last executing test programs: 4m40.649728188s ago: executing program 1 (id=702): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x28, 0x3, 0x2, 0xfffff03c}, {0x6, 0x7, 0x2, 0x9}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=0xba9c, 0x4) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000880)={{0x0, 0x7ff}, 0x100, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfd}, {0x16}]}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0x4}, 0x38) bind$inet(r5, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x4) write(r0, 0x0, 0x0) 4m38.858789999s ago: executing program 1 (id=716): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x6, 0x2, 0x4, 0x7fffffffffffffff, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r13, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r13, 0x1}, 0x20) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x2, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfffffffffffffedb}], 0x1}, 0x4000045) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000fbfe3b848984d896b2ed24741cdbdf25208e970b916331ff8be38d21e0acdf350000003ffc7e9aa698a949d995707f41c0746f44a099b8258f70e9cbbb9d2b103afc85959b6b4ebf34289fbbf95d7032d67fb25aa0feb95fdd58013bd9560b8bef42841c58bef9aad249c1921cc92e9168f4c451e1888da18c6e1ad54f73511db4"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) 4m38.190036684s ago: executing program 1 (id=719): socket(0x10, 0x2, 0x2000006) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000f40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000300)=0x2a0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c0008df0004000000000200000100000000020001000000000005000a337fffffff030005000000000002000000ac1414aa29d655470000000002000800080000003400"/92], 0x60}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0xffff}, 0xfffffee7) listen(r7, 0x9) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6", 0x54}], 0x1) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r9) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r10, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4m36.538388161s ago: executing program 1 (id=742): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYBLOB="060000000000080007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000b2"], 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 4m35.235540567s ago: executing program 1 (id=747): socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x8001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x9, 0x0, 0x0, 0x6}, 0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async, rerun: 32) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80d0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f0000001801000020786c25000000000020f8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a01000000000a010400000000000000000500000a0900010073797a30000000002c000000030a010400000000000000000a00000a0900010073797a30000000000900030073797a30000000006c000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000040000480240001800b00010074756e6e65ae0000f5ff0280080001400000800108000240000000091800018008000100667764000c0002800800014000000009140000001100010000000000000000000500000a"], 0xe0}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r0, @ANYBLOB="0400015f132847c6c0502bbd7000ffdbdf252b00000009000300", @ANYRES32, @ANYBLOB="0c009900070000007100000005001901070000000800a000010000000400cc0004004600a8002a0082460507d00104000008021100000000000000050000000e000000040008021100000107000000040802110000000100000000080211000000090000000408021100000007000000055afa0278adb11966aa0c81ad5012494c460e9ae7705c882b78b55bbe746d24dfad50f0571c7d3c2dc468066a9d77410a7716b97ccffd257ba4f3b72dd156ba5a60be073c0163b950ea8918475032ef4c00c69b5309aba34de5f09e0800a00001000000050018012200000012007e00e05026567e5785bd0588aceb9c"], 0x10c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000051) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 4m32.608321648s ago: executing program 1 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000240)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80800) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, 0x0) sendto$x25(r1, &(0x7f00000002c0)="48051590ffe2b502", 0x8, 0x48010, &(0x7f0000000300), 0x12) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd29, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x200000c0) 4m17.366584294s ago: executing program 32 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000240)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80800) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, 0x0) sendto$x25(r1, &(0x7f00000002c0)="48051590ffe2b502", 0x8, 0x48010, &(0x7f0000000300), 0x12) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd29, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x200000c0) 2m39.068039956s ago: executing program 2 (id=1331): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600101000048110042d400000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYRES16], 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x4e21, @private=0xa010102}}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xfff8, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) getpid() (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) (async) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600101000048110042d400000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYRES16], 0x48}}, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x4e21, @private=0xa010102}}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xfff8, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) 2m38.733800367s ago: executing program 2 (id=1335): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r5, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) bind$inet6(r4, &(0x7f0000000880)={0xa, 0x5000, 0x0, @local}, 0x1c) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x5000, 0x0, @remote}, 0x1c) write(r4, &(0x7f0000000900)="001122334455", 0x6) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000640)='X', 0x1, 0x20004000, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0xf8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4, 0x43, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000180)=0x410001, 0x4) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @remote, 0xe}, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}], 0x78) 2m38.391059595s ago: executing program 2 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) 2m37.75335509s ago: executing program 2 (id=1344): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c17ab1025ce32b1301ff8ba83303e82c29bc", 0x13}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@call={0x27, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) setsockopt(r2, 0x84, 0x9, &(0x7f00000001c0)="020000000980ffff", 0x8) 2m37.386553646s ago: executing program 2 (id=1347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r0, 0xc0045878) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20018001}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x20044084, 0x0, 0x0) 2m36.44181359s ago: executing program 2 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'erspan0\x00', 0x100}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43010000000000f6001680140001801000020004000000440f00000000000014000300626f6e645f736c6176655f3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 2m33.152625153s ago: executing program 0 (id=1385): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x39, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x21, 0x0, 0x0, 0x7, 0x24, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7fff}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r4, 0x20, &(0x7f0000000740)={&(0x7f0000000540)=""/246, 0xf6, 0x0, &(0x7f0000000640)=""/206, 0xce}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x57, &(0x7f0000000380)=""/87, 0x41100, 0x50, '\x00', r6, @flow_dissector=0x11, r4, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r9, 0x0, &(0x7f0000000800)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x0, 0x10, 0x9}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pI4 \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x5, 0x200, 0xfffff000, 0x804, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @call={0x85, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000500)=""/62, 0x41100, 0x64, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x5, 0xfffffff8, 0x10001}, 0x10, 0x14aac, r9, 0x4, &(0x7f0000000740)=[r11, r12, r13, r14], &(0x7f0000000780)=[{0x4, 0x1, 0xa, 0x8}, {0x1, 0x4, 0x7, 0x7}, {0x1, 0x5, 0xb, 0xa}, {0x4, 0x2, 0xd, 0x9}], 0x10, 0x8}, 0x94) 2m32.616301812s ago: executing program 0 (id=1387): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b14010027bd7000ecdbdf2507000700"], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x1004) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006a80)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000400)=0x4, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x38, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)={0x26c, r5, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PEERS={0x174, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x92}]}, {0x160, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x9, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, @WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xbcb, @rand_addr=' \x01\x00', 0xff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d10592b131da2587f01429e72a7ffc430e5eb36199700cfd5008072d0676828"}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4c000}, 0x814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000000400000002000000000000002c920daf2e770d0c9036ca78dd7931bd612f9d7c50773683d149f3161f99dd3d4284dcb422b737305c49a5029c9c36351d309bbe5524ec7773b2d39ccc809abdb55ed5e4ca30e9b806ee27a462f06997b629477eb582885655aaf0ad25b893c72c2297399fd5d173b2c8e341940ca357e972d059683c50a4ec1656975241ad423cc1094d252d3546e08297539a2a05ee7e2aa572a9a8ca5ff80f693b89fbe64245a73da891d1360dcb5903ad88", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000400500001018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000b2000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) 2m31.673258912s ago: executing program 0 (id=1394): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250e0000002c00028008000800060080000800030000000000080006000001000000000f00050000000700060009000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000780), &(0x7f0000000740)=r1}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000580), 0x0}, 0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x2400c041) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0x2f0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x6, 0xd80, 0x1d, 0x14c, 0xfffffff4, 0xf, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x5, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2m31.422307677s ago: executing program 0 (id=1398): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10006) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x20001, 0x10000, 0x1, 0x800}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) shutdown(r1, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'netpci0\x00', 'vcan0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000002c6c14000000000000001001000002"], 0x2c}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200400002700090026bd0600fddbdf25080000b88cc2e30067"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8000000a0072149fc12e9ea6b8eefdadc98bbb658c6a68cebcc05ca2387b5fdbb64d67b71e1361f95e08bdc5ea98761ed2b18c62173a9da7208e2919c80ff7e0b86755158", @ANYRES16=r6, @ANYBLOB="20002cbd7000060000006800000008000300", @ANYRES32=r7, @ANYBLOB="2800c7000802050008040304010242060c000604db01050601048e0106020d075ac0255e79cf5fb72000c70009040602fc008107a403230301000101080307060a1c8d97e4ab93b11600c700060004050404c40205053644f122e752ab7000002c00c7000601040007040103ae060803bb050202000508070204fb0307007ffa01040504eafcb7b142d413cf"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x20005044) 2m30.393798388s ago: executing program 0 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x23}, @TCA_CAKE_RAW={0x8, 0xc, 0x2e66}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x23}, @TCA_CAKE_RAW={0x8, 0xc, 0x2e66}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x4c}}, 0x0) 2m30.291443804s ago: executing program 0 (id=1411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d06001400128009000100766574680000000004000280080020000900000008001f0004"], 0x44}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x10}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x10044090) 2m21.383385781s ago: executing program 33 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'erspan0\x00', 0x100}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43010000000000f6001680140001801000020004000000440f00000000000014000300626f6e645f736c6176655f3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 2m15.207036694s ago: executing program 34 (id=1411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d06001400128009000100766574680000000004000280080020000900000008001f0004"], 0x44}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x10}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x10044090) 1m31.524719227s ago: executing program 4 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="88e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m28.589990782s ago: executing program 4 (id=1948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)={0x1c, r4, 0xf03, 0x70bd2a, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c00000004000000010000840100000017000000020000000000000004000000000000010500000020000000006100612e616161610061007e7088ec454fd12dd40ebc972b2ff4e7c5bc75630b42d1"], 0x0, 0x4c}, 0x28) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = epoll_create(0x7d95) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x80002028}) unshare(0x22020600) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r10, 0xfffffdc8, &(0x7f0000000340)}, 0xc) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r7, 0x7866) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x300, 0x0, 0x0, 0x0, 0xf9b0, &(0x7f00000001c0)='veth0_to_bond\x00', 0x1, 0x2, 0x2}) shutdown(r7, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f00000003c0)='geneve1\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r5, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) 1m27.488385485s ago: executing program 4 (id=1960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$kcm(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r5) syz_genetlink_get_family_id$mptcp(0x0, r4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="572a8946d65312a0f7e72b543ee351", @ANYRES16=r7, @ANYBLOB="000328bd7000fbdbdf250f000000500001800700060072720000080005000200000007000600666f0000070006006c63000014000300fe80000000000000000000000000003d0c0007000c000000150000000c0007002d0000001100000034000180080005000200000007000600666f000007000600666f00000800090040000000080005000200000008000b00736970000c000180060001000200000040000180080009001800000008000b00736970000800050003000000060004004e2100001400030064010102000000000000000000000000080005000200000008000400050000000800050000020000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="7e39d9d4648b0266db41a730292af0be372cc6be419b4366131b9172e88d0ec3ef6a8b4863470f0923d2a21f1bb70c0b08ea5702eb556931dba532264d0fef4095cdbd43e9f01f6ba27bdb57c2b882565c7560a0e0732124d1cd4cafb981b0de7bfb9b82d3bd060f8eca3c28962bb6ad70df48284efdce1bb79d1f9441542cd4", &(0x7f0000000540)=""/10}, 0x20) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6e, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}]}}]}, 0x48}}, 0xc840) (async) sendmmsg$inet(r0, &(0x7f0000000180), 0x0, 0x4004001) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970", @ANYRESDEC, @ANYRESHEX=r10, @ANYRESDEC=r3], 0x58}}, 0x0) (async) socket$inet6_sctp(0xa, 0x0, 0x84) 1m26.721528475s ago: executing program 4 (id=1968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@flushpolicy={0x38, 0x12, 0x105, 0x6, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x38}, 0x1, 0xff80}, 0x20040840) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x4bb3) (async) listen(0xffffffffffffffff, 0x4bb3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0xff7f, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000540), &(0x7f0000000740)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m26.397341424s ago: executing program 4 (id=1972): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x0, 0x0, 0x148, 0x0, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xfeffffff, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r1 = socket(0x23, 0x1, 0x6) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x9, 0x7, 0x0, 0xffffffff, 0x0, 0x7]}}, 0x5c) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000180), 0x0) sendmsg$key(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0xf, 0x803, 0x2) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc}], 0x1, 0x800) sendmsg(r8, &(0x7f0000000580)={&(0x7f0000000240)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="38795b93b5b3fde900c35b938024ba58b4e34d34c8b6c4c616320257a7f035b2424c7517495569047c3daa70e2f9c3a5283f626f2dc71553df4c863e25669531f8f4964ad3f2c341232a18164c5a00269a17188eef509c5a9a6acdd54a9e8f93544ffd323a6f6d1e030ed6c700b40bbb07cb6009285dbb784b39a95b897e4f337e7bef0c4c270f123b1e8ca8c2f14243a715b0d04d1478fb393063e009aeba36db2db2e27c640ab773b57d346638007fba2e26bf2db2961b0cdf49dfc4f2e9fac7ef8a3304c137adb01e7858c59cfe733a9b8e81c86e5a43971ca97e18f54d9684e2f560dbab45e8e687b7b334", 0xed}], 0x1}, 0x1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x0) bind$rds(r10, &(0x7f00000000c0)={0xa}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) 1m25.679805295s ago: executing program 4 (id=1982): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m12.66708463s ago: executing program 6 (id=2083): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000080)=@random="67ef20", 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x24, 0x9, 0x0, 0x18fcffff}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0xfff9}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.515548374s ago: executing program 6 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xe811}, 0x6000000) 1m12.365166938s ago: executing program 6 (id=2088): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000fa000000080045000c00142e5a166f3c01a20890a65a223a29ee57f438a7417515fd9da264eeae044aa39c0d178d3cea64e603003fe1a1f5ed73000002005cb6626a0000000024c8aa56d08ac80747125a888e", @ANYRES64=r2, @ANYRES16=r3], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000900020073797a300000000011000300686173683a69702ced61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000ba53b090ef852a8b240300b043fa000000000000c70f88dd", @ANYRES64=r6, @ANYBLOB="05674202548d45824f84003720000000200012800b000163726964676500681ab3490d1374c200100002800c00200038de74c4193ac87ff2ed5a5a019144d95375cf55f96a470f763db02cd9afa92868a23a32bc7145444fa345f412256ab56fe471d8421d7b4c8e98bdd59aefad8a70d95f579f37eb0fae453b141347d0e5a3cfdb9220e491a12152b841bc3d65a550f0804e54e1619b29cce0"], 0x40}, 0x1, 0x0, 0x0, 0x400c800}, 0x4020) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=""/21, 0x1f}, 0x2}], 0x1, 0x45833af92e4b39fe, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 1m11.356119565s ago: executing program 6 (id=2094): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x3, 0x71}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async, rerun: 64) r3 = socket$unix(0x1, 0x3, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x4e20, @remote}}) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r5, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x44}}, 0x0) (async, rerun: 32) r6 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00af4514e55c92ae830000e3ffffff0059", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000008ff90850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) shutdown(r7, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0xd, 0x0, 0x4, 0x7fff, 0x3, 0x708, 0x0, 0xe7ad, r10}, &(0x7f0000000080)=0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd28, 0x2, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 1m10.56271329s ago: executing program 35 (id=1982): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m9.795302493s ago: executing program 6 (id=2101): unshare(0x2a020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000040)) 1m9.332471358s ago: executing program 6 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 54.504364324s ago: