_disable+0x3b/0x140 [ 409.337989][ C1] ? clear_bhb_loop+0x40/0x90 [ 409.338013][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.338033][ C1] RIP: 0033:0x7f168baf16c5 [ 409.338051][ C1] Code: Unable to access opcode bytes at 0x7f168baf169b. [ 409.338061][ C1] RSP: 002b:00007ffd68040dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 409.338081][ C1] RAX: ffffffffffffffda RBX: 0000563b64204ca0 RCX: 00007f168baf16c5 [ 409.338097][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 409.338110][ C1] RBP: 0000563b641d9910 R08: 0000000000000000 R09: 0000000000000000 [ 409.338123][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.338136][ C1] R13: 00007ffd68040e20 R14: 0000000000000000 R15: 0000000000000000 [ 409.338160][ C1] [ 410.081848][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.088806][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.097950][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 410.108042][ T31] Call Trace: [ 410.111352][ T31] [ 410.114308][ T31] vpanic+0x56c/0xa60 [ 410.118337][ T31] ? __pfx___schedule+0x10/0x10 [ 410.123234][ T31] ? __pfx_vpanic+0x10/0x10 [ 410.127783][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 410.133975][ T31] panic+0xc5/0xd0 [ 410.137746][ T31] ? __pfx_panic+0x10/0x10 [ 410.142224][ T31] ? preempt_schedule_common+0x82/0xd0 [ 410.147734][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 410.153144][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 410.159343][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 410.165563][ T31] watchdog+0x1030/0x1030 [ 410.169934][ T31] ? watchdog+0x1c7/0x1030 [ 410.174380][ T31] kthread+0x388/0x470 [ 410.178496][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.183208][ T31] ? __pfx_kthread+0x10/0x10 [ 410.187840][ T31] ret_from_fork+0x514/0xb70 [ 410.192473][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.197617][ T31] ? __switch_to+0xc89/0x1420 [ 410.202320][ T31] ? __pfx_kthread+0x10/0x10 [ 410.206941][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.211745][ T31] [ 410.215422][ T31] Kernel Offset: disabled [ 410.219758][ T31] Rebooting in 86400 seconds..