last executing test programs: 2m40.188770028s ago: executing program 4 (id=3532): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x88, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x57}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x66b6}, @IFLA_GRE_TOS={0x5, 0x9, 0x66}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x88}}, 0x0) 2m39.980662653s ago: executing program 4 (id=3534): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000336, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, '?r'}]}}}}}}}}, 0x0) 2m39.820044082s ago: executing program 4 (id=3536): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r6, 0x0, 0x0, 0x40010001, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000940)={{r8, &(0x7f00000007c0)='wlan1\x00', 0x10100, &(0x7f0000000800)={@align=0x71b, {0x2, 0x2, 0x5, 0x9f42}}, 0x1ff, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x5}, {[0x2, 0x2ca69b2e, 0x81, 0x5800]}, 0x1, 0x48, &(0x7f00000008c0)=""/72}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r11}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1e, 0x1, &(0x7f0000000340)=@raw=[@alu={0x7, 0x0, 0x7, 0x1, 0xa, 0x30, 0xffffffffffffffff}], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xf9, &(0x7f00000006c0)=""/249, 0x41100, 0x40, '\x00', r5, @fallback=0x22, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x2, 0x5, 0x6}, 0x10, 0x0, r2, 0x6, &(0x7f0000000a80)=[r4, r4, r11, r13, r4], &(0x7f0000000b40)=[{0x3, 0x4, 0x3, 0xa}, {0x3, 0x5, 0xc, 0xb}, {0x1, 0x1, 0x6}, {0x5, 0x3, 0xa, 0x1}, {0x0, 0x3, 0x9, 0x3}, {0x3, 0x5, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x2c, r14, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r16, {0x2}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m39.382161988s ago: executing program 3 (id=3539): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x40) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x40) (async) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) (async) 2m39.381335086s ago: executing program 4 (id=3540): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000100)) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x9e, &(0x7f00000011c0)={@empty, @remote, @void, {@ipv4={0x800, @icmp={{0x22, 0x4, 0x2, 0x8, 0x90, 0x64, 0x0, 0x4, 0x1, 0x0, @local, @local, {[@noop, @generic={0x86, 0xd, "b2142a06742d9ca33cb687"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x1, [{0x0, 0xd, "c8cec2ccba45a3b13e16a3"}, {0x1, 0xc, "86c2c0c9d855b9965a8a"}, {0x7, 0xa, "1a6c41aa3988485e"}, {0x0, 0x9, "ec9754e3797a23"}]}, @noop, @rr={0x7, 0x2f, 0xd1, [@rand_addr=0x64010101, @private=0xa010101, @private=0xa010100, @private=0xa010101, @remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010100, @multicast2]}]}}, @info_request={0xf, 0x0, 0x0, 0xffff, 0x2}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000b988216e499500000000002801ecb2e85c018dae488d2e14e1ff51e7664155ec414ca74318e55a70079e5fa6103807f3298e56b195b209c00dd97e048edf1d8ad5"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000001100)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000540)}, 0x3b61}], 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 2m39.233281251s ago: executing program 3 (id=3542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x26020480) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9abc89b6f5b69", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m39.14557656s ago: executing program 3 (id=3543): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04dcfdcf256e5fe664998b44bc171d8e1112e5df7de05191f64bde6f09d033dd5e88e1f26f8cb2d765d9ca97341c1ceac2afc8be84da1b6dcf44df3568e27b6e3768dec43291581893", 0x65) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045c8003c006400007f2990780a010101e000000128afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea23f861f1a915818f456a97f99d2c38f514cf7c5a50f1d8e9efe30d4fa34389199c258e75d140bff596315adf49a0cd3c3b45a0681362f755a6464f4b4bead9f9636b91c06688f18383df7f4c7104281ae1043620ffd5c181d154ab9f59f9b3a23ab462cd68250d829d83c8971b24076b1d6737284319222edcabdb3a40b91bb357b8a4a51d1e8cf59940355e51093b4016118f2d940cb5e62166ff8f5a332123768d13f2904fb1c820ff0c3639eedb40a63cf97261651f51b322e073a43314738c0226f5cbb4339d9485733d07c6b4ccbc8e4e4a4907e620c7ce94a3ad3e61c7c11b47961de342b4c5348f4e86a9c8762145c47b34891c93510b1c39797140c00eb355c22f7c32d5184b1f532ee3d283c181ab824918d1f25917d7adeaca10e"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m38.869610082s ago: executing program 3 (id=3549): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = epoll_create(0x7) r2 = epoll_create(0x7) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa000001c}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000027c0), r6) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4d}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048005}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') (async) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000040)={0x3, 0x2}) (async) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000040)={0x3, 0x2}) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="10002dbf7000fddbdf250300000008000700", @ANYRES32=r12, @ANYBLOB="76171caf8dce32f194bdef1b6939c9c3934aa2fa70384d3124677f02925eb478ddce78b3206231a4fcc67ed71b3cae28bc9ffd387f36f7e04b96b6e76f987b35a63956ac3dd096a89bfd8a043b2bdaa6b64a99bd96085ae3d69d2b0b4ff248368f3f5ddd84d69de8d2e99cf05afc4f1dbbd38d12"], 0x1c}, 0x1, 0x0, 0x0, 0x4480}, 0x4000004) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="200040000000fbdbdf25010000000c000300010000000000000005000d002a000000080004007f00000108000200010000000800050064010102"], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="200040000000fbdbdf25010000000c000300010000000000000005000d002a000000080004007f00000108000200010000000800050064010102"], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000000000000000000040001801000020646c250000020000202020db1af8ffa0000000bda102000000000007010000f8ffffffb702000008000000b70300000300000085000000d20000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m38.557174964s ago: executing program 3 (id=3554): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000800)={@broadcast, @local, @void, {@ipv4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000280)='GPL\x00', 0xf, 0x4d2b55bba0ce019d, &(0x7f0000000780)=""/4088, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2m38.403675498s ago: executing program 4 (id=3557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003680)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x1f, 0xfffffe01, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x4, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x4, 0x0, @local, @loopback}}}}, 0x3e) 2m38.073232466s ago: executing program 4 (id=3563): socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) listen(0xffffffffffffffff, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf251900000008000300", @ANYRES32=r5, @ANYBLOB="7b0000000000007f"], 0x24}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x3d}, 0xffffff3b) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x3e4, &(0x7f0000000e40)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x3aa, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@dstopts={0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1]}, @fragment={0x5e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x66}, @srh={0x16, 0x0, 0x4, 0x0, 0xa, 0x8, 0x4}, @dstopts={0xfd, 0x2d, '\x00', [@generic={0x2, 0x5b, "51e8d263480dcfeec5f9440c3cfb6a9228911a1b493fa2621e08f35b853ba78dfd4d168229291fa5a407fc2347c754cbfe46ff1532c3f03d6906243d85ad0d80557bd4489e8428e80c1e7ec1fb2cbc5476e163d139eabb2550e9e5"}, @pad1, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x4c}, @pad1, @generic={0x6, 0xc4, "72139e9279ff1c6aa4a0a2245c611836e896996ae40470dfdc50d7d7643ef066508a6d0d5904248e4ac0de763c016214665316b5a7e9fb3d02c3863abe72a91dab553ab61efc64514e75accb3cf5a3cf727e657f77af621f15f4a174c90393702af043b237676cb23ae3ae488569f40838fcd945642f1461bfbf79914a0facc05bab2992f77fa9f0b7a209c17aeaf1eb2e5af5e4569978482c482ddbe7ea29114fefdff1dca9de36e09943336e539a88ee8e3015d349335d141989064b74ad72fbf54804"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3c, 0xe, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0x7}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x96, 0x9, [0xff, 0x100, 0xd86, 0x8000000000000001, 0x1]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x6e}, @ra={0x5, 0x2, 0xfffd}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0xf, [0xffffffff]}}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xd2, 0x0, 0xe0, 0x0, 0x0, 0x5, 0x68}, @hopopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x32, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @calipso={0x7, 0x30, {0x0, 0xa, 0x8, 0x1, [0x8, 0x4, 0x4, 0x4, 0x0]}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x2e, 0x0, 0x20, 0x0, 0x0, 0x1, 0x64}], {0x4e22, 0x6e22, 0x102, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}, "040c4f84388704bdf3d4592de051fdb55880950157ae07e20f0316af9929a39ed9a045c2806ca54f8eb2b44040018fdde1794d2696efd1cb295feb26865c1f8774d2136385e097edbcc6f5855426ecece02c01a864e17780a8e20fd7c1b197a49fba0dd3d186a28603ffa262b3669c39a68f7c1385755136352937c3f81bb114b6ed7c203731624691e5dad78d5e8e6acf66b3d7b61552ac975a080c7213b4fc8e15a30a1d9b46bba047d15a857f1d7386e4bbbb76b26c72af17492afb6e0b48be7acb7d5dfa7f7679a0051780ae0c33b2d4957791991f35a9482fa6c5f12b627779dc881a261c100b0a12da97bd59f9de99fa6c57a2"}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000000)=0x2a) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@alu={0x4, 0x1, 0x4, 0x0, 0x3, 0xc, 0x8}, @ringbuf_query, @ringbuf_query, @alu={0x7, 0x1, 0x3, 0x4, 0x9, 0x30, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x5, &(0x7f00000004c0)=""/5, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0x2, 0x1}], 0x10, 0x1}, 0x94) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) 2m37.542231121s ago: executing program 3 (id=3565): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x18c, 0x3d, 0x800, 0x70bd29, 0x25dfdbfb, {0x1d}, [@typed={0x9, 0x3d, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @generic="4331b5de6a7eafbb199b22cd600bd5e98de3361613efe62e411bd4993321f26ba235ea01facd5357dd4bf3c1177d7d54a694c4a3d3847e172e6e3291c3657032b562820ed66d2255c4e4dcc51ed7bca44f8f4ba0f7c9e56902d1b579275ecd656b2ad43f2e4b679a570e42d01a44fc4ab62fad9e31922c10", @nested={0x10, 0x94, 0x0, 0x1, [@typed={0x9, 0x9e, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, @typed={0xe2, 0x37, 0x0, 0x0, @binary="ca9abb9e8f44fb4d1acc85833112c7d3d93413b7597209b3ddfad5e2f27c29755648ca0d15e7b5281edd20cc7a1c28dcff9b93e006530afba40cbe2cb0c583d944a561b3078462550a6b037a7ad5ca693ebea07dcca22952b724534e7d06b3223eda4ac1736c6fe3918723925d3436c795067277d1d1a62c3648008a50840d2a2967dfe865aeb4f3c689818b74c3ddfeb2fb0a8e1a39c2ed08b070f6a46049bffeb78498a64b333b338072b8cd9da1cb4f12a0a2dc2461884facae0269dc7ca199d250d63246e51a64489dd6cc58550d866eb5387b84fe825390cab93188"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) (async) close(0x3) (async) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r6, &(0x7f0000001ec0), 0x0}, 0x20) (async, rerun: 32) r7 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9ffb010018000000000000003000000030000000020000000000000001000004020000000000000003000000060000000000000000000002000000000000000000000006020000000000"], 0x0, 0x4a, 0x0, 0x8}, 0x28) 2m22.874902251s ago: executing program 32 (id=3563): socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) listen(0xffffffffffffffff, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf251900000008000300", @ANYRES32=r5, @ANYBLOB="7b0000000000007f"], 0x24}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x3d}, 0xffffff3b) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x3e4, &(0x7f0000000e40)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x3aa, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@dstopts={0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1]}, @fragment={0x5e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x66}, @srh={0x16, 0x0, 0x4, 0x0, 0xa, 0x8, 0x4}, @dstopts={0xfd, 0x2d, '\x00', [@generic={0x2, 0x5b, "51e8d263480dcfeec5f9440c3cfb6a9228911a1b493fa2621e08f35b853ba78dfd4d168229291fa5a407fc2347c754cbfe46ff1532c3f03d6906243d85ad0d80557bd4489e8428e80c1e7ec1fb2cbc5476e163d139eabb2550e9e5"}, @pad1, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x4c}, @pad1, @generic={0x6, 0xc4, "72139e9279ff1c6aa4a0a2245c611836e896996ae40470dfdc50d7d7643ef066508a6d0d5904248e4ac0de763c016214665316b5a7e9fb3d02c3863abe72a91dab553ab61efc64514e75accb3cf5a3cf727e657f77af621f15f4a174c90393702af043b237676cb23ae3ae488569f40838fcd945642f1461bfbf79914a0facc05bab2992f77fa9f0b7a209c17aeaf1eb2e5af5e4569978482c482ddbe7ea29114fefdff1dca9de36e09943336e539a88ee8e3015d349335d141989064b74ad72fbf54804"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3c, 0xe, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0x7}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x96, 0x9, [0xff, 0x100, 0xd86, 0x8000000000000001, 0x1]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x6e}, @ra={0x5, 0x2, 0xfffd}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0xf, [0xffffffff]}}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xd2, 0x0, 0xe0, 0x0, 0x0, 0x5, 0x68}, @hopopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x32, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @calipso={0x7, 0x30, {0x0, 0xa, 0x8, 0x1, [0x8, 0x4, 0x4, 0x4, 0x0]}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x2e, 0x0, 0x20, 0x0, 0x0, 0x1, 0x64}], {0x4e22, 0x6e22, 0x102, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}, "040c4f84388704bdf3d4592de051fdb55880950157ae07e20f0316af9929a39ed9a045c2806ca54f8eb2b44040018fdde1794d2696efd1cb295feb26865c1f8774d2136385e097edbcc6f5855426ecece02c01a864e17780a8e20fd7c1b197a49fba0dd3d186a28603ffa262b3669c39a68f7c1385755136352937c3f81bb114b6ed7c203731624691e5dad78d5e8e6acf66b3d7b61552ac975a080c7213b4fc8e15a30a1d9b46bba047d15a857f1d7386e4bbbb76b26c72af17492afb6e0b48be7acb7d5dfa7f7679a0051780ae0c33b2d4957791991f35a9482fa6c5f12b627779dc881a261c100b0a12da97bd59f9de99fa6c57a2"}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000000)=0x2a) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@alu={0x4, 0x1, 0x4, 0x0, 0x3, 0xc, 0x8}, @ringbuf_query, @ringbuf_query, @alu={0x7, 0x1, 0x3, 0x4, 0x9, 0x30, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x5, &(0x7f00000004c0)=""/5, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0x2, 0x1}], 0x10, 0x1}, 0x94) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) 2m22.428575513s ago: executing program 33 (id=3565): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x18c, 0x3d, 0x800, 0x70bd29, 0x25dfdbfb, {0x1d}, [@typed={0x9, 0x3d, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @generic="4331b5de6a7eafbb199b22cd600bd5e98de3361613efe62e411bd4993321f26ba235ea01facd5357dd4bf3c1177d7d54a694c4a3d3847e172e6e3291c3657032b562820ed66d2255c4e4dcc51ed7bca44f8f4ba0f7c9e56902d1b579275ecd656b2ad43f2e4b679a570e42d01a44fc4ab62fad9e31922c10", @nested={0x10, 0x94, 0x0, 0x1, [@typed={0x9, 0x9e, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, @typed={0xe2, 0x37, 0x0, 0x0, @binary="ca9abb9e8f44fb4d1acc85833112c7d3d93413b7597209b3ddfad5e2f27c29755648ca0d15e7b5281edd20cc7a1c28dcff9b93e006530afba40cbe2cb0c583d944a561b3078462550a6b037a7ad5ca693ebea07dcca22952b724534e7d06b3223eda4ac1736c6fe3918723925d3436c795067277d1d1a62c3648008a50840d2a2967dfe865aeb4f3c689818b74c3ddfeb2fb0a8e1a39c2ed08b070f6a46049bffeb78498a64b333b338072b8cd9da1cb4f12a0a2dc2461884facae0269dc7ca199d250d63246e51a64489dd6cc58550d866eb5387b84fe825390cab93188"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) (async) close(0x3) (async) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r6, &(0x7f0000001ec0), 0x0}, 0x20) (async, rerun: 32) r7 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9ffb010018000000000000003000000030000000020000000000000001000004020000000000000003000000060000000000000000000002000000000000000000000006020000000000"], 0x0, 0x4a, 0x0, 0x8}, 0x28) 55.997078651s ago: executing program 6 (id=4467): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c000000020000000000000000000000000000000200010000000000020209fd0000000003000500002000000200"], 0x58}, 0x1, 0x7}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, &(0x7f00000002c0), 0x6, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x3, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 55.74109269s ago: executing program 6 (id=4472): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="b3ab70", 0x3}], 0x1}, 0xb00}], 0x1, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x200, 0x0, {{0x3f, 0x4, 0x1, 0x9, 0xfc, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x9, [{@multicast2, 0x9e}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x6, 0x4, '\t\f'}, {0x4, 0x8, "53f65e166348"}, {0x6, 0x6, "f3a55c3c"}, {0x0, 0x8, "98bb5b27df09"}, {0x1, 0x11, "cca6b751f6403543d953fc4eb920a8"}]}, @cipso={0x86, 0x60, 0xffffffffffffffff, [{0x1, 0x9, "a82ff83e80c230"}, {0x0, 0xf, "d5aedb86c55b3d4ef8dfb148c6"}, {0x2, 0x11, "9ab10d761a0fff4c4311295231e0b1"}, {0x7, 0x2}, {0x5, 0x12, "37ad215eb4951a94857501c9e9f01ec9"}, {0x6, 0x4, '(='}, {0x7, 0xf, "5ce3bd3c2208661dd5b907e677"}, {0x5, 0xa, "22497a815dabea22"}]}, @noop, @cipso={0x86, 0x2a, 0x0, [{0x0, 0xc, "1745ab32515bbc1d20e4"}, {0x5, 0x6, 'K\r%r'}, {0x2, 0x12, "6083b5c00908268dcf967a0e5ce1d3e8"}]}, @ssrr={0x89, 0x7, 0xb0, [@broadcast]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x88, [@loopback, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @broadcast]}]}}}}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) r5 = socket$unix(0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x4}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x20000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) sendfile(r9, r8, 0x0, 0xf03a0005) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x4010, r5, 0x22271000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r10 = accept(r3, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000800)=0xc) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r10, 0x84, 0x82, &(0x7f0000000840)={0x0, 0x71a3}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000900)={r13, 0x2c, &(0x7f00000008c0)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}]}, &(0x7f0000000940)=0x10) sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x8045}, 0x8) 55.560399839s ago: executing program 6 (id=4474): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0xfffffffffffffe89}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff09}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '@/\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x404c844}, 0x24000000) socket$inet(0x2, 0xa, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0xffdd) accept$alg(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x918}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="903dfc48000000000000000000000000256a880d404b4235460d0e1a8052b8b2594766879a4920cae5a1ad1f3f2298af90b77301f2f14807f902b1233a4da657e236dbb3dabfaddcfed6b90a2ac74a0ce1f7dc03a81aa2a3c83c2e5ed93f53734cccf831f27b961f6ee706e818e642fd63e3b6692c4a788bc96d15148cb1038aea77b66274321fda064c052c3a66134b3ebcd0705e8470c6bada81f6961fca99dce34f5964501bbc74fe7ebfb8a0c02a798715c7ea5dff2a3eacc8d511211ca6fbc32a35027e6ba5fa1cd655635bb4244c1dbc", @ANYRES16=r11, @ANYBLOB="200028bd7000fddbdf250c0000001800018014000200776c616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x24000080) 52.132060957s ago: executing program 6 (id=4484): pipe(&(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r0, 0x201}], 0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000007000000850000000f000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 52.033052427s ago: executing program 6 (id=4487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000003, 0x4, 0x6811221b, 0x2, 0x8000000000010003, 0x200000200000007, 0x100000000}, {0x7ae, 0xfffffffffffffffd, 0x6, 0x7}, 0x4621e603, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0x5, @in6=@remote, 0x0, 0x1, 0x2, 0x0, 0x7, 0x7, 0x7}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffab}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000894963dcb53ec7b0d6000000000c0000000c00000002000000000000000000000b000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) clock_gettime(0x17, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x6, 'ip6_vti0\x00'}) syz_emit_ethernet(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x51d85484, &(0x7f000001eec0)=""/102389, &(0x7f00000001c0)=0x18ff5) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="1400001f", @ANYRES16=r6, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c00064000000000000000080900010073797a30000000000800054000000001"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xffff, @empty, 'ip_vti0\x00'}}, 0x1e) 51.889794154s ago: executing program 6 (id=4490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x39, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, 0x0}}], 0x1, 0x200880d8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001900250000000000000000002df00000000004000000000005000100110000000c000500000000000a"], 0xe1c}}, 0x20000050) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x8}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x885}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c001) 13.470556182s ago: executing program 34 (id=4490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x39, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, 0x0}}], 0x1, 0x200880d8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001900250000000000000000002df00000000004000000000005000100110000000c000500000000000a"], 0xe1c}}, 0x20000050) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x8}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x885}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c001) 4.053407021s ago: executing program 0 (id=4665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000006200)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc) recvmmsg(r0, &(0x7f00000004c0), 0x0, 0xf0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x40}}, 0x84) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40008050) r6 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000001000)="bfa8d9b1b26d060c31f099546cfb11da227a5be64697d0503f1f1aebdb0e416094f7b018fdc271a19473a2f01164a1298e459f4ac48d0369356cdc", 0x3fe, r10, 0x4, 0xa002a0}, 0x38) read(r10, 0x0, 0x0) getsockopt$bt_hci(r8, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001040)={'ip_vti0\x00', 0x1000}) 3.933416645s ago: executing program 5 (id=4666): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009000700"], 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x1, 0x5001, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x6, 0xe}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d7c8396c6e5549416420fbb39e7b958257c59a031a35934bcc8287d70040b44f138cc43cba72405eff0d1b03016bbcb92c7ec91a854b9d338fb5c9f326a1d7231d4cee9afafc26d5f1da70c4143bed975a7b8905ffcc2acaee8736a2b63b6e34774578da7b0f8df522c9be0913a672517c130aa069a748f4bd7b4df832c9e00f1c628157454ad3de1fa0f7b424fd0c52792bb72f4f60c7256d3ca41dea6a24f32a21717d607c22303fee584b563d848ad550435ef87ee020", @ANYRES32=r3, @ANYRESDEC, @ANYRESOCT=r0], 0x2c}}, 0x2011) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e, 0x88}}, 0x14}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x4b) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000300), &(0x7f00000002c0)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="73114200000000008510000002000000b700000000000000950ec200000000009500001200000005"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 3.705050712s ago: executing program 0 (id=4668): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000810000000008000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000e0020200005e3dba8ae862e81c5c8b0c98f012763b62a065eb769cd65fb03306d915a4b8ed9aed6c262166f1494aafd5165e5b7513b76aad32d8df52edae95f154098929fa813a444fadaf614cd3404e55168ca43ef5d83da2fed6bec58c4434ee701d37930a86015d4b627b2a9c1b0b844f05db330368e6fb22e0561fb7f6c0"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000001060000010000f900000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000400000003030000038f03b06876073f"], 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x8050) (async) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0xfffffffffffffff5, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000200)=0x10) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001440)=@ethtool_perm_addr={0x4b, 0x1d, "448d389f70d679d21a50a3831682cc6597a4a4ca4d08f8dd8b3f9fdd99"}}) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000000)='N', 0x1) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000200)=0x2, 0x4) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205ea1f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) unshare(0xa020480) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async, rerun: 64) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) (async, rerun: 64) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmsg$can_bcm(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="1400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000030000800601000045d402a23d0b9093"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0xc084) 2.756091942s ago: executing program 5 (id=4669): sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x138, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, @in6=@remote, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, {@in=@empty, @in=@private, @in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x330c3000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) 2.621566698s ago: executing program 7 (id=4670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) 2.62003816s ago: executing program 0 (id=4671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c250000000000202063cd00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x2, [{0xc, 0x3, 0xa96}, {0xd, 0x2, 0x5}, {0x9, 0x4, 0x3}, {0x0, 0x1, 0x7}, {0x8, 0x4, 0x3}, {0xf, 0x3, 0xe}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0xf, 0x10}]}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x3a}]}, @enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x7}, {0x7, 0x7}, {0x8001, 0x1}, {0x9, 0x6}, {0xb, 0xf57}, {0xc, 0x9}, {0xc, 0x2}, {0x4, 0xa}, {0x3, 0x588}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000006c0)=""/211, 0x120, 0xd3, 0x1, 0xf256, 0x10000}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x29, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x631}}, @tail_call, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76d2df04}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0xfff, 0x0, &(0x7f0000000a00), 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x914e, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000a80)=[{0x1, 0x1, 0xc, 0xa}, {0x1, 0x1, 0x3, 0x9}, {0x2, 0x3, 0x9}, {0x5, 0x4, 0x3, 0x4}, {0x3, 0x3, 0xf, 0xa}, {0x0, 0x2, 0xc, 0x1}, {0x1, 0x4, 0xf, 0x5}], 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7fff}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0xfffffff9, 0x10}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x93a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000440)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x0, 0xac4, 0x9493}, 0x10, 0x19e3, r3, 0x5, &(0x7f0000000d00)=[r1, r4, r5, r0, r6, r7], &(0x7f0000000d40)=[{0x2, 0x5, 0x5, 0x9}, {0x4, 0x1, 0x10, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x3, 0x1, 0x80006, 0x1}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x4}, 0x94) 2.477309301s ago: executing program 5 (id=4674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xff39, 0x0, &(0x7f0000000500)="b9ff03b07d04260000000000000000000000000000000500000000000000ef34c1ae61a6b14563cced432d1ee8cb5c21bc8e16473a6aae311c52f4f80212e31853c766aff2e7a3f4cd8bca13eb4c95484e92016ea4838556bb76a1034488db9272764c835086f4a2", 0x0, 0x10, 0x60000000, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10100000}, 0x19) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x36, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x101) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) sendmmsg(r8, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893", 0xc3}, {&(0x7f00000003c0)="b2d616a9dec7caaae6068e74d8d177dd8b8aa56c5385b89f36796568341b240b37b2b1e3b156fa9213688620ef58c4919387aaccd16c83fdbddf03f729526fa83bd438eff0e768eb0920e0b42e529a2a1d8b482268", 0x55}, {&(0x7f0000000440)="1e653b2c046caa413f0ed03bce1b9411b6c7bfb6dc8c7fcb1da18b236c0b3539206a8ae5e4365ea01b4e287fd6a634f8", 0x30}], 0x3}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000fc0)="d6385764205d32c000b4ed22e4754413", 0x10}, {&(0x7f0000002240)="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", 0x5a0}], 0x2}}], 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x8000200f}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r5, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x5) 2.393136448s ago: executing program 0 (id=4675): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x4}, 0x2, 0xfe}], 0xff6f) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x4}, 0x2, 0xfe}], 0xff6f) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) (async) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYRESOCT], 0x1c) recvfrom$l2tp(r0, &(0x7f00000000c0)=""/26, 0x1a, 0x100, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x460, 0x30, 0x9, 0x0, 0x0, {}, [{0x44c, 0x1, [@m_police={0x448, 0x3, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x3, 0x1, 0x3, 0xffff, 0x0, 0x81, 0x8, 0xffffffff, 0xfd8, 0x9, 0x8, 0x0, 0xfffffffc, 0x0, 0xf17c, 0x2, 0x9, 0x10001, 0x1f85, 0xfff, 0xf, 0x0, 0x5, 0x9, 0x200, 0xa, 0x1, 0x7, 0x5, 0x84, 0x2, 0x6, 0x8001, 0x1000, 0x828, 0x400, 0xfffffffe, 0xfffffffe, 0x3, 0xdc03, 0x2, 0x10001, 0x5, 0x44e, 0xc00000, 0x0, 0x7, 0x1, 0x5914, 0x4, 0x9, 0x3b1, 0xffffffff, 0x2, 0x8, 0xdc, 0x3, 0x5, 0xda4, 0x10001, 0x9, 0xffffc6fc, 0x3, 0xb, 0xffffffff, 0x5, 0x1e5, 0x8, 0x4, 0xa6b, 0x8c, 0x9, 0x5, 0x1, 0x401, 0x0, 0x8, 0x3, 0x5, 0x8, 0x4, 0x6, 0x80000001, 0x10, 0x5, 0x0, 0x9, 0x6, 0x7c3b, 0x8, 0x5, 0x596, 0x6, 0xffff, 0xfffffff9, 0x8, 0x9, 0x5, 0x5, 0x0, 0xa8, 0x5f, 0x2, 0xa, 0xffff, 0x2339, 0xf, 0x0, 0x3, 0x0, 0x81, 0xfff, 0x830, 0x6, 0x0, 0xfffeffff, 0xfffffa54, 0x3, 0x3, 0x7000000, 0xfffffffe, 0x79a6bcf1, 0x8000, 0xfffff4df, 0x0, 0xfff, 0x7, 0x1, 0x4, 0xd, 0x4, 0xc, 0x3, 0x800, 0x5a479689, 0x0, 0x7ff, 0x7, 0x100, 0x401, 0x2, 0x7, 0x8, 0x5, 0x9, 0x1, 0x7, 0x6, 0x8, 0x8, 0x3, 0x6, 0x7, 0xffffffff, 0xd, 0x3, 0x2, 0x284, 0xd7, 0xffff7fff, 0x7f, 0x1, 0x100000, 0x8, 0x8, 0x7f, 0x1000, 0xffff, 0xb, 0x4, 0x5, 0x5, 0x7bd, 0x80000000, 0x7, 0xe77f, 0x5, 0x348, 0x5, 0xfffffffd, 0xd, 0xffff, 0x8, 0x0, 0x8, 0x2, 0x4373, 0x803, 0x3f2, 0xd37a, 0x100, 0x8, 0x8, 0xbe, 0x9, 0xcf4, 0xb8c9, 0x5, 0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0xc6f, 0x6, 0x7ff, 0x7fffffff, 0x6, 0x5, 0x5, 0x0, 0x4, 0x2, 0x532, 0x2, 0xfff, 0x401, 0x10000, 0xfff, 0x0, 0x5f, 0x1b, 0x6, 0xfffffffd, 0x9, 0x3, 0xf, 0xfffffffb, 0xffffff2f, 0x2, 0x40, 0x1, 0x3, 0xbc, 0x7, 0x0, 0x4, 0x8, 0x100, 0xffff8000, 0x1, 0x3, 0x8, 0x35c5, 0x5, 0x8, 0x3, 0x2, 0x7fff, 0x5, 0x3, 0x1000, 0x441]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x460}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) 2.375589834s ago: executing program 1 (id=4676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000029ab9610021aa1bd987bf720ac955888d037a3cd64d94472964534c92d437c7d38c448f1e9f43a001bb5f78936117e3b49244ea55b2169dae67720ffa9c7b6dc1be7a165a6820d628cde67157250cc080b7d0d758a53da2f1f8c9113615a937e6dcdb48592a9f776202032d6fae652e9640e482259fe90d85fb28c7e74b491ce1edf29789a6636c2e647d070a9a93c59fc9f31b9eabfa1b214201515246ca5e75f63529", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r1, &(0x7f00000006c0)="e933db313ee88e310d532fb152", 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @empty}], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.29836114s ago: executing program 7 (id=4678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d00000ea87dbfcff0a000902110f0404000005000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.150394945s ago: executing program 1 (id=4679): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060000000478f3a949f4770ac0531ca3fdf8222f99000000040010000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xfff3}, {0xfff1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r4], 0x5c}}, 0x200048d0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x5, 0x3, 0xff, 0x9, "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", 0x3, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0x6, 0xf7, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "b21c65427e51a99d"}, 0x721c3304698d924b}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r12) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r12, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) sendfile(r12, r11, 0x0, 0xf03a0005) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x5, 0x0, 0x37, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x7fff, 0xdb}}) 2.090016231s ago: executing program 7 (id=4680): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59e6ce20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6093}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004045}, 0x20000004) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r8, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_tcp_int(r8, 0x6, 0x2, 0x0, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r7, 0x10000}, &(0x7f0000000840)=0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0xf, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 2.089685536s ago: executing program 2 (id=4681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)='=', 0x1}], 0x1}}], 0x1, 0x24040014) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f00000000c0)='^\x00', 0x80, &(0x7f0000000100)={@align=0x9, {0x7, 0x1000, 0x3c4e, 0xffffffffffff8000}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x8}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x3, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x81}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10000}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40041}, 0x40) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0xfffffeae, 0x0, 0x0}}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000080", @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf2501000000080001000300000014000480050003008000000005000300050000000800020003000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) 2.08924975s ago: executing program 0 (id=4682): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20bae80da358cd54297825c2d1c678d77df25140553e000000ba"], 0x64}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f679ae98079f21aa9bc094018c5eed596"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000300000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x72ac}]}}]}, 0x38}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0xfffffffffffffe2f, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c0000000200000000000800000000000000ffffe000000200000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d26c000000d6000000e00000020000000000000000000000000000000005", @ANYRESOCT=r10], 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x40040) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000380)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/150, 0x96}], 0x5, &(0x7f0000000840)=""/137, 0x89}, 0x12000) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@updsa={0xf0, 0x1a, 0x4, 0x70bd29, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0x4e22, 0x9, 0x4e23, 0x8f6, 0xa, 0x20, 0x80, 0xb6, r9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x9, 0x1, 0x80000000, 0x6, 0x2, 0xfffffffffffffffe, 0x5, 0x8000000000000000}, {0x7, 0x6, 0xfff}, {0xd, 0x181, 0x1}, 0x70bd29, 0x0, 0x0, 0x6, 0x78, 0x9}}, 0xf0}}, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000280)={{r1}, 0x9, &(0x7f0000000200)=[0x9, 0x1368eba0, 0x4882, 0x9, 0x5, 0x4, 0x61, 0x81, 0x9], 0x8e, 0x6}) splice(r2, &(0x7f0000000440)=0x9, r0, &(0x7f00000005c0)=0x598, 0x7, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600eabd9120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1caca0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed3c07930000080000000000000000000000000000f9d16fb995fc9dcaba73907d53d99c8f94e784af10bacd519587299b2048562a0ba4955ae1c28868c3d403ef339535fe3f7b0b1ad165ac79628db7ba2d243b6d7050de328c5f709d4ddac3c0952a66d04779a4b887a14f2377fc53dce74305c0c8", 0x13b}], 0x1, 0x0, 0x0, 0x4788}, 0x0) 1.926756474s ago: executing program 2 (id=4683): r0 = epoll_create(0x7) (async) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r3, 0x8000f552) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x1008}) 1.837974058s ago: executing program 7 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x1, 0xa, [{{0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x29}, 0xcf}}, {{0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, {{0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}}, {{0xa, 0x4e24, 0xedc, @mcast2, 0xf653}}, {{0xa, 0x4e21, 0xb, @empty, 0x8}}, {{0xa, 0x4e22, 0x7, @mcast2, 0x2}}, {{0xa, 0x4e20, 0xfffff001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x48}}, {{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {{0xa, 0x4e23, 0x4, @empty, 0x5}}, {{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0xf9c}}]}, 0x590) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket$rds(0x15, 0x5, 0x0) 1.773289938s ago: executing program 1 (id=4685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000080000000100"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) 1.772463128s ago: executing program 2 (id=4686): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[], 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000300)={0x8, 0x400, 0x9, 0x2, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$nl_route(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x10, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1a}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB="66881f87fc56b0be3082e87bf41a42c3d509fcfb049ce392aa5013c26d73c0be7bdd9263e50a476cd7a944f6"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x6000011) 1.659300037s ago: executing program 1 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, &(0x7f00000004c0)="1353e3068204", 0x6) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000001b80)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318329bd7040ff9bdf25190000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) 1.650439504s ago: executing program 7 (id=4688): ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) shutdown(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000100)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb0e5b5564dd8dccb9", 0x31}, {&(0x7f0000000440)="cb", 0x1}], 0x3) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @loopback}) 1.278845142s ago: executing program 2 (id=4689): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newqdisc={0x48, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xfff4, 0x6}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x9, 0x80000001, 0xb, 0x20, 0x12, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="54000000020901020000000000000000010000090800064000000000080006400000000108000640000000000800"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x4045) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bind$tipc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r7, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r11, 0x8948, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r11) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20044040) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, 0x0, 0x0, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="30ce0600016803004c001280110001006272696467655f736c61766500000000340005800500090000ff0f0005000600010000100500070201000000050008"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000360007012ebd7000fbdbdf25027c00000c0001800200000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.277729699s ago: executing program 1 (id=4690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x138, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x138}}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffbff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x18}, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bridge0\x00', &(0x7f0000000a40)=@ethtool_sfeatures={0x3b, 0x2, [{0x7bd0fac7, 0x4}, {0x901, 0x1}]}}) 1.276504138s ago: executing program 5 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001000f4001000000002000000030000000000ff110100000002"], 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="050000000000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="a0ab211d39e19e74692ecfb6d3d3b91ee57485bad7e3445b7ca64616a0ec86e09c579a3a2b04dd0aa1413455833bb0b06c2b24b0b204a3c435a500101fe045f55be316c50ea0ff7400344307bb34a7b47e6dcda4f83a9450fffadc6b73913e22e7b833b345574f19b2e0840571d74ff91eeb0d57ec2cfcff2e133db747f8f645b7b0a462c9"], 0x1c}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'dh\x00', 0x0, 0x1c, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80620}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB="b4000000", @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000000000000000009cff03000000000008000100", @ANYRES64=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000000800030000000000140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e723000"/20], 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmmsg$sock(r4, &(0x7f0000003180)=[{{&(0x7f0000000240)=@hci={0x1d, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 1.271731746s ago: executing program 1 (id=4692): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x28, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcb72}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x0, 0xa, 0x1, 0x0, 0xffffffffffffffff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xa1, &(0x7f0000000540)=""/161, 0x41000, 0x46, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0x9, 0x3, 0x7fffffff}, 0x10, 0x7536, 0xffffffffffffffff, 0x9, &(0x7f0000000640)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000680)=[{0x2, 0x3, 0xc, 0xc}, {0x5, 0x5, 0x7, 0x9}, {0x0, 0x4, 0x10, 0x3}, {0x0, 0x4, 0xc, 0x4}, {0x1, 0x4, 0x9, 0xb}, {0x5, 0x9, 0x6}, {0x5, 0x1, 0xa, 0x5}, {0x3, 0x5, 0x3, 0x9}, {0x5, 0x4, 0xf, 0x9}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x54) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9b95}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x66}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.260380703s ago: executing program 5 (id=4693): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x58cde46cf0faa6a7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003009000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001800dda700000000000000000aa4c08d53f332e25c606deb7083ba95ed0ab71b4b48d003b78b104c33c49a75dec17df7fd4d10bcfce8208843e2b9000000b7db11a5a778a830d4ea6065414463ff364820b6031a35cf57256c30a6a4f0cfb359871dcb07cdbe0686ee8b8bdb80fbee39cc7fd6be1e0d73e4075afa8e3cd0407551e8e8a25899e6594bc01135f18b"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYRES32=r5], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_sctp(0x2, 0x1, 0x84) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000080)="520003000100b8", 0x7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, 0x0, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x22020400) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.185899749s ago: executing program 2 (id=4694): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4) r0 = socket(0x10, 0x803, 0x0) unshare(0x24020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000001c0)=0x9, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100039042abd58000000000000000000", @ANYRES32=r3, @ANYBLOB="25a0010003170000280012800b00010065727370616e0000180002800400120006000f0007000000060011004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r4, 0x215eb000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x5, 0x9d5f}, {0xf26, 0x8009}, 0xfffe, [0xde9a, 0x8e9, 0x20c, 0x3, 0x3, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffe, 0x9, 0x81, 0x6, 0xf760425, 0xe624, 0x1]}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xff1a, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000004c0)=0xe) socket$inet_icmp(0x2, 0x2, 0x1) 1.11255513s ago: executing program 0 (id=4695): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000180)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)='b\t', 0x2}], 0x1, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0xff01, 0x9, 0xfb, 0x5}}], 0x18, 0x44}, 0x2000011) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xce) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.084424459s ago: executing program 7 (id=4696): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd29, 0x25dfdbfb, {0xa, 0x14, 0x10, 0x6, 0x6, 0x0, 0x0, 0x7, 0x10018}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000082}, 0x20000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffc600, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000180)="2f3b122255035509b14cc34e36e95638f12022dac2dbc08bb28e7c0d3b92666989665bee4c33f1b523e296415eca446a944cec9b3e745427d30eb072ca922bd587c75d865d78e682a7a5ddbe06a9216c4195833c9730d0ad9dd326d1ce21e2f76e230b", &(0x7f0000000200)=""/50}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f00000002c0)={'some', 0x20, 0x5, 0x20, 0x3}, 0x2f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000740)={@private2, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001dc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f00000007c0)={0x1594, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x278, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "da5c7cb58a3ecb66af29c968eef9e05cdadad55fb9a90caa9adce536a78e79094a8c10e61068cdb676b6e777c33675917423e4a04e13117a1b02cb29d103761793235a40d134a13c9e25b149578524c114c41d0cea1949b9e017b54727c51fa28897f2adb9bd29c58256d340f6718650b8971aa80130198faac2bc8482f63549ab0997a44ef69e141152354f402892bbfce3cc48cc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\xb9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffc677}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'io.