executing program 36 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 22.953994605s ago: executing program 9 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084023004000000000402000304"], 0x30}, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084023004000000000402000304"], 0x30}, 0x40) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) 22.749701278s ago: executing program 9 (id=2446): socket(0x18, 0x80000, 0x1) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x8000800) (async) accept4(r0, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80, 0x80000) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, 0x10, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="31546afc"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 19.655611972s ago: executing program 9 (id=2460): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000009c0)={0x0, 0x3, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x9, 0xffff}, {0x0, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb57}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket(0x9, 0x803, 0xffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x100, 0x6, 0x80, 0x200}, 0x8) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20040084) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r8, @ANYBLOB="140002000000000000000000000000000000000114000100000000000000000000000000010000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) 19.213904516s ago: executing program 9 (id=2467): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4000041) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x0, 0x2}}) epoll_create1(0x80000) 19.00923248s ago: executing program 9 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r2, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0xa, 0x6, 0x3, 0x4, 0x1, 0xfff]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c2ec2e398506bca186aa0ea9dc1cb0d8"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4d2048bcf37b562013c1e9b6fb0c15cc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) close(r3) 18.701054485s ago: executing program 9 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe5, &(0x7f0000003100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "b54090", 0xaf, 0x3a, 0xff, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @loopback, [{0xe, 0x9, "9bc3442590a9f3d8cc0ed95a03cc5d88ab7af18d46f0bcb9a950750d1982f821a70210a5557dfcf315cade3535bff2b9207b2a109b0b4e59317e56684e661a57d011cffc2ade"}, {0x1f}, {0x22, 0x9, "039bd1d185d9454c68af8c86b456b98b1c8d60153e0cf9573b005a3ab808d26b825001de7f6aa5f45abb21c77b15e3c67f979e642254164ccc273e7f16d30f4bf7dcfe35ec45c8c013029e"}]}}}}}}, 0x0) connect$inet(r2, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, 0x0, 0x0) 3.657422631s ago: executing program 37 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe5, &(0x7f0000003100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "b54090", 0xaf, 0x3a, 0xff, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @loopback, [{0xe, 0x9, "9bc3442590a9f3d8cc0ed95a03cc5d88ab7af18d46f0bcb9a950750d1982f821a70210a5557dfcf315cade3535bff2b9207b2a109b0b4e59317e56684e661a57d011cffc2ade"}, {0x1f}, {0x22, 0x9, "039bd1d185d9454c68af8c86b456b98b1c8d60153e0cf9573b005a3ab808d26b825001de7f6aa5f45abb21c77b15e3c67f979e642254164ccc273e7f16d30f4bf7dcfe35ec45c8c013029e"}]}}}}}}, 0x0) connect$inet(r2, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, 0x0, 0x0) 3.176507786s ago: executing program 8 (id=2615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x14) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) close(r2) 2.971871635s ago: executing program 5 (id=2618): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, {0x0, 0x4, 0x0, 0x800a78a}, 0xfffffffe, 0x6e6bc0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0xb}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001800010000000000010000001d01000015000300000000000f0000008fa5be073cff296e020000001e0106000000fc"], 0x154}}, 0x20008030) 2.837648956s ago: executing program 3 (id=2619): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffb}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x101, 0x3, {{0x11, 0x4, 0x2, 0x33, 0x44, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x1b, 0x1b, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @loopback, @empty, @empty, @broadcast]}, @cipso={0x86, 0x14, 0x0, [{0x6, 0x8, "7ccfa35d3eb3"}, {0x0, 0x6, "701b8cb0"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x700, 0x40, 0x4, 0x9, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @empty, {[@generic={0x44, 0x5, "a00fdb"}]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@rand_addr, @local, 0x0}, &(0x7f0000000380)=0xc) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r8, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000801}, 0x20044004) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0xc11e}, &(0x7f00000006c0)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000780)={r11, 0xfffffffb, 0x1000, 0xfffffc00}, &(0x7f00000007c0)=0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 2.791816481s ago: executing program 5 (id=2620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth1\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0x80) unshare(0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005000100000014000000ff0a0100000000000000000002000a001400000011000100000000000000000002000a00"], 0xbc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b7000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000340)=r3) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xc0dc6d063983cf19, 0x3, 0x55}, 0x2c) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30f4b3e53b922bca}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x24004042}, 0x8c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffa8, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) getsockname$netlink(r5, &(0x7f0000000180), &(0x7f0000000500)=0xc) sendfile(r6, r5, &(0x7f00000000c0)=0x401, 0xc) 2.536670499s ago: executing program 3 (id=2622): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40010001, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) (async) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r1, r2, r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.420806086s ago: executing program 5 (id=2624): r0 = socket$kcm(0x2, 0xa, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x6c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x44, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x6}}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000007c0)=@generic={0x2, 0xa3d5}) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000200)=""/21, 0x15}], 0x4}, 0x10001) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3aea01a6}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x70, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x442}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0xffffffffffffff2d}, 0x1, 0x0, 0x0, 0x4040081}, 0x20004091) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0x40d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$kcm(0x2, 0xa, 0x2) 2.214572665s ago: executing program 3 (id=2625): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x1c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x6310, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x56, 0x0, 0x0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000004500)={'gretap0\x00', 0x0}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x2342, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0x5}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x85, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000095}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0xda, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x3, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0xd, 0x3, 0x3, 0x8, 0xc, 0x5, 0x6, 0xd, 0xc, 0x4, 0xc, 0x8, 0x3, 0xa, 0x2, 0x2], 0x1, [0x7f, 0x6, 0x401, 0xff01, 0xd71a, 0x401, 0x2, 0x24, 0x92, 0x8, 0xa, 0x4, 0x0, 0x8, 0xd006, 0x8], [0xffff, 0x2, 0x10, 0x2, 0xab4, 0x1, 0x4, 0x8, 0xc5c, 0x3, 0x3ff, 0x138, 0x5, 0x9, 0x8, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.214125686s ago: executing program 8 (id=2626): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x44}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080003400000000108000240"], 0xdc}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2.152593176s ago: executing program 7 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001008, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0x0, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0xb, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x3, 0x10000002, 0x0, 0x6, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x6, 0x1, 0x0, 0x4, 0x9, 0x4, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0xfffffffb, 0xfdffffff, 0x2, 0x1, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x4, 0x100, 0x4, 0x2, 0x40, 0xe, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 2.095837998s ago: executing program 8 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.997393002s ago: executing program 7 (id=2629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='syzkaller\x00', 0x185400, &(0x7f0000000080)={@align=0x7, {0x3, 0x4, 0xfffffff2, 0x1}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x27b}) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2b, 'net_prio'}, {0x2d, 'perf_event'}, {0x2b, 'net'}, {0x2d, 'io'}]}, 0x32) 1.995158177s ago: executing program 5 (id=2630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r4, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) 1.894285421s ago: executing program 8 (id=2631): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}], 0x1, 0x4000810) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x200, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x66580}}, 0x20}}, 0x24000841) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [], {0x95, 0x0, 0xb}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4100, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0x5, 0x800, 0x400, 0x0, 0x52, 0x20, 0x9}) 1.893337737s ago: executing program 3 (id=2632): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req3={0x80000001, 0x4, 0x84e, 0x8001, 0xffffffff, 0x1, 0x8439}, 0x1c) sendfile(r1, r1, 0x0, 0x2000000000000002) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a00f5"], 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.858122564s ago: executing program 8 (id=2633): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 1.826695328s ago: executing program 7 (id=2634): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000f7000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x5, 0x80000000, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x7800, 0x0, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x5, 0x80000000, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x7800, 0x0, 0x3}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20014005}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0xfb, 0x48c2, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) 1.626347814s ago: executing program 3 (id=2635): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x80d4, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x710}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x7, '\x00', r6, r7, 0x0, 0x0, 0x1}, 0x50) getuid() socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x80d4, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x710}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x7, '\x00', r6, r7, 0x0, 0x0, 0x1}, 0x50) (async) getuid() (async) 1.574855833s ago: executing program 7 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x1, 0x5, 0x9, 0xff, 0x12, 'syz1\x00', "83536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d3", "5d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265", [{0x800, 0x7, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x2}}, {0x74, 0x4, {0x2, 0x10001}}, {0x20, 0x8000, {0x0, 0x4}}, {0x64a, 0x8, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0xf2a8}}, {0x8000, 0x80, {0x2, 0x4c}}, {0x3, 0xe, {0x0, 0x8000}}, {0x7, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x38, 0x3, {0x0, 0x4}}, {0xd, 0x6, {0x1, 0x2a}}, {0x0, 0x2, {0x0, 0xb}}, {0x9, 0x50d, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x9}}, {0x9230, 0x3, {0x3, 0xe000000}}, {0x9, 0xa2bc, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x85}}, {0x4e, 0x2, {0x3, 0x6}}, {0x2, 0xf, {0x0, 0x5}}, {0x1, 0x4, {0x2}}, {0x6, 0x0, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x3}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x9, {0x0, 0x10000}}, {0x7, 0x5, {0x2, 0x1}}, {0xfa4, 0x3d, {0x0, 0xfad}}, {0x2, 0xb, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x1}}, {0x4, 0x800, {0x2, 0x8}}, {0x8001, 0xe, {0x0, 0xffff}}, {0x6d, 0x5, {0x3, 0x3}}, {0x5bd5, 0x2, {0x1, 0x6}}, {0x1, 0xa0e8, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x524}}, {0x2, 0x1b3, {0x3}}, {0xe6cb, 0x7, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020003000000080004"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', r2}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x9, 0x4, 0x7fff, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x1, 0x5, 0x9, 0xff, 0x12, 'syz1\x00', "83536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d3", "5d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265", [{0x800, 0x7, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x2}}, {0x74, 0x4, {0x2, 0x10001}}, {0x20, 0x8000, {0x0, 0x4}}, {0x64a, 0x8, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0xf2a8}}, {0x8000, 0x80, {0x2, 0x4c}}, {0x3, 0xe, {0x0, 0x8000}}, {0x7, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x38, 0x3, {0x0, 0x4}}, {0xd, 0x6, {0x1, 0x2a}}, {0x0, 0x2, {0x0, 0xb}}, {0x9, 0x50d, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x9}}, {0x9230, 0x3, {0x3, 0xe000000}}, {0x9, 0xa2bc, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x85}}, {0x4e, 0x2, {0x3, 0x6}}, {0x2, 0xf, {0x0, 0x5}}, {0x1, 0x4, {0x2}}, {0x6, 0x0, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x3}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x9, {0x0, 0x10000}}, {0x7, 0x5, {0x2, 0x1}}, {0xfa4, 0x3d, {0x0, 0xfad}}, {0x2, 0xb, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x1}}, {0x4, 0x800, {0x2, 0x8}}, {0x8001, 0xe, {0x0, 0xffff}}, {0x6d, 0x5, {0x3, 0x3}}, {0x5bd5, 0x2, {0x1, 0x6}}, {0x1, 0xa0e8, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x524}}, {0x2, 0x1b3, {0x3}}, {0xe6cb, 0x7, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020003000000080004"], 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', r2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) (async) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x9, 0x4, 0x7fff, 0x0, 0x1}) (async) 1.558355718s ago: executing program 5 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r4, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4, 0x0, 0x20000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f0012000000000000000000000000000000140020"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xffff5257, 0x800ae2e, 0x100, 0x7, 0x3, 0x0, 0x3, 0x10000}}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x3f5, 0x300, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}}, 0x4080) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) sendto$inet6(r11, &(0x7f0000000140)="0ab0b3884e", 0x5, 0x40000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7}}]}}]}, 0x48}}, 0x20040084) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff, 0x7, 0xfffffff7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4011) 1.117870344s ago: executing program 3 (id=2638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x5) (rerun: 64) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast1, 0x48f}, 0x1c) (async, rerun: 64) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x7fe, 0x0, 0xff, 0x9, 0x0, 0xaf3}, 0x20) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)={0x24, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="15"]}]}, 0x24}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000400)="b4a2cb5b30c6803429262be55debc53cf74816a0afc845a0bdd49d8b9271a48fcbaf4ff2c29a2164e11665356cd192504f97d257db7b6550740bb941d778791c", 0x8, 0x1, 0x4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b000100627269646765000014000280080008008100"], 0x44}}, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x400c001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a382f", @ANYRESDEC=r6], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014) 1.072964608s ago: executing program 5 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'gre0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000deff8500000086000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x110}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000100)={0x1, 0x0, 0x6, 0x1, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010102}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 977.215213ms ago: executing program 7 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x79e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='GPL\x00', 0x2, 0x1b, &(0x7f0000000680)=""/27, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet(0xa, 0x801, 0x86) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x40) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r4, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/41, 0x29}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}, 0x48004) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @loopback, 0x4}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r6, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x208, 0x0, 0x80}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) 26.269297ms ago: executing program 8 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 7 (id=2642): r0 = socket(0xa, 0x3, 0x87) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000000000000010000001c"], 0x30}}], 0x1, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000016c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94020000210000042dbd7000fedbdf25fe8000000000000000000000000000aa640101010000000000000000000000004e2301014e2300070a0020203b000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x2040000}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 547007) [ 277.856887][T11606] : option downdelay: allowed values 0 - 2147483647 [ 277.877188][T11606]  (unregistering): Released all slaves [ 277.912616][T11615] __nla_validate_parse: 5 callbacks suppressed [ 277.912634][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 277.912685][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 278.131519][T11617] ip6gre1: entered allmulticast mode [ 278.323115][T11634] syzkaller1: entered promiscuous mode [ 278.323136][T11634] syzkaller1: entered allmulticast mode [ 279.072143][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 279.103569][T11661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 279.130563][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 279.488488][T11683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 279.488571][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 279.495870][T11677] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.829170][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 279.958771][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 280.030907][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 280.763020][T11725] ÿÿÿ: renamed from bond_slave_0 [ 280.855373][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.856745][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.906025][ T30] audit: type=1804 audit(1790578758.332:6): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1352" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1650 res=1 errno=0 [ 280.908754][ T30] audit: type=1800 audit(1790578758.332:7): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1352" name="cgroup.controllers" dev="tmpfs" ino=1650 res=0 errno=0 [ 281.633692][T11770] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 281.718932][T11774] ip6t_rt: address list match requested but addrnr is 0 [ 282.284542][T11794] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 282.767767][T11822] xt_IDLETIMER: label is empty or not nul-terminated [ 283.328890][T11834] __nla_validate_parse: 15 callbacks suppressed [ 283.328909][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 