last executing test programs: 2m29.818965585s ago: executing program 32 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x6c, r0}, 0x38) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast2, 0x17, 0x3, 'wrr\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000300)}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x80) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f00000004c0)={&(0x7f0000000500)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 2m15.927309223s ago: executing program 33 (id=322): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x4, 0x0, 0xa, 0xb, 0x20000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x283, 0x1}) 1m54.711564884s ago: executing program 2 (id=822): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8000c06}}, &(0x7f0000000800)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0xd, 0x9}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xac0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x8, 0xd, 0x9, 0x4, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sysctl=0x12, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x8, 0x1, 0x6}, 0x10, r2, r1, 0x0, &(0x7f0000000940)=[r1, r4, r1], 0x0, 0x10, 0x1000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r6, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xffff}, &(0x7f0000000400)=0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) 1m54.513753253s ago: executing program 2 (id=826): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket(0x2d, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/10, 0xa}, {&(0x7f0000001500)=""/28, 0x1c}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f0000001600)=""/134, 0x86}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x6, &(0x7f00000027c0)=""/205, 0xcd}, 0x63ec}], 0x1, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f00000001c0)="e2e0c2b40c1158e9354adcdb8d8190776187c0a0459a06a5aaad2e708798f04c4938862de5a43abac2c756217f607ef490e0151a2b2bb9eaed3b1ce184282e13eb9927391cd089289601d9b57aedbb238598b950b8e795f9bed6122a3d72330d306a4f2d43b19c651337cb2d290d322352855a7a0a416e4649b1abc0bb81925dda1a3bb4b8580ad2ab75844545846c91f6f7e5ff69b3586516e83aad33c28fa73e123d6fde9a11375d6aa40c0fe971d748e354af2bddabc1ce03a8bded66b05c7ac708d67b86f533b862ee4ea4e495c0aa1a2e20035430f61f9b3557595bbaaebf7f4592bba9f2e740cf8ca384d0e9d4784e1663746ea2", 0xf7}, {&(0x7f00000002c0)="2b22fe4ae299dcd875113c4344a897a0554765a8d9fddc69e21102ea3f8cc57cfd5a29812cdcab04b86a1fea34b4deb1d3", 0x31}], 0x3, 0x1) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 1m53.581926257s ago: executing program 2 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000140)={0x4, 0x6}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 1m53.116691045s ago: executing program 2 (id=849): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000300), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r5}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRESOCT=r1, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.417117846s ago: executing program 2 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2130}, 0x94) 1m52.233989019s ago: executing program 2 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x3a, 0x10, &(0x7f00000008c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000980)="a3", 0x2}, 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@local, 0x73, r7}) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000002c0)="505b81146af0efe076969754cdb69feaa568d895d7e0746a8a33da99ca3f8d034cc08cffa711bfefbcaac9aafbe935af948908f29e6973122f64a23cc72f780f073ee5abd1e45d943694b78b6887190691791586e1dd27745f3d10e4b01cfbda7775cc2c3838b4f607c08443008d14c46e8328168de552806e65753b477fcb941183381c9a4241ed808cdea809f883ce07b6c07bc56e3f72c6aaf1a86f9a811747ea580755d10538b81c33b15b7008ba3986521ca13e6ac4afc11421ca9f86eccdfb1059a974541f038f4ab42ee8301625c52b8ef7", 0xd5) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x8000) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)) 1m46.35683817s ago: executing program 5 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m46.19123563s ago: executing program 5 (id=961): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000180)=""/210, 0x0, 0x1a, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x4, [@func={0x4, 0x0, 0x0, 0xc, 0x3}, @volatile={0x9}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x1, 0x6d33}, {0x2, 0x6d000000}, {0x4, 0xdb, 0x5}, {0x2, 0x37, 0x6f}], ';B'}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xff}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000840)=""/222, 0xbc, 0xde, 0x0, 0x5, 0x10000, @value=r0}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x70, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x13, 0x6024}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7, @local, 0x10}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x5}], 0x78) 1m46.081243068s ago: executing program 