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'some'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'io.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'&$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'io.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&!)::\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'io.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'some'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "23be444d4f0dfe3a8b36486eb0c04bdbf6984ab761b63ab93ba40c3a1688c673458b59e154e5be48229d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x12b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "c4227d7cb4e6a01d857b00b4cad3e644604cfc0f882f724a5fbec26209e9231240c9"}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "3a7e5db1fc0e04f9c80881cd6533b077eeefda3495a55070ae023d2f00a1d6d61aa506179ec7b263fb5876e21723ddca867d10a645f2d7379d01d914512e91b51ef9dbc37c8f47cc55b680faa15fbc77dae54d4ac81caee238f1dece3a6e1bf2c23b38f2150133e4b4354b949fc73ab1f42ccd8d3c3f1dc334c40a72a7d6a50708b9311d4b4da53db692e03753753fdfa6f3c9dd8bff44b5ff30cab7186d2101d4796650757ba3d5a4d8be0558d4a4752de16df49ee22292f2939b818468818816453922a39544c11ffc72080967cb0188f79c8ecc"}, @ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "431e2edc60b7682bb2953c4b5d01889613f69947b43b632c5c26d9cafd8390a8b87509e89a0b0fafda5e5df0430bfd983b83eb3c241ef12dd7761c3f9b04f974ad7f65f9c1042231d2cd78983f4ced19fe1ed4cfccb20d5b15dfd63de41651008e9f1a5bd56d46fe63d7a978e374e9012eb6e6719f8c7f3d52aecd561f349371f0ee95cbb51cc5cfe904947cba8154e02e6fc14998661ddd1cd831314a9ec895696b7cb11a06ac6b049ca1256c3543bf6949ad676a1b53b08cb885eb68ab439f4ce2a80ce070f6f730a23b5ddbc86a7a8f2642708e7db142595098899b0d98ffcc51a883b0540c92bd52a124330e641e737f8354065a"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "e2cc2c5f2ebfccfbf831dd1e4fd1e6952a77f2f05ffcbef9f85f5a6c493e1ec25e35cc914572fbdf8d3573ae1b294c55d3dd483d9ee00a165951580d6a3f1f310849b4acb35080ad1634d7367eafb2b858664597146a669f5a3d1fcd7b117a5293763bd589548f39367b16f7182b3c747025d57b377a20860740b33a4182c2aad9ad4addb69fea88803fa7337362be729b4e2ad91e4972ca"}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1594}}, 0x4000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001e00), &(0x7f0000001e40)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x1d, 0x0, 0x7) ioctl$FIOCLEX(r8, 0x5451) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001e80)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f00)=@generic={&(0x7f0000001ec0)='./file0\x00', 0x0, 0x8}, 0x18) readv(r1, &(0x7f0000002040)=[{&(0x7f0000001f40)=""/62, 0x3e}, {&(0x7f0000001f80)=""/186, 0xba}], 0x2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000c0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000021c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r10, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000002340)={0x0, 0x7fffffff}, &(0x7f0000002380)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000002440)={'ip6_vti0\x00', &(0x7f00000023c0)={'ip6tnl0\x00', r7, 0x4, 0x1, 0x2, 0x42, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0x44, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000025c0)={'syztnl0\x00', &(0x7f0000002480)={'tunl0\x00', r11, 0x0, 0x8, 0x2, 0xff, {{0x3d, 0x4, 0x0, 0x8, 0xf4, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0x20, 0x0, 0x3, [0x3, 0xfffffffb, 0xfffffff0, 0x3, 0x0, 0x4]}, @lsrr={0x83, 0x23, 0x4a, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @local, @local, @multicast1, @remote, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0xcb, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@empty, 0x5}, {@multicast2, 0x6}, {@empty, 0x6}, {@local, 0x8}, {@rand_addr=0x64010101, 0x9}, {@multicast2, 0xdef4}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x5}]}, @lsrr={0x83, 0x7, 0x54, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x4c, 0x47, 0x1, 0x5, [{@empty, 0xf}, {@remote, 0x368}, {@multicast1, 0x1}, {@local, 0x5}, {@loopback, 0x7}, {@local, 0x2}, {@multicast1, 0x8}, {@private=0xa010101, 0x8691}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff14}]}]}}}}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000002680)={&(0x7f0000002600)=""/97, 0x61, 0xffffc841, 0x1}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000026c0)={'hsr0\x00', {0x2, 0x4e23, @broadcast}}) 989.554192ms ago: executing program 5 (id=4697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x12, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0xd, 0x4, 0x0, 0x158, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb05}}, @alu={0x0, 0x1, 0x5, 0xa, 0x8, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x348, 0x51, &(0x7f0000000140)=""/81, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0x8, 0x2}, {0x5, 0x5, 0xb, 0x1}], 0x10, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000d40)={{r0, &(0x7f0000000480)='syzkaller0\x00', 0x10000, &(0x7f00000004c0)={@_ha_fsid={[0x8, 0xa95]}, {0xffff, 0x2, 0x1, 0x3}}, 0x0, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0x6}, {[0x9, 0x3e, 0x4, 0x1]}, 0x6, 0xf5, &(0x7f0000000c40)=""/245}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x8001, 0x1, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x4, 0x8000, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x83, 0x11, "906c3cbcf717a2dc28fd1f17498f80"}, @lsrr={0x83, 0x17, 0x13, [@loopback, @private=0xa010101, @remote, @local, @loopback]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @multicast1, @broadcast}, &(0x7f0000000680)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r13, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r13, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x8, 0x40, 0x80000000, 0x8000, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0xc, [{@empty, 0x5}, {@broadcast, 0x6}, {@multicast1, 0x6}]}, @lsrr={0x83, 0x7, 0xda, [@loopback]}]}}}}}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x1, 0x803, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r17], 0x4c}}, 0x884) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x7830, 0x8000, 0x1000, 0x1, {{0x8, 0x4, 0x1, 0x19, 0x20, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, {[@lsrr={0x83, 0xb, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r16, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4048824}, 0x4000000) r20 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r20, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xa, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x2, 0xfffffff1}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0x7fff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=4698): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0x64, 0x2}]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000050000000001f0000000000e0100009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000010dbc0)={{0x0, 0x6820000, 0x0, 0xd9, 0x86, 0x8, 0x7f, 0xff, 0x795460d5, 0x8, 0x5, 0x4, 0x9, 0x30000000000000, 0x7f7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010ebc0)={0xdb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "33700b1fa59b62"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010fbc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010fdc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010ffc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x5, "06e2970f733b94"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000110fc0)={0x673, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r10}, {0x0, r12}, {r13, r14}], 0x3, "3d59af4435a7b6"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000009c0)={r13, 0x1}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a3100000000050001000700000034000780180001800d000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r16}) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$can_bcm(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000600000100000000008000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000006001000000000000200503000031f2f4a8190fa95d"], 0x48}, 0x1, 0x0, 0x0, 0x488d0}, 0x880) write$cgroup_subtree(r17, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r17, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) r18 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r18, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="333a1f63", 0x4}], 0x1) kernel console output (not intermixed with test programs): 20409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.014697][T20409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.089511][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 522.116870][T20822] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 522.135456][T10367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.138974][T10370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.139016][T10370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.139049][T10370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.167986][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 522.329939][T10367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.329958][T10367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.380277][T10367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.380299][T10367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.441528][T20830] xt_hashlimit: max too large, truncated to 1048576 [ 522.441549][T20830] xt_hashlimit: overflow, try lower: 137438953472/8 [ 522.538574][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 522.561207][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'. [ 522.584307][T20839] v: renamed from dummy0 (while UP) [ 522.610784][T20843] validate_nla: 64 callbacks suppressed [ 522.610802][T20843] netlink: 'syz.1.3396': attribute type 1 has an invalid length. [ 522.756846][T20843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.849784][T20838] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 523.036692][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3401'. [ 523.036740][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3401'. [ 523.046060][T20872] 8021q: VLANs not supported on ip6gre0 [ 523.199870][T20876] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 523.267914][T20886] openvswitch: netlink: Message has 8 unknown bytes. [ 523.823214][T20904] syzkaller0: entered promiscuous mode [ 523.823237][T20904] syzkaller0: entered allmulticast mode [ 525.221939][T20558] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 525.226093][T20946] macsec0: entered promiscuous mode [ 525.226309][T20946] macsec0: entered allmulticast mode [ 525.229171][T20946] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 525.343977][T20951] veth1_to_team: entered promiscuous mode [ 525.344889][T20951] veth1_virt_wifi: entered promiscuous mode [ 525.345972][T20951] veth1_virt_wifi: left promiscuous mode [ 525.346194][T20951] veth1_to_team: left promiscuous mode [ 525.364346][T20959] veth1_to_team: entered promiscuous mode [ 525.370832][T20959] veth1_virt_wifi: entered promiscuous mode [ 525.379456][T20959] veth1_virt_wifi: left promiscuous mode [ 525.384710][T20959] veth1_to_team: left promiscuous mode [ 525.425332][T20558] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 525.635669][T20984] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 525.742733][T20984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.796819][T20987] bond1: (slave veth0_to_bond): making interface the new active one [ 525.798287][T20987] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 525.835451][T20984] bond1: entered promiscuous mode [ 525.835476][T20984] veth0_to_bond: entered promiscuous mode [ 525.835695][T20984] bond1: entered allmulticast mode [ 525.835711][T20984] veth0_to_bond: entered allmulticast mode [ 525.855327][T20984] netlink: 'syz.0.3420': attribute type 2 has an invalid length. [ 525.858353][T20984] __nla_validate_parse: 7 callbacks suppressed [ 525.858369][T20984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3420'. [ 526.277521][T21026] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3427'. [ 526.278203][T21026] netlink: 'syz.3.3427': attribute type 4 has an invalid length. [ 526.317572][T21023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3426'. [ 526.429189][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'. [ 526.452751][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452771][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452781][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452792][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452803][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452814][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452824][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452834][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452845][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452855][T21036] tc action pedit offset must be on 32 bit boundaries [ 526.452908][T21036] TC_ACT_REPEAT abuse ? [ 526.538467][T21026] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.539847][T21026] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.568016][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 526.856097][T21051] tc_dump_action: action bad kind [ 526.951656][T21063] syzkaller1: entered allmulticast mode [ 527.053451][T21066] batman_adv: batadv0: Adding interface: dummy0 [ 527.053470][T21066] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.053668][T21066] batman_adv: batadv0: Interface activated: dummy0 [ 527.154870][T21066] batadv0: mtu less than device minimum [ 527.157800][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.159214][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.160667][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.162122][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.163448][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.164828][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.166248][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.167588][T21066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.998008][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'. [ 528.079381][T21109] netlink: 'syz.1.3442': attribute type 70 has an invalid length. [ 528.249234][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'. [ 528.249258][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 528.421878][T21129] netlink: 'syz.4.3443': attribute type 2 has an invalid length. [ 528.421899][T21129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3443'. [ 528.438255][T21122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.481625][T21118] bond0 (unregistering): Released all slaves [ 528.509996][T21138] netlink: 'syz.2.3447': attribute type 5 has an invalid length. [ 528.559036][T21129] : entered promiscuous mode [ 528.889462][T21166] netlink: 'syz.0.3452': attribute type 4 has an invalid length. [ 529.301806][T21185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.326669][T21182] bond2: (slave team0): Device is not bonding slave [ 529.326692][T21182] bond2: option active_slave: invalid value (team0) [ 529.328619][T21182] bond2 (unregistering): Released all slaves [ 531.637098][T21142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.970980][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 531.988449][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 531.988483][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 532.022712][T21238] bond1: option lacp_active: invalid value (5) [ 532.029946][T21238] bond1 (unregistering): Released all slaves [ 532.254090][T21261] lo: entered promiscuous mode [ 532.254403][T21261] tunl0: entered promiscuous mode [ 532.256481][T21261] gre0: entered promiscuous mode [ 532.297912][T21261] erspan0: entered promiscuous mode [ 532.313473][T21261] ip_vti0: entered promiscuous mode [ 532.318313][T21261] ip6_vti0: entered promiscuous mode [ 532.333368][T21261] sit0: entered promiscuous mode [ 532.338647][T21261] ip6tnl0: entered promiscuous mode [ 532.357124][T21261] ip6gre0: entered promiscuous mode [ 532.367837][T21261] syz_tun: entered promiscuous mode [ 532.377928][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.378596][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.397047][T21261] bridge0: entered promiscuous mode [ 532.407908][T21261] team0: entered promiscuous mode [ 532.407929][T21261] team_slave_0: entered promiscuous mode [ 532.408372][T21261] team_slave_1: entered promiscuous mode [ 532.429624][T21261] dummy0: entered promiscuous mode [ 532.435819][T21261] nlmon0: entered promiscuous mode [ 532.436901][T21261] batadv0: entered promiscuous mode [ 532.438905][T21261] vxcan0: entered promiscuous mode [ 532.439603][T21261] vxcan1: entered promiscuous mode [ 532.440200][T21261] veth0: entered promiscuous mode [ 532.447859][T21261] veth1: entered promiscuous mode [ 532.452114][T21261] wg0: entered promiscuous mode [ 532.457219][T21261] wg1: entered promiscuous mode [ 532.465940][T21261] wg2: entered promiscuous mode [ 532.468541][T21261] veth0_to_bridge: entered promiscuous mode [ 532.474464][T21261] veth1_to_bridge: entered promiscuous mode [ 532.487887][T21261] veth0_to_bond: entered promiscuous mode [ 532.501024][T21261] bond_slave_0: entered promiscuous mode [ 532.506558][T21261] veth1_to_bond: entered promiscuous mode [ 532.509652][T21261] bond_slave_1: entered promiscuous mode [ 532.510056][T21261] veth0_to_team: entered promiscuous mode [ 532.517254][T21261] veth1_to_team: entered promiscuous mode [ 532.534098][T21261] veth0_to_batadv: entered promiscuous mode [ 532.548647][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.548691][T21261] batadv_slave_0: entered promiscuous mode [ 532.557075][T21261] veth1_to_batadv: entered promiscuous mode [ 532.568258][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.568320][T21261] batadv_slave_1: entered promiscuous mode [ 532.588760][T21261] xfrm0: entered promiscuous mode [ 532.602541][T21261] veth1_to_hsr: entered promiscuous mode [ 532.624739][T21261] hsr0: entered promiscuous mode [ 532.634058][T21261] veth1_virt_wifi: entered promiscuous mode [ 532.640793][T21261] veth0_virt_wifi: entered promiscuous mode [ 532.653900][T21261] virt_wifi0: entered promiscuous mode [ 532.703948][T21261] vlan0: entered promiscuous mode [ 532.717925][T21261] vlan1: entered promiscuous mode [ 532.736784][T21261] macvlan0: entered promiscuous mode [ 532.757020][T21261] macvlan1: entered promiscuous mode [ 532.784148][T21261] ipvlan0: entered promiscuous mode [ 532.808016][T21261] ipvlan1: entered promiscuous mode [ 532.836730][T21261] macvtap0: entered promiscuous mode [ 532.847252][T21261] macsec0: entered promiscuous mode [ 532.856424][T21261] geneve0: entered promiscuous mode [ 532.862378][T21261] geneve1: entered promiscuous mode [ 532.878779][T21261] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 532.898290][T21261] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 532.910185][T21261] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 532.920306][T21261] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 532.980707][T21261] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 533.015586][T21261] mac80211_hwsim hwsim44 wlan2: entered promiscuous mode [ 533.018265][T21261] bridge1: entered promiscuous mode [ 533.053623][T21261] mac80211_hwsim hwsim50 wlan3: entered promiscuous mode [ 533.056303][T21261] macvlan2: entered promiscuous mode [ 533.062866][ T1170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.062913][ T1170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.062948][ T1170] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.062995][ T1170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.147140][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.147739][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.174315][T21276] net_ratelimit: 11 callbacks suppressed [ 533.174335][T21276] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 533.211713][T21296] syzkaller1: entered promiscuous mode [ 533.211728][T21296] syzkaller1: entered allmulticast mode [ 533.317483][T21307] dummy0: entered allmulticast mode [ 533.380978][T21307] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 533.458569][T21307] bond0: entered promiscuous mode [ 533.467072][T21307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.483736][T21316] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:0 [ 533.484537][T10367] IPVS: starting estimator thread 0... [ 533.559363][T21318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.564989][T21318] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 533.565013][T21318] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 533.570684][T21317] IPVS: using max 31 ests per chain, 74400 per kthread [ 533.601791][T21318] bond0: (slave ip6gre1): making interface the new active one [ 533.601831][T21318] ip6gre1: entered promiscuous mode [ 533.604895][T21318] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 533.856695][T21334] netlink: 'syz.0.3483': attribute type 4 has an invalid length. [ 533.908599][T21340] netlink: 'syz.0.3483': attribute type 4 has an invalid length. [ 534.089340][T21340] Bluetooth: MGMT ver 1.23 [ 534.112749][T21340] ip6gretap0: entered promiscuous mode [ 534.113439][T21340] macsec0: entered allmulticast mode [ 534.113457][T21340] ip6gretap0: entered allmulticast mode [ 534.225511][T21353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3488'. [ 534.481710][T21361] wlan1 speed is unknown, defaulting to 1000 [ 534.660330][T21369] syzkaller0: entered promiscuous mode [ 534.660354][T21369] syzkaller0: entered allmulticast mode [ 534.733488][T21369] tipc: Started in network mode [ 534.733520][T21369] tipc: Node identity a236e9f95b1, cluster identity 4711 [ 534.733781][T21369] tipc: Enabled bearer , priority 0 [ 534.756085][T21368] tipc: Resetting bearer [ 534.770930][T21367] tipc: Resetting bearer [ 534.843352][T21367] tipc: Disabling bearer [ 534.914102][T21383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3496'. [ 535.066793][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 535.213260][T21396] syzkaller0: entered promiscuous mode [ 535.213284][T21396] syzkaller0: entered allmulticast mode [ 535.813852][T21430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.818641][T21430] x_tables: duplicate underflow at hook 1 [ 535.854983][T21433] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3512'. [ 536.012597][T21437] xt_CT: No such helper "snmp_trap" [ 536.014521][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 536.370261][T21459] xt_policy: output policy not valid in PREROUTING and INPUT [ 536.702477][T21482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.829667][T21483] netlink: 'syz.4.3527': attribute type 6 has an invalid length. [ 536.988417][T21493] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 537.265319][T21512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3530'. [ 537.599480][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 537.631693][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 537.685621][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 537.798595][T21533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.848375][T21534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 537.859633][T21534] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 538.073220][T21562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3537'. [ 538.138164][T21555] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3537'. [ 538.140650][T21555] netlink: 'syz.2.3537': attribute type 1 has an invalid length. [ 538.222338][T21555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.499876][T21585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3547'. [ 538.745768][T21598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3552'. [ 539.022439][T21610] bridge0: port 3(syz_tun) entered blocking state [ 539.022549][T21610] bridge0: port 3(syz_tun) entered disabled state [ 539.022716][T21610] syz_tun: entered allmulticast mode [ 539.027773][T21610] syz_tun: entered promiscuous mode [ 539.056571][T21610] bridge0: port 3(syz_tun) entered blocking state [ 539.056689][T21610] bridge0: port 3(syz_tun) entered listening state [ 539.056934][T21610] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.057047][T21610] bridge0: port 1(bridge_slave_0) entered listening state [ 539.339143][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 542.148388][T21621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.337005][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 542.877954][T21672] bond2: entered promiscuous mode [ 542.877978][T21672] bond2: entered allmulticast mode [ 543.041036][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 543.054872][T21686] netlink: 'syz.2.3572': attribute type 2 has an invalid length. [ 543.257108][T21697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3574'. [ 543.286634][T21697] 0: reclassify loop, rule prio 0, protocol 03 [ 543.840934][T21719] Set syz0 is full, maxelem 0 reached [ 543.933414][T21725] netlink: 'syz.0.3580': attribute type 1 has an invalid length. [ 543.977066][T21725] veth3: entered allmulticast mode [ 543.988075][T21725] bond2: (slave veth3): Enslaving as an active interface with a down link [ 544.008689][T21725] bond1: (slave veth0_to_bond): Releasing active interface [ 544.008716][T21725] veth0_to_bond: left promiscuous mode [ 544.008858][T21725] veth0_to_bond: left allmulticast mode [ 544.023505][T21725] bond2: (slave veth0_to_bond): making interface the new active one [ 544.029543][T21725] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 544.045664][T21725] macvlan2: entered promiscuous mode [ 544.045686][T21725] macvlan2: entered allmulticast mode [ 544.046293][T21725] bond2: entered promiscuous mode [ 544.046308][T21725] veth0_to_bond: entered promiscuous mode [ 544.047229][T21725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.061683][T21725] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 544.071790][T21725] bond2: left promiscuous mode [ 544.071813][T21725] veth0_to_bond: left promiscuous mode [ 544.150230][T21730] netlink: 'syz.1.3582': attribute type 1 has an invalid length. [ 544.215595][T21734] bond3: entered promiscuous mode [ 544.215619][T21734] bond3: entered allmulticast mode [ 544.273956][T21737] netlink: 'syz.0.3584': attribute type 7 has an invalid length. [ 544.273972][T21737] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3584'. [ 544.321737][T21739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.326884][T21739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 544.326904][T21739] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3585'. [ 544.890966][T21750] netlink: 'syz.2.3587': attribute type 10 has an invalid length. [ 545.033549][T21756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 545.109428][T21759] syzkaller0: entered promiscuous mode [ 545.109452][T21759] syzkaller0: entered allmulticast mode [ 545.159236][T21759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 547.321554][T21744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.427661][T21765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3592'. [ 547.467511][T21772] erspan0: entered promiscuous mode [ 547.485162][T21767] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.485274][T21767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.485590][T21767] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.485708][T21767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.567735][T21767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.774322][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3595'. [ 547.779822][T10370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 547.780019][T10370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 547.810924][ T1219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 547.877497][ T5736] wlan1 speed is unknown, defaulting to 1000 [ 547.877538][ T5736] syz0: Port: 1 Link DOWN [ 547.933262][ T1219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.601739][ T1219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.853812][T21820] tap0: tun_chr_ioctl cmd 1074025677 [ 548.853960][T21820] tap0: linktype set to 805 [ 548.976795][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 549.045402][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 549.045428][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 549.045442][T21832] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3611'. [ 549.045454][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 549.045467][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 549.102485][T21834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3612'. [ 549.229478][T21839] tipc: Enabling of bearer rejected, failed to enable media [ 549.526834][ T30] audit: type=1107 audit(1791286966.050:17): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.543516][ T30] audit: type=1107 audit(1791286966.060:18): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.543560][ T30] audit: type=1107 audit(1791286966.060:19): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.544592][ T30] audit: type=1107 audit(1791286966.060:20): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.544632][ T30] audit: type=1107 audit(1791286966.070:21): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.544665][ T30] audit: type=1107 audit(1791286966.070:22): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.544697][ T30] audit: type=1107 audit(1791286966.070:23): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.544730][ T30] audit: type=1107 audit(1791286966.070:24): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.546616][ T30] audit: type=1107 audit(1791286966.070:25): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.546993][ T30] audit: type=1107 audit(1791286966.070:26): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.758962][T21864] netlink: 'syz.2.3620': attribute type 23 has an invalid length. [ 549.915202][T21871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3622'. [ 549.985865][T21874] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 549.988986][T21874] bond3 (unregistering): Released all slaves [ 550.249204][T21886] netlink: 'syz.0.3626': attribute type 14 has an invalid length. [ 550.505512][T21902] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 550.533744][T21902] bond3: entered promiscuous mode [ 550.534063][T21902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.540245][T21905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.550725][T21905] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 550.550748][T21905] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 550.553895][T21905] bond3: (slave gre1): making interface the new active one [ 550.553916][T21905] gre1: entered promiscuous mode [ 550.570740][T21905] bond3: (slave gre1): Enslaving as an active interface with an up link [ 550.838791][T21913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 551.377642][T21952] block nbd2: Unsupported socket: should be TCP or UNIX. [ 551.411933][T21952] vlan2: entered promiscuous mode [ 551.412050][T21952] macvlan0: entered promiscuous mode [ 551.801180][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 551.931360][T21961] netlink: 'syz.0.3646': attribute type 210 has an invalid length. [ 552.402475][T21967] tipc: Cannot configure node identity twice [ 552.919498][T21980] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 552.953811][T21980] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 553.013343][T21980] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 553.015493][T21980] bond0 (unregistering): Released all slaves [ 553.157308][T21985] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.157437][T21985] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.652891][T22007] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.652981][T22007] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.773307][T22010] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.773416][T22010] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.865631][T22014] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 553.865852][T22014] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 553.866046][T22014] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 553.866234][T22014] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 553.866331][T22018] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 554.559659][T22024] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.560347][T22024] __nla_validate_parse: 4 callbacks suppressed [ 554.560364][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 554.641139][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.646712][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.648170][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.674633][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.675274][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.899662][T22042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3668'. [ 554.920927][T22042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3668'. [ 555.153982][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 555.159463][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 555.164424][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 555.174440][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 555.188774][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 555.521065][T22076] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3674'. [ 555.543788][T22076] 8021q: VLANs not supported on sit0 [ 555.659270][T22028] wlan1 speed is unknown, defaulting to 1000 [ 555.698603][T22083] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 555.862176][T22099] validate_nla: 90 callbacks suppressed [ 555.862197][T22099] netlink: 'syz.0.3676': attribute type 19 has an invalid length. [ 556.101585][T22055] wlan1 speed is unknown, defaulting to 1000 [ 556.182631][T22103] block nbd2: server does not support multiple connections per device. [ 556.183464][T22103] block nbd2: shutting down sockets [ 556.648943][T22121] bridge0: entered allmulticast mode [ 556.774140][ T5623] Bluetooth: hci0: command tx timeout [ 556.803956][T22122] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 556.897612][T22122] bond4: entered promiscuous mode [ 556.898070][T22122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.949577][T22028] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.949696][T22028] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.950369][T22028] bridge_slave_0: entered allmulticast mode [ 556.977634][T22028] bridge_slave_0: entered promiscuous mode [ 557.019293][T22028] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.019386][T22028] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.019497][T22028] bridge_slave_1: entered allmulticast mode [ 557.041258][T22028] bridge_slave_1: entered promiscuous mode [ 557.070248][T22055] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.070353][T22055] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.071269][T22055] bridge_slave_0: entered allmulticast mode [ 557.075215][T22055] bridge_slave_0: entered promiscuous mode [ 557.080232][T22055] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.080329][T22055] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.081868][T22055] bridge_slave_1: entered allmulticast mode [ 557.086889][T22055] bridge_slave_1: entered promiscuous mode [ 557.244564][ T5623] Bluetooth: hci6: command tx timeout [ 557.326009][T22105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.326180][T22105] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 557.394910][T22055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.449695][T22055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.515780][T22028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.523130][T22028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.587978][T22055] team0: Port device team_slave_0 added [ 557.599860][T22055] team0: Port device team_slave_1 added [ 557.633162][T22105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.633188][T22105] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 557.673737][T22154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.707592][T22028] team0: Port device team_slave_0 added [ 557.711651][T22028] team0: Port device team_slave_1 added [ 557.728202][T22055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.728378][T22055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.728406][T22055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.763292][T22055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.763311][T22055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.763338][T22055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.778838][T22105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 557.778859][T22105] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 557.825170][T22028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.825187][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.825213][T22028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.848795][T22105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.848818][T22105] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 557.906381][T22028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.906400][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.906426][T22028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.974927][T22105] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 557.974948][T22105] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 558.047861][T22055] hsr_slave_0: entered promiscuous mode [ 558.048984][T22055] hsr_slave_1: entered promiscuous mode [ 558.049743][T22055] debugfs: 'hsr0' already exists in 'hsr' [ 558.049762][T22055] Cannot create hsr debugfs directory [ 558.067549][T22028] hsr_slave_0: entered promiscuous mode [ 558.069233][T22028] hsr_slave_1: entered promiscuous mode [ 558.073078][T22028] debugfs: 'hsr0' already exists in 'hsr' [ 558.073099][T22028] Cannot create hsr debugfs directory [ 558.113088][T22105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 558.113112][T22105] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 558.144224][T22105] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 558.144249][T22105] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 558.250761][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 558.250780][ T30] audit: type=1804 audit(1791286974.780:82): pid=22169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3692" name="/newroot/129/cgroup.controllers" dev="tmpfs" ino=678 res=1 errno=0 [ 558.250992][ T30] audit: type=1800 audit(1791286974.780:83): pid=22169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3692" name="cgroup.controllers" dev="tmpfs" ino=678 res=0 errno=0 [ 558.431507][T22183] netlink: 'syz.0.3693': attribute type 4 has an invalid length. [ 558.431531][T22183] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3693'. [ 558.486074][T22169] batman_adv: batadv0: Interface deactivated: dummy0 [ 558.857941][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 558.892047][T22198] gre2: entered promiscuous mode [ 559.003726][T10367] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.003981][T22201] syzkaller0: entered promiscuous mode [ 559.004000][T22201] syzkaller0: entered allmulticast mode [ 559.040028][T22201] 0: reclassify loop, rule prio 0, protocol 800 [ 559.184621][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 559.329394][T22028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 559.341025][T22028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.342613][T22028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 559.345843][T22028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.378023][T22028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 559.390100][T22028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.399255][T22028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 559.415819][T22028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.434950][T22216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.567355][T22055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 559.579728][T22055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.584551][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'. [ 559.598599][T22055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 559.616312][T22055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.617263][T22055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.641862][T22055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.642693][T22055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.646049][T22055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.801727][T10335] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.801771][T10335] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.816640][T22028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.861634][T10316] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.875899][T22028] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.916846][T10316] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.916936][T10316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.960367][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.960531][ T6849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.992043][T22055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.070868][T22055] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.102250][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.102350][T10367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.108077][T22244] tipc: Started in network mode [ 