last executing test programs: 2m41.181206258s ago: executing program 4 (id=2197): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x4048000}, 0x40002) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m40.822623178s ago: executing program 4 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x100005, 0x4, 0x0, 0x10000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES64=0x0, @ANYBLOB="f8ffffff00000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000840, 0x2000000009ae, 0x200000000bfa], 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000029000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00"/144]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000036, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000b2000000006911d4000000000006000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r8, @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001580)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}]}, 0x48}}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) readv(r11, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r10, &(0x7f0000000140)=@abs, 0x6e) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r12}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xbc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m39.768939804s ago: executing program 4 (id=2206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) unshare(0x20040600) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x6) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7a01ff9457fac3d87181861b0000000000000000001df5ffffffffffff0000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000007801a0000c142b4590000"], &(0x7f0000000000)='GPL\x00', 0x100000c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, 0xffffffffffffffff, 0x18, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) recvfrom$inet6(r9, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r11, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x11a, 0x4, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) syz_emit_ethernet(0x120, &(0x7f0000000480)={@local, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x1a, 0x4, 0x1, 0xd, 0x10a, 0x67, 0x0, 0x3, 0x8, 0x0, @broadcast, @local, {[@rr={0x7, 0xb, 0x16, [@remote, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x34, 0xa2, 0x1, 0x2, [{@broadcast, 0xee}, {@broadcast, 0x68}, {@local, 0x81}, {@remote, 0xe8000000}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x81}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5}]}]}}, "19bca10856b65c218ec88c6b4416ca7ced381c945214fc0a33b4704fb7689ce008be2c013a4c73ef35ce94629ea56a6bff84961ae579f0f6a2be5691790347654a0723cfe20862b1af0d07e1e519b9a4a3cb1e8868f1257ba10f2baf4e44d197426462198b060f83a77e7ab8260d8d1bfeb7413fa53416cfb5ead3bc55489aebad5f8dbd5638aa7848dd494886450b9e6f025b9317ee393749e542166f926d8cd648"}}}}, 0x0) 2m39.285980562s ago: executing program 4 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020003}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffbff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x104, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x90}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x28d5dcbe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffeff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000480)=0x100, 0x4) getsockname$netlink(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000540)={0x7, 0x5, 0x9, 0x1, 0x8000, 0x80}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000700)={{r4, &(0x7f0000000580)='syz0\x00', 0x100, &(0x7f00000005c0)={@align=0xf, {0x7750, 0x0, 0x2, 0x100000001}}, 0xffff66c1, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)}, {[0x401, 0x80000001, 0x8, 0x3]}, 0x8, 0x55, &(0x7f0000000680)=""/85}) connect$llc(r5, &(0x7f0000000780)={0x1a, 0x102, 0x9, 0x1, 0x5, 0x8, @remote}, 0x10) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000008c0)=0x2, 0x4) r6 = accept4$vsock_stream(r5, &(0x7f0000000900)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000b40)={{r6, &(0x7f0000000940)='nl80211\x00', 0x100, &(0x7f0000000980)={@_ha_fsid={[0x4, 0x3fa0000]}, {0x3, 0x912, 0x6, 0x2}}, 0x6, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x9}, 0x1, &(0x7f0000000b00)=[{0x1, 0x8, &(0x7f0000000a40)='nl80211\x00', &(0x7f0000000a80)="bcac3b253182ed4d56813daada232494ea84e73efd1fac61b29a174d5becb64783b73b7b5dd330b9be38c315e65c8241c2dfa9892922b16d639917bf8ec58f1d3336010229b1a0cdcde4de87fc42390f3aed9a726c9a1f76ea66c522b4b26c", 0x5f}]}) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{}, 0xda, 0x6, 0x7, 0x1, 0x26, 'syz0\x00', "56fe94f154c624695cca92476f0963a0782986fa8ceafd5560c4cdadc447a109", "3958ea80dc0555ab9483ebb39f017df5bd86bbc7aa107ffc456f6e8fdb97f16c", [{0x3, 0x2, {0x3, 0x3}}, {0x8, 0x5, {0x2, 0x6}}, {0xd540, 0x9, {0x3, 0x5}}, {0x8, 0x4, {0x1}}, {0x7f, 0xc0b9, {0x1, 0xb54}}, {0xfffb, 0xbbaa, {0x2, 0x4}}, {0x7, 0x1000, {0x1, 0x5}}, {0x5, 0x9, {0x0, 0x2}}, {0x2, 0x3, {0x0, 0x10001}}, {0xd, 0xb, {0x1, 0x3}}, {0x0, 0xfffa, {0x3, 0x1}}, {0x5, 0x9, {0x0, 0x2}}, {0x7, 0x8, {0x3, 0x4}}, {0x7, 0x4, {0x1}}, {0x7aa6, 0x6, {0x0, 0x3}}, {0x3, 0x3, {0x1, 0x1}}, {0x0, 0x800, {0x1, 0x1}}, {0x0, 0x3, {0x3, 0x10000}}, {0x7ba, 0x7f, {0x0, 0x8}}, {0x6, 0x9801, {0x1, 0x7}}, {0xd96a, 0x6, {0x1, 0x5aeb}}, {0x0, 0x5, {0x0, 0x7}}, {0x5, 0x2, {0x2, 0x9}}, {0x9, 0xf8, {0x2, 0xa}}, {0x0, 0x99, {0x2, 0x9}}, {0x8, 0x0, {0x2, 0xd4}}, {0x3, 0xd, {0x2, 0x8}}, {0x1, 0x8, {0x0, 0x8}}, {0x6, 0x7, {0x3, 0xa}}, {0x8f, 0x200, {0x3, 0x9}}, {0x0, 0x1000, {0x1}}, {0x66, 0x9, {0x1, 0x6}}, {0xfff9, 0x37b, {0x0, 0x4}}, {0x5, 0x5, {0x3, 0xffffffff}}, {0x6, 0x7, {0x2, 0x8}}, {0x4, 0x0, {0x1, 0x101}}, {0x80, 0x4, {0x2, 0x4}}, {0x4, 0x394, {0x2, 0x9}}, {0x9, 0x3, {0x1, 0xfffffffb}}, {0x0, 0xff, {0x2, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001080)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r7, 0x0, 0x1000, 0xb9, &(0x7f00000010c0)="cc4190f6e56a288f25a2e0255979166e973f88ecfe43cb132b571d944af5f76598e6584177f4e54b1b81afbbcb86fc8453d6cb86ea558b1252812b634d4e4957c67a294358c925373fba8b18f5200afd4afc755a14c24ba0452e19eb235dd91cc38ee74276c50c44232083bb656a2ed9c7fc2f91d719378309eada48564a63d58784585423ba69345d89771be65f8148d7d25763acd1c33285c48f8181413b97328a92c5651c308e04392c59658722cbfc916952ace9b1d01f13bf24a2e6c09c1f6f7bd4996bac695dc09fd6018ddcc31ecaf17816ca419f557029abf22afbf07ece874eae1f2b142430366a5500461d55d53c811602d090e4a74e95f737577b14dec70d9d0799d2b061c501787cd2eefe16095c923ecbc5fa0236bc803f7dbd3664e5d52d9d0dcdc32df8bc2754b51d7deacec2b8799b2ffc1e5b1cb8c5814c8e44d9c820ee09d8f1b84cfa7ffb53f74ecd93cc78ca6e6492ebb6b2210aff85e386f91af436e4173c7c7e6eb520a74ea0ad4042cd05af2016d04704b21bcf24837aed314f2dbbcf6cec072218934d57fe580711522e4548429f9e4edcb4989d78cd97550c7fa38649786539106db9a240e7596e74f4680c82e65b9e32f18f80c374abdf6d24f897a982803afe1ad7964a7303be6b707722cc05c49d0f23e79f6d0ed9456f4af02016de84d0517a5c0e6572a1dadcd608a5828918f78ffc428bac6ca8d7fb7aa5c2d362250e1357d8b008d59726f6a8ee67b211c5d5725540d7bc26d84f38da4cf2b22a9b14e92b13a477dd4dbf52dadbd2b1096b7db7c9a928b1ef7862517923476e2c6b75a4a92f305fb268c2c38b119d34c7c02734d6a22038dfc37837a15a930772100f2c377996c56b72f75dc04a106f5911c964ad863f34f9efb736b250cba1c68b128baf9f23fb4e00d887db3f0d509750547062ea14d2289c60db78658403cdb7936ee7b2e299ee28ac18581fe8b563638896e98a7c312829cf3480388c2c06a2c00960ca577df30683f9a4a7028283cad68561ef5e1ba2c72779d4a5d5ab4321aafd916bbf71c4718617337d76e4a55f06118d128e98f83706f60c640cdfafe27e7fb2c73f1c15bf54c0ad4ac4d69386c7f4d3f3f82084a93091a2114c2852e8c6624e185fa2ae9fef1a7a79a162dcd58d3ee41b9272fe2cfcde7eee0003e774c07dfde6fffded718f64210a07eebdc162acfb24440f26c006c95d5ec2fefac838a406c4a136423c56b7026654963d2e914faaf5b0fbaa41a0946b8d0e3e6716381d1acb032903bba730d1e24de9fde243d80cfb2d67d41721c790b331c69c91cf4fc35939e165f4152b49ddf770b980d89e6d6d956993091ce3fc6f5c6434d219a93d372a29716af7d4e3a04f5c730b54dcd8854ed16a2555b0b47413ee89a5e26ad3b9eeb722b41a56be1de7744a91fe5f952ee48c091a7e05bab9c7ee4ade6f73ca305375f166abfb5f18e7f33a4e14700e328bb3c8f52d78b945f34656cd84e1cb6a3e6b244315a109c4de52ecf0f7ea49ed866d7cf40e3a0a9b9080e7ac27089af2800513d908d2e72371891cde04bcc089936ca6c56d0909e4de6a13cbd4b985ac2d19a64db6aeb8c511d4c4cf3a8ee4de81c70e91753104f5197f315117bc624e6c8d496a947a703e3e17a9e5cd01c7427cf3a2660d2054185179547286ed083d5ae0d097dbacd92de8f886c4c5a5f2e39119a4de2bb685dce46980c8ad1017043200db8a67dd2e0ddfb575fd36c62f7d6c231928a1a925ae4215e88696037bfb809dd242ac31f0c2c4ab3edd154455e78b1653838f92bb4320b52cddffe51178c8d3b5b632d625a26f2a51d37559fe47617b9fc19a2c33eb45ed95fb57753b65b07eba4befd220bbc776112d53e6d12a86e1324cbce946de70217396ed8956095f4bdf020b41b8808035dfeebdb51a298a783d1ad01437f303206b9b5db684ffa5a92cfa861a53ceba71f1dbbfa8ad7dcdb1c3d6df59c005ed63bc8a3188a743812f66feabefaba557f555be90fbd7f5c16bb9454912687041258c6963cbe8c7406a6432ca2f2b5b070e3ab71e82114c4c81a0d661380b9b2ce2c0bf68cc6a941ad355fb962e1cda72219712175705c7ffdd417b1fd26a3c4b46ccae1b519233a770dfc059738c729840f72c5ea3ffa86354b5f4093ce42288613c0d2dd99e8fc8f10b69aed86fb2b3da35047c6d52a6e25bdcd2992f468107a4fc6a7cb2912871d2e696967ecd8248b8f9ead730fa89371aa30ffba44633a9501bf49727a0bfe2a9954da27b062d53bab271f683b73b9669655d08c5fb7f6fca144f6188e56d9e7cdfe916302d1ee73e6e800b6ce90fb36d9f59733f5f4715113f75bd8b13ebe9f1f5d877e81d9e57d953b4757b762db1fe247438b68b3b263fa17dc72bed58fbd545c2183036dafa5e04902523547c33e630d23cd41409c61bda0f71a42f3e65f3ce578419fd1c6ff0b1fb4d4dabeb5b2965ca2c9a233659a473afce7aa671554948d5f68f11a854f42c99afe2940f274ad7ede1ad8bddebecb27e1967e0598933ec90a0e269cc1a0f2502b320bd2fa86dcf361f33b5541c34a2e314947185a6bee644afc83c25377da13331ac2ffe4c8afb8740bb2d1098303f8fee532c7a270a5d4f41ec660bdee82e3139ed0e2bd6362c24e05dbe27e27f98b25707fb800e4b1f97342d686baac09d89a85fd047e93e3d7a16491c720c7c3ac6f546d29a8d6db88e2c93fb27bd263f925c8fb69acc1c3eb1c2bec78ec0ca70403dcb84d67990012fb6f0360b71052d5f32e15478d038f015d7502439fa65f96247a923f92560e1b6ec90a3ce7ab7f699b81e21fcf028c9adb1441feb7f2c7ae384f4912d1bc22711bad7407b2bae6203aaa67067dd0f8f91e75e0052cee05e8f6498aad4798c7ca11c0d0993ec26a3d1012ab32ddb2a094dc9ab7e95aedbce8ecf1eb4d703fd6965653c0d2775b446ba3b1a5c7163e83a05171904886c032bbd85c4dfd76f2b4b55facc2ec550905c9d32edfc8fcfdcfe678c250eef6c1bf65c0ad77cd71de19fdafd5010710118841520aaaddedbeb1db9c77baf6f0fa72b1a3c3a88411acfd4d3f8e3cc642b056711f6efd00ab4317db43273c7a578d91ad6b9fc4e98436269e02cc8eb1b48733c66c3f5061b3fdeee09f5b170a5d685548fe8184ff2f5af220645046e0b7769e504cf31b8d667c4ba54f64cd7b8e0b92db425cb0a0aeee5014196cfe376c4d3e1f05efa22422b403760c7451266bacd2c2a2e98fe6b3d22d2a7c21e39fab0d37083b3b814ddbbaa5eb8763016d0aec635157531691920aa818d67c7c8ee8660d61cdb7a09100069c89500897267cbe8631435e18cb2baabbd309428c2597d999cdba019d3072146182d0386aa19b2030f7605134785c3bb6d9f4af6f228fe911daa7cc8072445ed17be0db2a42da5a4fc99a9922f549cc12fcd8203a1e6ecb1da5dc66c38d4cc1557148f26f464956a955565236af7141181bea0997ea68da70b53c4c82824ce6f86493debf0ce9be126936dbf7514665f7622375e1c1a66730ffdefb85f39303229384f62777b88b22fdb4ba1cb46431f53e6e8f27394de1f4c8a43db65d7262c97c3ff5e5da34135141ebbe3d19bd32c6fed50fe51836be82c5e0c8211cfa32d38a9f8e658335faa35b82dd6b2393e9c614a4919ff9187a560ee33972d5942ea5833d286b2471a01435a116da825d2287b836d40059e162eeb0ebba54969c2493da58f947a913adb2800734aed4d939de8353a0d19964056d410a0b84022afcc08364bc88ca104cc20ecc8319f0a22ae537dfb1bd919e1ec5f37b40603933cd6c646e7878c0ee9186e6022a643a700186b51e1bdeb45f5f208c84261b339d413790de4af88eac18403162b40a045056e4983994e5df1e720f6463d1b9d500084193d9ee6cd2bc1928e4c3877fa79080506221c1cc6a380efc326ca1bac7f78c1d48659af97ec6ef9f606879274a939900cc48ceb79a6167d9bd714c2ff107ac136659fc1a42709c07715765c75067fc5337eae67f2d09d45ae04e9e6ac19fef8f0589720d2e04ab55985ba3da21c3f432cee02b5fc771bfbf1a25533b0d365098842c980a6c06b42591aa7b911868c94f1ffc3c88e2b64aa5edbb98728a8f8f1565e6650ddc85d766b4a420ad161cc315a70fe13b61201dae8fc67d241a074ea4453066d82a5014501941940b8be3efa065b6eaae009a785f30e79f6ad64ee18456fd88cd79e4804680ddb89e776f541b3c303d6d8877cdf2e80de3264e5331d2d57363d7b0396e3b9a0d96d703a122f529b413fcdbadd9cf054b8714cc78f5f1a964810815c0d164429493513c191f97f751fd8552593794dbaceafb64318c0d94aaf7db915873c11099789d66570f0e36ec3bcdb0b9a19be66cdd695a639a9fe83e025e27a82cc20f9a6b42cf03952ded94a0bb4b0ff973f9d612014c949d6072c4d5f593dac2f1aac8526cf8300d5f7d9411a0411a898a0659db889b5b4c43de9e61bfceed59a628cb16cc16645593c9f7865e1656dbd649ee16f64134c24642df6b05bd1134435fa690ff814c9ef6eb1930c0b98d4ed53bc3a62a97a077ba095f0e93b1ae4cf86675966444102d64e7f7cf22217f41d1509c61cac9642fe78fe8b8f78dc549dcbf6b17e3d8693869b287310565ceff51a6ea6dc00ad10d9763922cd4db6d34bfc12fbfc194cdffab1fc543456764f15de878bfc6fe8d40a076424a8c217a9978f78fa6ef5bcb1624472990c6fa0357e834f2535dad7ea892e825591e89d9d2965f6dec84f9eac40cb1a9fa7c8636a46f2eb155233a5b20ed83888e2f723aaf69dc62fd5c94e59559a9317c7056fbb48072e6e84374944363b969ae5410dd21fad17c112be087be742eb50d8ec9934849e4b725e85c05e36b1d3c04a462c1bc7421edc848ca357781366e3f22876cd04e68a2d19e35d1e5132373239cc77db2d07fb764be9350ef97b635e7f15a0c543ab40ee810f3c325934b4d05aba808e5f675714977d78c89d6e771242a279b73d9933c8f31fb171d7d9a296f5b558a2f08933ae5e9b3fa71734e4e302d6f53cc65a7608a961076524698a882bd29e7ab823b9117272642a87ce0b3bfd2f3ff6d7186daa5f5428dadeb97ab0140f0583ef1e5cbc956fed063c256fc1224cc53a8e7d1e672a8fdefdc6d6142b2003d679af6f3c202914c59e3183f810dd078a9cf7b06c76e618e10e33a04a10d1dc8daccd529eb845eaa73a28a5fe5375f1dc2690857aed56b9f8b2796b231133536e66547e45009f4fbf123d0ffcde75fb46c45a64a43ef14ed57a5ea460c63c30d4a5e7b16cb1fd9de333152a7351364b740f7c92a5b3ff009dfa4ce2617f5a6deb3a28cf5dacb0e754956ff9ad1ab2bf273df2fe49c778abc99c2cca64276d14b5beed370343c007e8a0e0896caea18e8a46f5acc39658d9a2bb47ad24ce1f1dbac5c22db3dc4cea63ddb3a3e67cab43c6bc8fc1e9d6bd09b562a286599bb3d983dcc2cecaebe8e6e7ae75062d8a0671fefa9d5dc439bd4380c67d75473c0fd81f1037a1791a81766ed9afc22a49819653ec5736fa388f11e9d0a696a8a0d3f4b1222b70abdb6ca3ca4452a53a567f71110c2f1c78d4931cd53168aafa903b138f058c8764433df465387e930acada96beb459409498334401cdea7697ded698a53c61219479073fa72b15f1bc28ccacec1dac1620f1e846e11a6eacc45992431d94bc9354b772087b853d37333a6cf3a26fd97441bc3270468a", &(0x7f00000020c0)=""/185, 0x454, 0x0, 0x53, 0x9c, &(0x7f0000002180)="1b0242b093ad5750e4e1baa477641c261e2539d317bba57a196ab84ef1220f7f8ee79c36ab0ba3e3bfe3fd70031c34ec891dbd12677440362bd12623e7d5815335d153d119999c3d2c91c076f597bd0a9958bf", &(0x7f0000002200)="22405f13ef84d10b23d4fcea98fb61594a130515e66aadaa227b88db9243394b561c20110b0f11486dabf33c709eb1d1a5d013eb883a991b0a2f957da8fecd554e6685f5012a8bd90e4480231156d76c1cdc004d1d83aaef8ed21cf22b0f92bf2bceb0106d239560bdacf9e33351e28775e660349deccd987a92e94edacc5f028d045a58b9704bcf66dc8f800abf6dff3a4a6f6aae1a3781aa706aba", 0x1}, 0x50) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x31}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002480)={'veth1_to_hsr\x00', 0x500}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002500), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003040)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003000)={&(0x7f0000002d40)={0x2b0, r10, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf66}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m38.368997624s ago: executing program 4 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000080), &(0x7f0000000140)=0x17) close(r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYRES32=r7]) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a3c5c5a05bc224a81b141236c4e3766dfa699dd852de664d7c3dcf9172221ad560d89449f3315e1ea47d4f782f095014378183ce1ec61247532a356863a97cc3bb45e3fef792f22e1f2d361002bb0255bd3ebbccd2dc56c9c832930ebd4d746e9d2af6c117d29954fa6666fd515371e3e04fab0bce", @ANYRESDEC=0x0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0xbf8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, @in={0x2, 0x4e20, @remote}], 0x2c) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r9, @ANYBLOB="cca0f04af1ed9fb3debbf65512a719e67331d279c051720141fe4556d8e2a7d22a4a8eca7ff8610399a2a0"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600894f0000180102"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 2m37.729762728s ago: executing program 4 (id=2221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100f9ff0700fcdbdf2506080000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000040)='\x00', 0x204000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x6]}, {0x1, 0xfff, 0x2, 0x7}}, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0x2}, 0x2, &(0x7f0000000340)=[{0x3, 0xfffffffa, &(0x7f00000001c0)='#!-,\x00', &(0x7f0000000200)="b6e883908a1d990d2ee692033852dfd5aeb96d445805b56c50f0c378cc9f719e98651bcc8fc7cfffb83be6d09d76df4cca613bba5b0614f079", 0x39, 0xa}, {0x1, 0xfffffff7, &(0x7f0000000240)='$>z.--^:\x00', &(0x7f0000000280)="559cc328c0de804c7a7ce460d635394025cd1a5d668d1e6464cc19165d415575eb5fcf1513b717bdb7732048f37caf789ac1fbcd4ebca74502cff14cbc287f9554f324b3824326036e1312b4a450d82336e157912c3493e5703c24b72f1ec33c79f516511a86bbc718e3f2f2cd8fde5049ae327e6595633c9a60089e7405c180db1fd347e7366217dfc734dc1d6adf699a7056e375aaa997ecb40c19cab409afd91be742b0232de3228c", 0xaa, 0x2a}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x77, 0x2, 0x0, 0x400, 0x11, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0xe000000, 0x1}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001940)={{r0, &(0x7f0000000680)='\x00', 0x10000, &(0x7f00000006c0)={@_ha_fsid={[0x62, 0x4]}, {0x9, 0xc, 0x954, 0x10}}, 0x6, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x60}, 0x2, &(0x7f0000001900)=[{0x3, 0x4, &(0x7f0000000780)='(\xe6@\\\x00', &(0x7f00000007c0)="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", 0x1000}, {0x2, 0xe, &(0x7f00000017c0)='\x00', &(0x7f0000001800)="88630824e8edf8623793728de950a58768415bb887bedd595d35ae157c4c4b40c34cb962a632093e932f6cd73539a6db67a3cc3a27d911911300a0493b151782819b3a96d5e6d012ba79bac6914b5c2dca4137f53e1e4c3c30732d758433522ba7a336537744156cc1a8012b0daab35663e5adf9619eb7d8980c42278642336bb0077f920d72095df87549f354fc28d0ca2e0dd66b6b50c55dfadaa644b43c4cc647886329a53494d53f5d60ff62b16c1f59826280ee6f3ec8dda5d2da9aa56890a072cbff6fc96a7e", 0xc9, 0x28}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x5, 0x5, 0x3, 0x2, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x5, 0x27, &(0x7f0000000580)=""/39, 0x5ec16a3682aa8de5, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000019c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x4, 0x8, 0x3ff}, 0x10, 0x2f3fe, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000001a40)=[{0x1, 0x3, 0x2, 0xb}, {0x3, 0x3, 0x7, 0x1}, {0x0, 0x2, 0x10, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x1, 0x3, 0x10, 0xb}, {0x5, 0x3, 0x1}, {0x5, 0x5, 0x7, 0x1}, {0x4, 0x2, 0x0, 0x1}, {0x4, 0x1, 0x10, 0xb}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0xe9}, 0x94) 2m33.858574867s ago: executing program 1 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2c0000004100070127bd7000fefdffff047c00000800268004000800100001800c001080"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="4a1004003015010008000d00c0d3"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901004100000095000000000000003500fcfffcffffff7d00f8ff00000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x27}, 0x94) 2m33.529814443s ago: executing program 1 (id=2250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf255300000008000300", @ANYRES64=r2, @ANYBLOB="ce8d2c0bd20b4807c3eb6f368691fa3465a833cfe3"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) accept4(r3, 0x0, 0x0, 0x80000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r6, 0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r7, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x110, 0x110, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000080), {[{{@arp={@multicast1, @local, 0xff, 0xff, 0xe, 0xb, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x4, 0xa5, 0x2, 0x4, 'erspan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @broadcast, @multicast2, 0x8}}}, {{@arp={@local, @remote, 0xff000000, 0xffffffff, 0xe, 0x1, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x9, 0x481d, 0x3, 0x2, 0x7f, 'wg2\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x118}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x4, 0x10}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x24}, @loopback, 0x537cc0d76eab0afe, 0x0, 0x9, 0xf, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0x4, 0xc, 0x8, 0xa6, 0x9, 'lo\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x54}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @remote, @remote, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000129bd7000fddb0525140000000e0001006e5c7464657673696d0000000f0002006e657464657673696d300000080003000000000008004d0033d26101645dffff06001100000800110000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) 2m31.802234647s ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x20044040) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000002280)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000111c0)={0x0, 0x0, &(0x7f0000011180)={&(0x7f0000000040)={0x38, 0x1412, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003f9ab1781f712e00006118000000", @ANYRES32, @ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.441266307s ago: executing program 1 (id=2259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000830000000000000020000000850000002700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m31.213869571s ago: executing program 1 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'\x00', 0x200}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaa5a08004513002473e23be728ee9b94f93b84a1006400004f21907864010101ffffffff4e214e2104419078c0df6dfb3baa8a949879faba8c591f639f2b9fd2a57474dbffd7b8a491700edd0e001610f81dea1d54f5e56ee07effc470de061cf6278f261806485608464700000000000000"], 0x36) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20044018) 2m30.656028054s ago: executing program 1 (id=2268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24048020) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r2, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) 2m22.664031838s ago: executing program 32 (id=2221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100f9ff0700fcdbdf2506080000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000040)='\x00', 0x204000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x6]}, {0x1, 0xfff, 0x2, 0x7}}, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0x2}, 0x2, &(0x7f0000000340)=[{0x3, 0xfffffffa, &(0x7f00000001c0)='#!