5 (id=963): syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503005c00650000002f90786500000000000000248088a80000000000ff000010100800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558fffffffd"], 0x0) 1m45.980886238s ago: executing program 5 (id=964): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f6, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000040)={&(0x7f0000000080)=@caif=@rfm={0x25, 0x7, "2710f0023971884fb5fc063173d02c05"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="4b99c6e5ea2c66a5660200d69700000000000000", 0x14}], 0x1, 0x0, 0x0, 0x11000000}, 0x40) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, 'peer_node_00001\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x68}}, 0x0) 1m45.948208935s ago: executing program 5 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 1m45.633119168s ago: executing program 5 (id=971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}, 0x0, 0x85ee175c56d0b2e6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmmsg$alg(r5, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000a40), 0x4) sendmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f0000000ac0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x1800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r8, 0x8000000000000003}, 0x18) bind$can_j1939(r3, &(0x7f00000005c0)={0x1d, r8, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x18, 0x27, 0x1, 0x70bd30, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000890) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e22, 0x2, @private1, 0x7}, {0xa, 0x4e23, 0x1, @remote, 0x4}, 0x0, {[0x4, 0x81, 0x22, 0x1, 0xa4e, 0x9, 0xb, 0x4]}}, 0x5c) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x9f, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) connect$pppl2tp(r9, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x3}}, 0x2e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004f0001000000afd4000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000210001000000000004000000ff010099000000000000000000000001fc02000000000001001f0000000000ff00000005000000000a0096ea9b860000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ac000700ac141438000000000000000000000000ac1414bb0000000000000000000000004e2200014e22fffe020020c03c000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="0600000000000000b000000000000000040000000000000028020000000000000200000000000000000100000000000000000080ff3f00000600000000000000060000000000000007000000000000000500000000000000140000000000000000000000b66b6e000200000000000000"], 0xfc}}, 0x0) 1m43.308472454s ago: executing program 4 (id=1003): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @loopback, 0x2}}, 0x9, 0x8, 0x1, 0x4ff4, 0x10, 0x3, 0x80}, &(0x7f0000001680)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000016c0)={r1, 0x7, 0x8, 0x3}, &(0x7f0000001700)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xffffffffffffff40, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r13, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r13}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000001ac0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x19c, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x48400}, 0x4) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1002}) write(r8, &(0x7f0000000440)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2000000000000061, &(0x7f0000000480)=ANY=[@ANYBLOB="662ef44e9d4874f197a8887afd80cb8cf9e6a70972c3e0c6aae7767d122ca69278f7dfc76d461c007650201a7f84f250e0fbf4907c7da9d5aa6a683b96bdf4536f8b2296dcda13b86db3b1cec4749ed4b53b0370102ccfc6e99d53f481d3d25d24c67f08698e1a6abca331585429c7a429c6c13641a80674fe51a3a6382d83d8b0e462996631ee81ddf341a8e4462921e2e51c8696087786b17a9c97d0c3e55258451cdc4350a63a799451b7b54724edd14412980abcea338bc181d1702441079a560f8da3681f854ea3e2b71eb91bd119a234735f9a67f34c2a2dd49b969a93c4a3bce98d9345836ff91cd356523449b0ac29ceb5b7077c2cfa2e", @ANYRESDEC=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRESDEC=r7, @ANYRES16=r7, @ANYRES8=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m43.188838444s ago: executing program 4 (id=1006): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000f80)=""/4094, 0xffe}, {&(0x7f0000001f80)=""/114, 0x72}, {&(0x7f0000002000)=""/141, 0x8d}], 0x3}, 0xfffffffe}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x29, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x52, 0x303, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) 1m43.154370787s ago: executing program 4 (id=1007): r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2000}, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x11) (async) r3 = socket$inet6(0xa, 0x2, 0x11) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x1c, r7, 0x2, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x1c, r7, 0x2, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) 1m43.037441421s ago: executing program 