560.108095][T22244] tipc: Node identity aac4eabce3d4, cluster identity 4711 [ 560.108186][T22244] tipc: Enabled bearer , priority 0 [ 560.154026][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.154085][ T6849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.280877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.286967][T22244] tipc: Disabling bearer [ 560.398077][T22256] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 560.398169][T22256] syzkaller0: linktype set to 768 [ 560.400202][T22250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'. [ 560.404466][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 560.467352][T22256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.468650][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 560.556212][T22256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.735486][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3711'. [ 561.118113][T22291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.182417][T22028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.186610][T22055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.300855][T22300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3715'. [ 561.571764][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 561.571792][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 561.663712][T22055] veth0_vlan: entered promiscuous mode [ 561.709826][T22055] veth1_vlan: entered promiscuous mode [ 561.727244][T22028] veth0_vlan: entered promiscuous mode [ 561.824500][T22028] veth1_vlan: entered promiscuous mode [ 561.893386][T22055] veth0_macvtap: entered promiscuous mode [ 561.917616][T22055] veth1_macvtap: entered promiscuous mode [ 561.938488][T22319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'. [ 562.005338][T22028] veth0_macvtap: entered promiscuous mode [ 562.039942][T22028] veth1_macvtap: entered promiscuous mode [ 562.064143][T22055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.093974][T22055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.116268][T22320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3719'. [ 562.155138][T22028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.214534][T22028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.214777][T10316] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.236885][T10370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.321606][T10302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.321663][T10302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.649129][T10373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.649150][T10373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.783649][T10335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.784185][T10335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.784442][T10335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.784646][T10335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.185118][T10316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.185141][T10316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.404895][T10370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.404917][T10370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.515160][T22347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.563863][T10302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.563885][T10302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.846016][T22359] Bluetooth: MGMT ver 1.23 [ 564.872491][T22400] batman_adv: batadv0: Adding interface: gretap1 [ 564.872515][T22400] batman_adv: batadv0: Interface activated: gretap1 [ 565.003909][T22408] xt_MASQUERADE: bad rangesize 20224 [ 565.123548][T22414] __nla_validate_parse: 2 callbacks suppressed [ 565.123567][T22414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3742'. [ 565.176317][T22423] ksmbd: Unknown IPC event: 1, ignore. [ 565.376991][T22434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.458786][T22436] ip6t_hbh: unknown flags AD [ 565.518261][T22439] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 565.757218][T22454] netlink: 'syz.5.3754': attribute type 2 has an invalid length. [ 565.786396][T22454] : entered promiscuous mode [ 565.948317][T22459] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3756'. [ 565.950055][T22458] netlink: 'syz.5.3756': attribute type 11 has an invalid length. [ 565.969993][T22463] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 565.972197][T22463] bond1 (unregistering): Released all slaves [ 566.022650][T22449] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.079913][T22456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.317719][T22474] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3759'. [ 566.395199][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 566.435067][T22479] ip_tables: iptables: counters copy to user failed while replacing table [ 566.676538][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3763'. [ 566.741785][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3765'. [ 566.743936][T22491] ip6gre0: entered allmulticast mode [ 566.935010][T22502] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 566.935498][T22502] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 566.975366][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3769'. [ 566.987178][T22502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 567.025635][T22498] IPVS: Scheduler module ip_vs_sip not found [ 567.048541][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3769'. [ 567.139224][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 567.139806][T22502] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3767'. [ 567.167396][T22517] netlink: 'syz.1.3771': attribute type 2 has an invalid length. [ 567.167411][T22517] netlink: 'syz.1.3771': attribute type 2 has an invalid length. [ 567.466383][T10367] IPVS: starting estimator thread 0... [ 567.552152][T22536] IPVS: using max 30 ests per chain, 72000 per kthread [ 568.167835][T22577] netlink: 'syz.2.3787': attribute type 1 has an invalid length. [ 568.167857][T22577] netlink: 'syz.2.3787': attribute type 7 has an invalid length. [ 568.167870][T22577] netlink: 'syz.2.3787': attribute type 8 has an invalid length. [ 568.167986][T22577] NCSI netlink: No device for ifindex 1073545264 [ 569.048686][T22628] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:0 [ 569.241354][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 569.243515][ C1] bridge0: port 3(syz_tun) entered learning state [ 569.245213][T22634] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.246642][T22634] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.375596][T22631] C: renamed from veth1_to_team [ 570.198979][T22667] openvswitch: netlink: Missing key (keys=50, expected=80) [ 570.238458][T22675] openvswitch: netlink: Missing key (keys=50, expected=80) [ 570.532746][T22691] __nla_validate_parse: 15 callbacks suppressed [ 570.532768][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3813'. [ 570.777196][T22705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3817'. [ 570.789637][T22709] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3818'. [ 570.804000][T22708] openvswitch: netlink: Duplicate key (type 0). [ 571.388263][T22734] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 571.704181][T22754] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 571.770013][T22754] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.823521][T22761] bond6: (slave veth0_to_bond): making interface the new active one [ 571.847252][T22761] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 572.517965][T22748] bond6: entered promiscuous mode [ 572.517993][T22748] veth0_to_bond: entered promiscuous mode [ 572.518237][T22748] bond6: entered allmulticast mode [ 572.518253][T22748] veth0_to_bond: entered allmulticast mode [ 573.579351][T22800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.406106][T22839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3847'. [ 574.422110][T22840] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 574.694839][T22821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.868740][T22851] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 574.880001][T22854] netlink: NAT attribute has 8 unknown bytes [ 574.880034][T22854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.362874][T22876] netlink: 'syz.5.3859': attribute type 1 has an invalid length. [ 575.408980][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3859'. [ 575.429022][T22876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.454581][T22877] bridge1: entered promiscuous mode [ 575.479790][T22877] bond1: (slave bridge1): making interface the new active one [ 575.488699][T22877] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 575.516545][T22882] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 575.516568][T22882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3860'. [ 575.674339][T22888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3862'. [ 575.674437][T22888] netlink: 'syz.5.3862': attribute type 3 has an invalid length. [ 575.954321][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 576.071450][T22882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.203928][T22882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.367405][T22907] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3867'. [ 576.507763][T22882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.769026][T22882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.918803][T22921] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 576.922928][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.026524][T22928] ksmbd: Unknown IPC event: 4, ignore. [ 577.130013][T22931] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3873'. [ 577.268605][T22935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3875'. [ 577.311580][ T7942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.420938][T10341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.440769][ T7942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.463897][ T7942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.622790][T22943] x_tables: unsorted entry at hook 3 [ 578.045202][T22960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3880'. [ 578.079528][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'. [ 578.431992][T22977] macvlan2: entered allmulticast mode [ 578.564664][T22985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3887'. [ 578.615052][T22988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3887'. [ 578.965988][T23001] netlink: 'syz.6.3893': attribute type 1 has an invalid length. [ 579.016017][T23001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.130767][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3893'. [ 579.617021][T23009] ip_tables: iptables: counters copy to user failed while replacing table [ 579.634893][T23014] syzkaller0: entered promiscuous mode [ 579.634915][T23014] syzkaller0: entered allmulticast mode [ 579.947666][T23036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.658354][T23060] batadv_slave_0: entered promiscuous mode [ 582.796100][T23068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.948472][T23076] netlink: 'syz.2.3912': attribute type 238 has an invalid length. [ 583.021543][T23078] netlink: 'syz.2.3913': attribute type 8 has an invalid length. [ 583.021564][T23078] __nla_validate_parse: 1 callbacks suppressed [ 583.021576][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3913'. [ 583.054792][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3906'. [ 583.083399][T23051] batadv_slave_0: left promiscuous mode [ 583.506594][T23107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 583.507353][T23104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 583.556520][T23106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.849837][T23120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3922'. [ 585.520550][T23125] syzkaller1: entered promiscuous mode [ 585.520582][T23125] syzkaller1: entered allmulticast mode [ 585.988118][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 586.283840][T23089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.464954][T23144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.467026][T23144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.776248][T23155] sit0: entered promiscuous mode [ 586.789178][T23155] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3934'. [ 587.081081][T23165] netlink: 'syz.2.3939': attribute type 3 has an invalid length. [ 587.081104][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 587.186024][T23177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3941'. [ 587.657940][T23177] bond1: left promiscuous mode [ 587.658314][T23177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.671634][T23177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.694684][T23177] bond3: left promiscuous mode [ 587.696826][T23177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.728496][T23177] vlan2: left promiscuous mode [ 587.728514][T23177] macvlan0: left promiscuous mode [ 587.736112][T23177] bond4: left promiscuous mode [ 587.747305][T23177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.773247][T23177] 8021q: adding VLAN 0 to HW filter on device eth0 [ 587.775293][T23177] 8021q: adding VLAN 0 to HW filter on device eth1 [ 587.777418][T23177] 8021q: adding VLAN 0 to HW filter on device eth2 [ 587.802197][T23177] 8021q: adding VLAN 0 to HW filter on device eth3 [ 588.041647][T10335] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.057279][T10335] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 588.073490][ T1170] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.073535][ T1170] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.073569][ T1170] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.247902][T23202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3946'. [ 588.271424][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3946'. [ 588.366828][T23205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3946'. [ 588.468173][T23210] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 588.725343][T23222] ip_tables: iptables: counters copy to user failed while replacing table [ 589.015988][ T7942] tipc: Subscription rejected, illegal request [ 589.033969][T23238] syzkaller0: entered promiscuous mode [ 589.033992][T23238] syzkaller0: entered allmulticast mode [ 589.302883][T23247] warn_alloc: 1 callbacks suppressed [ 589.302928][T23247] syz.0.3956: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 589.302991][T23247] CPU: 1 UID: 0 PID: 23247 Comm: syz.0.3956 Not tainted syzkaller #0 PREEMPT(full) [ 589.303013][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.303026][T23247] Call Trace: [ 589.303035][T23247] [ 589.303044][T23247] dump_stack_lvl+0xe8/0x150 [ 589.303076][T23247] warn_alloc+0x24d/0x270 [ 589.303098][T23247] ? kasan_save_track+0x4f/0x80 [ 589.303118][T23247] ? kasan_save_track+0x3e/0x80 [ 589.303141][T23247] ? __pfx_warn_alloc+0x10/0x10 [ 589.303168][T23247] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 589.303195][T23247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.303235][T23247] __vmalloc_node_range_noprof+0x127/0x1540 [ 589.303289][T23247] ? rcu_is_watching+0x16/0xb0 [ 589.303319][T23247] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 589.303349][T23247] ? __kmalloc_cache_noprof+0x321/0x600 [ 589.303371][T23247] ? __kmalloc_cache_noprof+0x14d/0x600 [ 589.303391][T23247] ? xskq_create+0x56/0x220 [ 589.303499][T23247] xskq_create+0x148/0x220 [ 589.303526][T23247] ? xsk_init_queue+0x8a/0xe0 [ 589.303554][T23247] xsk_init_queue+0x8a/0xe0 [ 589.303584][T23247] xsk_setsockopt+0x5e0/0x960 [ 589.303612][T23247] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.303637][T23247] ? __pfx_aa_sk_perm+0x10/0x10 [ 589.303701][T23247] ? aa_sock_opt_perm+0x142/0x1e0 [ 589.303732][T23247] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 589.303758][T23247] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.303784][T23247] do_sock_setsockopt+0x17c/0x1b0 [ 589.303816][T23247] __x64_sys_setsockopt+0x13d/0x1b0 [ 589.303852][T23247] do_syscall_64+0x166/0x520 [ 589.303879][T23247] ? trace_irq_disable+0x3b/0x140 [ 589.303897][T23247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.303916][T23247] ? clear_bhb_loop+0x70/0xc0 [ 589.303939][T23247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.303957][T23247] RIP: 0033:0x7fbf7879e199 [ 589.303975][T23247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.303991][T23247] RSP: 002b:00007fbf795a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.304012][T23247] RAX: ffffffffffffffda RBX: 00007fbf78a26090 RCX: 00007fbf7879e199 [ 589.304028][T23247] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 589.304040][T23247] RBP: 00007fbf788358e0 R08: 0000000000000004 R09: 0000000000000000 [ 589.304053][T23247] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.304067][T23247] R13: 00007fbf78a26128 R14: 00007fbf78a26090 R15: 00007ffc88284678 [ 589.304099][T23247] [ 589.307363][T23247] Mem-Info: [ 589.307386][T23247] active_anon:8308 inactive_anon:0 isolated_anon:0 [ 589.307386][T23247] active_file:258 inactive_file:43144 isolated_file:0 [ 589.307386][T23247] unevictable:0 dirty:142 writeback:0 [ 589.307386][T23247] slab_reclaimable:12230 slab_unreclaimable:116463 [ 589.307386][T23247] mapped:40899 shmem:1782 pagetables:3563 [ 589.307386][T23247] sec_pagetables:0 bounce:0 [ 589.307386][T23247] kernel_misc_reclaimable:0 [ 589.307386][T23247] free:1273700 free_pcp:9573 free_cma:0 [ 589.307441][T23247] Node 0 active_anon:33232kB inactive_anon:0kB active_file:1032kB inactive_file:172376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163596kB dirty:568kB writeback:0kB shmem:7128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17592kB pagetables:14104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.307496][T23247] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.380803][T23247] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.380882][T23247] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 589.380914][T23247] Node 0 DMA32 free:1147504kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34132kB inactive_anon:0kB active_file:1032kB inactive_file:172376kB unevictable:0kB writepending:568kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:30980kB local_pcp:13288kB free_cma:0kB [ 589.380970][T23247] lowmem_reserve[]: 0 0 0 0 0 [ 589.381000][T23247] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.381053][T23247] lowmem_reserve[]: 0 0 0 0 0 [ 589.381087][T23247] Node 1 Normal free:3931936kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6548kB local_pcp:6548kB free_cma:0kB [ 589.381142][T23247] lowmem_reserve[]: 0 0 0 0 0 [ 589.381173][T23247] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 589.381272][T23247] Node 0 DMA32: 920*4kB (M) 644*8kB (UM) 275*16kB (ME) 120*32kB (UME) 288*64kB (UME) 305*128kB (UME) 377*256kB (UME) 203*512kB (UM) 164*1024kB (UME) 4*2048kB (UM) 170*4096kB (UM) = 1147440kB [ 589.381435][T23247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 589.381529][T23247] Node 1 Normal: 2*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3931936kB [ 589.381676][T23247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.381692][T23247] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 589.381709][T23247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.381726][T23247] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 589.381751][T23247] 45480 total pagecache pages [ 589.381767][T23247] 0 pages in swap cache [ 589.381775][T23247] Free swap = 124996kB [ 589.381782][T23247] Total swap = 124996kB [ 589.381790][T23247] 2097051 pages RAM [ 589.381797][T23247] 0 pages HighMem/MovableOnly [ 589.381804][T23247] 428661 pages reserved [ 589.381811][T23247] 0 pages cma reserved [ 590.038183][T23266] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3959'. [ 590.287115][T23281] bridge_slave_0: left allmulticast mode [ 590.287143][T23281] bridge_slave_0: left promiscuous mode [ 590.287380][T23281] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.331058][T23270] bridge_slave_1: left allmulticast mode [ 590.331089][T23270] bridge_slave_1: left promiscuous mode [ 590.331317][T23270] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.476497][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 590.578935][T23270] bridge0 (unregistering): left allmulticast mode [ 590.735377][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3966'. [ 590.817713][T23299] ipvlan2: entered promiscuous mode [ 590.818019][T23298] batman_adv: batadv0: Removing interface: dummy0 [ 590.942082][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 591.428255][T23328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 591.648879][T23349] openvswitch: netlink: Message has 8 unknown bytes. [ 591.648916][T23349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.837186][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.840067][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.862124][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.862627][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.862976][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.864528][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.865411][T23358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.072355][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3979'. [ 592.207566][T23388] netlink: 15 bytes leftover after parsing attributes in process `syz.6.3980'. [ 592.386908][T10302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.386930][T10302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.847852][T23414] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 592.847876][T23414] netlink: 'syz.1.3987': attribute type 2 has an invalid length. [ 593.198262][T23437] netlink: 'syz.5.3997': attribute type 10 has an invalid length. [ 593.207197][T23437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.215630][T23437] team0: Port device netdevsim1 added [ 593.220046][T23437] netlink: 'syz.5.3997': attribute type 10 has an invalid length. [ 593.223911][ T5623] block nbd2: Receive control failed (result -1) [ 593.261652][T23437] team0: Port device netdevsim1 removed [ 593.328334][T23437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.344773][T23437] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 593.526528][T23452] netlink: 'syz.5.4001': attribute type 23 has an invalid length. [ 593.526552][T23452] netlink: 'syz.5.4001': attribute type 11 has an invalid length. [ 593.760102][T23455] netlink: 'syz.5.4002': attribute type 15 has an invalid length. [ 593.760517][T10367] IPVS: starting estimator thread 0... [ 593.852301][T23458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.861477][T23456] IPVS: using max 33 ests per chain, 79200 per kthread [ 594.542016][T20548] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 594.643282][T23472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.643979][T23472] veth0_to_team: entered promiscuous mode [ 594.850786][T20548] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.020319][T23494] sctp: [Deprecated]: syz.5.4011 (pid 23494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.020319][T23494] Use struct sctp_sack_info instead [ 595.438341][T23505] syzkaller1: entered promiscuous mode [ 595.438365][T23505] syzkaller1: entered allmulticast mode [ 595.540229][T23515] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 595.642879][T23522] __nla_validate_parse: 73 callbacks suppressed [ 595.642899][T23522] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4015'. [ 595.810895][T23515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 595.908156][T23518] macvlan3: entered promiscuous mode [ 595.908181][T23518] macvlan3: entered allmulticast mode [ 595.927925][T23518] bond7: entered promiscuous mode [ 595.939183][T23518] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 595.954517][T23518] bond7: left promiscuous mode [ 596.117935][T23534] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 596.119571][T23534] bond2 (unregistering): Released all slaves [ 596.214121][T23527] syzkaller1: entered promiscuous mode [ 596.214786][T23527] syzkaller1: entered allmulticast mode [ 596.529405][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4022'. [ 596.624663][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 596.624749][T23561] vlan2: left promiscuous mode [ 596.624767][T23561] bridge_slave_0: left promiscuous mode [ 596.625258][T23561] bridge0: port 3(vlan2) entered disabled state [ 596.774961][T23570] Bluetooth: MGMT ver 1.23 [ 596.779177][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.779411][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.779628][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.779816][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.780007][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.780290][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.834399][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.834627][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.834841][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.835037][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.835233][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.838901][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.839116][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.890769][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.891024][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.891225][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.891423][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.891630][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.891818][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.897920][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.898161][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.898403][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.898610][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.898809][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.899004][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.899203][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.953430][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.953635][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.953818][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.968165][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.968376][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.968582][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.977404][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.977611][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.979691][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.979884][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.980076][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.980263][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.984776][T23570] Bluetooth: hci1: too big key_count value 29096 [ 596.989916][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.020174][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.020369][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.025832][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.026033][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.026229][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.033709][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.033924][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.036323][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.036521][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.036765][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.036957][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.037150][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.039862][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.040067][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.040979][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.041178][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.041388][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.041582][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.041767][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.044387][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.044578][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.044805][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.044998][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.059980][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.060270][T23570] Bluetooth: hci1: too big key_count value 29096 [ 597.336441][T23551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4021'. [ 598.197869][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 598.554298][T23638] nbd: must specify at least one socket [ 598.653496][T23638] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 598.656745][T23638] bond2 (unregistering): Released all slaves [ 599.057632][T23665] netlink: 'syz.5.4043': attribute type 3 has an invalid length. [ 599.057655][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4043'. [ 599.322298][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 599.322323][ C1] bridge0: topology change detected, propagating [ 599.322899][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.322919][ C1] bridge0: topology change detected, propagating [ 599.364636][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'. [ 599.437035][T23677] netlink: 'syz.0.4045': attribute type 2 has an invalid length. [ 599.437059][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4045'. [ 599.933937][T23694] netlink: 'syz.2.4050': attribute type 10 has an invalid length. [ 600.105218][T23700] tipc: New replicast peer: 172.20.20.170 [ 600.105550][T23700] tipc: Enabled bearer , priority 10 [ 600.124280][T23700] tipc: New replicast peer: 0.0.0.0 [ 600.285736][T23712] tipc: Started in network mode [ 600.285764][T23712] tipc: Node identity 129d6954fe6d, cluster identity 4711 [ 600.285908][T23712] tipc: Enabled bearer , priority 0 [ 600.315910][T23708] tipc: Resetting bearer [ 600.403396][T23713] syzkaller0: entered promiscuous mode [ 600.403416][T23713] syzkaller0: entered allmulticast mode [ 600.403881][T23713] syzkaller0: left allmulticast mode [ 600.576275][T23729] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4056'. [ 600.880727][T23701] tipc: Resetting bearer [ 600.948693][T23701] tipc: Disabling bearer [ 601.072659][T23755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4060'. [ 601.166307][T23755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4060'. [ 601.185475][T23755] bond6: (slave veth0_to_bond): Releasing active interface [ 601.185500][T23755] veth0_to_bond: left promiscuous mode [ 601.185676][T23755] veth0_to_bond: left allmulticast mode [ 601.227936][T20546] tipc: Node number set to 4180077049 [ 601.366558][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4063'. [ 601.653990][T23782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 601.762732][T23792] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 601.918591][T23799] netlink: 'syz.5.4071': attribute type 1 has an invalid length. [ 601.995837][T23793] syzkaller1: entered promiscuous mode [ 601.995861][T23793] syzkaller1: entered allmulticast mode [ 602.139669][T23805] net_ratelimit: 12 callbacks suppressed [ 602.139683][T23805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.251800][T23803] bridge2: entered promiscuous mode [ 602.255706][T23803] bond2: (slave bridge2): making interface the new active one [ 602.256525][T23803] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 602.286056][T23815] xt_MASQUERADE: bad rangesize 20224 [ 602.353867][T23799] bridge3: entered promiscuous mode [ 602.356843][T23799] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 602.367146][T23808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4073'. [ 602.367171][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'. [ 602.369015][T23812] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 602.406226][T23813] bridge4: entered promiscuous mode [ 602.418845][T23813] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 602.436696][T23811] bridge5: entered promiscuous mode [ 602.448270][T23811] bond2: (slave bridge5): Enslaving as a backup interface with an up link [ 602.485569][T23814] bridge6: entered promiscuous mode [ 602.497186][T23814] bond2: (slave bridge6): Enslaving as a backup interface with an up link [ 602.558064][T23818] batadv_slave_1: entered promiscuous mode [ 602.704063][T23816] batadv_slave_1: left promiscuous mode [ 602.866691][T23831] hsr_slave_0: left promiscuous mode [ 602.877786][T23831] hsr_slave_1: left promiscuous mode [ 602.920673][T23837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4080'. [ 603.061926][T23842] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 603.159257][T10352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.159280][T10352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.224097][T23848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4084'. [ 603.489919][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4080'. [ 603.506709][T23853] netlink: 'syz.6.4085': attribute type 6 has an invalid length. [ 603.506731][T23853] netlink: 'syz.6.4085': attribute type 7 has an invalid length. [ 603.506743][T23853] netlink: 'syz.6.4085': attribute type 8 has an invalid length. [ 603.655402][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 604.194346][T10335] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.194390][T10335] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.194445][T10335] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.194476][T10335] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.323835][T10367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.323857][T10367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.583095][T23929] syzkaller0: entered promiscuous mode [ 604.583118][T23929] syzkaller0: entered allmulticast mode [ 605.742946][T23975] netlink: 'syz.0.4117': attribute type 5 has an invalid length. [ 605.860072][T23985] bond_slave_0: entered promiscuous mode [ 605.860094][T23985] bond_slave_0: entered allmulticast mode [ 605.860266][T23985] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 605.924777][T23991] xt_IDLETIMER: label is empty or not nul-terminated [ 605.939418][T23973] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 606.153323][T24002] Cannot find del_set index 0 as target [ 606.264524][T24006] __nla_validate_parse: 9 callbacks suppressed [ 606.264543][T24006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 606.290302][T24004] block nbd0: reconnected socket [ 606.307100][T24004] netlink: 'syz.2.4125': attribute type 9 has an invalid length. [ 606.553476][T24016] netlink: 'syz.5.4129': attribute type 21 has an invalid length. [ 606.553498][T24016] netlink: 'syz.5.4129': attribute type 22 has an invalid length. [ 606.553512][T24016] netlink: 'syz.5.4129': attribute type 23 has an invalid length. [ 606.553526][T24016] netlink: 'syz.5.4129': attribute type 25 has an invalid length. [ 606.553539][T24016] netlink: 'syz.5.4129': attribute type 26 has an invalid length. [ 606.553552][T24016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4129'. [ 606.633734][ T5623] block nbd0: Receive control failed (result -32) [ 606.720539][T24029] x_tables: duplicate underflow at hook 2 [ 607.055335][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4135'. [ 607.189655][T24043] netlink: 'syz.2.4134': attribute type 32 has an invalid length. [ 607.189678][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 607.255509][T24043] bond0: option coupled_control: invalid value (115) [ 607.275210][T24043] bond0 (unregistering): Released all slaves [ 607.785284][T24073] netlink: 'syz.0.4137': attribute type 10 has an invalid length. [ 607.859799][T24076] netlink: 'syz.2.4140': attribute type 3 has an invalid length. [ 607.903519][T24076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4140'. [ 608.227595][T24073] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 608.250168][T24073] team0: Port device wlan0 added [ 608.567418][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4145'. [ 608.568310][T24098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4145'. [ 608.608082][T24100] syzkaller1: entered promiscuous mode [ 608.608102][T24100] syzkaller1: entered allmulticast mode [ 608.896068][T24119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4152'. [ 608.900586][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 608.900626][T24119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4152'. [ 609.311644][T24141] TC_ACT_REPEAT abuse ? [ 609.571009][T24158] bond7: entered promiscuous mode [ 609.571032][T24158] bond7: entered allmulticast mode [ 609.813935][T24172] xt_bpf: check failed: parse error [ 610.210671][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 610.230319][T24187] syzkaller1: entered promiscuous mode [ 610.230342][T24187] syzkaller1: entered allmulticast mode [ 610.724143][T24208] ip6gre1: entered promiscuous mode [ 610.724167][T24208] ip6gre1: entered allmulticast mode [ 611.272790][T24246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.535176][T24258] __nla_validate_parse: 11 callbacks suppressed [ 611.535199][T24258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4186'. [ 611.535216][T24258] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4186'. [ 611.535234][T24258] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4186'. [ 611.535249][T24258] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4186'. [ 611.538519][T24258] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.541046][T24258] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.553971][T24208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 611.554101][T24208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 611.593312][T24258] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.593432][T24258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.593722][T24258] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.593840][T24258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.596630][T24258] bridge0: entered promiscuous mode [ 611.596652][T24258] bridge0: entered allmulticast mode [ 611.757556][T24261] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 611.758020][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4188'. [ 611.758062][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4188'. [ 612.111333][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4190'. [ 612.111358][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4190'. [ 612.163620][T24247] syzkaller0: entered promiscuous mode [ 612.163642][T24247] syzkaller0: entered allmulticast mode [ 612.176054][T24247] TC_ACT_REPEAT abuse ? [ 612.413684][T24290] 8021q: VLANs not supported on gre0 [ 612.696197][T24300] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.4194'. [ 612.707820][T24301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 613.318182][T24334] ip6tnl2: entered allmulticast mode [ 613.859006][T24359] ip_tables: iptables: counters copy to user failed while replacing table [ 613.876191][T24364] Set syz0 is full, maxelem 0 reached [ 613.923826][T24359] batman_adv: batadv0: Adding interface: dummy0 [ 613.923844][T24359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.923864][T24359] batman_adv: batadv0: Interface activated: dummy0 [ 613.932537][T24361] batadv0: mtu less than device minimum [ 613.933933][T24361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 613.935312][T24361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 613.936653][T24361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 613.938028][T24361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 613.939411][T24361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 613.978470][T24363] ipvlan1: entered promiscuous mode [ 613.980221][T24363] ipvlan1: left promiscuous mode [ 614.130639][T10329] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.130830][T10329] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.150727][T20546] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.308971][T20547] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.628955][T24401] sctp: [Deprecated]: syz.2.4213 (pid 24401) Use of int in maxseg socket option. [ 614.628955][T24401] Use struct sctp_assoc_value instead [ 615.019559][T24430] tc_dump_action: action bad kind [ 615.081327][T20547] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 616.351656][T24497] erspan0: Device is already in use. [ 616.414180][T24506] validate_nla: 5 callbacks suppressed [ 616.414215][T24506] netlink: 'syz.2.4232': attribute type 30 has an invalid length. [ 616.481797][T24506] bond0: option arp_missed_max: invalid value (0) [ 616.481831][T24506] bond0: option arp_missed_max: allowed values 1 - 255 [ 616.483972][T24506] bond0 (unregistering): Released all slaves [ 616.628245][T24509] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 616.718451][ T7946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.718474][ T7946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.825165][T24513] bridge_slave_0: left allmulticast mode [ 616.825191][T24513] bridge_slave_0: left promiscuous mode [ 616.826573][T24513] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.843567][T24513] bridge_slave_1: left allmulticast mode [ 616.843591][T24513] bridge_slave_1: left promiscuous mode [ 616.843793][T24513] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.886080][T24513] bond2: (slave veth0_to_bond): Releasing active interface [ 616.888670][T24513] bond2: (slave veth3): making interface the new active one [ 616.931048][T24513] bond0: (slave bond_slave_0): Releasing backup interface [ 616.946815][T24513] bond0: (slave bond_slave_1): Releasing backup interface [ 617.026968][T24513] team0: Port device team_slave_0 removed [ 617.057053][T24513] team0: Port device team_slave_1 removed [ 617.060656][T24513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.060679][T24513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.104849][T24513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.104874][T24513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.184263][T24513] team0: Port device wlan0 removed [ 617.217838][T24513] bond2: (slave veth3): Releasing active interface [ 617.653897][T24566] __nla_validate_parse: 74 callbacks suppressed [ 617.653916][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 617.716218][T24575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.831589][T24581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4241'. [ 617.831787][T24580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4241'. [ 618.280733][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 618.494742][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 618.573082][T24613] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4252'. [ 618.636816][T24613] batadv_slave_1: entered promiscuous mode [ 618.841127][T10369] wlan0: Trigger new scan to find an IBSS to join [ 618.999738][T24637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4254'. [ 621.844911][T24613] batadv_slave_1: left promiscuous mode [ 622.003743][T24659] tunl0: entered promiscuous mode [ 622.003940][T24659] netlink: 'syz.2.4259': attribute type 4 has an invalid length. [ 622.003957][T24659] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4259'. [ 622.097107][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.097129][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.123726][T24659] ksmbd: Unknown IPC event: 1, ignore. [ 622.328879][T24676] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4265'. [ 622.342680][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4263'. [ 622.393303][T24676] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4265'. [ 622.667819][T24696] __nla_validate_parse: 