-,\x00', &(0x7f0000000200)="b6e883908a1d990d2ee692033852dfd5aeb96d445805b56c50f0c378cc9f719e98651bcc8fc7cfffb83be6d09d76df4cca613bba5b0614f079", 0x39, 0xa}, {0x1, 0xfffffff7, &(0x7f0000000240)='$>z.--^:\x00', &(0x7f0000000280)="559cc328c0de804c7a7ce460d635394025cd1a5d668d1e6464cc19165d415575eb5fcf1513b717bdb7732048f37caf789ac1fbcd4ebca74502cff14cbc287f9554f324b3824326036e1312b4a450d82336e157912c3493e5703c24b72f1ec33c79f516511a86bbc718e3f2f2cd8fde5049ae327e6595633c9a60089e7405c180db1fd347e7366217dfc734dc1d6adf699a7056e375aaa997ecb40c19cab409afd91be742b0232de3228c", 0xaa, 0x2a}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x77, 0x2, 0x0, 0x400, 0x11, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0xe000000, 0x1}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001940)={{r0, &(0x7f0000000680)='\x00', 0x10000, &(0x7f00000006c0)={@_ha_fsid={[0x62, 0x4]}, {0x9, 0xc, 0x954, 0x10}}, 0x6, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x60}, 0x2, &(0x7f0000001900)=[{0x3, 0x4, &(0x7f0000000780)='(\xe6@\\\x00', &(0x7f00000007c0)="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", 0x1000}, {0x2, 0xe, &(0x7f00000017c0)='\x00', &(0x7f0000001800)="88630824e8edf8623793728de950a58768415bb887bedd595d35ae157c4c4b40c34cb962a632093e932f6cd73539a6db67a3cc3a27d911911300a0493b151782819b3a96d5e6d012ba79bac6914b5c2dca4137f53e1e4c3c30732d758433522ba7a336537744156cc1a8012b0daab35663e5adf9619eb7d8980c42278642336bb0077f920d72095df87549f354fc28d0ca2e0dd66b6b50c55dfadaa644b43c4cc647886329a53494d53f5d60ff62b16c1f59826280ee6f3ec8dda5d2da9aa56890a072cbff6fc96a7e", 0xc9, 0x28}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x5, 0x5, 0x3, 0x2, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x5, 0x27, &(0x7f0000000580)=""/39, 0x5ec16a3682aa8de5, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000019c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x4, 0x8, 0x3ff}, 0x10, 0x2f3fe, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000001a40)=[{0x1, 0x3, 0x2, 0xb}, {0x3, 0x3, 0x7, 0x1}, {0x0, 0x2, 0x10, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x1, 0x3, 0x10, 0xb}, {0x5, 0x3, 0x1}, {0x5, 0x5, 0x7, 0x1}, {0x4, 0x2, 0x0, 0x1}, {0x4, 0x1, 0x10, 0xb}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0xe9}, 0x94) 2m15.456918476s ago: executing program 33 (id=2268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24048020) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r2, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) 1m48.718154582s ago: executing program 5 (id=2450): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x1000003f, 0x2000003, 0x2, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c28bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000500340000000000080026006c090000200051"], 0x50}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) 1m48.468007596s ago: executing program 5 (id=2453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x64, 0x18, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="ee9d14db888c2f0950fb642cb37a3b12acb9a851df4c9fdc290c1f5955833336a78596d27aaf6c66da94467a13da157b8708e6b2d0c7013ba18fa701346de4aeb2a36756efae60c7c0"]}]}, 0x64}}, 0x840) ioctl$FIOCLEX(r0, 0x5451) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x4, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback=r1, r0, 0x27, 0x20, r0, @void, @void, @void, @value=r3, r2}, 0x20) 1m48.140329336s ago: executing program 5 (id=2456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x200000000000000, 0xf2ffffffffffffff}, 0x38) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = getgid() socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$unix(r3, &(0x7f0000006a80)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x20, 0x4000}}], 0x1, 0x0) r6 = syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r6, 0x8004b707, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0xfcff, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000381000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000003012bd7247d796a7c4a389d1cf0d12f32c", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x78, r11, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params, @chandef_params]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8001) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$nl_route(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) accept4$vsock_stream(r13, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000028000000030a010200000000000000000100000008000b40000000020b00030091abc12404cf370014000000020a0900000000000000000000000000140000001100010000000000b62c8e1c97000000000000000a"], 0x84}}, 0x0) 1m47.633133315s ago: executing program 5 (id=2458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffe, @none}, 0xe) listen(r0, 0x0) (async, rerun: 64) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x1) 1m47.081065405s ago: executing program 5 (id=2460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002d00070100000000ffdbdf25097c000008000180040006000400028008000380040008"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) connect$phonet_pipe(r8, &(0x7f0000000180)={0x23, 0x9, 0x2, 0x2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00024009000000000000000c00014000000000000000030800044004"], 0xf8}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f0000000140), 0x0}, 0x20) r10 = socket(0xa, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x14, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0xfffffffffffffff0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x203699205437e0d5}}}, &(0x7f0000000680)='GPL\x00', 0x2, 0xfb, &(0x7f00000006c0)=""/251, 0x41000, 0x2, '\x00', r4, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x5, 0xc, 0x9}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0xffff}, 0x94) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000000040)=0x10f7a, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000480)=@req={0xf, 0x0, 0x6, 0x1}, 0x10) r13 = accept4$alg(r12, 0x0, 0x0, 0x0) sendmmsg$alg(r13, &(0x7f0000002280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x3}, @iv={0x10}], 0x30, 0x1}], 0x1, 0x80001) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x1, 0x0, 0x2, 0x101}, {0x7, 0x9, 0x8d, 0xa78b}, {0x7, 0x40, 0x5, 0x2}, {0x100, 0x2, 0x5, 0x9}, {0x9, 0xa, 0x0, 0x9}, {0x5, 0x40, 0x3, 0x2}, {0xfff9, 0x5, 0x8, 0x4}, {0x8, 0x6d, 0x7, 0x7d02}, {0x6, 0x80, 0x71, 0x7}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) 1m46.486311981s ago: executing program 5 (id=2464): syz_emit_ethernet(0x61, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x2b, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}, {"23c2a27fdb330e8ff259543d05447c94f37cb0631d9cd0"}}}}}}}, 0x0) write(0xca, &(0x7f0000000040)="04ffff", 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700010324bd7022ff9bdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vlan1\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x1, 0x2, 0xaa8, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0xf, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x32, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x22}}, {@multicast1, 0x1}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b26}, {@local, 0x1}, {@local, 0x2}]}, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "03921ace88ca72"}]}, @timestamp={0x44, 0x8, 0xf9, 0x0, 0x1, [0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x4, 0x9f, 0x11, 0x6, 0x0, @private0, @empty, 0x20, 0x40, 0xefb}}) 1m31.15460155s ago: executing program 34 (id=2464): syz_emit_ethernet(0x61, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x2b, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}, {"23c2a27fdb330e8ff259543d05447c94f37cb0631d9cd0"}}}}}}}, 0x0) write(0xca, &(0x7f0000000040)="04ffff", 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700010324bd7022ff9bdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vlan1\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x1, 0x2, 0xaa8, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0xf, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x32, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x22}}, {@multicast1, 0x1}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b26}, {@local, 0x1}, {@local, 0x2}]}, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "03921ace88ca72"}]}, @timestamp={0x44, 0x8, 0xf9, 0x0, 0x1, [0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x4, 0x9f, 0x11, 0x6, 0x0, @private0, @empty, 0x20, 0x40, 0xefb}}) 21.77544525s ago: executing program 2 (id=2847): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000040012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="7c0000001800051105000000000000000a400000fe0400010000000014000b0000000db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050008000100aac5391a8bf617660000", 0x7c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000240)={0x7ff, 0x1, 0x7ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x220, 0x98, 0x2d8, 0x130, 0x220, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x7f}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}}, 0x4040850) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x5, [@fwd={0x8}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x61, 0x4}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x6e1a}}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0x5}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @struct={0xd, 0x5, 0x0, 0x4, 0x1, 0x7, [{0x10}, {0xa, 0x4, 0x200}, {0x3, 0x0, 0x6}, {0x3, 0x2, 0x6}, {0x7, 0x4, 0x4cd}]}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x1}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000b40)=""/176, 0xf1, 0xb0, 0x0, 0x9, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0x54, 0x4, 0xc, 0x4, 0xffffffffffffffff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r13, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x4}}, 0x10) 21.076742424s ago: executing program 2 (id=2851): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xfff9, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xffe00000, @mcast1, 0xffffffff}]}, &(0x7f0000000080)=0x10) 20.609512561s ago: executing program 2 (id=2853): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000140)={0x23, 0x10, 0x8}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000440)=""/50, 0x32}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x882, &(0x7f0000000380)={@_ha_fsid={[0xa]}, {0x7ea, 0x0, 0x10001, 0x80000000}}, 0xfff, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x1}, 0x4, &(0x7f0000000b00)=[{0x1, 0xfff, &(0x7f0000000500)='\x00', &(0x7f0000000840)="3dbd79c18a499811289fc4c9e6c2c6eb51b663d6db9077056c2eef0c292b734fe1dd9352e88c6f6f210a0f1f03d579265ec38f2309bb423f08ba42bc08492e2219070a89b16c58e5903c401b4f4c3720d044aa2596ef19caee561645744b7cd18abdd81580cd80a5e692eddc5b99ad82662f813fedd7b2d3f144240ab22b", 0x7e, 0x3a}, {0x1, 0x3, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="a5edf464105900aa02b9a7438404fb8c52fd5371f0081497", 0x18}, {0x1, 0x7f, &(0x7f0000000940)='GPL\x00', &(0x7f0000000980)="4b4e038837e4ec9e91e56d60bea0e2fd11a7f5c5abe7905f4cc0b4ea32e7b393f9d83f52ced94bbb79637ea4e189710717381879fbcacce10839", 0x3a, 0x2}, {0x1, 0x0, &(0x7f00000009c0)='@::!\x00', &(0x7f0000000a00)="c1e1926f1ae870d59bc13eed552ce41a48dff5df5fe7476993d915a8e813d89bc38478d6eff89a6a99af9812fda209d0322f0dd3f6996442d7894d184e1dfc855e728c5ba296defb35b3e4b678480c48dbcc98b077121aef4134337544cfb2b93174a2bd86ff20c4e3b74eaffff7d4ed4336c6e29dc63b1bdf19ce79a8cb867e8a0fbc31f471408229f355d48fb9a0a572aff2235bb54b62ba933636ffb7b247dde8ba22454895852d70b8468ee14fd111e47d4c280673aafa11a1019ff8cbae43aacc14d2a49773f3433d07f39bd9e040a90c2c5d", 0xd5, 0x32}]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffffffffffff}], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2a, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb", 0xd7}], 0x1}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000300)={&(0x7f00000001c0)=0x6, 0x4a7e24fd, &(0x7f0000000200)=[{}], &(0x7f00000002c0)}) write$bt_hci(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d80)={r5, r1, 0x16, 0x0, @val=@uprobe_multi={&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40)=[0x2, 0x4], 0x2, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r8, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x9}, 0x4d) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r6, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 19.979620216s ago: executing program 2 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0xfdbd, 0x0, &(0x7f0000000980)="f8ad48c5fce216efcc244f7f86ddd39f48ea2f62b3886e92ebebc626071a67a92751ee2d4da5340926018a5bd8a59160d731101389b1a723925e427eb18304c44e08ee504020cbe51188b3568e33aace8fc124699924e93e71aa62b1227cf759", 0x0, 0x20004000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c}, 0x45) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0x15, &(0x7f0000000100), 0x1) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20) 6.191651293s ago: executing program 3 (id=2920): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000104000200000001000000000000", @ANYRES32=r2, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c00028006000f0003ee"], 0x3c}}, 0xeb64d656001fef7a) 5.699946226s ago: executing program 3 (id=2922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x17072465b22e8319}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r6, &(0x7f0000000340)=""/128, 0x80, 0x10002, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x5, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) socket$inet6(0xa, 0x1, 0x0) 5.021635688s ago: executing program 0 (id=2924): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x4f}, {0xf, 0x6, 0x8000000000000000, 0x80000001, 0x81, 0x6, 0x9, 0x7}, {0xd6f, 0x9, 0x401, 0x81}, 0x5, 0x6e6bb7, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private1, 0x4d5, 0x6c}, 0x1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x3, 0x6, 0x8, 0x7ff, 0x2}}, 0xe8) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xe9, 0xfffff024}, {0x2d, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) 4.633808426s ago: executing program 0 (id=2925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea09000000009ba56a88ca0000", 0x0, 0x6403, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x1c, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "18f4d234"}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000005c0)={'pim6reg\x00', {0x2, 0x0, @local}}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000980)=r4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r2, r0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@private, @local, @broadcast}, &(0x7f0000000380)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x5, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r9], 0x1c}}, 0x20040880) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff8756}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}}, 0x0) 4.478702572s ago: executing program 3 (id=2926): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010010000d00000000000800000008000c000200000008000b"], 0x24}}, 0x4000000) r2 = socket(0x2, 0xa, 0x3fe) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x94000000, 0x800}, 0x58080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfffa}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 4.217231127s ago: executing program 6 (id=2928): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00001a00", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x51) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000680)=[{&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/21, 0x15}], 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000120001002abd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="199203000001000008001300", @ANYRES32=0x0, @ANYBLOB="5edda514be4e6471a60cf916281911b6f46b86592aa8dadbec2e0f32c4977f41"], 0x28}}, 0x4008054) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07020700000029bd7000f9dbdf2505001a00ffffffff000000000000000000000000fe88000000000000000000000037b2da77ffee"], 0x38}}, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, 0x0, 0x57) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000280)=[{{&(0x7f0000000400)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000480)="9214a47a3121a1b2b4204b70bb58", 0xe}, {&(0x7f00000004c0)="6f53c85f946c194e57b051f96f9ee9ff3c867530222e0a5d9851b4cdc7ef4f2e8ba80c2cfbabdb9eb3659f9e635cb71d1be9", 0x32}, {&(0x7f00000006c0)="d446126ba7a5d0994c8fdf4aa674bd3d984b6fde2359ea723720731d87e4034d58c16ed95f3ff38fb45bb06a38f266f4a3029b3471b688062e7eb2cef80c969588acdcc2f1fd971c5c8049c103d2d486d3d6885971cc2ab315903e6daea01661e66fc5f3fdc29be4ce81784e89e96042bdab29219d79767922c43eb3804f5ea499a61a2d8415a8", 0x87}, {&(0x7f0000000b80)="50e6eb0b3d2ec53b005952fd284d29c40a53160a60ffa6ea7c0536a9e8719f07ea54b8c8aad1de58e4fc1eff3c5d6d18efa7c08e25c87f8947b9314c982e191c4868bca968ad18ce8b94a3ff070000000000007c21edcd8369ebb7051e919f97e644c9cb55aade519f2723cbb2e4987ed1462546de5408099374dda818d0be99596c5bdaf259b74ca28862a87cfaa7987a0cda6f1cf4e38ee6a896e75bc8291afcf2f1f1571d5c38a31db2d2e7fcd18084fafa0bcc66bf3b2332a455f3c92e", 0xbf}, {&(0x7f0000000840)="d46aa49d71ee1baa0d07b43ca82360dacf00ff191de57a865a29724ae9af82c567913c9cd2264480a0fc22c806b5986eb93cf965af9dbd1cb80752811a791d5f61603a9967c95c3fa0f82b9f5eeea43426d01e8a41e78990148e91cebbd23ca088a92f081e361f29b633cd7065d0677520e87e30d06ea8f4ea1246b4bea910a271958e74055d5f0a73a6876b621d44c54aa5a7f00286e0dc489c0ad4ac43af20ff159123cb56260d0bebea4c7af412335b025bb016e2dbf927", 0xb9}, {&(0x7f0000000900)="5610e2af9f8f4b3a9de7a3cd57fca4a9a23b68af549278ebaee46e07832ac550dab42a495c023afbf8df50aefde78cfb940c6c6dedf91d00ed64da08cdd43903880e32e697fa8f56f9b2285782672113852714d50a89376b8dc01da6521a34afe783c114406e9f6275d5029670661af91e2fc2ee6c0d61d6e962058e2615ba5f605224779212276c9ccf11daa49c0aa0d9dbe8f6bfa154c94ec27ac778935e2043608ad9a6dd5924b8bf9a58892125275767affe9186404c649e7fe12d880754433c59c0e6ec13314661ad16a38b29a89a2e6e049f343173", 0xd8}], 0x6, &(0x7f0000000a80)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x5c4f}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}}], 0x1, 0x20000000) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x80) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r10, 0xfffffffc) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40600d1}, 0x24000080) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28", 0x37}], 0x1}, 0x0) 3.558901928s ago: executing program 3 (id=2932): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300003f6400008500000083000000bf092000000000005509010000000000950000000000000018100000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000340)={r3, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b8780de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103ce42e06e15e7a5d00"/136}, &(0x7f0000000040)=0x90) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r4, 0x0) unshare(0x600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x14, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 3.512106554s ago: executing program 0 (id=2933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001802000020534d2500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000c70000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="1811000005836f08000000000000000000000300", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 3.237683596s ago: executing program 7 (id=2934): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r0, 0x5, 0x7fff, 0x0, &(0x7f0000000280)) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3e9, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 3.237276976s ago: executing program 6 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x20040054) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113500000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x810) 3.167128462s ago: executing program 0 (id=2936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70ffffff7f00000000005400068014eb0200322d73353a5f2d5d482ee5364c4323843c00040067636d2861657329230000000200000000000000000000000000000000000000140000009ea2d3288939186d015f87e0e77f6cb0b97416792a07a22201ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002980)) gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'vlan1\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff2}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="ba07565a6e19bc2e5fb746000000", 0xe, 0x4050, &(0x7f0000000080)={0x11, 0x9, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r8, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0x3a, 0x40800, &(0x7f0000000240)={0x11, 0x2, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f40), &(0x7f0000002f80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002fc0), &(0x7f0000003000)=0xc) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)='b\t', 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000840000000000000001ff0900fb000500ae262a2c16776a1f4ce29431c8711ec1db3780c18cd073afe028f57ed1dd5cbdfc6a5bbf2262b2d210aa7c0f3394b1ce97f74524c8c75b87c998ddd1dc4057debd562cf796ef248255a0267962de77e9b7c7d29c300be944555acf11f3717a39d1535b6b31ce50b96812974d7dcd5400fe009e22a27402b657027ce7520fbdf4563c7905820631c08cada487b0af8e459d0d8c"], 0x18, 0x44}, 0x2000011) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000003040)='cgroup.max.descendants\x00', 0x2, 0x0) 3.009169928s ago: executing program 7 (id=2937): r0 = socket(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x65, &(0x7f0000000280)={@local, @empty, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@bridge_getneigh={0x118, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x0, 0x8010}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1c338}, @IFLA_PROTO_DOWN={0x5}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_VF_PORTS={0xe0, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8acb4919989a3448a82649346c5290e8"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1a}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, ':)@\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x81}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "59bbe3088b1fd1870b12796e3fa4483a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "54158c58b53f3bbebedb8d4c91874044"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1336c053ce26b5f9c9a82c2a61f3dcb7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1898be0307fd47d1aab9f81732db7535"}, @IFLA_PORT_PROFILE={0x8, 