4 (id=1010): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 1m42.994647419s ago: executing program 4 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x5) (async) syz_emit_ethernet(0x2a, &(0x7f00000020c0)=ANY=[@ANYBLOB="0380c2000000ffffffffffff080045fc001c0078aca96f4241786c8a45706ee3a48089c213989555393ac23eb9e5f73cdb9ae590d00a43db2fb067553d0847f7de1606619698edfe1b1931d0ed5f447b43a8e1975a3a147536f41c934883ce166cc30837ca96626acbd1ecff154af8ad9eb8dbcbf3d71c830173db801a4e7e2a35ddc6b062040000002c82d8601434bf2296cd192dfc5a108636d22a09758b108f0c1eb0a3ff50000000000000"], 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@base={0x1b, 0x0, 0x8, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000007000000000000000080000085000000750000009500000000000000942d3bed4c34dc2a93cbed74b1de7c883a006d16067ab92a32c4c57718f9ebebc8529b2cf5fe8d66b9b506b2ede01d4deab2383b3bce13859fe22064bbe842a607ff632b1f83f2c8e039d1531999b3a7149419fb8d52f6b2eccbaf85cb1ae185f13b2338543260e61f56fb8be3e6aedf2489ae686f9529ae652a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)=0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@func={0x1, 0x0, 0x0, 0xc, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x0, 0x3, 0x2}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000001ac0)=""/127, 0x48, 0x7f, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d80)={r6, 0x20, &(0x7f0000001d40)={&(0x7f0000002380)=""/143, 0x8f, 0x0, &(0x7f0000001c80)=""/140, 0x8c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x9, 0x19, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa78a}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @exit, @ldst={0x0, 0x0, 0x0, 0x4, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000001980)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', r5, @cgroup_sock=0x22, r6, 0x8, &(0x7f0000001b80)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r4, 0x0, &(0x7f0000001dc0)=[r3, r3, r3, r3, r3], 0x0, 0x10, 0x3}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000800)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r12, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) (async) r14 = socket(0xa, 0x3, 0x3a) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r15) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r15, 0x0, 0x4004001) (async) sendmsg$NL80211_CMD_STOP_NAN(r15, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x1c, r17, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) (async) setsockopt$MRT6_ADD_MFC(r14, 0x29, 0xd4, 0x0, 0x4) (async) getsockopt$bt_hci(r10, 0x0, 0x2, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e44965321c5c37bb3734f1f65db31e837dd4bc0aaf3ec8e37859dfc0bcf93fe3e993c38c1bc7257825cfef0c2e8e0bca1a8490d2a69fa55340aebe241ae07688439afb894eb4418327a296a6bd7fce6892dfca28bd84b8eb508d9df3165cc9ed85c10ebdb0457809582419984d9a62584512a2390d995ae41e0571281f89d8e2dc20b4d699cffcd429943b174995fa5827a1220f479b77b74934ce6c98c73322770e4970538469aa94ff28179c34323bf322724a003f88ce44037c2d355b36da902bad781a36c3ba0acbbcadda0433d00865a1546330943abcd1eebbc68e8dff", @ANYRES64, @ANYRES32=r10, @ANYRESOCT=r11, @ANYRES8, @ANYRESHEX=r11, @ANYRES16=r10, @ANYRESHEX=r18, @ANYRES8=r18, @ANYRES32=r13], 0x44}, 0x1, 0x2}, 0x24040811) 1m42.893948839s ago: executing program 4 (id=1014): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000400)={0x0, 0x2710}, 0x10) read(r1, &(0x7f0000000440)=""/41, 0x29) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000640)) listen(r0, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept4$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040815) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0xd, 0x4) listen(r7, 0x2) 1m36.749764402s ago: executing program 34 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x3a, 0x10, &(0x7f00000008c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000980)="a3", 0x2}, 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@local, 0x73, r7}) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000002c0)="505b81146af0efe076969754cdb69feaa568d895d7e0746a8a33da99ca3f8d034cc08cffa711bfefbcaac9aafbe935af948908f29e6973122f64a23cc72f780f073ee5abd1e45d943694b78b6887190691791586e1dd27745f3d10e4b01cfbda7775cc2c3838b4f607c08443008d14c46e8328168de552806e65753b477fcb941183381c9a4241ed808cdea809f883ce07b6c07bc56e3f72c6aaf1a86f9a811747ea580755d10538b81c33b15b7008ba3986521ca13e6ac4afc11421ca9f86eccdfb1059a974541f038f4ab42ee8301625c52b8ef7", 0xd5) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x8000) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)) 1m30.192342754s ago: executing program 35 (id=971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}, 0x0, 0x85ee175c56d0b2e6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmmsg$alg(r5, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000a40), 0x4) sendmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f0000000ac0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x1800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r8, 