283.351009][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.351031][T11834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.372404][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.372425][T11834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.373564][T11834] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 283.373581][T11834] batman_adv: batadv0: Removing interface: ip6gretap2 [ 283.389980][T11834] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 283.389998][T11834] batman_adv: batadv0: Removing interface: syzkaller0 [ 283.592827][T11844] netlink: 'syz.5.1377': attribute type 6 has an invalid length. [ 283.592847][T11844] netlink: 'syz.5.1377': attribute type 7 has an invalid length. [ 283.592859][T11844] netlink: 'syz.5.1377': attribute type 8 has an invalid length. [ 285.235928][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1386'. [ 285.236381][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1386'. [ 285.236410][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1386'. [ 285.279320][T11904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1385'. [ 285.279343][T11904] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1385'. [ 285.279359][T11904] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1385'. [ 285.428240][T11902] ip6gre1: entered promiscuous mode [ 285.428260][T11902] ip6gre1: entered allmulticast mode [ 285.580829][T11917] netlink: 'syz.0.1387': attribute type 7 has an invalid length. [ 285.594583][T11917] openvswitch: netlink: IPv4 tunnel dst address is zero [ 286.395218][T11954] team0: No ports can be present during mode change [ 286.480213][T11959] xt_hashlimit: max too large, truncated to 1048576 [ 286.537485][T11961] sctp: [Deprecated]: syz.5.1395 (pid 11961) Use of int in max_burst socket option. [ 286.537485][T11961] Use struct sctp_assoc_value instead [ 286.747418][T11973] syzkaller0: left promiscuous mode [ 286.747439][T11973] syzkaller0: left allmulticast mode [ 286.920132][T11977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 286.942520][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1401'. [ 287.694159][T11980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.932275][T12030] xt_REDIRECT: bad rangesize 26624. [ 287.962337][T12023] veth3: entered promiscuous mode [ 288.031946][T12032] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.032056][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.032192][T12032] bridge_slave_0: entered allmulticast mode [ 288.040447][T12032] bridge_slave_0: entered promiscuous mode [ 288.050611][T12032] bridge_slave_0: left allmulticast mode [ 288.050633][T12032] bridge_slave_0: left promiscuous mode [ 288.050838][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.608308][T12065] netlink: 'syz.5.1426': attribute type 1 has an invalid length. [ 288.609108][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1426'. [ 288.609129][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1426'. [ 289.152145][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.195563][T12086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.197909][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.416471][T12086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.417352][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.468789][T12086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.471861][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.538864][T12086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.540278][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.589251][T12086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.591775][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.624583][T12086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.625368][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.664486][T12086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.670569][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.818847][T12086] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.819507][T12086] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 289.841907][T12086] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.970743][T12086] 8021q: adding VLAN 0 to HW filter on device bond12 [ 290.111811][T12096] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.150771][T12114] syzkaller0: entered promiscuous mode [ 290.150794][T12114] syzkaller0: entered allmulticast mode [ 290.351321][T12127] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1438'. [ 290.367661][T12127] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1438'. [ 290.511741][T12132] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1440'. [ 290.512927][T12132] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1440'. [ 290.603301][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 290.669074][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 290.693227][T12144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1443'. [ 290.739393][T12144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1443'. [ 291.382709][T12219] syzkaller1: entered promiscuous mode [ 291.382731][T12219] syzkaller1: entered allmulticast mode [ 292.769422][T12238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.887542][T12258] bond7: entered promiscuous mode [ 292.887565][T12258] bond7: entered allmulticast mode [ 292.987008][T12261] veth0_to_batadv: entered allmulticast mode [ 293.352349][T12275] bond8: option broadcast_neighbor: invalid value (3) [ 293.353340][T12275] bond8 (unregistering): Released all slaves [ 293.373082][T12276] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 293.479335][T12280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.497426][T12280] bond8: (slave veth5): Enslaving as an active interface with a down link [ 293.647070][T12290] xt_ipcomp: unknown flags 1D [ 293.647202][T12290] xt_ipcomp: unknown flags 1D [ 293.647327][T12290] xt_ipcomp: unknown flags 1D [ 293.647435][T12290] xt_ipcomp: unknown flags 1D [ 293.647542][T12290] xt_ipcomp: unknown flags 1D [ 293.647660][T12290] xt_ipcomp: unknown flags 1D [ 293.647764][T12290] xt_ipcomp: unknown flags 1D [ 293.647872][T12290] xt_ipcomp: unknown flags 1D [ 293.647976][T12290] xt_ipcomp: unknown flags 1D [ 293.648080][T12290] xt_ipcomp: unknown flags 1D [ 293.666906][T12291] __nla_validate_parse: 35 callbacks suppressed [ 293.666923][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 293.684382][T12290] dvmrp0: entered allmulticast mode [ 293.684512][T12292] dvmrp0: left allmulticast mode [ 293.823677][T12298] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 293.823746][T12299] validate_nla: 40 callbacks suppressed [ 293.823759][T12299] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 293.859159][T12299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 294.128155][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 294.539292][T12343] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 294.539825][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1476'. [ 294.540184][T12343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.555342][T12343] netlink: 'syz.5.1476': attribute type 1 has an invalid length. [ 294.555358][T12343] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1476'. [ 294.555372][T12343] netlink: 'syz.5.1476': attribute type 1 has an invalid length. [ 294.555382][T12343] netlink: 2016 bytes leftover after parsing attributes in process `syz.5.1476'. [ 294.604047][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1476'. [ 294.604071][T12342] block nbd4: Unsupported socket: should be TCP or UNIX. [ 294.752524][T12351] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 294.769758][T12352] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 294.838689][T12357] netlink: 'syz.5.1479': attribute type 1 has an invalid length. [ 294.877782][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 294.895491][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.898438][T12359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.727452][ T5279] veth0_macvtap: left promiscuous mode [ 295.909560][T12397] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1485'. [ 295.921715][T12397] netlink: 'syz.3.1485': attribute type 21 has an invalid length. [ 295.921733][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1485'. [ 295.921813][T12397] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1485'. [ 296.922574][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.933090][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.945855][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.955136][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.959663][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.174812][T12445] syzkaller0: entered promiscuous mode [ 297.174835][T12445] syzkaller0: entered allmulticast mode [ 297.336391][T12453] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 297.361216][T12453] bond10: option mode: invalid value (19) [ 297.368883][T12453] bond10 (unregistering): Released all slaves [ 297.377258][T10533] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 297.407887][T12458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.714393][T12477] openvswitch: netlink: VLAN attribute unexpected. [ 297.748007][T12475] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 297.845762][T12474] netlink: 'syz.3.1499': attribute type 4 has an invalid length. [ 298.003253][T12490] netlink: 'syz.4.1504': attribute type 4 has an invalid length. [ 298.696834][T12441] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.696974][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.697364][T12441] bridge_slave_0: entered allmulticast mode [ 298.699278][T12441] bridge_slave_0: entered promiscuous mode [ 298.734518][T12441] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.734699][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.734827][T12441] bridge_slave_1: entered allmulticast mode [ 298.736793][T12441] bridge_slave_1: entered promiscuous mode [ 298.850055][T12441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.853795][T12441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.912141][T12543] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 299.000919][T12441] team0: Port device team_slave_0 added [ 299.017458][T12441] team0: Port device team_slave_1 added [ 299.045236][ T5631] Bluetooth: hci6: command tx timeout [ 299.082592][T12441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.082607][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.082628][T12441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.119942][T12441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.119957][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.119979][T12441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.160179][T12552] __nla_validate_parse: 11 callbacks suppressed [ 299.160197][T12552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 299.242640][T12441] hsr_slave_0: entered promiscuous mode [ 299.243611][T12441] hsr_slave_1: entered promiscuous mode [ 299.256655][T12441] debugfs: 'hsr0' already exists in 'hsr' [ 299.256674][T12441] Cannot create hsr debugfs directory [ 300.499360][T12441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.009678][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.010496][T12441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.038139][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.040539][T12441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.065991][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.070401][T12441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.106312][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.124341][ T5631] Bluetooth: hci6: command tx timeout [ 301.176988][T12597] netlink: 'syz.4.1519': attribute type 10 has an invalid length. [ 301.177008][T12597] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1519'. [ 301.378111][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 301.414520][T12610] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1520'. [ 301.547058][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 301.589561][T12612] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.589645][T12612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.589655][T12612] IPv6: NLM_F_CREATE should be set when creating new route [ 301.589694][T12612] IPv6: NLM_F_CREATE should be set when creating new route [ 301.589707][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1522'. [ 301.589717][T12612] IPv6: NLM_F_CREATE should be set when creating new route [ 301.660986][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.686990][T12441] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.714577][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.714681][T10531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.741978][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.742094][T10531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.233684][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 302.233710][T12640] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1525'. [ 302.611081][T12441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.612388][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1526'. [ 302.735186][T12647] bond13: Removing last arp target with arp_interval on [ 302.757941][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 302.779733][T12652] pimreg: entered allmulticast mode [ 302.782967][T12651] pimreg: left allmulticast mode [ 302.910763][T12651] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 303.205798][ T5631] Bluetooth: hci6: command tx timeout [ 303.228440][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.232142][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.241691][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.257885][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.259865][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.461780][T12441] veth0_vlan: entered promiscuous mode [ 303.497840][T12441] veth1_vlan: entered promiscuous mode [ 303.559368][T12677] ip_tables: iptables: counters copy to user failed while replacing table [ 303.583335][T12677] pim6reg1: entered promiscuous mode [ 303.583355][T12677] pim6reg1: entered allmulticast mode [ 303.652235][T12441] veth0_macvtap: entered promiscuous mode [ 303.678441][T12441] veth1_macvtap: entered promiscuous mode [ 303.701042][T12441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.720897][T12441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.764759][ T1165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.766511][ T1165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.768414][ T1165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.769176][ T1165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.138693][ T7185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.138714][ T7185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.285678][T12696] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 304.395364][ T30] audit: type=1804 audit(1790578781.822:8): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1537" name="/newroot/126/cgroup.controllers" dev="tmpfs" ino=663 res=1 errno=0 [ 304.395426][ T30] audit: type=1800 audit(1790578781.822:9): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1537" name="cgroup.controllers" dev="tmpfs" ino=663 res=0 errno=0 [ 304.414688][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.414706][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.534353][T12705] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 304.757236][T12716] __nla_validate_parse: 3 callbacks suppressed [ 304.757256][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1493'. [ 304.777111][T12712] pim6reg: entered allmulticast mode [ 304.828946][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 304.874670][T12712] pim6reg: left allmulticast mode [ 305.023108][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1493'. [ 305.027206][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1493'. [ 305.098077][T12726] ip_tables: iptables: counters copy to user failed while replacing table [ 305.179699][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.179858][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.179990][T12672] bridge_slave_0: entered allmulticast mode [ 305.181942][T12672] bridge_slave_0: entered promiscuous mode [ 305.202254][T12738] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 305.220995][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.221053][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.221132][T12672] bridge_slave_1: entered allmulticast mode [ 305.222309][T12672] bridge_slave_1: entered promiscuous mode [ 305.261888][T12672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.265302][T12672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.284700][ T5631] Bluetooth: hci6: command tx timeout [ 305.284747][ T5631] Bluetooth: hci7: command tx timeout [ 305.298022][T12672] team0: Port device team_slave_0 added [ 305.302640][T12672] team0: Port device team_slave_1 added [ 305.349964][T12672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.349979][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.350000][T12672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.361079][T12672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.361093][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.361114][T12672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.479891][T12672] hsr_slave_0: entered promiscuous mode [ 305.481413][T12672] hsr_slave_1: entered promiscuous mode [ 305.482228][T12672] debugfs: 'hsr0' already exists in 'hsr' [ 305.482246][T12672] Cannot create hsr debugfs directory [ 306.217815][T12672] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 306.248842][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.250339][T12672] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 306.275744][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.277425][T12672] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 306.300236][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.302207][T12672] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 306.330125][T12672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.580889][T12672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.608350][T12672] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.631279][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.631378][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.703397][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.703540][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.729727][T12805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.937211][T12809] sctp: [Deprecated]: syz.5.1563 (pid 12809) Use of int in maxseg socket option. [ 306.937211][T12809] Use struct sctp_assoc_value instead [ 307.046365][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1564'. [ 307.095007][T12815] openvswitch: netlink: IPv4 tun info is not correct [ 307.157919][T12820] xt_l2tp: invalid flags combination: 8 [ 307.364723][ T5621] Bluetooth: hci7: command tx timeout [ 307.540233][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1568'. [ 307.551747][T12835] netlink: 'syz.5.1568': attribute type 3 has an invalid length. [ 307.578823][T12840] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1570'. [ 307.664778][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1570'. [ 307.664803][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1570'. [ 307.792583][T12850] netlink: 'syz.5.1572': attribute type 18 has an invalid length. [ 307.809526][T12672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.023420][T12862] tc action pedit 'at' offset -2147483645 out of bounds [ 308.151002][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1575'. [ 308.248859][T12872] netlink: 'syz.5.1575': attribute type 1 has an invalid length. [ 308.617811][T12897] syzkaller0: Caught tx_queue_len zero misconfig [ 308.858655][T12672] veth0_vlan: entered promiscuous mode [ 308.887983][T12672] veth1_vlan: entered promiscuous mode [ 309.015147][T12913] macvlan0: entered promiscuous mode [ 309.056396][T12672] veth0_macvtap: entered promiscuous mode [ 309.087256][T12672] veth1_macvtap: entered promiscuous mode [ 309.326380][T12672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.361537][T12672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.445058][ T5621] Bluetooth: hci7: command tx timeout [ 309.479055][T12940] x_tables: duplicate entry at hook 2 [ 309.529441][T12940] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 309.530050][T12940] batman_adv: batadv0: Adding interface: gretap1 [ 309.530064][T12940] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.530090][T12940] batman_adv: batadv0: Interface activated: gretap1 [ 309.610955][ T6976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.610996][ T6976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.611026][ T6976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.621446][T12938] tipc: Resetting bearer [ 309.757513][T12938] tipc: Disabling bearer [ 309.776417][T12951] __nla_validate_parse: 1 callbacks suppressed [ 309.776436][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 309.926009][T10533] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.926064][T10533] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.926098][T10533] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.926130][T10533] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.926163][T10533] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.156472][T10566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.156493][T10566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.360656][ T7185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.360677][ T7185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.415008][T10533] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.415923][T10533] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.415956][T10533] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.415983][T10533] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.751931][T12989] IPVS: length: 45 != 8 [ 310.791581][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1595'. [ 310.877386][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 310.915537][T12989] vlan2: entered allmulticast mode [ 310.915574][T12989] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 310.928870][T12989] batman_adv: batadv0: Adding interface: vlan2 [ 310.928887][T12989] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.928911][T12989] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 311.149646][T13010] netlink: 'syz.5.1599': attribute type 1 has an invalid length. [ 311.322762][T13010] bond14: entered promiscuous mode [ 311.334081][T13010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 311.436607][T13017] ipvlan1: entered allmulticast mode [ 311.436621][T13017] bond14: entered allmulticast mode [ 311.458329][T13010] ipvlan2: entered allmulticast mode [ 311.524448][ T5621] Bluetooth: hci7: command tx timeout [ 311.761149][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1604'. [ 311.763769][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1604'. [ 311.772317][T13037] bond0: option packets_per_slave: invalid value (868050663) [ 311.772337][T13037] bond0: option packets_per_slave: allowed values 0 - 65535 [ 311.772627][T13036] bond0: option packets_per_slave: invalid value (868050663) [ 311.772643][T13036] bond0: option packets_per_slave: allowed values 0 - 65535 [ 315.181105][T13115] tc_dump_action: action bad kind [ 315.482641][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1620'. [ 315.523056][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 315.523177][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.591062][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1620'. [ 315.666558][T13127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.742988][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 315.843290][T13136] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 315.843305][T13136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1622'. [ 315.880370][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.921764][T13141] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 316.072339][T13148] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.193566][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.231451][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.260716][T13163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.421379][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.782447][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.782594][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.782724][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.782851][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.782981][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.834099][T13159] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 316.902292][T13178] syzkaller0: entered promiscuous mode [ 316.902317][T13178] syzkaller0: entered allmulticast mode [ 319.806380][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1642'. [ 319.806565][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1642'. [ 319.806737][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1642'. [ 319.806909][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1642'. [ 319.808362][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1642'. [ 319.879758][ T7185] IPVS: starting estimator thread 0... [ 319.965480][T13259] IPVS: using max 31 ests per chain, 74400 per kthread [ 320.388654][T13273] bridge0: port 3(veth0) entered blocking state [ 320.388764][T13273] bridge0: port 3(veth0) entered disabled state [ 320.388937][T13273] veth0: entered allmulticast mode [ 320.423300][T13273] veth0: entered promiscuous mode [ 320.425921][T13273] bridge0: port 3(veth0) entered blocking state [ 320.426066][T13273] bridge0: port 3(veth0) entered forwarding state [ 320.548021][T13282] __nla_validate_parse: 3 callbacks suppressed [ 320.548038][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1649'. [ 320.849100][T13295] validate_nla: 26 callbacks suppressed [ 320.849119][T13295] netlink: 'syz.7.1654': attribute type 1 has an invalid length. [ 320.911968][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 320.927623][ T6976] tipc: Subscription rejected, illegal request [ 320.930547][T13295] sctp: [Deprecated]: syz.7.1654 (pid 13295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.930547][T13295] Use struct sctp_sack_info instead [ 321.046255][T13304] netlink: 'syz.3.1655': attribute type 32 has an invalid length. [ 321.106850][T13308] netlink: 'syz.5.1657': attribute type 29 has an invalid length. [ 321.656886][T13289] Cannot find del_set index 4 as target [ 321.748500][T13324] macsec0: entered promiscuous mode [ 321.749386][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 321.759729][T13324] veth1_macvtap: left promiscuous mode [ 321.783586][T13324] macsec0 (unregistering): left promiscuous mode [ 322.013470][T13339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.223138][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 322.562347][T13358] netlink: 'syz.7.1669': attribute type 1 has an invalid length. [ 322.562366][T13358] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1669'. [ 322.810797][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1672'. [ 323.140508][T13400] syzkaller0: entered promiscuous mode [ 323.140531][T13400] syzkaller0: entered allmulticast mode [ 323.143494][T13384] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1675'. [ 323.265927][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 323.331419][T13398] veth1_macvtap: entered promiscuous mode [ 323.331609][T13398] macsec1: entered promiscuous mode [ 323.408529][T13408] nbd: socks must be embedded in a SOCK_ITEM attr [ 323.726081][T13431] v: renamed from veth0_vlan (while UP) [ 323.865386][T13431] netlink: 'syz.6.1682': attribute type 9 has an invalid length. [ 324.017134][T13453] netlink: 'syz.6.1687': attribute type 5 has an invalid length. [ 324.273227][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1689'. [ 324.290586][T13461] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1689'. [ 325.179322][T13484] netlink: 'syz.5.1695': attribute type 2 has an invalid length. [ 325.227483][T13489] x_tables: unsorted entry at hook 3 [ 325.304472][T13501] batadv1: left allmulticast mode [ 325.304498][T13501] batadv1: left promiscuous mode [ 325.304720][T13501] bridge0: port 3(batadv1) entered disabled state [ 325.376091][T13501] bridge_slave_1: left allmulticast mode [ 325.376109][T13501] bridge_slave_1: left promiscuous mode [ 325.376308][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.408858][T13501] bridge_slave_0: left allmulticast mode [ 325.408883][T13501] bridge_slave_0: left promiscuous mode [ 325.409087][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.467531][T13505] netlink: 'syz.7.1699': attribute type 8 has an invalid length. [ 325.472390][T13509] netlink: 'syz.7.1699': attribute type 8 has an invalid length. [ 325.761940][T13520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.990557][T13530] __nla_validate_parse: 4 callbacks suppressed [ 325.990576][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1708'. [ 325.993783][T13530] netlink: 'syz.6.1708': attribute type 1 has an invalid length. [ 326.037043][T13530] bond1: entered promiscuous mode [ 326.037320][T13530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.109102][T13541] netlink: 'syz.6.1708': attribute type 1 has an invalid length. [ 326.112914][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1708'. [ 326.312457][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1711'. [ 326.363411][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.363777][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.426841][T13511] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 326.427302][T13511] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 326.442032][T13511] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 326.442054][T13511] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 326.483573][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.499985][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.763719][T13549] batman_adv: batadv0: Interface deactivated: gretap1 [ 326.957849][ T6976] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.970164][T10533] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.970264][T10533] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.970296][T10533] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.017375][T13564] bridge_slave_1: Caught tx_queue_len zero misconfig [ 327.034529][T13564] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1715'. [ 327.100976][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 327.387810][T13585] syzkaller1: entered promiscuous mode [ 327.387831][T13585] syzkaller1: entered allmulticast mode [ 327.623385][T13586] netlink: 'syz.5.1722': attribute type 1 has an invalid length. [ 327.623404][T13586] netlink: 1368 bytes leftover after parsing attributes in process `syz.5.1722'. [ 328.115930][T13605] netlink: 'syz.6.1728': attribute type 30 has an invalid length. [ 328.123926][T13609] netlink: 'syz.4.1730': attribute type 10 has an invalid length. [ 328.254843][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1728'. [ 328.761583][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'. [ 329.405703][T13668] syzkaller1: entered promiscuous mode [ 329.405725][T13668] syzkaller1: entered allmulticast mode [ 329.408372][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 329.460008][T13671] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 329.505964][T13675] tipc: Started in network mode [ 329.505994][T13675] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 329.506239][T13675] tipc: Enabled bearer , priority 7 [ 329.966089][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 330.151833][T13695] netlink: 'syz.3.1746': attribute type 3 has an invalid length. [ 330.235582][T13696] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 330.315768][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 330.512557][T13695] xt_CT: No such helper "snmp_trap" [ 330.633950][ T5729] tipc: Node number set to 9480874 [ 331.057443][T13736] erspan0: entered promiscuous mode [ 331.089057][T13741] __nla_validate_parse: 6 callbacks suppressed [ 331.089077][T13741] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1754'. [ 331.276097][T13749] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 331.276163][T13753] netlink: 'syz.5.1754': attribute type 10 has an invalid length. [ 331.393200][T13753] team0 (unregistering): Port device team_slave_0 removed [ 331.448392][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1757'. [ 331.466569][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1757'. [ 331.466756][T13762] block nbd4: server does not support multiple connections per device. [ 331.467208][T13762] block nbd4: shutting down sockets [ 331.767723][T13753] team0 (unregistering): Port device team_slave_1 removed [ 332.091250][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1760'. [ 332.102722][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1760'. [ 332.143586][T13780] syzkaller0: entered promiscuous mode [ 332.143609][T13780] syzkaller0: entered allmulticast mode [ 332.691716][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1765'. [ 332.991151][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 332.991172][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 332.991616][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 332.991632][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 333.080108][T13834] ip_tables: iptables: counters copy to user failed while replacing table [ 333.137858][T13836] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 333.315626][T13849] geneve1: entered promiscuous mode [ 334.208215][T13889] IPVS: length: 4096 != 24 [ 334.715478][T13913] Bluetooth: hci0: unsupported parameter 5135 [ 334.715500][T13913] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 334.722153][T13916] Bluetooth: hci0: unsupported parameter 5135 [ 334.722173][T13916] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 334.994599][T13920] veth7: entered allmulticast mode [ 335.341800][T13946] x_tables: duplicate underflow at hook 1 [ 335.379826][T13953] x_tables: duplicate underflow at hook 1 [ 335.450433][T13954] ip_tables: iptables: counters copy to user failed while replacing table [ 336.134755][T13990] __nla_validate_parse: 10 callbacks suppressed [ 336.134775][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 336.138696][T13989] pim6reg: entered allmulticast mode [ 336.140325][T13989] pim6reg: left allmulticast mode [ 336.192945][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 336.382266][T13998] bond0: (slave bond_slave_0): Releasing backup interface [ 336.403744][T13998] bond0: (slave bond_slave_1): Releasing backup interface [ 336.444580][T14001] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 336.447697][T13998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.450287][T13998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.453290][T13998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.052909][T14019] bond10: option tlb_dynamic_lb: invalid value (128) [ 337.064381][T14019] bond10 (unregistering): Released all slaves [ 337.281188][T14034] gretap1: entered promiscuous mode [ 337.422725][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1839'. [ 337.497807][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1839'. [ 337.561769][T14044] syzkaller0: entered promiscuous mode [ 337.561790][T14044] syzkaller0: entered allmulticast mode [ 337.785419][T14050] syzkaller0: entered promiscuous mode [ 337.785442][T14050] syzkaller0: entered allmulticast mode [ 337.972115][T14070] netlink: 212 bytes leftover after parsing attributes in process `syz.7.1846'. [ 338.046376][T14085] netlink: 212 bytes leftover after parsing attributes in process `syz.7.1846'. [ 338.086133][T14072] syzkaller1: entered promiscuous mode [ 338.086156][T14072] syzkaller1: entered allmulticast mode [ 338.450350][T14115] netlink: 'syz.7.1855': attribute type 4 has an invalid length. [ 339.165961][T14143] netlink: 'syz.5.1864': attribute type 1 has an invalid length. [ 339.168475][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'. [ 339.168523][T14141] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 339.230389][T14143] bond15: entered promiscuous mode [ 339.230790][T14143] 8021q: adding VLAN 0 to HW filter on device bond15 [ 339.365093][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1864'. [ 339.480404][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 339.480428][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 339.542741][T14155] netlink: 'syz.3.1866': attribute type 10 has an invalid length. [ 339.554202][T14165] sctp: [Deprecated]: syz.5.1870 (pid 14165) Use of int in max_burst socket option. [ 339.554202][T14165] Use struct sctp_assoc_value instead [ 339.555593][T14165] netlink: 'syz.5.1870': attribute type 1 has an invalid length. [ 339.655385][T14167] xt_bpf: check failed: parse error [ 339.725085][T14172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.839365][T14165] bond16: (slave geneve2): making interface the new active one [ 339.840900][T14165] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 339.855120][ T7185] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.857495][ T7179] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.857537][ T7179] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.857567][ T7179] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.012996][T14183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.050938][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.050976][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051001][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051024][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051047][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051071][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051121][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051146][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051170][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051194][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051218][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051241][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051265][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051288][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051311][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051334][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051356][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051379][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051402][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051426][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051449][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051471][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051494][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051517][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051539][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051575][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051599][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051622][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051646][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051669][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051691][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051713][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.051736][T14185] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 340.610701][T14208] geneve2: entered promiscuous mode [ 340.754004][T10531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 44945 - 0 [ 340.754059][T10531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 44945 - 0 [ 340.754090][T10531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 44945 - 0 [ 340.754120][T10531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 44945 - 0 [ 340.908822][T14221] ip_tables: iptables: counters copy to user failed while replacing table [ 340.960655][T14226] ip_tables: iptables: counters copy to user failed while replacing table [ 341.331514][T14245] team0: No ports can be present during mode change [ 341.421509][T14247] __nla_validate_parse: 8 callbacks suppressed [ 341.421528][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1886'. [ 341.477632][T12199] udevd[12199]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 341.501947][T12199] udevd[12199]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 341.674939][T14259] netlink: 'syz.3.1888': attribute type 12 has an invalid length. [ 341.952004][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 341.962886][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1890'. [ 