0x2, '+*@\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "375d6c64cb9bb3a5a50601af17a04693"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8f7615488abfd9c4a744a27f5adc042b"}, @IFLA_PORT_PROFILE={0xb, 0x2, '/&**]-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r2, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRESOCT, @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.773231339s ago: executing program 7 (id=2938): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007000000000000090780a0103049078010000004500000000000000ff6c0000e000000200000000440c00e1ac1414bb4e21000044340001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e0001ffffffff"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x0, 0x4) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 'syzkaller0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000200)=0xc) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r11}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e6"], 0x64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032cbd7000fbdbdf251c0000000c00018008000100", @ANYRES32, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.414363106s ago: executing program 3 (id=2939): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000}, 0x18) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0xe, 0xa5, 0x49000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xfc, &(0x7f0000000300)=""/252, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xb, 0xd4e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, r1, r2, r3, r4, r5, 0x1], &(0x7f0000000800)=[{0x3, 0x3, 0xd, 0x2}, {0x1, 0x4, 0x2, 0xa}, {0x5, 0x1, 0x10, 0x5}]}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000004000071103c00000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x2, r10, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r8, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8044000) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x80000000, @mcast2, 0xf4d}}}, 0x80, &(0x7f0000000840)}, 0x40840) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) 2.051119912s ago: executing program 0 (id=2940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newneigh={0x54, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x1, 0x88, 0x9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_SRC_VNI={0x8, 0xb, 0xfffffffe}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x0, 0xfffffffe, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x20044064) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0xe, 0x8001}) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 1.929622423s ago: executing program 6 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000300)={r3, &(0x7f0000000080)='/dev/net/tun\x00', 0x801, &(0x7f0000000180)={@align=0x5, {0x2, 0x62c3, 0xde, 0x29f}}, 0x1, &(0x7f00000001c0), &(0x7f0000000280)=0x3}) listen(0xffffffffffffffff, 0x5) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "8146e8976e90792c", "f09daa49dfdaa149f4debb6bd0e937e9", "3cab9b8d", "668098502c266d55"}, 0x28) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7a}}, @ip_retopts={{0x110, 0x0, 0x7, {[@generic={0x86, 0x10, "38cb5d51b82ef0a93e64f4cfa350"}, @noop, @lsrr={0x83, 0x7, 0x76, [@empty]}, @timestamp_prespec={0x44, 0x44, 0x6e, 0x3, 0x1, [{@local, 0x43800000}, {@empty, 0x1}, {@multicast2, 0x9}, {@local, 0x7f}, {@loopback, 0xb}, {@empty, 0x9}, {@local, 0x101}, {@multicast1, 0x8}]}, @rr={0x7, 0xf, 0x94, [@multicast2, @multicast1, @empty]}, @rr={0x7, 0x2b, 0x2c, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @empty, @empty]}, @timestamp_addr={0x44, 0x34, 0xfb, 0x1, 0x1, [{@multicast2, 0x3}, {@loopback, 0x1bee}, {@multicast2, 0x4}, {@multicast1, 0x7}, {@loopback, 0x1ff}, {@empty, 0x9}]}, @end, @ssrr={0x89, 0x17, 0x8c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @loopback, @multicast1]}, @timestamp={0x44, 0x1c, 0x36, 0x0, 0x4, [0x2, 0x5, 0x9, 0x3, 0x8, 0x7f]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x30, [@loopback, @empty, @empty, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100]}, @rr={0x7, 0x1b, 0xd9, [@multicast2, @multicast1, @multicast2, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x1c8}, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x4000010, 0xffffffffffffffff, 0x180000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x84aebfbd6349b7f2}) 1.781732136s ago: executing program 0 (id=2942): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x8, 0x2}, {0x8, 0x1}]}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000840)=""/226, 0x52, 0xe2, 0x1, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000001f9ffff9400000000000000bf7accbf68f08fa83442f22e24a2f56f4a9ec050cfb3aaabc05f747b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000740)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) listen(r3, 0x5) accept(r3, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x16, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, 0x0, &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000001d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @exit, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.654765573s ago: executing program 7 (id=2943): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1.293762712s ago: executing program 6 (id=2944): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000003f0007012bbd700000000000037c0000040010000d0001806d14ff356ee88b"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) syz_emit_ethernet(0xc2, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x1f, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0xd, "409b1bfcf03dd2394b85f9"}, {0x1, 0x3, 'X'}, {0x5, 0x9, "19623fe19960b4"}, {0x7, 0xc, "c801ef879240f3494bad"}]}, @ssrr={0x89, 0xb, 0x56, [@empty, @multicast2]}, @lsrr={0x83, 0x23, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @remote, @multicast2, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0xb, 0xa, [@broadcast, @remote]}, @ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "74e80915c9119caeb9158c564f9fe18d"}, @generic={0x13, 0xf, "f47aad1ebfa606851ebbf3d561"}]}}}}}}}, 0x0) 1.230289323s ago: executing program 7 (id=2945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f0000009340)) r3 = socket$inet6(0xa, 0x805, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000011c0)={r0, &(0x7f0000001080)='syzkaller\x00', 0x8001, &(0x7f0000001100)={@align=0x6, {0x400, 0x3, 0x80000000, 0x6}}, 0x5, &(0x7f0000001140), &(0x7f0000001180)=0xfffff8c6}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001200)={0x0, 0x4}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001280)={0x80, 0x81, 0x8003, 0x5, 0x7, 0x4, 0x80000001, 0x1000, r5}, &(0x7f00000012c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0xc0, 0x10, 0x107, 0xfffffffe, 0xfffffffe, {0x3, 0x7c}, [@nested={0x4, 0x142}, @typed={0xa2, 0x1, 0x0, 0x0, @str='syzkaller\x00\xac0\x1fh\xb5{\xa3\x97a\xcc\xe7\x9d7@\b-O\x84\xf4\xae\xf0\xb6\xbfk\xd6X7X6\x1a\"\'#\x8f\xc9\xda\xf2G\xbf\x17Bs\x04\xa1\xcai\x1f\n\xa8\xbb\xef_F\xd2G\x7fa\xe62S\xd0T\x18[\x98\x9c\xfb\n\x91\n/*?\xc1J\x17_\x015E%\xcev))\xa0\xa1\x01RYG\x9f\xa9\xc7\xcd\xfd\xaa<\x1b\xee\xde\xd3|\xa9_t6\xca\x15?N\xec\xe6M\xca\xbb\xd1H\xe3=xP\f\n\xd9\x0ev\x80\x82\x91TWX\xc4s\n\xc8\xd3\x8bM\xbd\xb4\xad\xa4\xe5g\xed\x1e'}, @nested={0x4, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x404c811}, 0x400c004) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f0000009340)) (async) socket$inet6(0xa, 0x805, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000011c0)={r0, &(0x7f0000001080)='syzkaller\x00', 0x8001, &(0x7f0000001100)={@align=0x6, {0x400, 0x3, 0x80000000, 0x6}}, 0x5, &(0x7f0000001140), &(0x7f0000001180)=0xfffff8c6}) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001200)={0x0, 0x4}, &(0x7f0000001240)=0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001280)={0x80, 0x81, 0x8003, 0x5, 0x7, 0x4, 0x80000001, 0x1000, r5}, &(0x7f00000012c0)=0x20) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0xc0, 0x10, 0x107, 0xfffffffe, 0xfffffffe, {0x3, 0x7c}, [@nested={0x4, 0x142}, @typed={0xa2, 0x1, 0x0, 0x0, @str='syzkaller\x00\xac0\x1fh\xb5{\xa3\x97a\xcc\xe7\x9d7@\b-O\x84\xf4\xae\xf0\xb6\xbfk\xd6X7X6\x1a\"\'#\x8f\xc9\xda\xf2G\xbf\x17Bs\x04\xa1\xcai\x1f\n\xa8\xbb\xef_F\xd2G\x7fa\xe62S\xd0T\x18[\x98\x9c\xfb\n\x91\n/*?\xc1J\x17_\x015E%\xcev))\xa0\xa1\x01RYG\x9f\xa9\xc7\xcd\xfd\xaa<\x1b\xee\xde\xd3|\xa9_t6\xca\x15?N\xec\xe6M\xca\xbb\xd1H\xe3=xP\f\n\xd9\x0ev\x80\x82\x91TWX\xc4s\n\xc8\xd3\x8bM\xbd\xb4\xad\xa4\xe5g\xed\x1e'}, @nested={0x4, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x404c811}, 0x400c004) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) (async) 893.541844ms ago: executing program 6 (id=2946): syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000403a0120010000000000000000000000000000ff020000000000000000000000000001010490787f00000060e1f588002efc10180700ffff020000000000000000000000000001ff0200000000000000000000000000012f000f00650000002e000000"], 0x0) 849.469878ms ago: executing program 3 (id=2947): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @multicast2}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x1d8, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) getpeername(r3, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f00000001c0)=0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000360001002bfd7004fcdbdf2505000000c0a74d598a2cc3ebbe489f02e5ae59c4a18a7465b151782ea5027ad911782b7e477bc09262a9ab1938847945ba675ae8c6027915b38e021a35299e5e6cbcf1fa731baeb043cc1e7292c57fea0fc38b58e7bea05f3700bb1e49dd1254b2ae398def54ee15b026ba8b053a260291b8d5d541db59fbe0c51ea99b6c618f9fdc52a8a95b58"], 0x14}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) sendmsg$nl_generic(r3, 0x0, 0xc0d4) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x20004004) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fdde067d0300"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4009091) 746.941659ms ago: executing program 7 (id=2948): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000300)={&(0x7f0000000200)=[{0x4, 0x3ff, 0x400, 0x4}, {0x5, 0x9, 0xf, 0x5}, {0x0, 0x1ff, 0x200, 0x1}, {0x9, 0x1, 0x2, 0x3}, {0x484, 0x2, 0x401, 0x5}, {0x1, 0x0, 0x5, 0xbc1a}, {0x4, 0x0, 0x2, 0x7}, {0xf67, 0x7, 0x6, 0xfff}], 0x8, 0x20, 0x7, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf25050000"], 0x1c}, 0x1, 0x0, 0x0, 0x20088054}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x9, 0x32) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000000c0)=0xfffb, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, @in6={0xa, 0x4e24, 0xde, @ipv4={'\x00', '\xff\xff', @multicast2}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e23, @empty}], 0x68) listen(r1, 0x7) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 733.261665ms ago: executing program 2 (id=2867): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000980)=0x7d, 0x4) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x1ff}, {{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000740)=""/69, 0x45}], 0x8, &(0x7f0000000840)=""/191, 0xbf}, 0x3}, {{&(0x7f0000000c80)=@phonet, 0x80, &(0x7f0000002280)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, &(0x7f00000022c0)=""/220, 0xdc}, 0x9}], 0x3, 0x1000400000de, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=@newsa={0x124, 0x1a, 0x2, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private0, 0x4e20, 0x71c, 0x4e21, 0x1, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x1}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x29}, [@lifetime_val={0x24, 0x9, {0xffffffff, 0x8a89, 0x5, 0xa}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x124}}, 0x844) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x15, 0x1, 0xfffffc00, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210327bd7000fc7dd1878e640cdbd725040000000c381e22323816c92a774d546cb2900df90ec74151d00001800800"], 0x20}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x3, 0xffff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x3, 0x5, 0x8}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e000000ff070000ffff0000010000004c000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0500000004000000feffffe9103f7b4d662fa636bc8122ae65d00e0100000000000000007d1ae82bf16235d57955954702fc7b8c7f4eedc593f3f673198f8eeba89aba145e2cb054017f861b217416fde1918b6c0cbfd2a9b0b161c5df977f040000982e1973dacfa13c608896a78bbcb56751519ffe036298d982e369"], 0x50) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5202) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305fcffffff000004000000063c", @ANYRES32=0x0, @ANYBLOB="0002050071400000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x7, 0xffff, 0x4, 0xe, 0x0, 0x40}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffe6e) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r9}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) 455.354212ms ago: executing program 6 (id=2950): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x60, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x49}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d1e6b8e70706"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="401000580200"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0xc020) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x11, 0x41, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x138, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x940}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x3}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb78}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x5040}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000300180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x4150) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032dbd7000fddbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2951): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800420001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x50, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x8, 0x4) kernel console output (not intermixed with test programs): fully working HSR network [ 375.031030][T13819] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.122733][T13832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.182786][T13837] bond8: (slave veth0_to_bond): making interface the new active one [ 375.184548][T13837] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 375.316859][T13843] macvlan7: entered promiscuous mode [ 375.317119][T13843] macvlan7: entered allmulticast mode [ 375.321537][T13843] bond8: entered promiscuous mode [ 375.321688][T13843] veth0_to_bond: entered promiscuous mode [ 375.326458][T13843] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 375.335180][T13843] bond8: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 375.361816][T13843] bond8: left promiscuous mode [ 375.361837][T13843] veth0_to_bond: left promiscuous mode [ 375.528586][T13849] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 375.554599][T13855] Bluetooth: ISO socket layer initialized [ 375.784444][T13858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.931113][T13897] netlink: 'syz.4.1795': attribute type 15 has an invalid length. [ 376.931140][T13897] __nla_validate_parse: 3 callbacks suppressed [ 376.931154][T13897] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1795'. [ 377.624214][T13921] openvswitch: netlink: Message has 8 unknown bytes. [ 377.624256][T13921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.260580][T13889] ip6gre1: left allmulticast mode [ 378.466448][T13889] vlan6: left allmulticast mode [ 378.466474][T13889] bond0: left allmulticast mode [ 378.480618][T13889] bond8: left allmulticast mode [ 378.522610][ T1669] lo speed is unknown, defaulting to 1000 [ 378.524530][ T1669] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 378.548068][T10991] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.548808][T10993] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.576533][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1795'. [ 378.589575][T10993] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.589877][ T8260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.632326][T13912] ip6gretap0: entered allmulticast mode [ 378.811275][T13921] wg2 speed is unknown, defaulting to 1000 [ 379.119704][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1803'. [ 379.199736][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.200394][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.200803][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.201384][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.202008][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.202615][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.203503][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.204125][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.204753][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.205372][T13937] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 379.211882][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 379.522094][T13940] team0: Port device team_slave_0 removed [ 380.014052][T13957] xt_HMARK: spi-set and port-set can't be combined [ 380.023953][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 380.025991][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 380.032155][T13961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.140552][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 380.140580][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 380.142995][T10989] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.143277][T10989] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.143320][T10989] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.236634][T10989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.237136][T10989] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.789997][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.016705][T13985] ip_tables: iptables: counters copy to user failed while replacing table [ 381.039539][T13985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.192429][T14001] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1816'. [ 381.242403][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1817'. [ 381.336113][T14006] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 381.504503][T13985] tipc: Resetting bearer [ 381.506004][T13985] tipc: Resetting bearer [ 381.555244][T14000] gretap0: left allmulticast mode [ 381.575723][T14000] sit0: left promiscuous mode [ 381.672551][T14000] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.673922][T14001] .`: renamed from bond0 [ 382.064752][T14025] batman_adv: batadv0: Adding interface: veth0 [ 382.064773][T14025] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.064891][T14025] batman_adv: batadv0: Interface activated: veth0 [ 382.132654][T14025] batman_adv: batadv0: Interface deactivated: veth0 [ 382.132682][T14025] batman_adv: batadv0: Removing interface: veth0 [ 382.361815][T14029] batman_adv: batadv0: Adding interface: syzkaller0 [ 382.361835][T14029] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.361864][T14029] batman_adv: batadv0: Interface activated: syzkaller0 [ 382.755377][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 382.975002][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 383.007996][T14048] ip_tables: iptables: counters copy to user failed while replacing table [ 383.347076][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.757936][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1838'. [ 384.876661][T14099] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 385.141181][T14105] ip_tables: iptables: counters copy to user failed while replacing table [ 385.303467][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 385.303501][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 385.333967][T14110] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1842'. [ 385.472455][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'. [ 385.476097][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 385.492332][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 385.650280][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'. [ 385.907453][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.908513][T10990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.954177][T14122] xt_hashlimit: size too large, truncated to 1048576 [ 386.051628][T14131] batadv1: entered promiscuous mode [ 386.051653][T14131] batadv1: entered allmulticast mode [ 386.758820][T14144] xfrm1: entered allmulticast mode [ 387.134336][T14146] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 387.298473][T14161] validate_nla: 26 callbacks suppressed [ 387.298497][T14161] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 387.740269][T14154] bond11: (slave macvlan2): making interface the new active one [ 387.762100][T14154] bond11: (slave macvlan2): Enslaving as an active interface with an up link [ 388.022776][T14163] bond7: (slave geneve4): Opening slave failed [ 388.050022][T14166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.094104][T14183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.105217][T14188] __nla_validate_parse: 3 callbacks suppressed [ 388.105239][T14188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 388.303147][T14169] tipc: Resetting bearer [ 388.303316][T14169] tipc: Resetting bearer [ 388.373652][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 388.708144][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 388.709947][T14204] netlink: 'syz.3.1865': attribute type 4 has an invalid length. [ 388.709972][T14204] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1865'. [ 388.862910][T14204] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 388.863147][T14206] veth0: entered promiscuous mode [ 389.036021][T14207] bond0: entered promiscuous mode [ 389.239614][T14205] bond0: left promiscuous mode [ 389.242482][T14205] veth0: left promiscuous mode [ 389.346858][T14220] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 389.436234][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 389.446858][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 389.454690][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 389.473115][T14219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.538938][T14219] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 389.701834][T14219] bond0 (unregistering): Released all slaves [ 389.855288][T14233] macvtap1: entered promiscuous mode [ 389.855313][T14233] vlan0: entered promiscuous mode [ 