0x8000000000000003}, 0x18) bind$can_j1939(r3, &(0x7f00000005c0)={0x1d, r8, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x18, 0x27, 0x1, 0x70bd30, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000890) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e22, 0x2, @private1, 0x7}, {0xa, 0x4e23, 0x1, @remote, 0x4}, 0x0, {[0x4, 0x81, 0x22, 0x1, 0xa4e, 0x9, 0xb, 0x4]}}, 0x5c) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x9f, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) connect$pppl2tp(r9, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x3}}, 0x2e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004f0001000000afd4000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000210001000000000004000000ff010099000000000000000000000001fc02000000000001001f0000000000ff00000005000000000a0096ea9b860000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ac000700ac141438000000000000000000000000ac1414bb0000000000000000000000004e2200014e22fffe020020c03c000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="0600000000000000b000000000000000040000000000000028020000000000000200000000000000000100000000000000000080ff3f00000600000000000000060000000000000007000000000000000500000000000000140000000000000000000000b66b6e000200000000000000"], 0xfc}}, 0x0) 1m27.788857295s ago: executing program 36 (id=1014): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000400)={0x0, 0x2710}, 0x10) read(r1, &(0x7f0000000440)=""/41, 0x29) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000640)) listen(r0, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept4$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040815) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0xd, 0x4) listen(r7, 0x2) 1m10.816267537s ago: executing program 7 (id=1270): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf2, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x5c, 0xfffffffd, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x7, 0x7c, [@loopback]}, @lsrr={0x83, 0x7, 0x5d, [@multicast2]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x4, [@datasec={0x8, 0x8, 0x0, 0xf, 0x3, [{0x1, 0x87, 0x1}, {0x3, 0x3, 0x6}, {0x5, 0x4, 0x7}, {0x1, 0x4, 0x1}, {0x4, 0x1, 0x4}, {0x3, 0x3, 0x39}, {0x4, 0x0, 0x9}, {0x3, 0x7, 0x7}], "e2f631"}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000003c0)=""/99, 0x8c, 0x63, 0x0, 0x4}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xb, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0xe7, 0xde, &(0x7f0000000140)=""/222, 0x41000, 0x68, '\x00', r1, @fallback=0x2d, r2, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xb, 0x800, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000500)=[{0x4, 0x1, 0xd, 0x7}, {0x0, 0x3, 0x10}, {0x1, 0x4}, {0x5, 0x4, 0x9, 0x3}, {0x3, 0x2, 0x3, 0x5}], 0x10, 0x4}, 0x94) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x8, 0x62e7b140, @vifc_lcl_ifindex=r1, @loopback}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000680)={@rand_addr=0x64010102, @multicast2, @remote}, 0xc) (async) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex=r1, 0x1d, 0x1, 0x1000, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xa, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x3, 0x3, 0x1, 0xd, 0x20, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000900)='syzkaller\x00', 0xfffffffe, 0x58, &(0x7f0000000940)=""/88, 0x41000, 0xc, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000009c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x10, 0x7, 0x895}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a40)=[r0, r0], &(0x7f0000000a80)=[{0x4, 0x1, 0x3, 0x6}, {0x3, 0x1, 0xd, 0x3}, {0x1, 0x2, 0x4, 0x1}, {0x0, 0x2, 0x0, 0xa}, {0x3, 0x2, 0x2, 0xc}, {0x0, 0x3, 0xf, 0x8}, {0x5, 0x4, 0x4, 0x4}, {0x5, 0x3, 0x10, 0x1}], 0x10, 0x6f32}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r5, r3, 0x32, 0x4, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000bc0)={@local, @dev={0xac, 0x14, 0x14, 0x31}, 0x0, "0bdab8dcae70fd0f0c185ce3baaf48ebbb3e56ce0b238b8daafd3c9b2767e858", 0x9, 0x7fff, 0x10, 0x7}, 0x3c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c40)={0x9}, 0x8) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000d80)={r7, &(0x7f0000000c80)='\x00', 0x400000, &(0x7f0000000cc0)={@_ha_fsid={[0x101, 0x2feb]}, {0x2, 0x5, 0x5, 0xd10}}, 0x7f, &(0x7f0000000d00), &(0x7f0000000d40)=0x6}) (async) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000e00)=@req={0x28, &(0x7f0000000dc0)={'ip6tnl0\x00', @ifru_mtu=0x6}}) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000e40)=0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000e80)=r10) write$tun(r9, &(0x7f0000000ec0)={@void, @val={0x2, 0x87, 0x10, 0x401, 0xb9, 0x2}, @llc={@llc={0xd8, 0xff, "92a1", "306e048f7b3cf99c58b26bc58c071403ec2124d9679bcd78"}}}, 