341.966902][T14274] macvtap0: entered promiscuous mode [ 342.350888][T14296] gre1: entered promiscuous mode [ 342.482015][T14284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1896'. [ 342.494625][T14284] gretap0: mtu less than device minimum [ 342.883388][T14319] ip_tables: iptables: counters copy to user failed while replacing table [ 342.982125][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'. [ 343.029992][T14335] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 343.127384][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 343.239003][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1910'. [ 343.282461][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1910'. [ 343.352791][T14351] veth1_to_bridge: entered allmulticast mode [ 343.372151][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.689244][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1917'. [ 343.721664][T14370] netlink: 64975 bytes leftover after parsing attributes in process `syz.6.1917'. [ 343.805375][T14380] block nbd4: server does not support multiple connections per device. [ 343.805680][T14380] block nbd4: shutting down sockets [ 343.878357][T14382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.180529][T14394] tipc: Enabled bearer , priority 0 [ 344.588100][T14391] tipc: Disabling bearer [ 344.928444][T14416] bond10 (unregistering): Released all slaves [ 345.411062][T14444] netlink: zone id is out of range [ 345.411078][T14444] netlink: zone id is out of range [ 345.411086][T14444] netlink: zone id is out of range [ 345.411094][T14444] netlink: zone id is out of range [ 345.411100][T14444] netlink: zone id is out of range [ 345.411107][T14444] netlink: zone id is out of range [ 345.411118][T14444] netlink: zone id is out of range [ 345.411125][T14444] netlink: zone id is out of range [ 345.411132][T14444] netlink: zone id is out of range [ 345.411138][T14444] netlink: zone id is out of range [ 345.468207][T14443] bridge0: port 3(veth0) entered disabled state [ 345.468460][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.318410][T14443] veth1_to_bridge: left allmulticast mode [ 346.338175][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.342141][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.396109][T14443] geneve1: left promiscuous mode [ 346.420575][T14443] veth7: left allmulticast mode [ 346.424043][T10566] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.424087][T10566] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.424119][T10566] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.424150][T10566] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.682261][T14463] tipc: Enabled bearer , priority 0 [ 346.691670][T14466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.768598][T14463] syzkaller0: entered promiscuous mode [ 346.768615][T14463] syzkaller0: entered allmulticast mode [ 346.768973][T14463] tipc: Resetting bearer [ 346.796715][T14462] tipc: Resetting bearer [ 346.819308][T14471] __nla_validate_parse: 2 callbacks suppressed [ 346.819330][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'. [ 349.360782][T14462] tipc: Disabling bearer [ 349.486769][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.487683][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.491679][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.547163][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.548495][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.551592][T14472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.551607][T14472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.554692][T14472] veth1_vlan: left promiscuous mode [ 349.555756][T14472] v: left promiscuous mode [ 349.557248][T14472] v: entered promiscuous mode [ 349.559271][T14472] veth1_vlan: entered promiscuous mode [ 349.570378][T14472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.571401][T14472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.572372][T14472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.573455][T14472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.709104][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.709201][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.726726][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.726828][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.816236][ T5750] tipc: Node number set to 117440513 [ 349.820784][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 349.859820][T14505] syzkaller1: entered promiscuous mode [ 349.859845][T14505] syzkaller1: entered allmulticast mode [ 349.863418][ T44] batman_adv: batadv0: Interface activated: vlan2 [ 349.919392][ T7179] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.919435][ T7179] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.919466][ T7179] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.919497][ T7179] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.199293][T14527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.532851][T14544] tipc: Enabled bearer , priority 0 [ 350.542019][T14544] syzkaller0: entered promiscuous mode [ 350.542038][T14544] syzkaller0: entered allmulticast mode [ 350.721722][T14549] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 350.817534][T14549] bond10 (unregistering): Released all slaves [ 350.932849][T14563] net_ratelimit: 485 callbacks suppressed [ 350.932868][T14563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.973569][T14544] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 351.006597][T14546] tipc: Resetting bearer [ 351.039326][T14542] tipc: Resetting bearer [ 351.107406][T14542] tipc: Disabling bearer [ 351.107647][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 351.141584][T14557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 351.250143][T14572] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1963'. [ 351.376989][T14578] netlink: 'syz.5.1967': attribute type 2 has an invalid length. [ 351.512297][T14580] ip_tables: iptables: counters copy to user failed while replacing table [ 351.664495][T14588] ip_tables: iptables: counters copy to user failed while replacing table [ 351.774299][T14590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.804461][T14590] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1975'. [ 351.857071][T14590] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1975'. [ 351.899926][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1974'. [ 351.941728][T14596] RDS: rds_bind could not find a transport for ::200:4:0:0, load rds_tcp or rds_rdma? [ 351.946601][T14596] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 351.999229][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 352.127294][T14606] xt_hashlimit: max too large, truncated to 1048576 [ 352.299112][T14616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1980'. [ 352.334718][T14616] syzkaller1: entered promiscuous mode [ 352.334740][T14616] syzkaller1: entered allmulticast mode [ 352.602331][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 352.603251][T14622] batman_adv: batadv0: Adding interface: syzkaller0 [ 352.603266][T14622] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.603291][T14622] batman_adv: batadv0: Interface activated: syzkaller0 [ 352.615787][T14627] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 352.626908][T14632] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 352.655710][T14621] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 352.703311][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1985'. [ 352.714708][T14621] batman_adv: batadv0: Removing interface: syzkaller0 [ 352.809340][T14638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1985'. [ 352.925319][T14646] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1986'. [ 353.014955][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1988'. [ 353.396125][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.475078][T14671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.475806][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.476035][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.476235][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.476536][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.476803][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.477079][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.477284][T14671] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 353.672279][T14675] bond2: (slave gretap2): making interface the new active one [ 353.775043][T14675] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 353.778400][T14673] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 354.338559][T14701] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.429950][T14704] vti0: entered promiscuous mode [ 354.429973][T14704] vti0: entered allmulticast mode [ 354.477252][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2000'. [ 354.650511][T14706] syzkaller0: entered promiscuous mode [ 354.650537][T14706] syzkaller0: entered allmulticast mode [ 355.036170][T14726] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 355.532362][T14743] IPVS: set_ctl: invalid protocol: 8 172.20.20.62:20004 [ 357.333290][T14723] tc_dump_action: action bad kind [ 358.216973][T14781] __nla_validate_parse: 4 callbacks suppressed [ 358.216991][T14781] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2018'. [ 358.218985][T14785] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2018'. [ 358.324973][T14780] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2019'. [ 358.561032][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2024'. [ 358.561055][T14805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.561072][T14805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.478092][T14820] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.919813][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.920287][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.950262][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.950462][T14835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.950764][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.950865][T14835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.951458][T14835] bridge0: entered promiscuous mode [ 359.951477][T14835] bridge0: entered allmulticast mode [ 360.268009][T14860] validate_nla: 58 callbacks suppressed [ 360.268028][T14860] netlink: 'syz.7.2038': attribute type 10 has an invalid length. [ 360.284823][T14860] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.287000][T14860] bond0: (slave team0): Enslaving as an active interface with an up link [ 360.312200][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2041'. [ 360.328552][T14856] netlink: NAT attribute type 8 has unexpected length (4 != 0) [ 360.328589][T14856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.673119][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2042'. [ 360.853467][T14889] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2045'. [ 360.952840][T14892] xt_hashlimit: size too large, truncated to 1048576 [ 360.997327][T14898] netlink: 'syz.6.2047': attribute type 2 has an invalid length. [ 360.997348][T14898] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2047'. [ 361.031238][T14903] xt_hashlimit: size too large, truncated to 1048576 [ 361.106535][T14897] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2047'. [ 361.519240][T14920] ksmbd: Unknown IPC event: 1, ignore. [ 363.116978][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2055'. [ 363.131742][T14931] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 363.297691][T14950] __nla_validate_parse: 1 callbacks suppressed [ 363.297710][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2057'. [ 363.363203][T14930] hsr_slave_1 (unregistering): left promiscuous mode [ 363.543310][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 363.555004][T14959] syzkaller1: entered promiscuous mode [ 363.555024][T14959] syzkaller1: entered allmulticast mode [ 363.578944][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 363.673077][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2065'. [ 363.994672][T14983] netlink: 10184 bytes leftover after parsing attributes in process `syz.5.2067'. [ 363.994706][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2067'. [ 364.034936][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 364.366906][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 364.411810][T14994] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 364.413497][T14994] bond3 (unregistering): Released all slaves [ 364.433299][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2070'. [ 364.447665][T15008] netlink: 'syz.7.2072': attribute type 21 has an invalid length. [ 364.797102][T15027] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 364.930803][T15027] netlink: 'syz.7.2077': attribute type 1 has an invalid length. [ 365.126584][T15027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.140127][T15028] bond1: entered promiscuous mode [ 365.140151][T15028] bond1: entered allmulticast mode [ 365.176678][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 365.542600][T15059] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 365.596342][T15063] netlink: 'syz.6.2086': attribute type 10 has an invalid length. [ 365.596568][T15063] dummy0: entered promiscuous mode [ 365.596964][T15063] bridge0: port 3(dummy0) entered blocking state [ 365.597316][T15063] bridge0: port 3(dummy0) entered disabled state [ 365.597492][T15063] dummy0: entered allmulticast mode [ 365.601499][T15063] bridge0: port 3(dummy0) entered blocking state [ 365.601604][T15063] bridge0: port 3(dummy0) entered forwarding state [ 365.774915][T15068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.176223][T15087] pimreg: entered allmulticast mode [ 366.471389][T15091] netlink: 'syz.5.2092': attribute type 1 has an invalid length. [ 366.990905][T15095] ip6gre2: entered promiscuous mode [ 367.169607][T15103] syzkaller0: entered promiscuous mode [ 367.169628][T15103] syzkaller0: entered allmulticast mode [ 367.886403][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.905217][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.913510][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.931188][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.931854][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 367.976030][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.978407][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.978874][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.986414][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.987224][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 368.292171][T15168] syzkaller1: entered promiscuous mode [ 368.292194][T15168] syzkaller1: entered allmulticast mode [ 368.747472][T15196] syzkaller0: entered promiscuous mode [ 368.747496][T15196] syzkaller0: entered allmulticast mode [ 368.758371][T15198] __nla_validate_parse: 8 callbacks suppressed [ 368.758389][T15198] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2106'. [ 368.923757][T15201] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2107'. [ 369.167062][T15215] ip_tables: iptables: counters copy to user failed while replacing table [ 369.526540][T15235] ip_tables: iptables: counters copy to user failed while replacing table [ 369.599799][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.599977][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.600138][T15157] bridge_slave_0: entered allmulticast mode [ 369.601443][T15157] bridge_slave_0: entered promiscuous mode [ 369.633179][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.633446][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.633611][T15157] bridge_slave_1: entered allmulticast mode [ 369.660591][T15157] bridge_slave_1: entered promiscuous mode [ 369.726340][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.729819][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.931553][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 369.933222][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'. [ 369.983986][T15157] team0: Port device team_slave_0 added [ 369.987490][T15157] team0: Port device team_slave_1 added [ 370.030240][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.030257][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.030279][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.032572][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.032585][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.032608][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.094563][ T5631] Bluetooth: hci8: command tx timeout [ 370.231449][T15157] hsr_slave_0: entered promiscuous mode [ 370.235390][T15157] hsr_slave_1: entered promiscuous mode [ 370.236083][T15157] debugfs: 'hsr0' already exists in 'hsr' [ 370.236101][T15157] Cannot create hsr debugfs directory [ 370.297644][T15250] netlink: 'syz.5.2117': attribute type 3 has an invalid length. [ 370.401401][T15252] netlink: 'syz.5.2117': attribute type 9 has an invalid length. [ 370.401416][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 370.660184][T15255] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 370.660210][T15255] bridge5: entered allmulticast mode [ 370.875748][T15264] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 370.876824][T15264] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 370.880434][T15266] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 370.921039][T15267] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2119'. [ 371.032655][T15269] ip6_vti0: Caught tx_queue_len zero misconfig [ 371.132667][T15157] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 371.148214][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.151083][T15157] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 371.179694][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.186976][T15157] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 371.216606][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.233275][T15157] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 371.253462][T15157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.398254][T15157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.436492][T15157] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.460298][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.460386][T10533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.507266][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.507377][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.949818][T15293] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2128'. [ 372.111232][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2130'. [ 372.164324][ T5631] Bluetooth: hci8: command tx timeout [ 372.290925][T15306] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2132'. [ 372.452504][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2132'. [ 372.587542][T15157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.657279][T15319] syzkaller0: entered promiscuous mode [ 372.657302][T15319] syzkaller0: entered allmulticast mode [ 372.756858][T15324] pimreg: entered allmulticast mode [ 373.004879][T15157] veth0_vlan: entered promiscuous mode [ 373.013431][T15157] veth1_vlan: entered promiscuous mode [ 373.087929][T15157] veth0_macvtap: entered promiscuous mode [ 373.105933][T15157] veth1_macvtap: entered promiscuous mode [ 373.149851][T15157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.169571][T15157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.219083][ T7179] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.222287][ T1165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.222563][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.222941][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.482646][T15340] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 373.502348][T15340] rdma_rxe: rxe_newlink: failed to add wg2 [ 373.680292][T15348] netlink: 'syz.5.2140': attribute type 2 has an invalid length. [ 373.733421][T10566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.733442][T10566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.778270][T15352] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.856706][ T6976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.856728][ T6976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.036088][T15366] vlan3: entered promiscuous mode [ 374.036110][T15366] bridge0: entered promiscuous mode [ 