389.856559][T14233] macvtap1: entered allmulticast mode [ 389.856575][T14233] vlan0: entered allmulticast mode [ 389.856588][T14233] veth0_vlan: entered allmulticast mode [ 389.912157][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 389.912189][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 390.015664][T14236] macvtap2: entered promiscuous mode [ 390.015925][T14236] macvtap2: entered allmulticast mode [ 390.495040][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1877'. [ 390.621768][T14243] ovs-s!!: entered promiscuous mode [ 391.032310][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.032800][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.459180][T14268] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 391.661442][T14272] geneve3: entered promiscuous mode [ 391.953563][T14281] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.957311][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.957376][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.957413][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.957447][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.805278][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.454478][T14332] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 393.626535][T14341] __nla_validate_parse: 8 callbacks suppressed [ 393.626561][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 393.839044][ T1669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.633850][T14356] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 395.024974][T14370] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.484268][T14387] netlink: 'syz.4.1908': attribute type 49 has an invalid length. [ 395.636269][T14390] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 396.148382][ T8257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.151470][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.797848][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 396.797923][T14432] tipc: Enabling of bearer rejected, failed to enable media [ 396.802328][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1915'. [ 398.259143][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 398.264803][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 398.470499][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1930'. [ 398.503685][T14491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1930'. [ 398.850782][T14513] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 398.854785][T14515] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 398.906101][T14513] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 399.006791][T14513] syzkaller0: entered promiscuous mode [ 399.009121][T14513] syzkaller0: entered allmulticast mode [ 399.140867][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 399.144434][T14525] siw: device registration error -23 [ 399.663534][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 399.679471][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 399.731852][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 399.787147][T14544] syzkaller0: left promiscuous mode [ 399.787400][T14544] syzkaller0: left allmulticast mode [ 399.789492][T14544] tipc: Resetting bearer [ 399.952580][T14537] macsec2: entered promiscuous mode [ 399.952805][T14537] macsec2: entered allmulticast mode [ 399.989590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.504689][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 400.556624][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 400.636888][T14559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 400.740150][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 400.907621][T14581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'. [ 400.961257][T14575] vlan3: entered allmulticast mode [ 400.961281][T14575] bridge2: entered allmulticast mode [ 401.078176][T14582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1950'. [ 401.199977][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.277724][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.437426][T14615] siw: device registration error -23 [ 404.032045][T14672] netlink: 'syz.3.1966': attribute type 5 has an invalid length. [ 405.597715][T14708] __nla_validate_parse: 3 callbacks suppressed [ 405.597739][T14708] netlink: 4412 bytes leftover after parsing attributes in process `syz.4.1974'. [ 405.859596][T14713] syzkaller1: entered promiscuous mode [ 405.859820][T14713] syzkaller1: entered allmulticast mode [ 405.975061][T14717] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1977'. [ 405.975092][T14717] openvswitch: netlink: Flow key attr not present in new flow. [ 405.996220][T14717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1977'. [ 406.109758][T14718] x_tables: duplicate underflow at hook 1 [ 406.227372][T10989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.034951][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.489743][T14740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.662863][T14744] netlink: 'syz.3.1983': attribute type 5 has an invalid length. [ 408.466370][T14754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1986'. [ 408.715427][T14763] netlink: 'syz.1.1988': attribute type 362 has an invalid length. [ 408.750092][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 408.766120][T14763] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 408.775949][T14763] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 409.115620][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 409.288212][T14779] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1993'. [ 409.292290][T14780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1993'. [ 409.663656][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 409.712412][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 410.278935][T14775] wg2 speed is unknown, defaulting to 1000 [ 410.280014][T14788] tipc: Resetting bearer [ 410.346399][T14775] lo speed is unknown, defaulting to 1000 [ 410.810918][T14812] vxcan2: entered allmulticast mode [ 411.508656][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.562074][T14834] __nla_validate_parse: 1 callbacks suppressed [ 411.562096][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 411.651068][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 412.227087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.230996][T14858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 412.473406][T14869] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 412.609000][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.671624][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 412.741973][T14875] bond0: (slave veth9): Enslaving as an active interface with a down link [ 412.782154][T14890] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2014'. [ 412.787712][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.788968][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.796559][T14869] bond0: (slave batadv0): making interface the new active one [ 412.799792][T14869] batadv0: entered promiscuous mode [ 412.811446][T14869] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 412.941548][T14882] netlink: 'syz.4.2012': attribute type 11 has an invalid length. [ 412.941575][T14882] netlink: 'syz.4.2012': attribute type 4 has an invalid length. [ 412.941590][T14882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2012'. [ 412.946527][T14882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.947114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.094984][T14891] syzkaller0: entered promiscuous mode [ 413.095012][T14891] syzkaller0: entered allmulticast mode [ 413.095287][T14891] tipc: Resetting bearer [ 413.454336][T14902] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 413.604065][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 413.798127][T14913] vxlan1: left promiscuous mode [ 413.798154][T14913] vxlan1: left allmulticast mode [ 413.810859][T14913] xfrm1: left allmulticast mode [ 413.844064][T14913] macvtap1: left promiscuous mode [ 413.844094][T14913] macvtap1: left allmulticast mode [ 413.874160][T14913] vlan0: left allmulticast mode [ 413.874184][T14913] veth0_vlan: left allmulticast mode [ 413.874204][T14913] vlan0: left promiscuous mode [ 413.912377][T14913] macvtap2: left promiscuous mode [ 413.912407][T14913] macvtap2: left allmulticast mode [ 413.979543][ T59] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.980901][ T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.980979][ T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.981016][ T59] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.021051][T14923] vlan0: left promiscuous mode [ 414.021368][T14923] macvlan0: left promiscuous mode [ 414.026216][T14923] macvlan1: left promiscuous mode [ 414.026522][T14923] ipvlan0: left promiscuous mode [ 414.026680][T14923] ipvlan1: left promiscuous mode [ 414.029574][T14923] veth0_macvtap: left promiscuous mode [ 414.029727][T14923] macvtap0: left promiscuous mode [ 414.029876][T14923] macsec0: left promiscuous mode [ 414.030027][T14923] geneve0: left promiscuous mode [ 414.030181][T14923] geneve1: left promiscuous mode [ 414.053254][T14923] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 414.053399][T14923] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 414.053519][T14923] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 414.053640][T14923] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 414.053758][T14923] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 414.054064][T14923] macvlan2: left promiscuous mode [ 414.054223][T14923] macvlan3: left promiscuous mode [ 414.054372][T14923] bridge1: left promiscuous mode [ 414.054499][T14923] vlan0004: left promiscuous mode [ 414.054511][T14923] bridge_slave_0: left promiscuous mode [ 414.061112][T14923] ipvlan2: left promiscuous mode [ 414.061274][T14923] ipvlan3: left promiscuous mode [ 414.070656][T14923] ip6gre1: left promiscuous mode [ 414.070928][T14923] pim6reg: left promiscuous mode [ 414.071279][T14923] vlan3: left promiscuous mode [ 414.071294][T14923] syz_tun: left promiscuous mode [ 414.072571][T14923] bond5: left promiscuous mode [ 414.072587][T14923] wireguard2: left promiscuous mode [ 414.072958][T14923] macsec1: left promiscuous mode [ 414.085239][T14923] geneve3: left promiscuous mode [ 414.152070][T14923] macsec2: left promiscuous mode [ 414.152095][T14923] macsec2: left allmulticast mode [ 414.378132][T10991] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.378189][T10991] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.378225][T10991] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.378259][T10991] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.960949][T14949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.973170][T14949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.010456][T14950] nbd: must specify at least one socket [ 415.031627][T14957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2027'. [ 415.161815][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 416.070579][T14976] tipc: Invalid UDP bearer configuration [ 416.070632][T14976] tipc: Enabling of bearer rejected, failed to enable media [ 416.631247][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.549675][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.310476][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'. [ 419.310897][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 421.674901][T10991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.905680][T15025] SET target dimension over the limit! [ 423.041870][T15025] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.2050'. [ 423.048170][T15025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2050'. [ 423.048194][T15025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2050'. [ 423.048210][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 423.135313][T15035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2054'. [ 423.679530][T15055] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2059'. [ 423.774636][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 423.794096][T15064] ip6gre3: entered promiscuous mode [ 423.794122][T15064] ip6gre3: entered allmulticast mode [ 424.247871][ T62] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.248143][ T62] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.277975][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.307948][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.308970][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.448989][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2067'. [ 424.557164][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.862467][T15095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.929121][T15105] tipc: Started in network mode [ 424.929155][T15105] tipc: Node identity d635c9a0139c, cluster identity 4711 [ 424.929411][T15105] tipc: Enabled bearer , priority 0 [ 425.280337][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'. [ 425.962787][ T30] audit: type=1800 audit(1789910405.421:4): pid=15128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2076" name=B702 dev="tmpfs" ino=2123 res=0 errno=0 [ 427.151398][T15107] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 427.151428][T15107] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 427.151801][T15107] tipc: Resetting bearer [ 427.151841][T15107] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 427.153935][T15107] syzkaller0: left promiscuous mode [ 427.153955][T15107] syzkaller0: left allmulticast mode [ 427.215608][T15107] ip6gre1: left promiscuous mode [ 427.215636][T15107] ip6gre1: left allmulticast mode [ 427.228725][T15107] veth5: left promiscuous mode [ 427.244711][T15107] bond4: left promiscuous mode [ 427.244743][T15107] bridge1: left promiscuous mode [ 427.245024][T15107] vlan3: left allmulticast mode [ 427.245039][T15107] bond4: left allmulticast mode [ 427.245050][T15107] bridge1: left allmulticast mode [ 427.245418][T15107] sit1: left promiscuous mode [ 427.245544][T15107] veth6: left allmulticast mode [ 427.246467][T15107] bond6: left promiscuous mode [ 427.246482][T15107] bond6: left allmulticast mode [ 427.342178][T15086] tipc: Disabling bearer [ 427.377112][T10991] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.377165][T10991] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.377202][T10991] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.377238][T10991] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.380780][ T1669] tipc: Node number set to 3316238752 [ 427.654850][T15141] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 427.662135][T15145] xt_policy: neither incoming nor outgoing policy selected [ 427.714292][T15153] netlink: 'syz.1.2082': attribute type 1 has an invalid length. [ 427.839604][T15162] netlink: 'syz.4.2080': attribute type 29 has an invalid length. [ 427.840341][T15152] netlink: 'syz.4.2080': attribute type 29 has an invalid length. [ 427.881460][T15152] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.2080'. [ 427.881486][T15152] netlink: 'syz.4.2080': attribute type 2 has an invalid length. [ 427.926186][T15153] bond9: entered promiscuous mode [ 427.926736][T15153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 427.954104][T15168] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.2081'. [ 428.147232][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 428.200696][T15159] veth5: entered allmulticast mode [ 428.255889][T15159] bond9: (slave veth5): making interface the new active one [ 428.255917][T15159] veth5: entered promiscuous mode [ 428.340047][T15159] bond9: (slave veth5): Enslaving as an active interface with an up link [ 428.388470][T15168] netlink: 1628 bytes leftover after parsing attributes in process `syz.3.2081'. [ 428.943527][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'. [ 429.085142][T15184] wg2 speed is unknown, defaulting to 1000 [ 429.116113][T15184] lo speed is unknown, defaulting to 1000 [ 429.214973][T15195] netlink: 'syz.4.2088': attribute type 10 has an invalid length. [ 429.864336][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2de400: rx timeout, send abort [ 430.364863][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2de400: abort rx timeout. Force session deactivation [ 430.365017][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2de000: rx timeout, send abort [ 430.578444][T15223] netlink: 884 bytes leftover after parsing attributes in process `syz.0.2099'. [ 430.580623][T15214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.823784][T15231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.823806][T15231] IPv6: NLM_F_CREATE should be set when creating new route [ 430.823855][T15231] IPv6: NLM_F_CREATE should be set when creating new route [ 430.865060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2de000: abort rx timeout. Force session deactivation [ 430.979021][T15236] netlink: 'syz.1.2103': attribute type 3 has an invalid length. [ 431.642102][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 431.876830][T15269] wg1: entered promiscuous mode [ 432.257468][T15285] sch_fq: defrate 4294967293 ignored. [ 432.293026][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2112'. [ 432.443641][T15284] erspan2: entered allmulticast mode [ 432.778429][T15293] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2115'. [ 432.852378][T15294] nbd: must specify at least one socket [ 433.043563][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 433.314851][T15296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.778323][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2121'. [ 433.933410][T15328] veth1_to_bond: entered allmulticast mode [ 433.933933][T15328] veth1_to_bond: entered promiscuous mode [ 433.934451][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2125'. [ 434.043565][T15328] veth1_to_bond (unregistering): left allmulticast mode [ 434.043628][T15328] veth1_to_bond (unregistering): left promiscuous mode [ 434.389439][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 434.462304][ T52] block nbd2: Receive control failed (result -107) [ 435.042739][T15371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2129'. [ 435.046656][T15369] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2130'. [ 435.413927][T15380] ipvlan1: entered promiscuous mode [ 435.414492][T15380] ipvlan1: entered allmulticast mode [ 435.414508][T15380] veth0_vlan: entered allmulticast mode [ 435.440801][T15380] tipc: Enabled bearer , priority 0 [ 435.538570][T15382] tipc: MTU too low for tipc bearer [ 435.653018][T15391] __nla_validate_parse: 3 callbacks suppressed [ 435.653043][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2134'. [ 435.680324][T15394] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 435.693669][T15394] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 436.048650][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.283390][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2139'. [ 436.317994][T15405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.467062][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 436.490988][T15377] tipc: Disabling bearer [ 436.551554][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2139'. [ 436.551589][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2139'. [ 436.558380][T15414] bridge0: port 1(erspan0) entered disabled state [ 436.560622][T15416] tipc: Enabling of bearer rejected, failed to enable media [ 437.047269][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 437.158660][T15442] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 437.158684][T15442] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2144'. [ 437.306134][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 437.414475][T15445] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2146'. [ 437.446432][T15445] nbd: must specify at least one socket [ 437.517113][T15451] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 437.517143][T15451] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 437.517343][T15451] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 438.015055][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2154'. [ 438.023072][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 438.031887][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.166681][T15475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.559486][T11091] udevd[11091]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 439.862582][T15524] netlink: 'syz.1.2165': attribute type 10 has an invalid length. [ 439.862609][T15524] netlink: 'syz.1.2165': attribute type 5 has an invalid length. [ 439.909741][T15528] netlink: NAT attribute has 4 unknown bytes [ 439.909779][T15528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.973904][T15524] geneve2: entered promiscuous mode [ 439.973928][T15524] geneve2: entered allmulticast mode [ 440.068285][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 33206 - 0 [ 440.068335][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 33206 - 0 [ 440.068368][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 33206 - 0 [ 440.068400][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 33206 - 0 [ 440.464883][T15539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.572115][T15540] IPVS: length: 75 != 8 [ 440.574617][T15544] netlink: 'syz.4.2172': attribute type 12 has an invalid length. [ 440.574639][T15544] netlink: 'syz.4.2172': attribute type 11 has an invalid length. [ 440.609422][T15536] netlink: 'syz.3.2168': attribute type 39 has an invalid length. [ 440.759662][T15553] __nla_validate_parse: 14 callbacks suppressed [ 440.759685][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 440.792147][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 440.812559][T15552] hsr0: entered allmulticast mode [ 440.812583][T15552] hsr_slave_0: entered allmulticast mode [ 440.812601][T15552] hsr_slave_1: entered allmulticast mode [ 440.837234][T15553] hsr_slave_0: left promiscuous mode [ 440.842095][T15553] hsr_slave_1: left promiscuous mode [ 440.993219][T15553] hsr0 (unregistering): left allmulticast mode [ 441.351177][T15567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2178'. [ 441.762955][T15584] ip_tables: iptables: counters copy to user failed while replacing table [ 441.795064][T15584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.809441][T15583] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2184'. [ 