2 callbacks suppressed [ 622.667840][T24696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4271'. [ 622.688747][T24698] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4271'. [ 622.754711][T24703] net_ratelimit: 14 callbacks suppressed [ 622.754731][T24703] ip_tables: iptables: counters copy to user failed while replacing table [ 623.218907][T24695] ip6gretap0: left allmulticast mode [ 623.334939][ T7946] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.334976][ T7946] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.335645][ T7946] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.335674][ T7946] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.335709][ T7946] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.335734][ T7946] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.335765][ T7946] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.335790][ T7946] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.616548][T24723] batman_adv: batadv0: Interface deactivated: dummy0 [ 623.616573][T24723] batman_adv: batadv0: Removing interface: dummy0 [ 623.635125][T24723] bridge_slave_0: left allmulticast mode [ 623.635150][T24723] bridge_slave_0: left promiscuous mode [ 623.635362][T24723] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.688462][T24723] bridge_slave_1: left allmulticast mode [ 623.688482][T24723] bridge_slave_1: left promiscuous mode [ 623.688613][T24723] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.743655][T24723] bond0: (slave bond_slave_0): Releasing backup interface [ 623.764291][T24723] bond0: (slave bond_slave_1): Releasing backup interface [ 623.792344][T24723] team0: Port device team_slave_0 removed [ 623.798550][T24723] team0: Port device team_slave_1 removed [ 623.799197][T24723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.799211][T24723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.802188][T24723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.802207][T24723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.814575][T10345] wlan0: Trigger new scan to find an IBSS to join [ 623.827992][T24723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.041879][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'. [ 624.066298][T24750] netlink: 'syz.0.4284': attribute type 1 has an invalid length. [ 624.118107][T24750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.150225][T24760] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 624.166461][T24750] bond8: (slave geneve2): making interface the new active one [ 624.168209][T24750] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 624.245852][T24760] bond9: entered promiscuous mode [ 624.246361][T24760] 8021q: adding VLAN 0 to HW filter on device bond9 [ 624.346930][T24768] netlink: 'syz.0.4288': attribute type 8 has an invalid length. [ 624.406881][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 624.956397][T10369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.030621][ T6849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.096604][T24768] veth7: entered allmulticast mode [ 625.143925][T24775] ovs-dp0: entered promiscuous mode [ 625.159501][T24788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4291'. [ 625.201935][ T6849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.205153][ T6849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.205598][ T6849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.284633][T24787] syzkaller0: entered promiscuous mode [ 625.284657][T24787] syzkaller0: entered allmulticast mode [ 625.314590][T24792] syzkaller1: entered promiscuous mode [ 625.314612][T24792] syzkaller1: entered allmulticast mode [ 625.316183][T24785] 0: reclassify loop, rule prio 0, protocol 800 [ 625.384911][T24796] netlink: 'syz.5.4293': attribute type 1 has an invalid length. [ 625.435967][T24800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4295'. [ 625.458185][T24796] bond4: entered promiscuous mode [ 625.458565][T24796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 625.489301][T24797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.582500][T24807] netlink: 'syz.6.4296': attribute type 21 has an invalid length. [ 625.582526][T24807] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4296'. [ 625.582594][T24807] netlink: 'syz.6.4296': attribute type 4 has an invalid length. [ 625.582610][T24807] netlink: 'syz.6.4296': attribute type 5 has an invalid length. [ 625.582623][T24807] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4296'. [ 625.740928][T24811] netlink: 'syz.5.4298': attribute type 18 has an invalid length. [ 625.777307][T24811] netlink: 21 bytes leftover after parsing attributes in process `syz.5.4298'. [ 626.028241][T24807] infiniband syz1: set down [ 626.032198][T24807] infiniband syz1: added syzkaller0 [ 626.037764][ T30] audit: type=1800 audit(1791287042.560:84): pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4300" name=680B20 dev="tmpfs" ino=687 res=0 errno=0 [ 626.078609][T24807] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 626.078647][T24807] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 626.078688][T24807] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 626.273011][T24807] RDS/IB: syz1: added [ 626.273067][T24807] smc: adding ib device syz1 with port count 1 [ 626.273089][T24807] smc: ib device syz1 port 1 has no pnetid [ 626.738509][T24839] netlink: 'syz.5.4306': attribute type 1 has an invalid length. [ 626.796538][T24839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4306'. [ 626.835683][T24839] bridge7: entered promiscuous mode [ 626.835706][T24839] bridge7: entered allmulticast mode [ 626.840629][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 626.870335][T24839] bond5: (slave bridge7): making interface the new active one [ 626.884461][T24839] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 627.336806][ T6849] smc: removing ib device syz1 [ 627.395584][ T6849] smbdirect: ib_dev[syz1] removed [ 627.624309][T24863] netlink: 'syz.5.4313': attribute type 83 has an invalid length. [ 627.852217][T24879] netlink: 'syz.1.4315': attribute type 9 has an invalid length. [ 628.274304][T24807] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 628.282148][T24907] netlink: 'syz.2.4320': attribute type 1 has an invalid length. [ 628.339628][T24907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.528638][T24921] __nla_validate_parse: 1 callbacks suppressed [ 628.528658][T24921] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4323'. [ 628.772741][T24939] team0: entered allmulticast mode [ 628.772763][T24939] team_slave_0: entered allmulticast mode [ 628.772777][T24939] team_slave_1: entered allmulticast mode [ 628.776657][T24939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 628.869661][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4330'. [ 628.871536][T24941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4328'. [ 628.871572][T24941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.875971][T24946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4330'. [ 628.880228][T24945] netlink: 'syz.6.4330': attribute type 8 has an invalid length. [ 628.880246][T24945] sch_fq: defrate 0 ignored. [ 628.900969][T24945] openvswitch: netlink: IPv4 tunnel dst address is zero [ 628.952616][T24950] bond8: (slave geneve2): Releasing active interface [ 628.972104][T10369] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.972487][T10345] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.972533][T10345] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.972566][T10345] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.278899][T24962] syzkaller0: entered promiscuous mode [ 629.278916][T24962] syzkaller0: entered allmulticast mode [ 629.455909][T24969] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4335'. [ 629.468736][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4335'. [ 629.536387][T24969] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 629.540139][T24969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.709186][T24969] wlan1 speed is unknown, defaulting to 1000 [ 630.201285][T25009] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 630.272526][ T30] audit: type=1804 audit(1791287046.800:85): pid=25015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4344" name="/newroot/212/cgroup.controllers" dev="tmpfs" ino=1107 res=1 errno=0 [ 630.272588][ T30] audit: type=1800 audit(1791287046.800:86): pid=25015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4344" name="cgroup.controllers" dev="tmpfs" ino=1107 res=0 errno=0 [ 630.275466][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4344'. [ 630.275488][T25015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'. [ 630.275512][T25015] netlink: 'syz.1.4344': attribute type 12 has an invalid length. [ 630.275526][T25015] netlink: 'syz.1.4344': attribute type 14 has an invalid length. [ 630.523744][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 630.523879][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 630.539794][T25012] macvlan2: entered promiscuous mode [ 630.539813][T25012] macvlan2: entered allmulticast mode [ 630.552275][T25012] bond9: entered promiscuous mode [ 630.575283][T25012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 630.580328][T25012] bond9: left promiscuous mode [ 630.641618][ T7946] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.641667][ T7946] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.641703][ T7946] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.641739][ T7946] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.887674][T25046] syzkaller0: left allmulticast mode [ 630.978967][T25051] syzkaller0: left promiscuous mode [ 630.988105][T25035] wlan1 speed is unknown, defaulting to 1000 [ 631.743159][T25076] syzkaller1: entered promiscuous mode [ 631.743184][T25076] syzkaller1: entered allmulticast mode [ 632.185052][T25100] netlink: 'syz.5.4364': attribute type 12 has an invalid length. [ 632.196960][T25100] bond0: option primary_reselect: invalid value (239) [ 632.419881][T25109] netlink: 'syz.1.4368': attribute type 219 has an invalid length. [ 632.767564][T25126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.917076][T25126] nbd: device at index 64 is going down [ 633.229884][T24738] udevd[24738]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 633.241992][T24828] udevd[24828]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 633.406912][T25154] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 633.548860][T25166] __nla_validate_parse: 43 callbacks suppressed [ 633.548880][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.548987][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549096][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549194][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549321][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549418][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549553][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549648][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549744][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.549839][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 633.655439][T25167] macsec0: entered promiscuous mode [ 633.696894][T25167] macsec0 (unregistering): left promiscuous mode [ 634.338778][T25206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.482598][T25216] ip_tables: iptables: counters copy to user failed while replacing table [ 634.487701][T25215] netlink: 'syz.2.4394': attribute type 1 has an invalid length. [ 634.595384][T25215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 634.712293][T25228] netlink: 'syz.2.4397': attribute type 1 has an invalid length. [ 634.842500][ T7950] wlan1: Trigger new scan to find an IBSS to join [ 634.880605][T25234] wlan1 speed is unknown, defaulting to 1000 [ 635.020831][T25239] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 636.378500][T25298] syzkaller0: entered promiscuous mode [ 636.378523][T25298] syzkaller0: entered allmulticast mode [ 636.535322][T25316] syzkaller0: entered promiscuous mode [ 636.535349][T25316] syzkaller0: entered allmulticast mode [ 637.010651][T25335] openvswitch: netlink: Duplicate key (type 3). [ 637.128264][T10373] IPVS: starting estimator thread 0... [ 637.152446][T25343] block nbd0: Unsupported socket: should be TCP or UNIX. [ 637.210493][T25342] IPVS: using max 34 ests per chain, 81600 per kthread [ 637.802344][T10373] wlan1: Trigger new scan to find an IBSS to join [ 638.348353][T25397] netlink: 'syz.5.4437': attribute type 21 has an invalid length. [ 638.673972][T25412] netlink: 'syz.1.4440': attribute type 2 has an invalid length. [ 638.730803][T25416] __nla_validate_parse: 24 callbacks suppressed [ 638.730824][T25416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 639.148840][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 639.291885][T25436] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4445'. [ 640.109782][T25456] netlink: 'syz.6.4451': attribute type 1 has an invalid length. [ 640.351388][T25466] nbd: must specify at least one socket [ 640.762124][T10345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.010015][T25500] netlink: 'syz.5.4462': attribute type 1 has an invalid length. [ 641.169138][T25508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4464'. [ 641.375655][T25516] syzkaller0: entered promiscuous mode [ 641.375680][T25516] syzkaller0: entered allmulticast mode [ 641.460297][T25520] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 641.486570][T25522] netlink: 'syz.2.4470': attribute type 1 has an invalid length. [ 641.588516][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4471'. [ 641.618047][T25527] 8021q: adding VLAN 0 to HW filter on device bond10 [ 641.633703][T25522] bridge2: entered promiscuous mode [ 641.638060][T25522] bond5: (slave bridge2): making interface the new active one [ 641.638774][T25522] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 641.673241][T25522] bridge3: entered promiscuous mode [ 641.676385][T25522] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 641.760328][T25532] xt_l2tp: invalid flags combination: 8 [ 642.023371][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'. [ 642.126413][T25539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4476'. [ 642.178201][T25535] syzkaller0: entered promiscuous mode [ 642.178229][T25535] syzkaller0: entered allmulticast mode [ 642.232492][T20543] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 642.239251][T25543] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 642.241516][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4476'. [ 642.241533][T25540] tipc: Invalid UDP bearer configuration [ 642.241570][T25540] tipc: Enabling of bearer rejected, failed to enable media [ 642.488703][T25558] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4479'. [ 642.504746][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4479'. [ 642.840657][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 645.102668][T25549] ipvlan3: entered promiscuous mode [ 645.102801][T25549] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 645.102814][T25549] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 645.102891][T25549] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 645.476070][T25581] __nla_validate_parse: 1 callbacks suppressed [ 645.476090][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 645.540316][T25581] veth1_to_team: entered promiscuous mode [ 645.544259][T25581] veth1_to_team: left promiscuous mode [ 645.585153][T25589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.600552][T25574] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4486'. [ 645.627805][T25591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4489'. [ 645.758795][T25599] syzkaller1: entered promiscuous mode [ 645.758819][T25599] syzkaller1: entered allmulticast mode [ 646.405873][T25636] openvswitch: netlink: IP tunnel dst address not specified [ 646.406346][T25633] openvswitch: netlink: IP tunnel dst address not specified [ 646.442173][T25632] netlink: 'syz.5.4498': attribute type 11 has an invalid length. [ 646.442212][T25632] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4498'. [ 646.442597][T25633] netlink: 'syz.5.4498': attribute type 11 has an invalid length. [ 646.442613][T25633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4498'. [ 646.654754][T25646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4503'. [ 646.681705][T25646] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 646.684081][T25646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4503'. [ 646.735013][T25646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4503'. [ 646.736232][T25646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4503'. [ 646.847479][T25650] tipc: Enabled bearer , priority 0 [ 646.855793][T25650] syzkaller0: entered promiscuous mode [ 646.855816][T25650] syzkaller0: entered allmulticast mode [ 647.026915][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'. [ 647.183012][T25666] syzkaller1: entered promiscuous mode [ 647.183039][T25666] syzkaller1: entered allmulticast mode [ 647.563266][T25686] syzkaller0: entered promiscuous mode [ 647.563289][T25686] syzkaller0: entered allmulticast mode [ 647.640265][T25693] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 647.876506][T25716] tipc: Started in network mode [ 647.876529][T25716] tipc: Node identity ffff1083, cluster identity 4711 [ 647.876543][T25716] tipc: Node number set to 4294905987 [ 647.887721][T25716] tipc: Cannot configure node identity twice [ 648.154078][T25721] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 648.398822][T25735] netlink: 'syz.0.4525': attribute type 2 has an invalid length. [ 648.428214][T25735] þ: entered promiscuous mode [ 648.612740][T25744] ip_tables: iptables: counters copy to user failed while replacing table [ 648.616269][T25744] netlink: 'syz.5.4527': attribute type 1 has an invalid length. [ 648.674737][T25744] bond6: entered promiscuous mode [ 648.674857][T25744] bond6: entered allmulticast mode [ 648.675245][T25744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 648.801059][T25751] smc: net device lo applied user defined pnetid SYZ0 [ 648.871943][T25753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.091217][T25769] syzkaller0: entered promiscuous mode [ 649.091241][T25769] syzkaller0: entered allmulticast mode [ 649.150253][T25772] netlink: 'syz.5.4535': attribute type 10 has an invalid length. [ 649.174876][T25772] team0: Port device dummy0 added [ 649.429066][T25785] netlink: 'syz.2.4540': attribute type 1 has an invalid length. [ 649.443094][T25785] netlink: 'syz.2.4540': attribute type 1 has an invalid length. [ 649.794303][T25798] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 649.795318][T25798] bond7 (unregistering): Released all slaves [ 650.031893][T25822] ip_tables: iptables: counters copy to user failed while replacing table [ 650.062084][T25816] netlink: 'syz.5.4547': attribute type 10 has an invalid length. [ 650.079504][T25816] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.109808][T25816] bond0: (slave team0): Enslaving as an active interface with an up link [ 650.453949][T25840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.610090][T25850] ip_tables: iptables: counters copy to user failed while replacing table [ 651.490294][T25870] __nla_validate_parse: 19 callbacks suppressed [ 651.490315][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4561'. [ 651.690065][T25880] sctp: [Deprecated]: syz.0.4563 (pid 25880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 651.690065][T25880] Use struct sctp_sack_info instead [ 651.986864][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 651.987727][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 652.042867][T25887] wlan1 speed is unknown, defaulting to 1000 [ 652.064247][T25891] netlink: 'syz.2.4568': attribute type 1 has an invalid length. [ 652.064268][T25891] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.4568'. [ 652.473102][T25906] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 652.474388][T25906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.517160][T25906] openvswitch: netlink: Message has 4 unknown bytes. [ 652.517890][T25906] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4572'. [ 653.273810][T25932] tc_dump_action: action bad kind [ 669.736965][T10338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.850706][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 676.121057][ T6842] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.605004][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.996969][T25946] syzkaller0: left promiscuous mode [ 683.996994][T25946] syzkaller0: left allmulticast mode [ 684.078109][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.085052][T25954] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4588'. [ 684.097276][T25954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4588'. [ 684.113661][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.116185][T25954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4588'. [ 684.118171][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.119140][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.119773][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.202154][T25961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4589'. [ 684.202302][T25961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4589'. [ 684.642778][T25977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4594'. [ 684.732661][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 684.984659][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'. [ 685.299171][T25955] wlan1 speed is unknown, defaulting to 1000 [ 685.636297][T26023] netlink: 'syz.0.4606': attribute type 2 has an invalid length. [ 685.636321][T26023] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4606'. [ 