374.187928][T15370] netlink: 'syz.5.2143': attribute type 1 has an invalid length. [ 374.246477][ T5631] Bluetooth: hci8: command tx timeout [ 374.487664][T15381] netlink: 'syz.5.2145': attribute type 1 has an invalid length. [ 374.677322][T15381] bond17: (slave veth0_to_bond): making interface the new active one [ 374.678487][T15381] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 374.690337][T15381] __nla_validate_parse: 1 callbacks suppressed [ 374.690358][T15381] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2145'. [ 374.830507][T15395] netlink: 'syz.7.2148': attribute type 19 has an invalid length. [ 374.830528][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2148'. [ 374.862357][T15396] IPVS: set_ctl: invalid protocol: 24 100.1.1.1:21 [ 374.898263][T15395] netlink: 'syz.7.2148': attribute type 19 has an invalid length. [ 374.898284][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2148'. [ 374.924319][T10566] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.927498][ T7185] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.927541][ T7185] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.927572][ T7185] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.039681][T15405] netlink: 'syz.5.2149': attribute type 4 has an invalid length. [ 375.039702][T15405] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2149'. [ 375.043009][T15410] netlink: 'syz.7.2152': attribute type 1 has an invalid length. [ 375.207585][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2152'. [ 375.517733][T15419] gretap2: entered allmulticast mode [ 375.878922][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 376.324164][ T5631] Bluetooth: hci8: command tx timeout [ 376.518418][T15474] validate_nla: 1 callbacks suppressed [ 376.518438][T15474] netlink: 'syz.5.2163': attribute type 23 has an invalid length. [ 376.648995][T15477] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.668924][T15477] syzkaller1: entered promiscuous mode [ 376.668945][T15477] syzkaller1: entered allmulticast mode [ 376.692255][T15479] syzkaller1: entered promiscuous mode [ 376.692285][T15479] syzkaller1: entered allmulticast mode [ 376.758169][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2166'. [ 376.775650][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2166'. [ 376.798429][T15477] netlink: 'syz.7.2166': attribute type 5 has an invalid length. [ 376.798451][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2166'. [ 377.235272][T15515] sctp: [Deprecated]: syz.7.2172 (pid 15515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.235272][T15515] Use struct sctp_sack_info instead [ 377.235333][T15509] sctp: [Deprecated]: syz.7.2172 (pid 15509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.235333][T15509] Use struct sctp_sack_info instead [ 377.633121][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633212][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633292][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633367][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633441][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633515][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633590][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633661][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.633734][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.635838][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636001][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636077][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636154][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636225][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636299][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.636377][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637046][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637128][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637202][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637277][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637348][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637418][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637490][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637562][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637642][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637716][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637796][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637866][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.637935][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.638004][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.639247][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.639322][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.639397][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.639474][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.639546][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640354][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640440][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640512][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640589][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640659][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640810][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640882][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.640966][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641048][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641130][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641199][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641272][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641367][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641438][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641506][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641586][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641659][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641729][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.641799][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645364][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645443][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645531][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645597][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645670][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645740][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645811][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645895][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.645968][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.647347][T15531] 8021q: VLANs not supported on syzkaller0 [ 377.647431][T15531] 8021q: VLANs not supported on syzkaller0 [ 378.164984][T15543] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2179'. [ 378.296822][T15548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.296822][T15546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.166435][T15511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.211880][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2178'. [ 382.168943][T15583] ipvlan3: entered allmulticast mode [ 382.168965][T15583] macvlan1: entered allmulticast mode [ 382.168978][T15583] veth1_vlan: entered allmulticast mode [ 382.281268][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2188'. [ 382.365718][T15589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.418567][T15594] macvtap1: entered allmulticast mode [ 382.439696][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 382.460864][T15590] bond4: (slave sit1): refused to change device type [ 382.598930][T15602] syzkaller1: entered promiscuous mode [ 382.598955][T15602] syzkaller1: entered allmulticast mode [ 382.649953][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 382.705131][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 382.788939][T15613] 0: reclassify loop, rule prio 0, protocol 03 [ 382.932987][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 383.126948][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2199'. [ 383.278331][T10566] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 383.434454][T15635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.629453][ T30] audit: type=1804 audit(1790578861.052:10): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2205" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=105 res=1 errno=0 [ 383.629504][ T30] audit: type=1800 audit(1790578861.052:11): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2205" name="cgroup.controllers" dev="tmpfs" ino=105 res=0 errno=0 [ 383.736058][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 383.741716][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 383.749565][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 383.769201][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 383.769875][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 384.216177][T15664] netlink: 1303 bytes leftover after parsing attributes in process `syz.5.2209'. [ 384.471710][T15675] xt_hashlimit: size too large, truncated to 1048576 [ 384.746665][T15681] netlink: zone id is out of range [ 384.746681][T15681] netlink: zone id is out of range [ 384.824427][T15684] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2211'. [ 385.708175][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2212'. [ 385.708213][T15687] netlink: 'syz.3.2212': attribute type 8 has an invalid length. [ 385.708226][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 385.762458][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2212'. [ 385.762481][T15688] netlink: 'syz.3.2212': attribute type 8 has an invalid length. [ 385.762487][T15688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 385.849630][ T5621] Bluetooth: hci9: command tx timeout [ 385.880901][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2212'. [ 387.247946][T15699] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2214'. [ 387.263690][T15699] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2214'. [ 387.275957][T15699] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2214'. [ 387.293661][T15699] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2214'. [ 387.304303][T15699] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2214'. [ 387.924751][ T5621] Bluetooth: hci9: command tx timeout [ 388.196409][T15746] batadv_slave_1: entered promiscuous mode [ 388.199433][T15751] bridge0: port 3(bond0) entered blocking state [ 388.199515][T15751] bridge0: port 3(bond0) entered disabled state [ 388.199668][T15751] bond0: entered allmulticast mode [ 388.199682][T15751] bond_slave_0: entered allmulticast mode [ 388.199735][T15751] bond_slave_1: entered allmulticast mode [ 388.264619][T15751] bond0: entered promiscuous mode [ 388.264641][T15751] bond_slave_0: entered promiscuous mode [ 388.264809][T15751] bond_slave_1: entered promiscuous mode [ 388.305264][T15751] bridge0: port 3(bond0) entered blocking state [ 388.305373][T15751] bridge0: port 3(bond0) entered forwarding state [ 388.535214][T15744] batadv_slave_1: left promiscuous mode [ 388.997320][T15763] hsr_slave_1 (unregistering): left promiscuous mode [ 389.030626][T15780] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 389.184440][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.186477][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.186637][T15651] bridge_slave_0: entered allmulticast mode [ 389.221353][T15651] bridge_slave_0: entered promiscuous mode [ 389.243152][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.243253][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.243411][T15651] bridge_slave_1: entered allmulticast mode [ 389.267965][T15651] bridge_slave_1: entered promiscuous mode [ 389.302742][T15787] syzkaller0: entered promiscuous mode [ 389.302763][T15787] syzkaller0: entered allmulticast mode [ 389.417607][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.581152][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.744615][T15651] team0: Port device team_slave_0 added [ 389.750715][T15651] team0: Port device team_slave_1 added [ 389.853406][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.853423][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.853444][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.890944][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.890961][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.890983][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.011713][ T5621] Bluetooth: hci9: command tx timeout [ 390.048670][T15651] hsr_slave_0: entered promiscuous mode [ 390.049669][T15651] hsr_slave_1: entered promiscuous mode [ 390.050366][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 390.050385][T15651] Cannot create hsr debugfs directory [ 390.501347][T15831] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 390.573627][T15831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.901358][T15846] netlink: 'syz.3.2253': attribute type 26 has an invalid length. [ 391.090098][T15651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 391.102684][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.105060][T15651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 391.122387][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.123329][T15651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 391.148201][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.149078][T15651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 391.171392][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.335538][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.360154][T15867] __nla_validate_parse: 31 callbacks suppressed [ 391.360174][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2257'. [ 391.389266][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.410941][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.411003][T10566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.435791][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.435851][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.489513][T15870] xt_connbytes: Forcing CT accounting to be enabled [ 391.489779][T15870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.040161][T15894] ip6_vti0: Master is either lo or non-ether device [ 392.064197][T15893] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2262'. [ 392.084266][ T5621] Bluetooth: hci9: command tx timeout [ 392.384686][T15903] bond0: (slave team0): Releasing backup interface [ 392.405625][T15903] veth0: left allmulticast mode [ 392.405650][T15903] veth0: left promiscuous mode [ 392.405838][T15903] bridge0: port 3(veth0) entered disabled state [ 392.483098][T15903] bridge_slave_0: left allmulticast mode [ 392.483124][T15903] bridge_slave_0: left promiscuous mode [ 392.483479][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.519727][T15903] bridge_slave_1: left allmulticast mode [ 392.519744][T15903] bridge_slave_1: left promiscuous mode [ 392.519865][T15903] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.566890][T15903] bond0: (slave bond_slave_0): Releasing backup interface [ 392.572367][T15903] bond0: (slave bond_slave_1): Releasing backup interface [ 392.592133][T15903] team0: Port device team_slave_0 removed [ 392.600718][T15903] team0: Port device team_slave_1 removed [ 392.601101][T15903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.602011][T15903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.603305][T15903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.607846][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2268'. [ 392.658137][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2264'. [ 393.844001][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.571505][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.647994][T15938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.779132][T15949] netlink: 'syz.7.2273': attribute type 1 has an invalid length. [ 395.988331][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2275'. [ 396.057811][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2275'. [ 396.058568][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2275'. [ 396.136887][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2277'. [ 396.136917][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2277'. [ 396.171689][T15651] veth0_vlan: entered promiscuous mode [ 396.192755][T15651] veth1_vlan: entered promiscuous mode [ 396.246470][T15651] veth0_macvtap: entered promiscuous mode [ 396.275291][T15651] veth1_macvtap: entered promiscuous mode [ 396.310783][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.344619][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.391361][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2278'. [ 396.435878][T10533] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.435938][T10533] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.435972][T10533] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.436005][T10533] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.752219][ T7185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.752240][ T7185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.798819][T15982] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 396.801182][T15987] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 396.891923][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2280'. [ 396.896626][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.896647][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.993118][T15995] netlink: 'syz.8.2283': attribute type 1 has an invalid length. [ 397.000065][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2281'. [ 397.000099][T15988] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2281'. [ 397.024053][T15995] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 397.279339][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2285'. [ 397.363293][T16009] netlink: zone id is out of range [ 397.372633][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2204'. [ 397.387281][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 397.391967][T16013] netlink: 'syz.3.2288': attribute type 10 has an invalid length. [ 397.392271][T16009] bridge0: port 3(bond0) entered disabled state [ 397.392457][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.393218][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.430170][T16016] netlink: zone id is out of range [ 397.453404][T16019] netlink: 'syz.3.2288': attribute type 10 has an invalid length. [ 397.709257][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2291'. [ 397.922556][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 398.041522][T16053] Bluetooth: MGMT ver 1.23 [ 398.081037][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2297'. [ 398.689210][T16090] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 398.770156][T16093] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 398.784322][T16094] netlink: 'syz.5.2306': attribute type 4 has an invalid length. [ 398.784357][T16094] .