441.994266][T15592] x_tables: duplicate underflow at hook 1 [ 442.275810][T15600] netlink: 'syz.3.2186': attribute type 3 has an invalid length. [ 442.838521][T15610] ipvlan2: entered promiscuous mode [ 443.130362][T15616] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.162948][T15616] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 443.163853][T15617] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 443.185542][T15616] atomic_op ffff8880580659e0 conn xmit_atomic 0000000000000000 [ 443.433847][T15617] netlink: 'syz.4.2190': attribute type 10 has an invalid length. [ 443.615199][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 443.771618][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 444.330928][T15651] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 444.577661][ T30] audit: type=1800 audit(1789910424.041:5): pid=15656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2199" name=B702 dev="tmpfs" ino=2293 res=0 errno=0 [ 444.816746][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 444.949176][T15672] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2201'. [ 444.950565][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 444.964269][T15664] nbd: must specify at least one socket [ 445.359529][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 445.702843][T15691] netlink: 'syz.1.2205': attribute type 4 has an invalid length. [ 446.306610][T15707] syzkaller0: entered promiscuous mode [ 446.306637][T15707] syzkaller0: entered allmulticast mode [ 446.358445][T15707] netlink: 'syz.0.2211': attribute type 1 has an invalid length. [ 446.431500][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 446.452973][T15714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2213'. [ 446.454848][T15714] nbd: must specify at least one socket [ 446.765144][T15720] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2214'. [ 447.203128][T15734] syzkaller0: entered promiscuous mode [ 447.203488][T15734] batman_adv: batadv0: Interface activated: syzkaller0 [ 447.203571][T15734] tipc: Resetting bearer [ 447.203751][T10991] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.203799][T10991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.203832][T10991] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.203863][T10991] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.562730][T15770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2228'. [ 448.759863][T15770] 8021q: VLANs not supported on sit0 [ 449.374374][T15794] netlink: zone id is out of range [ 449.413564][T15797] netlink: 'syz.2.2234': attribute type 8 has an invalid length. [ 449.413587][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 449.445437][T15797] veth1_to_team: entered promiscuous mode [ 449.453356][T15797] veth1_to_team: left promiscuous mode [ 449.768233][T15812] syzkaller1: entered promiscuous mode [ 449.768465][T15812] syzkaller1: entered allmulticast mode [ 449.795218][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2237'. [ 449.929331][T15822] netlink: 'syz.1.2237': attribute type 8 has an invalid length. [ 450.032460][T15821] erspan0: left allmulticast mode [ 450.032743][T15821] bridge0: port 1(erspan0) entered disabled state [ 450.057298][T15821] bridge_slave_1: left allmulticast mode [ 450.057338][T15821] bridge_slave_1: left promiscuous mode [ 450.057752][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.099113][T15821] team0: Port device team_slave_1 removed [ 450.100124][T15821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.100146][T15821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.104682][T15821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.160456][T15817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.475466][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 450.652425][T15837] x_tables: duplicate underflow at hook 1 [ 451.511796][T15860] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 451.653644][T15857] : entered promiscuous mode [ 452.113804][T15881] x_tables: duplicate underflow at hook 1 [ 452.467018][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 452.533288][T15891] syzkaller0: entered promiscuous mode [ 452.533311][T15891] syzkaller0: entered allmulticast mode [ 453.372118][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2254'. [ 453.963572][T15917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2258'. [ 454.654922][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.716034][T15940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 454.725467][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.841375][T15953] netlink: 'syz.1.2268': attribute type 3 has an invalid length. [ 454.923846][T15942] bond11: (slave veth11): Enslaving as an active interface with a down link [ 454.951559][T15945] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.955131][T15945] bond11: (slave batadv1): making interface the new active one [ 454.956333][T15945] batadv1: entered promiscuous mode [ 454.977392][T15945] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 454.977716][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.978552][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.978720][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.978873][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.979184][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.979336][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 454.979484][T15940] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 455.054150][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 455.124489][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'. [ 455.139927][T15950] bond11 (unregistering): (slave veth11): Releasing active interface [ 455.164867][T15950] bond11 (unregistering): (slave batadv1): Releasing active interface [ 455.164896][T15950] batadv1: left promiscuous mode [ 455.191404][T15950] bond11 (unregistering): Released all slaves [ 455.252657][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 455.470795][T15970] ip6gretap0: entered allmulticast mode [ 455.493285][T15970] batman_adv: batadv0: Adding interface: ip6gretap0 [ 455.493305][T15970] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.493340][T15970] batman_adv: batadv0: Interface activated: ip6gretap0 [ 455.571400][T15974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 455.668736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.874011][T15987] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20004 [ 456.020028][T15993] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 456.494488][T16012] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 456.578832][T16014] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.2281'. [ 456.816901][T16016] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 456.818441][T16016] syz_tun: entered promiscuous mode [ 456.901298][T16017] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2283'. [ 456.930347][T16016] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 457.067903][ T7479] s`z1: Port: 1 Link ACTIVE [ 457.097346][T16017] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 458.520449][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 458.523470][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'. [ 458.804716][T16059] tc_dump_action: action bad kind [ 459.269709][T16069] dummy0: left promiscuous mode [ 459.271116][T16071] ip_tables: iptables: counters copy to user failed while replacing table [ 459.299511][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2296'. [ 459.303798][T16069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 459.625379][T16089] xt_policy: output policy not valid in PREROUTING and INPUT [ 459.836188][T16092] validate_nla: 59 callbacks suppressed [ 459.836214][T16092] netlink: 'syz.0.2299': attribute type 21 has an invalid length. [ 459.836229][T16092] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2299'. [ 459.836306][T16092] netlink: 'syz.0.2299': attribute type 4 has an invalid length. [ 459.836319][T16092] netlink: 'syz.0.2299': attribute type 5 has an invalid length. [ 459.836331][T16092] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2299'. [ 460.003684][T16096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2301'. [ 460.112168][ T30] audit: type=1800 audit(1789910439.571:6): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2301" name="memory.events" dev="tmpfs" ino=2428 res=0 errno=0 [ 460.183850][ T30] audit: type=1800 audit(1789910439.641:7): pid=16095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2301" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2429 res=0 errno=0 [ 460.789227][T16112] dvmrp0: entered allmulticast mode [ 460.825259][T16112] dvmrp0: left allmulticast mode [ 460.826027][T16112] dvmrp6: left allmulticast mode [ 461.331070][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 461.606190][T16144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2311'. [ 462.143984][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 462.554278][T16167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2315'. [ 463.077249][T16180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.083131][T16180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.084105][T16180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.089299][T16180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.121634][T16180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.175676][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.176104][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.176453][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.203421][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.219867][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.512185][T16191] syzkaller1: entered promiscuous mode [ 463.512211][T16191] syzkaller1: entered allmulticast mode [ 463.527459][T16195] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 463.527482][T16195] __nla_validate_parse: 1 callbacks suppressed [ 463.527492][T16195] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2322'. [ 463.527565][T16195] netlink: 'syz.2.2322': attribute type 2 has an invalid length. [ 463.527585][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 464.105159][T16190] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 465.308393][T16180] Bluetooth: hci5: command tx timeout [ 467.353503][T16180] Bluetooth: hci5: command tx timeout [ 468.376312][T16178] wg2 speed is unknown, defaulting to 1000 [ 468.394798][T16178] lo speed is unknown, defaulting to 1000 [ 468.555819][T16247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2333'. [ 468.555844][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 469.273217][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 469.427238][T16180] Bluetooth: hci5: command tx timeout [ 469.461548][T16263] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 470.035954][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.036143][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.036328][T16178] bridge_slave_0: entered allmulticast mode [ 470.043817][T16178] bridge_slave_0: entered promiscuous mode [ 470.118970][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.119145][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.119321][T16178] bridge_slave_1: entered allmulticast mode [ 470.123254][T16178] bridge_slave_1: entered promiscuous mode [ 470.202473][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.208891][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.209721][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.212047][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.212642][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.426359][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 470.436750][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.519287][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.526420][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 470.527694][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 470.566407][T16178] team0: Port device team_slave_0 added [ 470.581269][T16178] team0: Port device team_slave_1 added [ 470.705106][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2341'. [ 470.765758][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.769303][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.769334][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.780534][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.780551][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.780574][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.803775][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 470.803929][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 471.079523][T16178] hsr_slave_0: entered promiscuous mode [ 471.083278][T16178] hsr_slave_1: entered promiscuous mode [ 471.178588][T16312] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.2344'. [ 471.301842][T16317] syzkaller0: entered promiscuous mode [ 471.301868][T16317] syzkaller0: entered allmulticast mode [ 471.334898][T16312] syzkaller0: left promiscuous mode [ 471.334923][T16312] syzkaller0: left allmulticast mode [ 471.508174][ T52] Bluetooth: hci5: command tx timeout [ 471.781509][T16283] wg2 speed is unknown, defaulting to 1000 [ 471.793377][T16283] lo speed is unknown, defaulting to 1000 [ 471.878052][T16324] netlink: 'syz.0.2345': attribute type 21 has an invalid length. [ 471.897498][T16324] netlink: 'syz.0.2345': attribute type 4 has an invalid length. [ 471.897523][T16324] netlink: 'syz.0.2345': attribute type 5 has an invalid length. [ 472.199848][T16328] xt_limit: Overflow, try lower: 6/2147483648 [ 472.308949][ T52] Bluetooth: hci6: command tx timeout [ 472.653925][T16349] vlan0: entered promiscuous mode [ 472.655756][T16178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 472.671326][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.674215][T16350] sit0: entered promiscuous mode [ 472.674903][T16350] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 472.675108][T16178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 472.694775][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.752109][T16178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.783813][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.834058][T16178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 472.866057][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.948508][T16353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.281374][T16353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.512924][T16353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.800506][T16376] __nla_validate_parse: 7 callbacks suppressed [ 473.800527][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 473.810010][T16353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.864826][T16379] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 473.901932][T16379] bond12: option mode: invalid value (8) [ 473.918607][T16379] bond12 (unregistering): Released all slaves [ 474.040063][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.083378][T16379] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 474.083404][T16379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 474.238439][T16383] dummy0: left allmulticast mode [ 474.238470][T16383] dummy0: left promiscuous mode [ 474.238726][T16383] bridge0: port 3(dummy0) entered disabled state [ 474.288781][T16379] dummy0: entered promiscuous mode [ 474.387286][ T52] Bluetooth: hci6: command tx timeout [ 474.460768][T16386] xt_hashlimit: overflow, try lower: 0/0 [ 474.510890][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.511323][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.511517][T16283] bridge_slave_0: entered allmulticast mode [ 474.514170][T16283] bridge_slave_0: entered promiscuous mode [ 474.579643][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.593977][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.594116][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.594288][T16283] bridge_slave_1: entered allmulticast mode [ 474.596477][T16283] bridge_slave_1: entered promiscuous mode [ 474.664802][T16283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.678887][T16283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.466999][ T52] Bluetooth: hci6: command tx timeout [ 477.771812][T16283] team0: Port device team_slave_0 added [ 477.780637][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2361'. [ 477.803676][T16283] team0: Port device team_slave_1 added [ 477.857511][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.857638][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.862733][T10989] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.869466][ T1293] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.003711][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.003826][T10989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.017031][T10989] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.040431][T16406] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 478.040459][T16406] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2362'. [ 478.166345][T16283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.166365][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.166391][T16283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.269321][T10991] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.362023][T16283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.362042][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.362067][T16283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.442716][T16418] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 478.547656][ T52] Bluetooth: hci6: command tx timeout [ 478.615274][T16283] hsr_slave_0: entered promiscuous mode [ 478.636485][T16283] hsr_slave_1: entered promiscuous mode [ 478.649989][T16283] debugfs: 'hsr0' already exists in 'hsr' [ 478.650014][T16283] Cannot create hsr debugfs directory [ 479.023394][T16422] syzkaller0: entered promiscuous mode [ 479.023419][T16422] syzkaller0: entered allmulticast mode [ 479.069287][T16424] tipc: New replicast peer: 255.255.255.255 [ 479.074571][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.075221][T16424] tipc: Enabled bearer , priority 10 [ 479.134987][T16425] tipc: Enabling of bearer rejected, already enabled [ 480.607457][T16452] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2371'. [ 480.858307][T16283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 480.884056][T16283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.886481][T16283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.931557][T16283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.940251][T16283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.013507][T16283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.014922][T16459] tipc: Cannot configure node identity twice [ 481.022163][T16283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.074772][T16283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.079494][T16459] tipc: New replicast peer: 127.0.0.1 [ 481.080457][T16459] tipc: Enabled bearer , priority 10 [ 481.407596][T16475] syzkaller0: entered promiscuous mode [ 481.407620][T16475] syzkaller0: entered allmulticast mode [ 481.907740][T16487] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 481.938782][T16283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.069817][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.204685][ T5822] tipc: Node number set to 2212318329 [ 482.239986][T16283] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.322231][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.322376][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.386834][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.386960][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.494199][T16499] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2378'. [ 482.494232][T16499] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2378'. [ 482.586956][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 483.175922][T16505] syzkaller0: entered promiscuous mode [ 483.175946][T16505] syzkaller0: entered allmulticast mode [ 483.485605][T16525] netlink: 'syz.2.2382': attribute type 1 has an invalid length. [ 483.546570][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2382'. [ 483.603877][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2382'. [ 483.606224][T16525] 8021q: adding VLAN 0 to HW filter on device bond11 [ 484.064007][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 484.066427][T16178] veth0_vlan: entered promiscuous mode [ 484.130688][T16540] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2385'. [ 484.413583][T16178] veth1_vlan: entered promiscuous mode [ 484.431922][T16539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 484.496265][T16552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 484.870795][T16178] veth0_macvtap: entered promiscuous mode [ 484.906330][T16178] veth1_macvtap: entered promiscuous mode [ 485.025841][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.093720][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.107682][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 485.277006][T10989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.286606][T10989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.286648][T10989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.286680][T10989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.539636][T16563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2387'. [ 485.674905][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.674929][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.914538][T10990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.914563][T10990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.119400][T16283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.713464][T16587] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2394'. [ 486.787617][T16588] nbd: must specify at least one socket [ 486.880167][T16584] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 486.880238][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 487.431899][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 487.432132][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 487.706586][T16617] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 487.743119][T16283] veth0_vlan: entered promiscuous mode [ 487.825624][T16283] veth1_vlan: entered promiscuous mode [ 488.063152][T16283] veth0_macvtap: entered promiscuous mode [ 488.083028][T16283] veth1_macvtap: entered promiscuous mode [ 488.155976][T16283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.291068][T16283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.796000][ T1004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.808149][ T62] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.808535][ T62] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.808574][ T62] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.831011][T16641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2403'. [ 489.059460][T10990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.059485][T10990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.203246][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 489.224180][T10990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.224206][T10990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.250411][T16651] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2406'. [ 489.271079][T16651] nbd: must specify at least one socket [ 489.426761][T16657] xt_hashlimit: size too large, truncated to 1048576 [ 489.433453][T16658] xt_hashlimit: size too large, truncated to 1048576 [ 489.991872][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2409'. [ 490.800761][T16689] bond2: (slave .