0x26) (async) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000f40)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x24, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000f00)='nicvf0\x00', 0xd4, 0x80, 0x8000}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x103, 0x103, 0x9, [@enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0x1}, {0xd, 0x9}, {0x4, 0x1ff}, {0x6, 0xffffff7f}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @typedef={0x1}, @datasec={0x8, 0xa, 0x0, 0xf, 0x3, [{0x1, 0x7, 0x80000000}, {0x3, 0x9, 0x10000}, {0x5, 0x8, 0x9}, {0x2, 0x5, 0x4}, {0x4, 0x5, 0xc31}, {0x3, 0x2, 0xff14}, {0x5, 0x8, 0x7}, {0x5, 0x0, 0x4}, {0x2, 0xef}, {0x2, 0x40, 0x3}], "b3bcf4"}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x10, 0x6e, 0x0, 0x1, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x30, 0x0, 0x4f, 0x30]}}, &(0x7f0000001100)=""/68, 0x125, 0x44, 0xffff8001, 0x421}, 0x28) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f00000011c0)=0x3, 0x4) (async) r11 = socket$inet(0x2, 0x5, 0x800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000001340)={r11, &(0x7f0000001240)='syztnl1\x00', 0xb0200, &(0x7f0000001280)={@align=0x1, {0x6, 0x2, 0x7, 0x9}}, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x5}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@fallback=r7, r3, 0x5, 0x2004, 0x0, @value=r12, @void, @void, @void, r6}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x304c0, 0x0) (async) accept4$packet(r9, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001400)=0x14, 0x80800) 1m10.623810708s ago: executing program 7 (id=1272): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) 1m9.663164437s ago: executing program 7 (id=1283): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="a8", 0x1}], 0x1, 0x0, 0xc6}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000a00)=ANY=[], 0x58}}], 0x2, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) 1m9.578130748s ago: executing program 7 (id=1285): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 1m7.499391887s ago: executing program 7 (id=1287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa10000f900000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000070536dab7a831879f2e8f290914907f2268750ff759b908b5be1e49c90ef924c5b62b8cbdda03418b805703014cffc493c5c2a0319855201bd54a338419a86620f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000008c0000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x803, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000780)='//', 0x2}], 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000007c0)='X', 0x34000, 0xe0, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x577801, 0x100408) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) unshare(0x28000400) (async) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x4000000) (async) bind$alg(r4, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/141, 0x8d}], 0x3, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x22) 1m7.337642912s ago: executing program 7 (id=1292): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 52.306405882s ago: executing program 37 (id=1292): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 43.215433919s ago: executing program 6 (id=1615): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000f3c1c89be9315e1f4ce1066a1c30c49f9a0f6ad239d3ce69657b2a60c2e18a9dd805f8e506373982524c5e3700ce6b4eb747c56265ea7f3cb08c4cd3dafe48e3a0dda6bbe27078f06e8b5aa7c6273a4488800cb3f578d78f35f333f44503cfed572fdcd29ca8d292bc79eab1b27f3cb5ac7d756483fc30f4066ea870d3fae72fe9687cdd21fd7900604ffb04d279a92415fa2c64900938cba2e835dad474a167b1d16dd93627e51a2d6315fdcfd126a219aabd953dbaf5f36e38ed52a432557233716c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000f3c1c89be9315e1f4ce1066a1c30c49f9a0f6ad239d3ce69657b2a60c2e18a9dd805f8e506373982524c5e3700ce6b4eb747c56265ea7f3cb08c4cd3dafe48e3a0dda6bbe27078f06e8b5aa7c6273a4488800cb3f578d78f35f333f44503cfed572fdcd29ca8d292bc79eab1b27f3cb5ac7d756483fc30f4066ea870d3fae72fe9687cdd21fd7900604ffb04d279a92415fa2c64900938cba2e835dad474a167b1d16dd93627e51a2d6315fdcfd126a219aabd953dbaf5f36e38ed52a432557233716c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 43.056739902s ago: executing program 6 (id=1618): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) close(0x3) connect$802154_dgram(r0, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000540)={0x7f, 0x6}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0x4, [0x3], 0xb757}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x80) 42.971291433s ago: executing program 6 (id=1620): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020603000000000000000000000000001000030068f373683a69702c6d6163000900020073797a3100000000130000000000050005000200000005000400000000000500010007000000"], 0x54}}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) 42.631355455s ago: executing program 6 (id=1626): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x89, "de4a5af8b7602a75cb4b27b751b05242c1304230129bf65c4b023d0ad27dacdd8f1cc53291a44638f9ae82149d704ca2fc11c77ac2fd9b260d81f5fc8e1c042bb6ee2cf13365ed2dcecd3af5c9b397878968884ab8a19651ed7e7d2fa7b4961edc8ce1a3fef1ebd899fa4ff95497788192246befb0636d184d101b4491e9858b11f1ac9eb5b4abec22"}, &(0x7f0000000200)=0x91) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000240)={@empty, @rand_addr=0x64010101, @broadcast}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x7, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x68, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "da0173a700b37bee77bbf1a4a893eb79"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ecedc3afade3816f72b4acc8cc18f77c5e74116b94b9c6e70dac27a38b7f6a7c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7d4f12a390c849df663e144eefcb4497"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "509930b9689512a252e74d6cfe4fa9f1"}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004800) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f00000004c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x16}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20008001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000006c0)={r2, 0x25, "8d34c18a70b791403e405051518844918f2eee9749d7975a107b43e330f3396e46c94eab69"}, &(0x7f0000000700)=0x2d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001780)={0x1, &(0x7f0000000740)="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", &(0x7f0000001740)=@udp6=r1, 0x4}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000017c0)={r2, 0x5f, "4ae0cbae8cba33e16cd007f907e89a53c0b203db198a7e975f72826beaaf14e17bb62aacf07e7e695f0d15d16ff8895325c0ef3144fed2a533b083addeab8514af8c7f2c630367517622e7da83fce6ef0c1941d2aa52cd59b0327fb5015862"}, &(0x7f0000001840)=0x67) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001880)={r7, 0x22, "4f5d2ae5a2eb123102e6e8231f4d1fe9ca39a71b5ae2e2e6425079c1763d6f7a213d"}, &(0x7f00000018c0)=0x2a) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001900)={@rand_addr=0x64010100, @broadcast, 0x1, 0x2, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(r8, 0x1) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000001940)) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000001980)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000019c0)=0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000a10}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6313}]}]}, 0x28}}, 0x1) r12 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x8010, r12, 0xbf53b000) 42.296767831s ago: executing program 6 (id=1634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xcc, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "836f2a0ca76b11243f8102013814870c", "01a6d2d9", "fb4277862f9cd02a"}, 0x28) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) sendmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff92}}], 0x1, 0x0) 42.140711487s ago: executing program 6 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x36, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000540)=""/4057, &(0x7f0000001540)=0xfd9) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x140, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1a6ac00}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfda3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1b}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008}, 0x4048081) 27.157494173s ago: executing program 38 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x36, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000540)=""/4057, &(0x7f0000001540)=0xfd9) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x140, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1a6ac00}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfda3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1b}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008}, 0x4048081) 2.34193578s ago: executing program 0 (id=2203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x44090) r2 = socket$kcm(0x28, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(0x0, 0x0, 0xfffffff7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000980)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 2.185396324s ago: executing program 3 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2.066188426s ago: executing program 1 (id=2208): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x4]}, {0x7, 0xa, 0x4bf00000, 0x8}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000740)=0x6, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000580)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000600)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000006c0)=0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 2.051142041s ago: executing program 3 (id=2209): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x5f1, 0xffff7fff, {{0x21, 0x4, 0x3, 