`: renamed from bond0 (while UP) [ 398.814868][T16098] tipc: Started in network mode [ 398.814897][T16098] tipc: Node identity ac14142f, cluster identity 4711 [ 398.819928][T16098] tipc: New replicast peer: 172.20.20.170 [ 398.820551][T16098] tipc: Enabled bearer , priority 10 [ 398.822871][T16098] tipc: New replicast peer: 0.0.0.0 [ 399.153840][T16109] macsec1: entered promiscuous mode [ 399.155769][T16114] veth1_macvtap: left promiscuous mode [ 399.178989][T16108] tipc: Enabled bearer , priority 0 [ 399.183193][T16108] syzkaller0: entered promiscuous mode [ 399.183214][T16108] syzkaller0: entered allmulticast mode [ 399.414523][T16114] veth1_macvtap: entered promiscuous mode [ 399.461887][T16114] batman_adv: batadv0: Adding interface: macsec0 [ 399.461906][T16114] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.461935][T16114] batman_adv: batadv0: Interface activated: macsec0 [ 399.707400][T16106] tipc: Resetting bearer [ 399.757247][T16106] tipc: Disabling bearer [ 399.973145][ T6403] tipc: Node number set to 2886997039 [ 400.001444][T16131] netlink: 'syz.7.2320': attribute type 30 has an invalid length. [ 400.005257][T16138] netlink: 'syz.7.2320': attribute type 30 has an invalid length. [ 400.098582][T16131] vxlan0: entered promiscuous mode [ 400.098607][T16131] vxlan0: entered allmulticast mode [ 400.219770][T16121] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 400.351826][T16138] vxlan0: entered promiscuous mode [ 400.359879][T16138] vxlan0: entered allmulticast mode [ 401.079248][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.087369][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.091250][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.672921][T16174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.672946][T16174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.703373][T16174] veth1_vlan: left promiscuous mode [ 401.705551][T16174] veth0_vlan: left promiscuous mode [ 401.707193][T16174] veth0_vlan: entered promiscuous mode [ 401.710637][T16174] veth1_vlan: entered promiscuous mode [ 401.721481][T16174] veth0_macvtap: left promiscuous mode [ 401.722743][T16174] veth0_macvtap: entered promiscuous mode [ 401.733146][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.740608][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.743170][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.796811][T16174] bond1: left promiscuous mode [ 401.797043][T16174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.797499][T16174] ip6gre2: left promiscuous mode [ 401.799349][T16174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.800403][T16174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.802464][T16174] bond4: entered allmulticast mode [ 401.802906][T16174] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 401.851008][T16174] macsec1: left promiscuous mode [ 401.887010][T10566] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.887870][T10566] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.888438][T10566] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.020481][T16207] __nla_validate_parse: 50 callbacks suppressed [ 402.020500][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2335'. [ 402.069117][T16205] macsec1: entered promiscuous mode [ 402.251209][T10566] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.251429][T10566] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.251621][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2337'. [ 402.275327][ T6402] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.350826][T16223] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2338'. [ 402.383994][ T142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.545445][ T5729] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.748290][ T5729] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.951944][T16242] C: renamed from veth1_to_team (while UP) [ 402.960029][T16242] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 402.960048][T16242] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2344'. [ 402.960571][T16242] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 403.699436][T16266] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2351'. [ 403.807484][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.809734][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.130350][T16282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2354'. [ 404.440698][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2355'. [ 404.471510][ T30] audit: type=1800 audit(1790578881.892:12): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2354" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2439 res=0 errno=0 [ 404.502633][T16296] netlink: zone id is out of range [ 404.502652][T16296] netlink: zone id is out of range [ 404.502659][T16296] netlink: zone id is out of range [ 404.502667][T16296] netlink: zone id is out of range [ 404.502674][T16296] netlink: zone id is out of range [ 404.502681][T16296] netlink: zone id is out of range [ 404.502694][T16296] netlink: zone id is out of range [ 404.502807][T16296] netlink: zone id is out of range [ 404.502815][T16296] netlink: zone id is out of range [ 406.164138][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 407.430471][T16266] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.471026][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2356'. [ 407.592593][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2357'. [ 407.592653][T16302] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2357'. [ 407.592665][T16302] tipc: Invalid UDP bearer configuration [ 407.592706][T16302] tipc: Enabling of bearer rejected, failed to enable media [ 407.651672][T16304] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2358'. [ 407.867086][T16322] netlink: 660 bytes leftover after parsing attributes in process `syz.7.2360'. [ 407.867109][T16322] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2360'. [ 408.000844][T16327] net_ratelimit: 433 callbacks suppressed [ 408.000866][T16327] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 408.161703][T16331] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2362'. [ 408.428188][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2367'. [ 408.428230][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2367'. [ 408.465943][T16346] openvswitch: netlink: IPv4 tun info is not correct [ 408.476889][T16352] openvswitch: netlink: IPv4 tun info is not correct [ 408.610740][T16358] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2369'. [ 408.819053][T16376] netlink: 'syz.3.2373': attribute type 11 has an invalid length. [ 408.927722][T16380] syzkaller1: entered promiscuous mode [ 408.927745][T16380] syzkaller1: entered allmulticast mode [ 409.250798][T16382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.313045][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.365771][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.510579][T16382] 8021q: adding VLAN 0 to HW filter on device bond9 [ 409.665436][T16396] syzkaller0: entered promiscuous mode [ 409.665458][T16396] syzkaller0: entered allmulticast mode [ 409.694920][ T6976] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 409.814964][T16415] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 410.127549][T16424] netlink: 'syz.3.2383': attribute type 12 has an invalid length. [ 410.168022][T16428] netlink: 'syz.5.2385': attribute type 1 has an invalid length. [ 410.182755][T10566] openvswitch: cpu_id mismatch with handler threads [ 410.273095][T16428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.379958][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.429008][T16435] bond0: (slave batadv0): making interface the new active one [ 410.445287][T16435] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 411.101040][T16477] netlink: 'syz.7.2392': attribute type 3 has an invalid length. [ 411.268764][T16483] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 411.268802][T16483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.651062][T16495] netlink: 'syz.7.2400': attribute type 16 has an invalid length. [ 411.651083][T16495] netlink: 'syz.7.2400': attribute type 17 has an invalid length. [ 411.811698][T16495] bond1: left allmulticast mode [ 411.829086][T16495] macvtap1: left allmulticast mode [ 411.829108][T16495] bond4: left allmulticast mode [ 411.848408][ T6399] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 411.894572][ T6399] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 411.930773][T16505] sctp: [Deprecated]: syz.3.2403 (pid 16505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.930773][T16505] Use struct sctp_sack_info instead [ 411.968692][T16512] ip_tables: iptables: counters copy to user failed while replacing table [ 412.023108][T16510] ipvlan4: entered allmulticast mode [ 412.033517][T16510] batman_adv: batadv0: Adding interface: ipvlan4 [ 412.033538][T16510] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.055984][T16510] batman_adv: batadv0: Interface activated: ipvlan4 [ 412.299627][T16527] bridge_slave_1: left allmulticast mode [ 412.299653][T16527] bridge_slave_1: left promiscuous mode [ 412.299949][T16527] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.340513][T16527] bridge_slave_0: left allmulticast mode [ 412.340531][T16527] bridge_slave_0: left promiscuous mode [ 412.340684][T16527] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.477877][ T30] audit: type=1107 audit(1790578889.902:13): pid=16533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Q j“éUŽð ß’H<ÁTÛœ' [ 412.585814][T16536] __nla_validate_parse: 16 callbacks suppressed [ 412.585836][T16536] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2410'. [ 412.828981][T16542] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2412'. [ 412.919593][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2416'. [ 413.195904][T16563] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 413.378706][T16578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2422'. [ 413.439467][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 413.636125][T16590] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2425'. [ 413.736485][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2426'. [ 414.004176][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 414.193324][T16612] ip6tnl0: Caught tx_queue_len zero misconfig [ 414.324014][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 414.390311][T16621] netlink: 'syz.5.2435': attribute type 9 has an invalid length. [ 414.390943][T16621] veth1_to_team: entered promiscuous mode [ 414.391323][T16620] veth1_to_team: left promiscuous mode [ 414.573644][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2439'. [ 414.600426][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 414.600446][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2437'. [ 414.660665][T16634] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 414.707501][T16634] ip_tables: iptables: counters copy to user failed while replacing table [ 414.939609][T10531] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 417.850748][T16640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.867389][T16667] netlink: 'syz.9.2446': attribute type 1 has an invalid length. [ 418.217809][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.217834][T16715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.221999][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.222021][T16715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.568588][T16728] __nla_validate_parse: 4 callbacks suppressed [ 418.568610][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2462'. [ 418.668855][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.670815][T16732] netlink: 'syz.7.2464': attribute type 1 has an invalid length. [ 418.672906][T16728] syzkaller0: entered promiscuous mode [ 418.672927][T16728] syzkaller0: entered allmulticast mode [ 418.753159][T16736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.915702][T16748] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2467'. [ 418.916584][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2467'. [ 418.916622][T16748] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2467'. [ 418.916634][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2467'. [ 419.101875][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2470'. [ 419.101917][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2470'. [ 419.269122][T16761] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2471'. [ 419.985174][T16787] xt_hashlimit: max too large, truncated to 1048576 [ 420.005647][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 420.029517][T16787] No such timeout policy "syz1" [ 420.241958][T16794] syzkaller1: entered promiscuous mode [ 420.241981][T16794] syzkaller1: entered allmulticast mode [ 420.300155][T16796] syzkaller0: entered promiscuous mode [ 420.300179][T16796] syzkaller0: entered allmulticast mode [ 420.841306][T16807] ip6erspan0: entered allmulticast mode [ 420.843550][T16804] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2487'. [ 421.431760][T16840] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 422.082587][T16875] netlink: 'syz.5.2502': attribute type 1 has an invalid length. [ 423.284788][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 423.399156][T16922] 8021q: adding VLAN 0 to HW filter on device bond18 [ 423.440936][T16923] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 423.519547][T16924] bond18 (unregistering): (slave geneve3): Releasing backup interface [ 423.540454][T16924] bond18 (unregistering): Released all slaves [ 424.291863][T16952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.367191][T16959] netlink: 'syz.3.2517': attribute type 39 has an invalid length. [ 424.926732][T16947] veth1_vlan: left allmulticast mode [ 424.974540][T16947] tipc: Resetting bearer [ 425.036542][T16947] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 425.085803][T16947] ip6gre1: left allmulticast mode [ 425.261138][T16947] ipvlan1: left allmulticast mode [ 425.261274][T16947] ipvlan2: left allmulticast mode [ 425.261283][T16947] bond14: left allmulticast mode [ 425.299035][T16947] vti0: left allmulticast mode [ 425.317654][T16947] ipvlan3: left allmulticast mode [ 425.352646][T16947] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 425.352696][T16947] ipvlan4: left allmulticast mode [ 425.352706][T16947] macvlan1: left allmulticast mode [ 425.363361][ T6976] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.363396][ T6976] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 425.366581][ T6976] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.366690][ T6976] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 425.369300][ T6976] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.369336][ T6976] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 425.369378][ T6976] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.369401][ T6976] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 425.662659][T16970] hsr0: entered allmulticast mode [ 425.662682][T16970] hsr_slave_0: entered allmulticast mode [ 425.681958][T16970] __nla_validate_parse: 9 callbacks suppressed [ 425.681981][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2521'. [ 425.711739][T16970] hsr_slave_0: left promiscuous mode [ 425.745856][T16970] hsr0 (unregistering): left allmulticast mode [ 425.829092][T16979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2523'. [ 426.072800][T16981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.141445][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2526'. [ 426.312858][T17006] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.312947][T17006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.312958][T17006] IPv6: NLM_F_CREATE should be set when creating new route [ 426.312995][T17006] IPv6: NLM_F_CREATE should be set when creating new route [ 426.313016][T17006] IPv6: NLM_F_CREATE should be set when creating new route [ 426.634614][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2530'. [ 427.431748][T17035] IPVS: fo: FWM 3 0x00000003 - no destination available [ 427.448611][T17035] IPVS: fo: FWM 3 0x00000003 - no destination available [ 427.579690][T17072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.677597][T17083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.936451][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2546'. [ 428.355736][T17112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2552'. [ 428.491652][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2554'. [ 428.571799][T17121] netlink: 'syz.3.2556': attribute type 11 has an invalid length. [ 429.002066][T17137] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2557'. [ 429.003238][T17137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2557'. [ 429.055934][T17137] veth1_to_team: entered promiscuous mode [ 429.061304][T17137] gretap0: entered promiscuous mode [ 429.092969][T17137] debugfs: 'hsr0' already exists in 'hsr' [ 429.092995][T17137] Cannot create hsr debugfs directory [ 429.093097][T17137] hsr0: entered promiscuous mode [ 429.707556][T17175] lo: entered promiscuous mode [ 429.825995][T17175] tunl0: entered promiscuous mode [ 429.848318][T17175] gre0: entered promiscuous mode [ 429.882883][T17175] gretap0: entered promiscuous mode [ 429.963386][T17175] erspan0: entered promiscuous mode [ 429.998962][T17175] ip_vti0: entered promiscuous mode [ 430.029414][T17175] ip6_vti0: entered promiscuous mode [ 430.060666][T17175] sit0: entered promiscuous mode [ 430.095733][T17175] ip6tnl0: entered promiscuous mode [ 430.137119][T17175] ip6gre0: entered promiscuous mode [ 430.165611][T17175] syz_tun: entered promiscuous mode [ 430.205814][T17175] ip6gretap0: entered promiscuous mode [ 430.212423][T17175] bridge0: entered promiscuous mode [ 430.213453][T17175] vcan0: entered promiscuous mode [ 430.283150][T17175] team0: entered promiscuous mode [ 430.283177][T17175] team_slave_0: entered promiscuous mode [ 430.283376][T17175] team_slave_1: entered promiscuous mode [ 430.316971][T17175] dummy0: entered promiscuous mode [ 430.324524][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 430.367078][T17175] nlmon0: entered promiscuous mode [ 430.387357][T17175] vxcan0: entered promiscuous mode [ 430.403685][T17175] vxcan1: entered promiscuous mode [ 430.418766][T17175] veth0: entered promiscuous mode [ 430.432571][T17175] veth1: entered promiscuous mode [ 430.455402][T17175] wg0: entered promiscuous mode [ 430.462318][T17175] wg1: entered promiscuous mode [ 430.478997][T17175] wg2: entered promiscuous mode [ 430.492515][T17175] veth0_to_bridge: entered promiscuous mode [ 430.525894][T17175] veth1_to_bridge: entered promiscuous mode [ 430.552315][T17175] veth0_to_bond: entered promiscuous mode [ 430.576006][T17175] veth1_to_bond: entered promiscuous mode [ 430.596128][T17175] veth0_to_team: entered promiscuous mode [ 430.616458][T17175] veth1_to_team: entered promiscuous mode [ 430.641840][T17175] veth0_to_batadv: entered promiscuous mode [ 430.657048][T17175] batadv_slave_0: entered promiscuous mode [ 430.672438][T17175] veth1_to_batadv: entered promiscuous mode [ 430.694600][T17175] batadv_slave_1: entered promiscuous mode [ 430.700154][T17175] xfrm0: entered promiscuous mode [ 430.717345][T17175] veth0_to_hsr: entered promiscuous mode [ 430.754030][T17175] hsr0: entered promiscuous mode [ 430.759247][T17175] veth1_virt_wifi: entered promiscuous mode [ 430.779384][T17175] veth0_virt_wifi: entered promiscuous mode [ 430.798766][T17175] virt_wifi0: entered promiscuous mode [ 430.834977][T17175] vlan0: entered promiscuous mode [ 430.849309][T17175] vlan1: entered promiscuous mode [ 430.867830][T17175] macvlan0: entered promiscuous mode [ 430.885274][T17175] macvlan1: entered promiscuous mode [ 430.900779][T17175] ipvlan0: entered promiscuous mode [ 430.900935][T17175] ipvlan1: entered promiscuous mode [ 430.942467][T17175] macvtap0: entered promiscuous mode [ 430.954302][T17175] macsec0: entered promiscuous mode [ 430.970735][T17175] geneve0: entered promiscuous mode [ 430.992860][T17175] geneve1: entered promiscuous mode [ 431.010766][T17175] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 431.028890][T17175] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 431.043504][T17175] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 431.052993][T17175] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 431.069644][T17175] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 431.088066][T17175] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 431.091400][T17175] bareudp0: entered promiscuous mode [ 431.091674][T17175] gre1: entered promiscuous mode [ 431.112818][T17175] sit1: entered promiscuous mode [ 431.112979][T17175] syztnl1: entered promiscuous mode [ 431.113096][T17175] bridge1: entered promiscuous mode [ 431.119470][T17175] bridge2: entered promiscuous mode [ 431.122887][T17175] ipip0: entered promiscuous mode [ 431.127054][T17175] ip6tnl1: entered promiscuous mode [ 431.146236][ T6976] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.146738][ T6976] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.146774][ T6976] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.146808][ T6976] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.452707][T17215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2571'. [ 431.485959][T17217] veth0_to_team: entered promiscuous mode [ 431.485981][T17217] veth0_to_team: entered allmulticast mode [ 431.682838][ T30] audit: type=1800 audit(1790578909.102:14): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2575" name=680B20 dev="tmpfs" ino=2650 res=0 errno=0 [ 432.151836][ T44] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 432.331919][T17263] geneve4: entered promiscuous mode [ 