`): Releasing active interface [ 491.051740][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2418'. [ 491.178829][T16689] batman_adv: batadv0: Interface deactivated: veth0 [ 491.178860][T16689] batman_adv: batadv0: Removing interface: veth0 [ 491.226715][T16689] bond8: (slave veth0_to_bond): Releasing active interface [ 491.262537][T16689] .`: (slave bond_slave_0): Releasing backup interface [ 491.294150][T16689] .`: (slave bond_slave_1): Releasing backup interface [ 491.336613][T16689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.336642][T16689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.363399][T16689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.363428][T16689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.394746][T16689] bond1: (slave bridge1): Releasing backup interface [ 491.394775][T16689] bridge1: left promiscuous mode [ 491.432772][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 491.458817][T16689] bond0: (slave veth7): Releasing backup interface [ 491.481541][T16689] batman_adv: batadv0: Interface deactivated: macvlan6 [ 491.481570][T16689] batman_adv: batadv0: Removing interface: macvlan6 [ 491.506643][T16689] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 491.506670][T16689] batman_adv: batadv0: Removing interface: ip6gretap0 [ 491.554250][ T1669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.554917][ T1669] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 491.632513][T16694] nbd: must specify at least one socket [ 491.983950][T10989] IPVS: starting estimator thread 0... [ 492.004330][T16716] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 492.007173][ T1669] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 492.040596][T16717] netlink: 'syz.5.2420': attribute type 1 has an invalid length. [ 492.090575][T16721] IPVS: using max 30 ests per chain, 72000 per kthread [ 492.195008][T16717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.400239][T16740] __nla_validate_parse: 1 callbacks suppressed [ 492.400261][T16740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2424'. [ 492.551815][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.598441][T16743] syzkaller1: entered promiscuous mode [ 492.598698][T16743] syzkaller1: entered allmulticast mode [ 492.654895][T16747] syzkaller0: entered promiscuous mode [ 492.654922][T16747] syzkaller0: entered allmulticast mode [ 492.697095][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.714314][T16731] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2424'. [ 492.828259][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 492.950047][T16180] Bluetooth: hci6: command 0x0405 tx timeout [ 493.105716][T16742] bridge_slave_1: left allmulticast mode [ 493.105749][T16742] bridge_slave_1: left promiscuous mode [ 493.106032][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.145704][T16742] bridge_slave_0: left allmulticast mode [ 493.145741][T16742] bridge_slave_0: left promiscuous mode [ 493.162529][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.300181][T16760] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 493.904661][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 493.946060][T16775] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2433'. [ 493.965511][T16775] nbd: must specify at least one socket [ 494.826628][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 494.826655][T16796] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.027963][T16810] tipc: Enabling of bearer rejected, failed to enable media [ 495.726585][T16821] syz_tun: entered allmulticast mode [ 495.888930][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 495.924792][T16833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2445'. [ 495.939737][T16833] nbd: must specify at least one socket [ 496.194919][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 496.435530][T16845] sctp: [Deprecated]: syz.0.2447 (pid 16845) Use of int in max_burst socket option deprecated. [ 496.435530][T16845] Use struct sctp_assoc_value instead [ 496.512797][T16845] sctp: [Deprecated]: syz.0.2447 (pid 16845) Use of int in maxseg socket option. [ 496.512797][T16845] Use struct sctp_assoc_value instead [ 496.920854][T16868] x_tables: ip_tables: ah match: only valid for protocol 51 [ 497.495673][T16878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'. [ 497.761591][T16858] netlink: 'syz.2.2451': attribute type 10 has an invalid length. [ 497.883154][T16886] tipc: Enabled bearer , priority 0 [ 497.888477][T16886] syzkaller0: entered promiscuous mode [ 497.888498][T16886] syzkaller0: entered allmulticast mode [ 497.929780][T16886] tipc: Resetting bearer [ 497.946371][T16885] tipc: Resetting bearer [ 498.024679][T16885] tipc: Disabling bearer [ 498.457648][T16905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2460'. [ 498.465537][T16905] netlink: 'syz.5.2460': attribute type 8 has an invalid length. [ 498.626515][T16907] wg2 speed is unknown, defaulting to 1000 [ 498.661757][T16907] lo speed is unknown, defaulting to 1000 [ 499.291347][T16928] ip6erspan1: entered allmulticast mode [ 500.428124][T16964] tipc: Enabled bearer , priority 0 [ 500.428780][T16964] syzkaller0: mtu less than device minimum [ 500.910401][T16974] netlink: 'syz.0.2476': attribute type 21 has an invalid length. [ 500.910427][T16974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2476'. [ 500.910479][T16974] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 500.910493][T16974] netlink: 'syz.0.2476': attribute type 5 has an invalid length. [ 500.910504][T16974] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2476'. [ 500.981204][T16974] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2476'. [ 501.025260][T16979] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 501.572615][T16999] netlink: 'syz.0.2481': attribute type 62 has an invalid length. [ 501.623302][T16999] netlink: 279 bytes leftover after parsing attributes in process `syz.0.2481'. [ 501.623334][T16999] veth0_to_bond: default FDB implementation only supports local addresses [ 502.178291][T17017] syzkaller1: entered promiscuous mode [ 502.178314][T17017] syzkaller1: entered allmulticast mode [ 502.206236][T17017] netlink: 271 bytes leftover after parsing attributes in process `syz.6.2486'. [ 502.691939][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'. [ 504.142767][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2497'. [ 504.416428][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 504.429231][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 504.450126][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2499'. [ 504.487888][T17061] bond1: Unable to set down delay as MII monitoring is disabled [ 504.490679][T17061] bond1 (unregistering): Released all slaves [ 505.216225][T17081] syzkaller0: entered promiscuous mode [ 505.216460][T17081] syzkaller0: entered allmulticast mode [ 505.603492][T17021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.998220][T17093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 508.442795][T17098] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 508.594786][T17098] bond12: entered promiscuous mode [ 508.608027][T17098] bond12: entered allmulticast mode [ 508.608484][T17098] 8021q: adding VLAN 0 to HW filter on device bond12 [ 508.672194][T17100] erspan2: entered allmulticast mode [ 508.693398][T17100] bond12: (slave erspan2): making interface the new active one [ 508.693425][T17100] erspan2: entered promiscuous mode [ 508.727585][T17100] bond12: (slave erspan2): Enslaving as an active interface with an up link [ 508.759615][T17098] syz.3.2507 (17098) used obsolete PPPIOCDETACH ioctl [ 508.884246][T17111] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2508'. [ 508.952298][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 509.195851][T17118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'. [ 509.365237][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.365263][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.365520][T17119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.429454][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.432116][T17120] bond1: (slave bond0): making interface the new active one [ 509.435067][T17120] bond1: (slave bond0): Enslaving as an active interface with an up link [ 509.435318][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.435336][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.557862][T17131] netlink: 'syz.2.2514': attribute type 1 has an invalid length. [ 509.601274][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.601299][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.605786][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 509.622551][ T59] bond1: (slave bond0): link status definitely down, disabling slave [ 509.848172][ T59] bond1: now running without any active interface! [ 510.418484][T17147] syzkaller1: entered promiscuous mode [ 510.418709][T17147] syzkaller1: entered allmulticast mode [ 510.657447][T17160] nbd: must specify at least one socket [ 511.701267][T17164] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 511.843422][T17193] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 511.967748][T17193] 8021q: adding VLAN 0 to HW filter on device bond12 [ 512.076686][T17200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.251158][T17193] bond12: (slave geneve4): making interface the new active one [ 512.256531][T17193] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 512.297340][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.298690][T10993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.298726][T10993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.298759][T10993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.498435][T17208] v: renamed from veth0_vlan (while UP) [ 512.701399][T17205] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.881029][ T1669] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.281128][T17205] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.362456][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.632788][T17205] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.747145][ T5738] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.028043][T17205] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.596148][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.609801][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.613625][T17266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.715437][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.785049][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.798534][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.905673][ T8260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.911344][ T8260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.920364][ T8260] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.087064][ T59] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.105354][ T8260] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.297045][T10991] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.668825][ T5724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.806237][T17285] __nla_validate_parse: 127 callbacks suppressed [ 515.806259][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.807389][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.808415][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.809331][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.810171][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.811099][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.812003][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.812910][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.813876][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 515.814817][T17285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 516.299175][T17296] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 516.868360][T16180] Bluetooth: hci7: command tx timeout [ 517.072439][T17264] wg2 speed is unknown, defaulting to 1000 [ 517.104448][T17264] lo speed is unknown, defaulting to 1000 [ 518.687629][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.687750][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.687922][T17264] bridge_slave_0: entered allmulticast mode [ 518.721238][T17264] bridge_slave_0: entered promiscuous mode [ 518.739350][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.739469][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.744871][T17264] bridge_slave_1: entered allmulticast mode [ 518.772259][T17264] bridge_slave_1: entered promiscuous mode [ 518.948390][T16180] Bluetooth: hci7: command tx timeout [ 518.983112][T17346] netlink: 'syz.2.2556': attribute type 22 has an invalid length. [ 519.050441][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.107106][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.110370][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.410017][T17264] team0: Port device team_slave_0 added [ 519.439479][T17264] team0: Port device team_slave_1 added [ 519.540425][T17367] openvswitch: netlink: IP tunnel dst address not specified [ 519.631349][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.631374][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.631400][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.695157][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.695176][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.695204][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.026497][T17264] hsr_slave_0: entered promiscuous mode [ 520.051816][T17264] hsr_slave_1: entered promiscuous mode [ 520.071460][T17264] debugfs: 'hsr0' already exists in 'hsr' [ 520.071488][T17264] Cannot create hsr debugfs directory [ 520.620772][T17380] nbd: must specify at least one socket [ 521.026933][T16180] Bluetooth: hci7: command tx timeout [ 521.220150][T17398] x_tables: unsorted underflow at hook 3 [ 521.327775][T17402] nbd: nbd0 already in use [ 521.334957][T17402] block nbd0: NBD_DISCONNECT [ 521.334986][T17402] block nbd0: Send disconnect failed -32 [ 521.335004][T17402] block nbd0: shutting down sockets [ 521.565180][T17406] netlink: 'syz.6.2569': attribute type 1 has an invalid length. [ 521.611831][T17411] __nla_validate_parse: 31 callbacks suppressed [ 521.611855][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2569'. [ 521.614179][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2569'. [ 521.852992][T17406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.911477][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2569'. [ 522.249639][T17424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2571'. [ 522.276389][T17406] bond2 (unregistering): Released all slaves [ 522.543506][T17264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 522.570119][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.574259][T17264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 522.636379][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.642487][T17264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 522.732600][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.742072][T17264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 522.815170][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.924709][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 522.964326][T17435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.991471][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.039625][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.109580][T16180] Bluetooth: hci7: command tx timeout [ 523.479667][T17448] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2575'. [ 523.479862][T17450] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2575'. [ 523.515064][T17448] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2575'. [ 523.518641][T17450] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2575'. [ 523.690666][T17264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.812936][T17264] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.895731][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.895863][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.060446][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.060579][T10990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.287625][T17464] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2578'. [ 524.344969][T17471] syzkaller0: left promiscuous mode [ 524.344994][T17471] syzkaller0: left allmulticast mode [ 524.636101][T17476] x_tables: duplicate underflow at hook 2 [ 525.425718][T17498] veth0_macvtap: left promiscuous mode [ 525.858280][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.881029][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.990212][T17520] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 526.382155][T17525] wg2 speed is unknown, defaulting to 1000 [ 526.397226][T17525] lo speed is unknown, defaulting to 1000 [ 526.660935][T17538] __nla_validate_parse: 2 callbacks suppressed [ 526.660957][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2592'. [ 526.661879][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2592'. [ 526.779561][T17538] bond2: entered promiscuous mode [ 526.780099][T17538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.078682][T17539] bond3: entered promiscuous mode [ 527.085069][T17539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.318722][T17264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.916511][T17577] netlink: 'syz.0.2598': attribute type 1 has an invalid length. [ 527.943745][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 527.987036][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.851887][T17264] veth0_vlan: entered promiscuous mode [ 528.897897][T17264] veth1_vlan: entered promiscuous mode [ 529.002317][T17264] veth0_macvtap: entered promiscuous mode [ 529.026550][T17264] veth1_macvtap: entered promiscuous mode [ 529.080093][T17264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.111517][T17264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.153825][ T8257] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.235615][T10991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.236112][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.237121][T10990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.482164][T17610] netlink: 'syz.0.2604': attribute type 4 has an invalid length. [ 529.636368][T17618] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2608'. [ 529.773263][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2608'. [ 529.773305][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2608'. [ 529.882284][T17619] syz_tun: left promiscuous mode [ 529.915496][T17619] 8021q: adding VLAN 0 to HW filter on device .