0x7, 0x84, 0x66, 0x0, 0x2, 0x17, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0x6d, 0x1, 0x7, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x3ff}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@rand_addr=0x64010102, 0x2663}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x3, [{@local, 0x80}, {@loopback, 0xff}, {@loopback, 0x3}]}, @generic={0x82, 0x4, "1980"}]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000400)=0x80000000, 0x4) bind$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000480)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x18}}, 0x0) write(r3, &(0x7f0000000540)="01", 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x62}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x404c884) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltfilter={0x3c, 0x2d, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0xa}, {0xc, 0x9}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x10}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.898473239s ago: executing program 1 (id=2211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0xe8, 0x700001b, 0x148, 0xe8, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x12}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0xa, 0x3, 0x3, 0x2, 0x5, 0x1], 0x1, 0x4}}}, @common=@set={{0x40}, {{0x2, [0x1, 0x2, 0x0, 0x4, 0x3, 0x2], 0x1, 0x9}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000e80)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x17, &(0x7f0000000440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000500)='syzkaller\x00', 0x8001, 0xa0, &(0x7f0000000540)=""/160, 0x41100, 0x18, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x0, 0x6, 0x80000000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r0, r0, r0], &(0x7f00000006c0)=[{0x1, 0x4, 0xf, 0x7}, {0x4, 0x1, 0x6}, {0x1, 0x1, 0x5, 0x7}, {0x5, 0x4, 0xd, 0x3}, {0x4, 0x3, 0xc, 0x5}], 0x10, 0x1d}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x2c, r7, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x2c}}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.724987553s ago: executing program 9 (id=2213): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$unix(r0, 0x0, 0xfea3) 1.724344532s ago: executing program 3 (id=2214): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001300)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000b00)=0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000b40)={@dev, @local, @broadcast}, &(0x7f0000000b80)=0xc) socket$unix(0x1, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x15, &(0x7f0000001040)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823f4b756e00000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f8ffffff18250000", @ANYRES32=0x1, @ANYBLOB="00000000020000003965f0ffe8ffffffc30080005979991e9500000000000000850000007b00000010b9f8ff00000000"], &(0x7f0000000bc0)='GPL\x00', 0xfffffffd, 0x7c, &(0x7f0000000c00)=""/124, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x4, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)=[{0x3, 0x4, 0x4}, {0x2, 0x5, 0x10, 0x9}, {0x2, 0x5, 0x6, 0xc}, {0x3, 0x5, 0xc, 0x3}], 0x10, 0xffff25bd}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e00)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000e40)=0x19ca, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000e80)=0xf3f, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000e80)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000ec0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000f40)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f80)={r6, r8, 0x25, 0x10, @void}, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000200)={0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000200)={0x6}, 0x10) write(r5, &(0x7f00000003c0)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) write(r5, &(0x7f00000003c0)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000440)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000000", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000480), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newlink={0x6c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x3075}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}, @IFLA_AF_SPEC={0x38, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}]}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x2, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x3, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) 1.665159944s ago: executing program 9 (id=2215): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x800, 0x2e) r1 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x11d, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), 0x85}, 0x52) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 1.473042733s ago: executing program 1 (id=2217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x10, r0, 0x1f4d2000) (async) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1e, &(0x7f00000001c0)=0x3ff, 