432.346710][T10566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.346756][T10566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.346789][T10566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.346820][T10566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.347819][T17259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'. [ 432.966722][ T44] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 433.202846][T17315] nbd: must specify at least one socket [ 433.214470][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.214502][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.216904][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.216933][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.226767][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.226798][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.230815][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.230846][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 433.552774][T17334] vlan0: entered allmulticast mode [ 433.552795][T17334] veth0_vlan: entered allmulticast mode [ 433.577661][T17337] netlink: 'syz.3.2601': attribute type 2 has an invalid length. [ 433.578380][T17337] sctp: [Deprecated]: syz.3.2601 (pid 17337) Use of int in max_burst socket option. [ 433.578380][T17337] Use struct sctp_assoc_value instead [ 434.283634][T17366] syzkaller1: entered promiscuous mode [ 434.283657][T17366] syzkaller1: entered allmulticast mode [ 434.397638][T17382] netlink: 'syz.8.2610': attribute type 2 has an invalid length. [ 434.628228][ T5631] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 434.646423][ T5631] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 434.650222][ T5631] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 434.651600][ T5631] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 434.652245][ T5631] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 435.348275][T17428] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 435.621492][T17440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.395830][T17485] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.416327][T17482] dvmrp0: entered allmulticast mode [ 436.492682][T17487] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.728834][ T5621] Bluetooth: hci10: command tx timeout [ 436.758446][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.758566][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.758736][T17392] bridge_slave_0: entered allmulticast mode [ 436.760358][T17392] bridge_slave_0: entered promiscuous mode [ 436.770600][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.770731][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.770901][T17392] bridge_slave_1: entered allmulticast mode [ 436.772980][T17392] bridge_slave_1: entered promiscuous mode [ 436.807378][T17392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.810687][T17392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.908289][T17500] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 436.909007][T17509] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 436.980453][T17392] team0: Port device team_slave_0 added [ 436.992743][T17392] team0: Port device team_slave_1 added [ 437.096890][T17392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.096907][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.096928][T17392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.098182][T17392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.098196][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.098217][T17392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.293208][T17392] hsr_slave_0: entered promiscuous mode [ 437.300405][T17392] hsr_slave_1: entered promiscuous mode [ 437.300851][T17392] debugfs: 'hsr0' already exists in 'hsr' [ 437.300868][T17392] Cannot create hsr debugfs directory [ 438.651314][ T31] INFO: task syz.2.1360:11770 blocked for more than 143 seconds. [ 438.651342][ T31] Not tainted syzkaller #0 [ 438.651352][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.651361][ T31] task:syz.2.1360 state:D stack:25792 pid:11770 tgid:11769 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 438.651423][ T31] Call Trace: [ 438.651433][ T31] [ 438.651448][ T31] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 438.651514][ T31] ? __pfx___schedule+0x10/0x10 [ 438.651549][ T31] ? schedule+0x90/0x2b0 [ 438.651577][ T31] schedule+0x164/0x2b0 [ 438.651603][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.651626][ T31] __mutex_lock+0x7c1/0x1550 [ 438.651658][ T31] ? __mutex_lock+0x5d4/0x1550 [ 438.651689][ T31] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 438.651718][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.651742][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 438.651784][ T31] ? kern_path+0xd1/0x150 [ 438.651814][ T31] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 438.651838][ T31] ? __nla_parse+0x40/0x60 [ 438.651865][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 438.651891][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 438.651917][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 438.651951][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 438.651991][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.652031][ T31] ? bpf_lsm_capable+0x9/0x20 [ 438.652049][ T31] ? security_capable+0x7e/0x2c0 [ 438.652080][ T31] genl_rcv_msg+0x614/0x7a0 [ 438.652113][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.652136][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 438.652179][ T31] netlink_rcv_skb+0x226/0x4a0 [ 438.652200][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.652227][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.652265][ T31] ? down_read+0x2be/0x330 [ 438.652297][ T31] genl_rcv+0x28/0x40 [ 438.652319][ T31] netlink_unicast+0x7bd/0x940 [ 438.652361][ T31] netlink_sendmsg+0x813/0xb40 [ 438.652392][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.652422][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 438.652447][ T31] ? __pfx_netlink_sendmsg+ ** replaying previous printk message ** [ 438.652447][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.652466][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 438.652491][ T31] ____sys_sendmsg+0x54e/0x850 [ 438.652525][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.652563][ T31] ? import_iovec+0x73/0xa0 [ 438.652592][ T31] ___sys_sendmsg+0x2a5/0x360 [ 438.652617][ T31] ? __lock_acquire+0x747/0x2de0 [ 438.652643][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.652674][ T31] ? futex_wake+0x51b/0x5f0 [ 438.652894][ T31] ? __fget_files+0x2a/0x420 [ 438.652922][ T31] ? __fget_files+0x3a2/0x420 [ 438.652959][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 438.652998][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.653051][ T31] do_syscall_64+0x166/0x520 [ 438.653075][ T31] ? trace_irq_disable+0x3b/0x140 [ 438.653095][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.653115][ T31] ? clear_bhb_loop+0x70/0xc0 [ 438.653140][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.653160][ T31] RIP: 0033:0x7fb6ff99e159 [ 438.653177][ T31] RSP: 002b:00007fb7008b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.653228][ T31] RAX: ffffffffffffffda RBX: 00007fb6ffc25fa0 RCX: 00007fb6ff99e159 [ 438.653242][ T31] RDX: 0000000004000880 RSI: 00002000000000c0 RDI: 0000000000000003 [ 438.653256][ T31] RBP: 00007fb6ffa3506b R08: 0000000000000000 R09: 0000000000000000 [ 438.653268][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.653280][ T31] R13: 00007fb6ffc26038 R14: 00007fb6ffc25fa0 R15: 00007ffd5bd1af38 [ 438.653339][ T31] [ 438.653348][ T31] INFO: task syz.0.1411:12024 blocked for more than 143 seconds. [ 438.653362][ T31] Not tainted syzkaller #0 [ 438.653371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.653379][ T31] task:syz.0.1411 state:D stack:27528 pid:12024 tgid:12020 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 438.653430][ T31] Call Trace: [ 438.653436][ T31] [ 438.653448][ T31] __schedule+0x17db/0x58f0 [ 438.653491][ T31] ? kasan_save_track+0x3e/0x80 [ 438.653536][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 438.653559][ T31] ? genl_family_rcv_msg_doit+0x233/0x340 [ 438.653583][ T31] ? genl_rcv_msg+0x614/0x7a0 [ 438.653612][ T31] ? __pfx___schedule+0x10/0x10 [ 438.653647][ T31] ? schedule+0x90/0x2b0 [ 438.653674][ T31] schedule+0x164/0x2b0 [ 438.653701][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.653724][ T31] __mutex_lock+0x7c1/0x1550 [ 438.805957][ T5621] Bluetooth: hci10: command tx timeout [ 438.847834][ T31] ? __mutex_lock+0x5d4/0x1550 [ 438.847880][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 438.847909][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.847943][ T31] ? __nlmsg_put+0xef/0x1b0 [ 438.847975][ T31] ? genlmsg_put+0x137/0x2e0 [ 438.848004][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 438.848039][ T31] ? __nla_parse+0x40/0x60 [ 438.848065][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 438.848090][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 438.848115][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 438.848149][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 438.848183][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.848218][ T31] ? __lock_acquire+0x747/0x2de0 [ 438.848251][ T31] genl_rcv_msg+0x614/0x7a0 [ 438.848282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.848306][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 438.848348][ T31] netlink_rcv_skb+0x226/0x4a0 [ 438.848369][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.848395][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.848433][ T31] ? down_read+0x2be/0x330 [ 438.848465][ T31] genl_rcv+0x28/0x40 [ 438.848487][ T31] netlink_unicast+0x7bd/0x940 [ 438.848528][ T31] netlink_sendmsg+0x813/0xb40 [ 438.848560][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.848590][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 438.848615][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.848634][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 438.848661][ T31] ____sys_sendmsg+0x54e/0x850 [ 438.848694][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.848732][ T31] ? import_iovec+0x73/0xa0 [ 438.848768][ T31] ___sys_sendmsg+0x2a5/0x360 [ 438.848794][ T31] ? __lock_acquire+0x747/0x2de0 [ 438.848819][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.848848][ T31] ? futex_wait+0x2a2/0x390 [ 438.848907][ T31] ? __fget_files+0x2a/0x420 [ 438.848932][ T31] ? __fget_files+0x3a2/0x420 [ 438.848969][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 438.849004][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.849056][ T31] do_syscall_64+0x166/0x520 [ 438.849079][ T31] ? trace_irq_disable+0x3b/0x140 [ 438.849098][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.849118][ T31] ? clear_bhb_loop+0x70/0xc0 [ 438.849141][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.849161][ T31] RIP: 0033:0x7f810819e159 [ 438.849179][ T31] RSP: 002b:00007f810903a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.858687][ T31] RAX: ffffffffffffffda RBX: 00007f8108426090 RCX: 00007f810819e159 [ 438.858703][ T31] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 438.858715][ T31] RBP: 00007f810823506b R08: 0000000000000000 R09: 0000000000000000 [ 438.858726][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.858737][ T31] R13: 00007f8108426128 R14: 00007f8108426090 R15: 00007ffe70264528 [ 438.858766][ T31] [ 438.859816][ T31] [ 438.859816][ T31] Showing all locks held in the system: [ 438.859830][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 438.859844][ T31] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 438.859897][ T31] #1: ffffffff9ad452d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 438.859952][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 438.859964][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.860030][ T31] locks held by klogd/4973: 1, last CPU#1: [ 438.860043][ T31] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.860085][ T31] locks held by getty/5372: 2, on CPU#1: [ 438.860098][ T31] #0: ffff88802aff80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.860148][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 438.860195][ T31] locks held by syz-executor/5602: 2, last CPU#1: [ 438.860207][ T31] #0: ffff8880330bb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 438.860255][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 438.860323][ T31] locks held by syz.1.763/9140: 2, on CPU#0: [ 438.860335][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.860379][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 438.860444][ T31] locks held by kworker/u8:45/10533: 3, on CPU#1: [ 438.860456][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.860503][ T31] #1: ffffc90006847c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.860551][ T31] #2: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 438.860595][ T31] locks held by syz.2.1360/11770: 2, on CPU#1: [ 438.860607][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.860651][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 438.860697][ T31] locks held by syz.0.1411/12024: 2, on CPU#1: [ 438.860709][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.860753][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 438.860808][ T31] locks held by syz.4.1982/14620: 2, on CPU#1: [ 438.860821][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.860864][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 438.860909][ T31] locks held by syz.6.2103/15187: 2, on CPU#0: [ 438.860922][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.860965][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 438.861015][ T31] locks held by syz.9.2475/16770: 3, on CPU#1: [ 438.861027][ T31] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.868887][ T31] #1: ffff88804cefb6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 438.868957][ T31] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 438.869011][ T31] locks held by syz-executor/17392: 2, on CPU#1: [ 438.869025][ T31] #0: ffffffff8fa93a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 438.869081][ T31] #1: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 438.869130][ T31] locks held by syz.3.2638/17510: 2, on CPU#1: [ 438.869143][ T31] #0: ffff888056d1a4c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 438.869192][ T31] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 438.869243][ T31] locks held by syz.5.2639/17514: 2, on CPU#0: [ 438.869256][ T31] #0: ffff8880415669c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 438.869345][ T31] #1: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: gtp_encap_destroy+0x25/0x1b0 [ 438.869389][ T31] locks held by syz.5.2639/17515: 1, last CPU#1: [ 438.869402][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 438.869447][ T31] locks held by syz.8.2641/17526: 1, on CPU#1: [ 438.869459][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 438.869503][ T31] locks held by syz.8.2641/17527: 1, on CPU#0: [ 438.869515][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 438.869562][ T31] locks held by syz.8.2641/17528: 1, on CPU#1: [ 438.869575][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 438.869622][ T31] locks held by syz.8.2641/17531: 1, on CPU#0: [ 438.869633][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 438.869676][ T31] locks held by syz.7.2642/17530: 1, on CPU#0: [ 438.869689][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 438.869735][ T31] locks held by syz.7.2642/17532: 1, on CPU#0: [ 438.869747][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_add_ifaddr+0x14d/0x3e0 [ 438.869819][ T31] locks held by syz.7.2642/17533: 1, on CPU#1: [ 438.869832][ T31] #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_del_ifaddr+0x10b/0x180 [ 438.869875][ T31] [ 438.869881][ T31] ============================================= [ 438.869881][ T31] [ 438.869901][ T31] NMI backtrace for cpu 1 [ 438.869918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.869940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.869951][ T31] Call Trace: [ 438.869958][ T31] [ 438.869965][ T31] dump_stack_lvl+0xe8/0x150 [ 438.869992][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 438.870013][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.870043][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 438.870066][ T31] sys_info+0x135/0x170 [ 438.870082][ T31] watchdog+0xfd7/0x1030 [ 438.870109][ T31] ? watchdog+0x1c7/0x1030 [ 438.870135][ T31] kthread+0x38b/0x480 [ 438.870153][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.870168][ T31] ? __pfx_kthread+0x10/0x10 [ 438.870186][ T31] ret_from_fork+0x514/0xb70 [ 438.870207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.870224][ T31] ? __switch_to+0xc89/0x1420 [ 438.870252][ T31] ? __pfx_kthread+0x10/0x10 [ 438.870278][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.870321][ T31] [ 438.870350][ T31] Sending NMI from CPU 1 to CPUs 0: [ 438.870383][ C0] NMI backtrace for cpu 0 [ 438.870396][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 438.870417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.870429][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 438.870454][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 438.870471][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 438.870488][ C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 438.870501][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 438.870512][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 438.870525][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 438.870540][ C0] R13: 0000000000000000 R14: ffffffff9ad45300 R15: 0000000000000000 [ 438.870552][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 438.870568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.870581][ C0] CR2: 00007fc4243eb840 CR3: 000000003e152000 CR4: 00000000003526f0 [ 438.870609][ C0] Call Trace: [ 438.870615][ C0] [ 438.870624][ C0] wait_for_lsr+0x184/0x2f0 [ 438.870648][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 438.870681][ C0] serial8250_console_write+0xaa1/0x1200 [ 438.870709][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 438.870730][ C0] ? __schedule+0x17f1/0x58f0 [ 438.870770][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 438.870802][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 438.870836][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 438.870867][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 438.870892][ C0] nbcon_kthread_func+0x679/0x880 [ 438.870916][ C0] ? nbcon_kthread_func+0x163/0x880 [ 438.870939][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 438.870964][ C0] ? __kthread_parkme+0x71/0x1f0 [ 438.870998][ C0] ? __kthread_parkme+0x199/0x1f0 [ 438.871028][ C0] kthread+0x38b/0x480 [ 438.871046][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 438.871064][ C0] ? __pfx_kthread+0x10/0x10 [ 438.871083][ C0] ret_from_fork+0x514/0xb70 [ 438.871102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 438.871119][ C0] ? __switch_to+0xc89/0x1420 [ 438.871147][ C0] ? __pfx_kthread+0x10/0x10 [ 438.871166][ C0] ret_from_fork_asm+0x1a/0x30 [ 438.871203][ C0] [ 438.879483][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 440.276581][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 440.285773][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.295822][ T31] Call Trace: [ 440.299100][ T31] [ 440.302033][ T31] vpanic+0x56d/0xa60 [ 440.306026][ T31] ? __pfx___schedule+0x10/0x10 [ 440.310877][ T31] ? __pfx_vpanic+0x10/0x10 [ 440.315396][ T31] panic+0xc5/0xd0 [ 440.319118][ T31] ? __pfx_panic+0x10/0x10 [ 440.323531][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 440.328993][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 440.334365][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 440.340522][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 440.346693][ T31] watchdog+0x1030/0x1030 [ 440.351035][ T31] ? watchdog+0x1c7/0x1030 [ 440.355462][ T31] kthread+0x38b/0x480 [ 440.359523][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.364192][ T31] ? __pfx_kthread+0x10/0x10 [ 440.368785][ T31] ret_from_fork+0x514/0xb70 [ 440.373371][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.378481][ T31] ? __switch_to+0xc89/0x1420 [ 440.383170][ T31] ? __pfx_kthread+0x10/0x10 [ 440.387753][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.392533][ T31] [ 440.395871][ T31] Kernel Offset: disabled [ 440.400244][ T31] Rebooting in 86400 seconds..