` [ 529.924748][T17619] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.029875][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 530.029901][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'. [ 530.036044][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 530.036068][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'. [ 530.080023][T17619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.080054][T17619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.117876][T17619] veth1_vlan: left promiscuous mode [ 530.123490][T17619] veth1_vlan: entered promiscuous mode [ 530.144660][T17619] veth1_macvtap: left promiscuous mode [ 530.157490][T17619] veth0_macvtap: entered promiscuous mode [ 530.159504][T17619] veth1_macvtap: entered promiscuous mode [ 530.196396][T17619] erspan0: entered promiscuous mode [ 530.213707][T17619] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 530.215948][T17619] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 530.240040][T17619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.243801][T17619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.272277][T17619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.276732][T17619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.295726][T17619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.318836][T17619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.335022][T17619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 530.417694][T17619] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.441030][T17619] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 530.441506][ T7484] lo speed is unknown, defaulting to 1000 [ 530.441543][ T7484] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 530.491522][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.491545][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.919446][ T5738] wg2 speed is unknown, defaulting to 1000 [ 530.919497][ T5738] syz2: Port: 1 Link ACTIVE [ 531.033637][T17639] pim6reg: left allmulticast mode [ 531.065150][T10990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.065184][T10990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.246586][T17645] sock: sock_timestamping_bind_phc: sock not bind to device [ 532.134554][T17671] __nla_validate_parse: 4 callbacks suppressed [ 532.134575][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 532.156191][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 532.689118][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2618'. [ 534.477811][T17710] syzkaller1: entered promiscuous mode [ 534.478035][T17710] syzkaller1: entered allmulticast mode [ 534.523452][T17714] syzkaller1: left promiscuous mode [ 534.523477][T17714] syzkaller1: left allmulticast mode [ 534.783803][T17723] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.799497][T17729] netlink: 'syz.0.2627': attribute type 2 has an invalid length. [ 534.799521][T17729] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2627'. [ 535.506308][T17748] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2633'. [ 535.582992][T17749] syzkaller1: entered promiscuous mode [ 535.583017][T17749] syzkaller1: entered allmulticast mode [ 537.779185][T17783] openvswitch: netlink: VLAN attribute unexpected. [ 538.214363][T17790] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 538.293918][T17790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2642'. [ 538.293946][T17790] openvswitch: netlink: Flow key attr not present in new flow. [ 538.334999][T17783] openvswitch: netlink: VLAN attribute unexpected. [ 538.409016][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2643'. [ 538.838346][T17804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.137915][T17812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.014968][T17819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.930682][T17833] tipc: Enabling of bearer rejected, already enabled [ 541.066695][T17836] netlink: 'syz.2.2648': attribute type 46 has an invalid length. [ 541.363120][T17840] tipc: Started in network mode [ 541.363161][T17840] tipc: Node identity 42a9ca38ab29, cluster identity 4711 [ 541.363560][T17840] tipc: Enabled bearer , priority 0 [ 541.500503][T17850] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 541.531362][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 541.532790][T17840] syzkaller0: entered promiscuous mode [ 541.532814][T17840] syzkaller0: entered allmulticast mode [ 541.534784][T17840] tipc: Resetting bearer [ 541.989780][T17849] veth0_macvtap: left promiscuous mode [ 542.026655][T17854] tipc: Resetting bearer [ 542.378617][T17884] sock: sock_timestamping_bind_phc: sock not bind to device [ 542.425540][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 542.448132][T17884] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2658'. [ 542.690780][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2659'. [ 544.627361][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.025776][T17854] tipc: Disabling bearer [ 547.140085][ T5745] tipc: Node number set to 3917531704 [ 547.322149][T17885] wg2 speed is unknown, defaulting to 1000 [ 547.340113][T17885] lo speed is unknown, defaulting to 1000 [ 547.417117][T17915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2664'. [ 548.459581][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 548.464283][T17924] syzkaller0: entered promiscuous mode [ 548.469426][T17924] syzkaller0: entered allmulticast mode [ 548.571049][T17947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2669'. [ 552.950140][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 553.134018][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 553.337523][T17954] syzkaller1: entered promiscuous mode [ 553.337550][T17954] syzkaller1: entered allmulticast mode [ 553.664915][T17974] netlink: 'syz.6.2675': attribute type 1 has an invalid length. [ 553.874143][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2675'. [ 553.936053][T17976] bond4: (slave veth5): Enslaving as an active interface with a down link [ 553.936134][T17966] wg2 speed is unknown, defaulting to 1000 [ 553.948377][T17988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2677'. [ 553.962695][T17990] netlink: 'syz.6.2675': attribute type 1 has an invalid length. [ 553.969714][T17966] lo speed is unknown, defaulting to 1000 [ 553.981153][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2677'. [ 554.014614][T17978] bond4: (slave veth7): Enslaving as an active interface with a down link [ 554.015517][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2675'. [ 554.113405][T17983] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2676'. [ 554.200409][T17985] bond4: (slave veth9): Enslaving as an active interface with a down link [ 554.241493][T17976] bond4: (slave veth11): Enslaving as an active interface with a down link [ 554.405477][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 554.491920][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 554.627748][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 554.985254][T18013] sctp: [Deprecated]: syz.0.2682 (pid 18013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.985254][T18013] Use struct sctp_sack_info instead [ 555.137160][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2682'. [ 555.624243][T18026] netlink: 'syz.3.2684': attribute type 21 has an invalid length. [ 556.413984][T18041] ip_tables: iptables: counters copy to user failed while replacing table [ 556.416533][T18041] ip_tables: iptables: counters copy to user failed while replacing table [ 556.603469][T18045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 556.657979][T18045] syzkaller0: entered promiscuous mode [ 556.658005][T18045] syzkaller0: entered allmulticast mode [ 559.066690][T18075] bond5: entered promiscuous mode [ 559.078941][T18075] bond5: entered allmulticast mode [ 559.079429][T18075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.453541][ T7482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.766511][T18096] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 559.953156][T18098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.988675][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.988920][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.404875][T18112] __nla_validate_parse: 6 callbacks suppressed [ 560.404898][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2705'. [ 560.470504][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.473908][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.267555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.327440][T18136] syzkaller0: left promiscuous mode [ 561.327680][T18136] syzkaller0: left allmulticast mode [ 561.400865][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 561.402392][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2713'. [ 561.513591][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.115482][T18153] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2716'. [ 562.342830][T18158] netlink: 'syz.3.2718': attribute type 12 has an invalid length. [ 562.342859][T18158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2718'. [ 562.409595][T18160] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2719'. [ 562.593951][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.639690][T18163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2720'. [ 562.639719][T18163] nbd: must specify at least one socket [ 562.693034][T18167] block nbd0: server does not support multiple connections per device. [ 562.696675][T18167] block nbd0: shutting down sockets [ 562.993897][ T59] IPVS: starting estimator thread 0... [ 563.049196][T18184] netlink: 'syz.7.2724': attribute type 3 has an invalid length. [ 563.049430][T18184] netlink: 'syz.7.2724': attribute type 3 has an invalid length. [ 563.054335][T18180] netlink: 'syz.7.2724': attribute type 3 has an invalid length. [ 563.054527][T18180] netlink: 'syz.7.2724': attribute type 3 has an invalid length. [ 563.081572][T18182] IPVS: using max 26 ests per chain, 62400 per kthread [ 563.304685][T18184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.304908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.363400][T18188] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 563.406148][T18163] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 563.406175][T18163] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 563.443411][T18180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.443671][T18163] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 563.443691][T18163] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 563.508141][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.542361][T18180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.579106][T18180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.581733][T18180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.586149][T18180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.631543][T18194] netlink: 'syz.2.2726': attribute type 30 has an invalid length. [ 563.711594][T18184] IPVS: stopping master sync thread 18188 ... [ 564.026429][T18163] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 564.026456][T18163] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 564.086516][T18198] veth0_macvtap: left promiscuous mode [ 564.390594][T18205] xt_hashlimit: overflow, rate too high: 0 [ 564.987319][T18215] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 565.157052][T18215] bond13 (unregistering): Released all slaves [ 565.378146][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2731'. [ 565.378174][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2731'. [ 565.378189][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2731'. [ 565.378367][T18222] netlink: 'syz.6.2731': attribute type 6 has an invalid length. [ 565.462522][T18232] pim6reg: entered allmulticast mode [ 565.475736][T18232] pim6reg: left allmulticast mode [ 566.213186][T18257] netlink: 'syz.0.2739': attribute type 9 has an invalid length. [ 566.329060][T18267] __nla_validate_parse: 1 callbacks suppressed [ 566.329083][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2740'. [ 566.549120][ T5745] net_ratelimit: 48 callbacks suppressed [ 566.549143][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.902128][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.603438][T18295] ipip0: entered promiscuous mode [ 567.668739][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.913777][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.445987][T18316] netlink: 'syz.6.2757': attribute type 1 has an invalid length. [ 568.481612][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2757'. [ 568.863153][T18321] x_tables: duplicate entry at hook 1 [ 568.993905][T18325] xt_socket: unknown flags 0x8 [ 569.152901][ T7482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.207858][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2758'. [ 569.269218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.294865][T18335] netlink: 'syz.7.2758': attribute type 1 has an invalid length. [ 569.503665][T18332] syzkaller1: entered promiscuous mode [ 569.503692][T18332] syzkaller1: entered allmulticast mode [ 569.629577][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.778048][T18344] netlink: 'syz.6.2764': attribute type 4 has an invalid length. [ 569.780099][T18348] netlink: 'syz.6.2764': attribute type 4 has an invalid length. [ 570.309783][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.536871][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.709583][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.772721][T18371] netlink: 'syz.0.2769': attribute type 4 has an invalid length. [ 570.772907][T18373] netlink: 'syz.0.2769': attribute type 4 has an invalid length. [ 570.956862][T18368] syzkaller0: entered promiscuous mode [ 570.956887][T18368] syzkaller0: entered allmulticast mode [ 571.061344][T18377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2771'. [ 571.807733][T18386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2773'. [ 572.059586][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2772'. [ 572.393326][T18404] syzkaller1: entered promiscuous mode [ 572.393349][T18404] syzkaller1: entered allmulticast mode [ 572.440359][ T7478] net_ratelimit: 1 callbacks suppressed [ 572.440384][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.495812][T18406] RDS: rds_bind could not find a transport for ::ffff:172.20.20.12, load rds_tcp or rds_rdma? [ 572.503505][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2776'. [ 572.503538][T18415] bond0: option arp_validate: invalid value (18446744073675997440) [ 573.106051][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2781'. [ 573.263713][T18423] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2781'. [ 573.266186][T18423] openvswitch: netlink: IP tunnel dst address not specified [ 573.266220][T18423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.312407][T18423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2781'. [ 573.329529][T18433] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2783'. [ 573.508904][T18431] syzkaller0: entered promiscuous mode [ 573.508930][T18431] syzkaller0: entered allmulticast mode [ 573.534988][T18432] tipc: Enabled bearer , priority 0 [ 573.702106][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.756361][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.797587][T18447] netlink: 'syz.2.2787': attribute type 7 has an invalid length. [ 573.797613][T18447] netlink: 'syz.2.2787': attribute type 3 has an invalid length. [ 573.797627][T18447] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2787'. [ 573.859191][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 573.880808][T18450] netlink: 'syz.3.2788': attribute type 30 has an invalid length. [ 574.009606][T18455] netlink: 'syz.2.2787': attribute type 1 has an invalid length. [ 574.009632][T18455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2787'. [ 574.759283][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.802497][T18450] netlink: 'syz.3.2788': attribute type 30 has an invalid length. [ 574.872994][T18470] tipc: Started in network mode [ 574.873028][T18470] tipc: Node identity 4efedd093e0d, cluster identity 4711 [ 574.873215][T18470] tipc: Enabled bearer , priority 0 [ 574.876953][T18464] syzkaller0: entered promiscuous mode [ 574.876977][T18464] syzkaller0: entered allmulticast mode [ 575.111781][T18462] tipc: Resetting bearer [ 575.129772][T18461] tipc: Resetting bearer [ 575.210483][T18461] tipc: Disabling bearer [ 575.507245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.753014][ T30] audit: type=1800 audit(1789910555.211:8): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2798" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2998 res=0 errno=0 [ 576.221632][T18512] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 576.275035][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.491117][T18512] 8021q: adding VLAN 0 to HW filter on device bond14 [ 576.696586][T18500] netlink: 'syz.7.2797': attribute type 10 has an invalid length. [ 576.706176][T18517] bond15: option resend_igmp: invalid value (2878) [ 576.706201][T18517] bond15: option resend_igmp: allowed values 0 - 255 [ 576.748969][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.749165][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.784944][T18522] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 577.004530][T18517] bond15 (unregistering): Released all slaves [ 577.368207][T18522] dummy0: entered promiscuous mode [ 578.068161][T18550] __nla_validate_parse: 2 callbacks suppressed [ 578.068183][T18550] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2808'. [ 578.074431][T18549] net_ratelimit: 242 callbacks suppressed [ 578.074454][T18549] ip_tables: iptables: counters copy to user failed while replacing table [ 578.127775][T18549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2809'. [ 578.436496][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.548050][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.613048][T18563] xt_hashlimit: size too large, truncated to 1048576 [ 579.576429][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.580511][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2818'. [ 579.675033][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 579.830224][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.908420][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.514535][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 580.525838][T18625] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2822'. [ 580.525864][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 580.525877][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2822'. [ 580.628203][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.671203][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.735427][T18649] syzkaller1: entered promiscuous mode [ 581.735451][T18649] syzkaller1: entered allmulticast mode [ 582.027909][T18660] xt_CONNSECMARK: invalid mode: 254 [ 582.039401][T18668] netlink: 'syz.7.2833': attribute type 2 has an invalid length. [ 582.039424][T18668] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2833'. [ 582.113587][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2833'. [ 582.145799][T18662] batman_adv: batadv0: Adding interface: syzkaller0 [ 582.145819][T18662] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.145851][T18662] batman_adv: batadv0: Interface activated: syzkaller0 [ 582.199801][T18653] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 582.382959][T18653] batman_adv: batadv0: Removing interface: syzkaller0 [ 583.020690][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.024216][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.330245][T18690] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:21 [ 583.331000][T18690] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 583.332764][T18690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.416688][T18707] __nla_validate_parse: 4 callbacks suppressed [ 583.416710][T18707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2845'. [ 583.417604][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2845'. [ 583.417661][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2845'. [ 583.827264][T18711] netlink: 'syz.2.2847': attribute type 7 has an invalid length. [ 583.827289][T18711] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2847'. [ 583.882642][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 583.882703][T18711] IPv6: Can't replace route, no match found [ 584.022975][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 584.150146][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.150985][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'. [ 584.387146][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 584.389187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.939234][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2852'. [ 585.214632][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.431840][T18754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2859'. [ 586.083377][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.239420][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.279890][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.514760][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 587.516495][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 587.531576][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 587.579210][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 587.579903][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 587.724582][T16180] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 587.724960][T16180] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 587.725291][T16180] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 587.763979][T16180] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 587.776202][T16180] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 588.163350][T18811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.182928][T18816] netlink: 'syz.7.2875': attribute type 1 has an invalid length. [ 588.182953][T18816] netlink: 'syz.7.2875': attribute type 4 has an invalid length. [ 588.182966][T18816] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2875'. [ 588.356819][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.662031][ T5627] .