685.684436][T26025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4605'. [ 685.739447][T26027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.776853][T26036] netlink: 'syz.1.4605': attribute type 8 has an invalid length. [ 686.280944][T25955] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.281106][T25955] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.281233][T25955] bridge_slave_0: entered allmulticast mode [ 686.281447][ T5623] Bluetooth: hci7: command tx timeout [ 686.282839][T25955] bridge_slave_0: entered promiscuous mode [ 686.286677][T25955] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.286935][T25955] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.287061][T25955] bridge_slave_1: entered allmulticast mode [ 686.288781][T25955] bridge_slave_1: entered promiscuous mode [ 686.325834][T25955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.332186][T25955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.496806][T25955] team0: Port device team_slave_0 added [ 686.517360][T25955] team0: Port device team_slave_1 added [ 686.743010][T25955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.743028][T25955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.743055][T25955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.748104][T25955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.748120][T25955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.748146][T25955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.041145][T26074] nft_compat: unsupported protocol 1 [ 687.133796][T25955] hsr_slave_0: entered promiscuous mode [ 687.134790][T25955] hsr_slave_1: entered promiscuous mode [ 687.135471][T25955] debugfs: 'hsr0' already exists in 'hsr' [ 687.135491][T25955] Cannot create hsr debugfs directory [ 687.154304][T26079] nbd: must specify a size in bytes for the device [ 687.327871][T26086] ip6gretap0: left promiscuous mode [ 687.348432][T26086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.350151][T26086] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.378298][T26086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.437280][T26099] set match dimension is over the limit! [ 687.576913][T26086] veth1_vlan: left promiscuous mode [ 687.578106][T26086] veth0_vlan: left promiscuous mode [ 687.579819][T26086] veth0_vlan: entered promiscuous mode [ 687.601382][T26086] veth1_vlan: entered promiscuous mode [ 687.623664][T26086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.629917][T26086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 687.647549][T26086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 687.658846][T26086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.668503][T26086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 687.683187][T26086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.698551][T26086] 8021q: adding VLAN 0 to HW filter on device eth0 [ 687.699907][T26086] 8021q: adding VLAN 0 to HW filter on device eth1 [ 687.715992][T26086] 8021q: adding VLAN 0 to HW filter on device eth2 [ 687.717322][T26086] 8021q: adding VLAN 0 to HW filter on device eth3 [ 687.719947][T26086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.754639][T26086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.759273][T26086] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 687.782829][T26111] team0: entered allmulticast mode [ 687.782858][T26111] team_slave_0: entered allmulticast mode [ 687.782874][T26111] team_slave_1: entered allmulticast mode [ 687.935068][T26115] netlink: 'syz.2.4625': attribute type 21 has an invalid length. [ 688.057659][T10338] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.057694][T10338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.362368][ T5623] Bluetooth: hci7: command tx timeout [ 688.422245][ T7948] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.422279][ T7948] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.423076][ T134] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.423104][ T134] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.423154][ T134] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.423178][ T134] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.426032][T26138] syzkaller1: entered promiscuous mode [ 688.426052][T26138] syzkaller1: entered allmulticast mode [ 688.872859][T26154] netlink: 'syz.1.4631': attribute type 2 has an invalid length. [ 688.913111][ C1] IPv6: veth0_vlan: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa30 used by aa:aa:aa:aa:aa:30 detected! [ 688.990684][T10338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.990706][T10338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.098279][T26162] __nla_validate_parse: 9 callbacks suppressed [ 689.098316][T26162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4629'. [ 689.098346][T26162] netlink: 'syz.5.4629': attribute type 30 has an invalid length. [ 689.121553][T26166] x_tables: duplicate underflow at hook 1 [ 689.168974][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4629'. [ 689.169009][T26169] netlink: 'syz.5.4629': attribute type 30 has an invalid length. [ 689.335594][T26165] tipc: Started in network mode [ 689.335618][T26165] tipc: Node identity ffff1083, cluster identity 4711 [ 689.335632][T26165] tipc: Node number set to 4294905987 [ 689.335841][T26165] tipc: Cannot configure node identity twice [ 689.352753][T26162] vxlan1: entered promiscuous mode [ 689.352774][T26162] vxlan1: entered allmulticast mode [ 689.418345][T25955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 689.432098][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.456530][T26169] vxlan1: entered promiscuous mode [ 689.456552][T26169] vxlan1: entered allmulticast mode [ 689.478823][T25955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 689.497854][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.528266][T25955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 689.544341][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.549406][T25955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 689.573122][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.815882][T25955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.816295][T26193] syzkaller0: entered promiscuous mode [ 689.816314][T26193] syzkaller0: entered allmulticast mode [ 689.940013][T25955] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.959417][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.959527][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.997506][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.997587][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.378175][T26212] xt_CT: No such helper "snmp_trap" [ 690.442322][ T5623] Bluetooth: hci7: command tx timeout [ 691.317194][T25955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.395149][T26232] netlink: 'syz.2.4647': attribute type 1 has an invalid length. [ 691.684742][T26249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4646'. [ 691.745421][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4646'. [ 691.814177][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4646'. [ 691.814201][T26249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4646'. [ 691.984765][T26253] IPVS: set_ctl: invalid protocol: 98 172.30.0.3:20001 [ 692.193483][T25955] veth0_vlan: entered promiscuous mode [ 692.257519][T25955] veth1_vlan: entered promiscuous mode [ 692.377253][T25955] veth0_macvtap: entered promiscuous mode [ 692.406947][T25955] veth1_macvtap: entered promiscuous mode [ 692.455203][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4656'. [ 692.496175][T26280] ip6gre1: entered promiscuous mode [ 692.496197][T26280] ip6gre1: entered allmulticast mode [ 692.518106][T25955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.520901][ T5623] Bluetooth: hci7: command tx timeout [ 692.539121][T25955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.591377][T10375] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.591539][T10375] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.591574][T10375] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.678864][T26289] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 692.696084][T10338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.814582][T26292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4658'. [ 693.073583][T26307] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4660'. [ 693.174284][T26261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.174306][T26261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.197539][T26296] vlan4: entered promiscuous mode [ 693.197576][T26296] bridge0: entered promiscuous mode [ 693.406477][T10375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.406499][T10375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.897287][T26378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.449227][T26416] netlink: 'syz.0.4682': attribute type 1 has an invalid length. [ 695.449250][T26416] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4682'. [ 695.449266][T26416] netlink: 'syz.0.4682': attribute type 1 has an invalid length. [ 695.584715][T26416] netlink: 'syz.0.4682': attribute type 21 has an invalid length. [ 695.584745][T26416] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4682'. [ 695.584763][T26416] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.584840][T26416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 695.584851][T26416] IPv6: NLM_F_CREATE should be set when creating new route [ 695.584888][T26416] IPv6: NLM_F_CREATE should be set when creating new route [ 695.585143][T26416] IPv6: NLM_F_CREATE should be set when creating new route [ 695.848305][T26438] netlink: 'syz.5.4691': attribute type 1 has an invalid length. [ 695.919160][T26438] bond7: entered promiscuous mode [ 695.919463][T26438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.956232][T26435] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 696.374998][T26455] netlink: 'syz.0.4695': attribute type 1 has an invalid length. [ 696.375021][T26455] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4695'. [ 696.375036][T26455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4695'. [ 696.566664][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4697'. [ 699.164261][ T31] INFO: task syz.3.3565:21642 blocked for more than 143 seconds. [ 699.164288][ T31] Not tainted syzkaller #0 [ 699.164300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.164310][ T31] task:syz.3.3565 state:D stack:26760 pid:21642 tgid:21641 ppid:20409 task_flags:0x400140 flags:0x00080002 [ 699.164367][ T31] Call Trace: [ 699.164375][ T31] [ 699.164389][ T31] __schedule+0x17db/0x58f0 [ 699.164447][ T31] ? __pfx___schedule+0x10/0x10 [ 699.164482][ T31] ? schedule+0x90/0x2b0 [ 699.164510][ T31] schedule+0x164/0x2b0 [ 699.164537][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.164562][ T31] __mutex_lock+0x7c1/0x1550 [ 699.164594][ T31] ? __mutex_lock+0x5d4/0x1550 [ 699.164626][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 699.164756][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.164771][ T31] ? net_generic+0x1e/0x240 [ 699.164787][ T31] ? net_generic+0x1e/0x240 [ 699.164799][ T31] ? net_generic+0x1e/0x240 [ 699.164810][ T31] ? net_generic+0x1e/0x240 [ 699.164825][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 699.164840][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 699.164888][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 699.164911][ T31] ? bpf_lsm_capable+0x9/0x20 [ 699.164924][ T31] ? security_capable+0x7e/0x2c0 [ 699.164993][ T31] genl_rcv_msg+0x614/0x7a0 [ 699.165023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.165047][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 699.165087][ T31] netlink_rcv_skb+0x226/0x4a0 [ 699.165103][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.165118][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.165137][ T31] ? down_read+0x2be/0x330 [ 699.165181][ T31] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 699.165197][ T31] genl_rcv+0x28/0x40 [ 699.165210][ T31] netlink_unicast+0x7bd/0x940 [ 699.165232][ T31] netlink_sendmsg+0x813/0xb40 [ 699.165249][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.165265][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 699.165281][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.165291][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 699.165306][ T31] ____sys_sendmsg+0x54e/0x850 [ 699.165324][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.165347][ T31] ? import_iovec+0x73/0xa0 [ 699.165387][ T31] ___sys_sendmsg+0x2a5/0x360 [ 699.165401][ T31] ? __lock_acquire+0x747/0x2de0 [ 699.165415][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.165432][ T31] ? futex_wake+0x51b/0x5f0 [ 699.165464][ T31] ? __fget_files+0x2a/0x420 [ 699.165479][ T31] ? __fget_files+0x3a2/0x420 [ 699.165498][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 699.165515][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.165541][ T31] do_syscall_64+0x166/0x520 [ 699.165557][ T31] ? trace_irq_disable+0x3b/0x140 [ 699.165569][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.165580][ T31] ? clear_bhb_loop+0x70/0xc0 [ 699.165594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.165605][ T31] RIP: 0033:0x7f41cff9e199 [ 699.165616][ T31] RSP: 002b:00007f41d0e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.165629][ T31] RAX: ffffffffffffffda RBX: 00007f41d0225fa0 RCX: 00007f41cff9e199 [ 699.165637][ T31] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000089 [ 699.165645][ T31] RBP: 00007f41d00358e0 R08: 0000000000000000 R09: 0000000000000000 [ 699.165652][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.165659][ T31] R13: 00007f41d0226038 R14: 00007f41d0225fa0 R15: 00007fff4c7bc4b8 [ 699.165683][ T31] [ 699.165721][ T31] [ 699.165721][ T31] Showing all locks held in the system: [ 699.165728][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 699.165737][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 699.165834][ T31] locks held by getty/5371: 2, on CPU#0: [ 699.165842][ T31] #0: ffff88803574d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 699.165919][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 699.165978][ T31] locks held by kworker/u8:51/10338: 3, on CPU#1: [ 699.165992][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 699.166042][ T31] #1: ffffc9000357fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 699.166093][ T31] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 699.166152][ T31] locks held by syz.4.3563/21634: 2, on CPU#1: [ 699.166161][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.166191][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 699.166219][ T31] locks held by syz.3.3565/21642: 2, on CPU#0: [ 699.166227][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.166253][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 699.166283][ T31] locks held by syz.6.4490/25589: 2, on CPU#1: [ 699.166290][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.166316][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 699.166346][ T31] locks held by syz.1.4692/26443: 2, on CPU#0: [ 699.166354][ T31] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 699.166411][ T31] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 699.166441][ T31] locks held by syz.0.4695/26450: 2, on CPU#0: [ 699.166449][ T31] #0: ffff8880765bfb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 699.166477][ T31] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x9f0 [ 699.166549][ T31] locks held by syz.7.4696/26461: 1, on CPU#0: [ 699.166557][ T31] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 699.166607][ T31] locks held by syz.5.4697/26463: 1, on CPU#1: [ 699.166615][ T31] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 699.166662][ T31] locks held by syz.5.4697/26465: 1, on CPU#1: [ 699.166677][ T31] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 699.166705][ T31] locks held by syz.5.4697/26467: 2, on CPU#0: [ 699.166713][ T31] #0: ffffffff8f999668 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 699.166743][ T31] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 699.166770][ T31] locks held by syz.2.4698/26472: 2, on CPU#0: [ 699.166778][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.166804][ T31] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 699.166885][ T31] [ 699.166891][ T31] ============================================= [ 699.166891][ T31] [ 699.166905][ T31] NMI backtrace for cpu 1 [ 699.166918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 699.166938][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.166949][ T31] Call Trace: [ 699.166957][ T31] [ 699.166966][ T31] dump_stack_lvl+0xe8/0x150 [ 699.166994][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 699.167045][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 699.167075][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 699.167099][ T31] sys_info+0x135/0x170 [ 699.167118][ T31] watchdog+0xfd7/0x1030 [ 699.167145][ T31] ? watchdog+0x1c7/0x1030 [ 699.167170][ T31] kthread+0x38b/0x480 [ 699.167186][ T31] ? __pfx_watchdog+0x10/0x10 [ 699.167203][ T31] ? __pfx_kthread+0x10/0x10 [ 699.167221][ T31] ret_from_fork+0x514/0xb70 [ 699.167254][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 699.167283][ T31] ? __switch_to+0xc89/0x1420 [ 699.167313][ T31] ? __pfx_kthread+0x10/0x10 [ 699.167333][ T31] ret_from_fork_asm+0x1a/0x30 [ 699.167377][ T31] [ 699.167386][ T31] Sending NMI from CPU 1 to CPUs 0: [ 699.167422][ C0] NMI backtrace for cpu 0 [ 699.167437][ C0] CPU: 0 UID: 0 PID: 26443 Comm: syz.1.4692 Not tainted syzkaller #0 PREEMPT(full) [ 699.167459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.167470][ C0] RIP: 0010:zap_class+0x208/0x330 [ 699.167495][ C0] Code: 3e 7e 3a 03 49 89 c7 49 63 c7 48 3d 00 00 10 00 0f 83 4e fe ff ff 48 6b c8 38 4c 8d a1 f0 99 1d 97 4c 39 b1 00 9a 1d 97 74 07 <4d> 39 74 24 18 75 bc 48 0f b3 05 a9 d8 77 15 48 ff 0d ea 53 f6 12 [ 699.167513][ C0] RSP: 0018:ffffc90005eff920 EFLAGS: 00000087 [ 699.167530][ C0] RAX: 0000000000005e98 RBX: ffff8880432f7268 RCX: 000000000014b140 [ 699.167544][ C0] RDX: 0000000000005e98 RSI: 0000000000100000 RDI: ffffffff971b99f0 [ 699.167557][ C0] RBP: ffff88807a3f5dc0 R08: ffffffff81b0e1e8 R09: 0000000000000000 [ 699.167571][ C0] R10: dffffc0000000000 R11: fffffbfff20f3410 R12: ffffffff97324b30 [ 699.167586][ C0] R13: ffff8880432f7269 R14: ffffffff9446f188 R15: 0000000000005e98 [ 699.167599][ C0] FS: 0000555585452500(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 699.167616][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.167629][ C0] CR2: 00005643cb38fa38 CR3: 000000003cea8000 CR4: 00000000003526f0 [ 699.167646][ C0] Call Trace: [ 699.167654][ C0] [ 699.167663][ C0] lockdep_unregister_key+0x1c3/0x350 [ 699.167685][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 699.167783][ C0] __qdisc_destroy+0x1ab/0x470 [ 699.167810][ C0] dev_shutdown+0x92/0x450 [ 699.167828][ C0] unregister_netdevice_many_notify+0xe32/0x1d80 [ 699.167872][ C0] ? register_lock_class+0x31/0x2e0 [ 699.167893][ C0] ? __lock_acquire+0x747/0x2de0 [ 699.167912][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 699.167934][ C0] ? skb_queue_purge_reason+0x228/0x3a0 [ 699.167979][ C0] ? skb_queue_purge_reason+0x228/0x3a0 [ 699.168002][ C0] unregister_netdevice_queue+0x2f5/0x340 [ 699.168054][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 699.168087][ C0] __tun_detach+0x1074/0x1900 [ 699.168117][ C0] tun_chr_close+0x10a/0x1c0 [ 699.168136][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 699.168155][ C0] __fput+0x418/0xa50 [ 699.168187][ C0] task_work_run+0x1d9/0x270 [ 699.168207][ C0] ? __pfx_task_work_run+0x10/0x10 [ 699.168230][ C0] exit_to_user_mode_loop+0x204/0x770 [ 699.168249][ C0] ? rcu_is_watching+0x16/0xb0 [ 699.168273][ C0] do_syscall_64+0x328/0x520 [ 699.168299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.168318][ C0] ? clear_bhb_loop+0x70/0xc0 [ 699.168338][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.168356][ C0] RIP: 0033:0x7f0e28b9e199 [ 699.168372][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.168389][ C0] RSP: 002b:00007ffcb6287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 699.168408][ C0] RAX: 0000000000000000 RBX: 00007f0e28e27da0 RCX: 00007f0e28b9e199 [ 699.168421][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 699.168434][ C0] RBP: 00007f0e28e27da0 R08: 00007f0e28e26128 R09: 0000000000000000 [ 699.168447][ C0] R10: 00000000003ffbd8 R11: 0000000000000246 R12: 00000000000aa1ef [ 699.168460][ C0] R13: 00007f0e28e2618c R14: 00000000000aa00d R15: 00007f0e28e26180 [ 699.168481][ C0] [ 699.169546][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 700.261330][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 700.270435][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.280489][ T31] Call Trace: [ 700.283769][ T31] [ 700.286695][ T31] vpanic+0x56d/0xa60 [ 700.290680][ T31] ? __pfx___schedule+0x10/0x10 [ 700.295539][ T31] ? __pfx_vpanic+0x10/0x10 [ 700.300044][ T31] panic+0xc5/0xd0 [ 700.303770][ T31] ? __pfx_panic+0x10/0x10 [ 700.308185][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 700.313643][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 700.319011][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 700.325166][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 700.331324][ T31] watchdog+0x1030/0x1030 [ 700.335657][ T31] ? watchdog+0x1c7/0x1030 [ 700.340075][ T31] kthread+0x38b/0x480 [ 700.344143][ T31] ? __pfx_watchdog+0x10/0x10 [ 700.348811][ T31] ? __pfx_kthread+0x10/0x10 [ 700.353405][ T31] ret_from_fork+0x514/0xb70 [ 700.358011][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 700.363131][ T31] ? __switch_to+0xc89/0x1420 [ 700.367823][ T31] ? __pfx_kthread+0x10/0x10 [ 700.372419][ T31] ret_from_fork_asm+0x1a/0x30 [ 700.377204][ T31] [ 700.380466][ T31] Kernel Offset: disabled [ 700.384784][ T31] Rebooting in 86400 seconds..