`: (slave syz_tun): Releasing backup interface [ 588.789151][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.967106][T18836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2879'. [ 588.967144][T18836] netlink: 'syz.7.2879': attribute type 7 has an invalid length. [ 588.967157][T18836] netlink: 'syz.7.2879': attribute type 8 has an invalid length. [ 588.967168][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2879'. [ 589.159329][ T7479] infiniband s`z1: ib_query_port failed (-19) [ 589.307759][T18836] gretap0: entered promiscuous mode [ 589.343895][T18836] gretap0: left promiscuous mode [ 589.378587][T10993] smbdirect: ib_dev[s`z1] removed [ 589.430902][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.471161][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.907395][T16180] Bluetooth: hci8: command tx timeout [ 590.276547][T18800] wg2 speed is unknown, defaulting to 1000 [ 590.289997][T18800] lo speed is unknown, defaulting to 1000 [ 590.565441][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.028256][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 591.028287][T18875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2886'. [ 591.106599][T18879] syzkaller1: entered promiscuous mode [ 591.106625][T18879] syzkaller1: entered allmulticast mode [ 591.232242][T18875] vlan2: entered allmulticast mode [ 591.232268][T18875] bridge_slave_0: entered allmulticast mode [ 591.596501][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.788721][T18800] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.789127][T18800] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.794022][T18800] bridge_slave_0: entered allmulticast mode [ 591.812879][T18800] bridge_slave_0: entered promiscuous mode [ 591.830889][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.988349][T16180] Bluetooth: hci8: command tx timeout [ 592.069879][T18800] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.070001][T18800] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.070509][T18800] bridge_slave_1: entered allmulticast mode [ 592.104389][T18800] bridge_slave_1: entered promiscuous mode [ 592.295124][T18883] wg2 speed is unknown, defaulting to 1000 [ 592.337362][T18800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.339025][T18883] lo speed is unknown, defaulting to 1000 [ 592.354852][T18800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.664588][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.701474][T18800] team0: Port device team_slave_0 added [ 592.822487][T18800] team0: Port device team_slave_1 added [ 593.267345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.567861][T18800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.567881][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.567906][T18800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.575329][T18800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.575350][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.575378][T18800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.703412][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.908713][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.067829][T16180] Bluetooth: hci8: command tx timeout [ 594.133848][T18800] hsr_slave_0: entered promiscuous mode [ 594.139581][T18800] hsr_slave_1: entered promiscuous mode [ 594.141543][T18800] debugfs: 'hsr0' already exists in 'hsr' [ 594.141563][T18800] Cannot create hsr debugfs directory [ 594.183434][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 594.549542][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.721478][T18800] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.721520][T18800] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.726801][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.867968][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.058508][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 595.238265][T18800] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.238305][T18800] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.435231][T18800] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.435268][T18800] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.603457][T18944] tc action pedit offset must be on 32 bit boundaries [ 595.619641][T18800] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.619677][T18800] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.803641][T18950] syzkaller0: entered promiscuous mode [ 595.803665][T18950] syzkaller0: entered allmulticast mode [ 595.825821][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.829357][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.937857][T18950] netlink: 'syz.6.2904': attribute type 1 has an invalid length. [ 595.937880][T18950] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2904'. [ 595.938425][T18949] netlink: 'syz.6.2904': attribute type 1 has an invalid length. [ 595.938440][T18949] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2904'. [ 596.078293][T18958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2905'. [ 596.078328][T18958] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 596.147590][T16180] Bluetooth: hci8: command tx timeout [ 596.148581][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2906'. [ 596.548318][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'. [ 596.660735][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'. [ 596.870107][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.428276][T18970] wg2 speed is unknown, defaulting to 1000 [ 597.467443][T18970] lo speed is unknown, defaulting to 1000 [ 597.519449][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 597.582731][T18800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.608313][T18800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.731665][T18800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 597.761058][T18800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.763979][T18800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 597.820359][T18800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.821480][T18800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.847582][T18800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 598.603956][T18800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.758647][T19014] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2916'. [ 598.787281][T18800] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.855331][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.855446][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.993203][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.993326][T10990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.277924][T19022] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.554375][T19026] can: request_module (can-proto-3) failed. [ 599.578447][T19022] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.744985][T19035] __nla_validate_parse: 1 callbacks suppressed [ 599.745009][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2923'. [ 599.852902][T19022] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.121770][T19022] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.757050][T10990] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.757113][T10990] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.757146][T10990] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.766933][ T1004] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.951881][T19056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2926'. [ 600.967979][T19056] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 600.968065][T19056] netlink: 'syz.3.2926': attribute type 2 has an invalid length. [ 601.293813][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2930'. [ 601.914677][T19071] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2931'. [ 602.264908][T18800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.392985][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2937'. [ 602.393011][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2937'. [ 602.396314][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2937'. [ 602.396335][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2937'. [ 602.475070][T18800] veth0_vlan: entered promiscuous mode [ 602.524276][T18800] veth1_vlan: entered promiscuous mode [ 602.701286][T18800] veth0_macvtap: entered promiscuous mode [ 602.744380][T18800] veth1_macvtap: entered promiscuous mode [ 602.994483][T18800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.116637][T18800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.168331][T10990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.168768][T10993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.168806][T10993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.168839][T10993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.904324][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.904357][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.211380][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.211404][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.424475][T19125] netlink: 'syz.7.2945': attribute type 1 has an invalid length. [ 604.481670][T19130] netlink: 'syz.7.2945': attribute type 1 has an invalid length. [ 604.762661][T19138] Bluetooth: MGMT ver 1.23 [ 604.765941][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2948'. [ 604.863309][T19137] netlink: 'syz.7.2948': attribute type 11 has an invalid length. [ 605.428801][ T31] INFO: task syz.1.2268:15962 blocked for more than 143 seconds. [ 605.428832][ T31] Not tainted syzkaller #0 [ 605.428844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.428854][ T31] task:syz.1.2268 state:D stack:26272 pid:15962 tgid:15948 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 605.428916][ T31] Call Trace: [ 605.428924][ T31] [ 605.428938][ T31] __schedule+0x17db/0x58f0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 605.429129][ T31] ? __pfx___schedule+0x10/0x10 [ 605.429162][ T31] ? schedule+0x90/0x2b0 [ 605.429188][ T31] schedule+0x164/0x2b0 [ 605.429213][ T31] schedule_preempt_disabled+0x13/0x30 [ 605.429234][ T31] __mutex_lock+0x7c1/0x1550 [ 605.429286][ T31] ? __mutex_lock+0x5d4/0x1550 [ 605.429315][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 605.429504][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 605.429539][ T31] ? kernel_text_address+0xa5/0xe0 [ 605.429593][ T31] ? __kernel_text_address+0xd/0x30 [ 605.429615][ T31] ? unwind_get_return_address+0x4d/0x90 [ 605.429650][ T31] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 605.429686][ T31] ? stack_trace_save+0xa9/0x100 [ 605.429845][ T31] ? __pfx_ ** replaying previous printk message ** [ 605.429845][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 605.429871][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 605.429986][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 605.430020][ T31] ? kasan_save_track+0x4f/0x80 [ 605.430071][ T31] ? kasan_save_track+0x3e/0x80 [ 605.430091][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 605.430112][ T31] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 605.430141][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 605.430261][ T31] ? netlink_dump+0x1e7/0xee0 [ 605.430329][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 605.430355][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 605.430399][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 605.430420][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 605.430455][ T31] ? genl_rcv+0x28/0x40 [ 605.430474][ T31] ? netlink_unicast+0x7bd/0x940 [ 605.430506][ T31] ? netlink_sendmsg+0x813/0xb40 [ 605.430531][ T31] ? sock_sendmsg_nosec+0x13a/0x180 [ 605.430572][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 605.430596][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 605.430620][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 605.430644][ T31] ? do_syscall_64+0x166/0x520 [ 605.430686][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.430769][ T31] ? rcu_is_watching+0x16/0xb0 [ 605.430794][ T31] ? trace_kmalloc+0x2a/0xf0 [ 605.430818][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 605.430842][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 605.430862][ T31] ? netlink_dump+0x1e7/0xee0 [ 605.430887][ T31] ? netlink_dump+0x1e7/0xee0 [ 605.430923][ T31] genl_dumpit+0x10b/0x1b0 [ 605.430952][ T31] netlink_dump+0x711/0xee0 [ 605.430993][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 605.431044][ T31] ? genl_start+0x497/0x6d0 [ 605.431075][ T31] __netlink_dump_start+0x589/0x7b0 [ 605.431111][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 605.431140][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 605.431164][ T31] ? genl_get_cmd+0x523/0x960 [ 605.431192][ T31] ? __pfx_genl_start+0x10/0x10 [ 605.431213][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 605.431234][ T31] ? __pfx_genl_done+0x10/0x10 [ 605.431258][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 605.431321][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 605.431352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.431375][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 605.431416][ T31] netlink_rcv_skb+0x226/0x4a0 [ 605.431446][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.431471][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.431516][ T31] ? down_read+0x2be/0x330 [ 605.431546][ T31] genl_rcv+0x28/0x40 [ 605.431568][ T31] netlink_unicast+0x7bd/0x940 [ 605.431607][ T31] netlink_sendmsg+0x813/0xb40 [ 605.431647][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.431686][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 605.431780][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.431807][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 605.431831][ T31] ____sys_sendmsg+0x54e/0x850 [ 605.431862][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.431896][ T31] ? import_iovec+0x73/0xa0 [ 605.431967][ T31] ___sys_sendmsg+0x2a5/0x360 [ 605.431994][ T31] ? __lock_acquire+0x747/0x2de0 [ 605.432036][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.432069][ T31] ? futex_wait+0x2a2/0x390 [ 605.432160][ T31] ? __fget_files+0x2a/0x420 [ 605.432200][ T31] ? __fget_files+0x3a2/0x420 [ 605.432241][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 605.432272][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.432326][ T31] do_syscall_64+0x166/0x520 [ 605.432350][ T31] ? trace_irq_disable+0x3b/0x140 [ 605.432383][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.432405][ T31] ? clear_bhb_loop+0x70/0xc0 [ 605.432432][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.432453][ T31] RIP: 0033:0x7f2a1559e159 [ 605.432474][ T31] RSP: 002b:00007f2a137d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.432497][ T31] RAX: ffffffffffffffda RBX: 00007f2a15826090 RCX: 00007f2a1559e159 [ 605.432512][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 605.432525][ T31] RBP: 00007f2a1563506b R08: 0000000000000000 R09: 0000000000000000 [ 605.432539][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.432552][ T31] R13: 00007f2a15826128 R14: 00007f2a15826090 R15: 00007ffdbf9a8a48 [ 605.432589][ T31] [ 605.432635][ T31] [ 605.432635][ T31] Showing all locks held in the system: [ 605.432646][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 605.432662][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 605.432761][ T31] locks held by getty/5374: 2, on CPU#0: [ 605.432774][ T31] #0: ffff8880283f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 605.432944][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 605.432995][ T31] locks held by syz-executor/5625: 2, on CPU#1: [ 605.433008][ T31] #0: ffff888061d88ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x232/0x5c0 [ 605.433110][ T31] #1: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 605.433168][ T31] locks held by kworker/0:5/5724: 2, last CPU#0: [ 605.433181][ T31] #0: ffff888055ba0940 ((wq_completion)wg-crypt-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.433237][ T31] #1: ffffc90004c4fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.433303][ T31] locks held by syz.4.2221/15749: 2, on CPU#1: [ 605.433316][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.433364][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 605.433417][ T31] locks held by syz.1.2268/15962: 3, on CPU#1: [ 605.433431][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.433483][ T31] #1: ffff88807b7956e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 605.433539][ T31] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 605.433596][ T31] locks held by syz.5.2464/16916: 3, on CPU#1: [ 605.433610][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.433661][ T31] #1: ffff88806a0a16e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 605.433719][ T31] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 605.433776][ T31] locks held by syz-executor/18800: 7, last CPU#0: [ 605.433790][ T31] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 605.433855][ T31] #1: ffff88807bf81078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 605.433922][ T31] #2: ffff8880542c29f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 605.433985][ T31] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 605.434062][ T31] #4: ffff88805b8ad378 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 605.434124][ T31] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 605.434179][ T31] #6: ffff8880755d20d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 605.434251][ T31] locks held by syz.7.2948/19137: 2, last CPU#0: [ 605.434265][ T31] #0: ffff88807f1a5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 605.434322][ T31] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 605.434378][ T31] locks held by syz.6.2950/19145: 1, last CPU#1: [ 605.434392][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 605.434452][ T31] locks held by syz-executor/19148: 1, last CPU#1: [ 605.434466][ T31] #0: ffff88807bca3910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 605.434578][ T31] [ 605.434584][ T31] ============================================= [ 605.434584][ T31] [ 605.434592][ T31] NMI backtrace for cpu 1 [ 605.434604][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 605.434625][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.434636][ T31] Call Trace: [ 605.434644][ T31] [ 605.434651][ T31] dump_stack_lvl+0xe8/0x150 [ 605.434687][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 605.434745][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 605.434777][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 605.434809][ T31] sys_info+0x135/0x170 [ 605.434856][ T31] watchdog+0xfd7/0x1030 [ 605.434884][ T31] ? watchdog+0x1c7/0x1030 [ 605.434911][ T31] kthread+0x38b/0x480 [ 605.434931][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.434948][ T31] ? __pfx_kthread+0x10/0x10 [ 605.434969][ T31] ret_from_fork+0x514/0xb70 [ 605.434999][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 605.435026][ T31] ? __switch_to+0xc89/0x1420 [ 605.435074][ T31] ? __pfx_kthread+0x10/0x10 [ 605.435093][ T31] ret_from_fork_asm+0x1a/0x30 [ 605.435134][ T31] [ 605.435142][ T31] Sending NMI from CPU 1 to CPUs 0: [ 605.435169][ C0] NMI backtrace for cpu 0 [ 605.435185][ C0] CPU: 0 UID: 0 PID: 5724 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 605.435205][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.435217][ C0] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 605.435293][ C0] RIP: 0010:stack_depot_save_flags+0x25/0x7f0 [ 605.435316][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 f7 c2 00 0c 00 00 41 0f 95 c5 83 f9 04 0f 83 4b 01 00 00 <89> d3 49 89 fe 89 4c 24 04 e8 ad b0 96 fc 41 89 c2 31 c0 45 85 d2 [ 605.435331][ C0] RSP: 0018:ffffc90004c4f198 EFLAGS: 00000293 [ 605.435347][ C0] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000000000001 [ 605.435358][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffffc90004c4f1f0 [ 605.435371][ C0] RBP: ffffc90004c4f420 R08: 0000000000000015 R09: 0000000000000000 [ 605.435383][ C0] R10: ffffc90004c4f0f8 R11: ffffffff81b28ab0 R12: ffffea0000a4e680 [ 605.435396][ C0] R13: dffffc0000000000 R14: ffff88802939aeb0 R15: ffffc90004c4f1f0 [ 605.435410][ C0] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 605.435424][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.435437][ C0] CR2: 00007fb5c69556c8 CR3: 00000000567b8000 CR4: 00000000003526f0 [ 605.435456][ C0] Call Trace: [ 605.435463][ C0] [ 605.435474][ C0] kasan_save_track+0x4f/0x80 [ 605.435493][ C0] ? kasan_save_track+0x3e/0x80 [ 605.435510][ C0] ? __kasan_mempool_unpoison_object+0xa3/0x130 [ 605.435541][ C0] ? napi_skb_cache_get+0x3e3/0x7e0 [ 605.435566][ C0] ? __alloc_skb+0x1a1/0x7a0 [ 605.435588][ C0] ? ip6_frag_next+0x11e/0xb80 [ 605.435651][ C0] ? ip6_fragment+0xd40/0x1e20 [ 605.435672][ C0] ? ip6_output+0x337/0x540 [ 605.435692][ C0] ? udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 605.435765][ C0] ? send6+0x5ce/0x920 [ 605.435787][ C0] ? wg_socket_send_skb_to_peer+0x111/0x1d0 [ 605.435811][ C0] ? wg_packet_tx_worker+0x1c8/0x7e0 [ 605.435832][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 605.435858][ C0] ? worker_thread+0xa47/0xfb0 [ 605.435882][ C0] ? kthread+0x38b/0x480 [ 605.435898][ C0] ? ret_from_fork+0x514/0xb70 [ 605.435916][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 605.435967][ C0] __kasan_mempool_unpoison_object+0xa3/0x130 [ 605.435990][ C0] ? napi_skb_cache_get+0x16c/0x7e0 [ 605.436014][ C0] napi_skb_cache_get+0x3e3/0x7e0 [ 605.436037][ C0] ? napi_skb_cache_get+0x16c/0x7e0 [ 605.436061][ C0] ? __alloc_skb+0x18d/0x7a0 [ 605.436086][ C0] __alloc_skb+0x1a1/0x7a0 [ 605.436112][ C0] ip6_frag_next+0x11e/0xb80 [ 605.436132][ C0] ? skb_checksum_help+0x36e/0x7b0 [ 605.436156][ C0] ? skb_checksum_help+0x3df/0x7b0 [ 605.436184][ C0] ip6_fragment+0xd40/0x1e20 [ 605.436214][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 605.436239][ C0] ? __pfx_ip6_fragment+0x10/0x10 [ 605.436260][ C0] ? ip6_finish_output+0x37a/0x480 [ 605.436279][ C0] ? ip6_output+0x11e/0x540 [ 605.436298][ C0] ip6_output+0x337/0x540 [ 605.436318][ C0] udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 605.436350][ C0] send6+0x5ce/0x920 [ 605.436376][ C0] ? send6+0x255/0x920 [ 605.436393][ C0] ? __pfx_send6+0x10/0x10 [ 605.436422][ C0] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 605.436445][ C0] wg_packet_tx_worker+0x1c8/0x7e0 [ 605.436464][ C0] ? wg_packet_tx_worker+0x25f/0x7e0 [ 605.436485][ C0] ? process_scheduled_works+0x97a/0x1630 [ 605.436508][ C0] process_scheduled_works+0xc3d/0x1630 [ 605.436553][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.436579][ C0] ? assign_work+0x3cf/0x5d0 [ 605.436603][ C0] worker_thread+0xa47/0xfb0 [ 605.436632][ C0] ? __kthread_parkme+0x71/0x1f0 [ 605.436660][ C0] kthread+0x38b/0x480 [ 605.436676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 605.436698][ C0] ? __pfx_kthread+0x10/0x10 [ 605.436721][ C0] ret_from_fork+0x514/0xb70 [ 605.436740][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 605.436757][ C0] ? __switch_to+0xc89/0x1420 [ 605.436785][ C0] ? __pfx_kthread+0x10/0x10 [ 605.436804][ C0] ret_from_fork_asm+0x1a/0x30 [ 605.436838][ C0] [ 605.553870][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 606.831572][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 606.840684][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.850831][ T31] Call Trace: [ 606.854118][ T31] [ 606.857056][ T31] vpanic+0x56d/0xa60 [ 606.861057][ T31] ? __pfx___schedule+0x10/0x10 [ 606.865910][ T31] ? __pfx_vpanic+0x10/0x10 [ 606.870428][ T31] panic+0xc5/0xd0 [ 606.874280][ T31] ? __pfx_panic+0x10/0x10 [ 606.878704][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 606.884170][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 606.889636][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 606.895803][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 606.901971][ T31] watchdog+0x1030/0x1030 [ 606.906329][ T31] ? watchdog+0x1c7/0x1030 [ 606.910789][ T31] kthread+0x38b/0x480 [ 606.914876][ T31] ? __pfx_watchdog+0x10/0x10 [ 606.919649][ T31] ? __pfx_kthread+0x10/0x10 [ 606.924271][ T31] ret_from_fork+0x514/0xb70 [ 606.928892][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 606.934015][ T31] ? __switch_to+0xc89/0x1420 [ 606.938704][ T31] ? __pfx_kthread+0x10/0x10 [ 606.943302][ T31] ret_from_fork_asm+0x1a/0x30 [ 606.948095][ T31] [ 606.951253][ T31] Kernel Offset: disabled [ 606.955579][ T31] Rebooting in 86400 seconds..