0x4) (async) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x2, 0x8, 0x0, 0x6}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3, 0x80, 0xf7, "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"}}, 0x1003) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x8a4, 0x4) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r2, &(0x7f0000000100), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000180)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) close(r0) 1.408103532s ago: executing program 3 (id=2218): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f0000000bc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000c40)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb0000000000000000020001000000000000fffb0b00000000030005000000000002000000ac1414aa0000000000000000010018000000000001001400000000000100", @ANYRESOCT], 0x68}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r2, 0x0, 0x0, 0x40013121, 0x0, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0)=""/177, &(0x7f0000000380)=0xb1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'vlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r5) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000fc0)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x5, 0x400000000, 0x1, 0x1, 0x3], 0x2, &(0x7f0000000a40)=[{}, {}], 0x0, [{}, {}]}, 0x98) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="01adefbad5ce886a2ed24e862a6e70c4319d43f64effb27d31856ddaa2003f02", 0x20}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000000000002000000000000000000000011000000000000000000000001000000030000000000000014000000000000000000f496867fea000002000000000000000000000014000000000000000000000007000000010000000000000011000000000000000000000001000000d20000000000000014001800000000000000000001000000050000"], 0x90}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r10, {0x5, 0xc}, {0xfff1, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) sendmsg$nl_xfrm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRESOCT=r3, @ANYRES32=r7, @ANYBLOB="00000000000000000000009b75bd40e8000000000000000000000000000000000000000000ffffffffffffff7f0000000000000000000000000000000002000000000000000000000000000000ff070000000000000000000000000000000000000000000000000020f69500000000000100000000000008001f0002000000"], 0xc0}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000024002100000000000000000000000000060004000000006e"], 0x1c}}, 0x4) 1.351292255s ago: executing program 0 (id=2219): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x36) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x8482) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x240080c5}, 0x4040810) 1.257451596s ago: executing program 9 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r6, 0x84, 0x7d, &(0x7f0000000240)={r7, 0x1}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0x140}, {&(0x7f0000000100)="208aae0838a467b58f9fcbf94251344a", 0x10}], 0x2) 1.256984664s ago: executing program 8 (id=2221): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x47d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00', 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}]}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc00000}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000081}, 0xc505bfb332a20bbf) 1.15385443s ago: executing program 0 (id=2222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[], 0x40) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000015c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000001600)={0x11, 0xf5, r2, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) (async) bind$packet(r1, &(0x7f0000001600)={0x11, 0xf5, r2, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000001640)=0xe9, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[], 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[], 0x74}}, 0x0) socket(0x40000000015, 0x5, 0x0) 990.173239ms ago: executing program 8 (id=2223): syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 859.232595ms ago: executing program 9 (id=2224): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000180)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) (async) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1001}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x10}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x48040) bpf$MAP_CREATE(0x15, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010112, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2}, 0x50) 858.91111ms ago: executing program 0 (id=2225): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x112, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='syzkaller\x00', 0x40040, &(0x7f0000000140)={@align=0x7, {0xb, 0xfffe, 0x2, 0xcad}}, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x1}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3e}}}]}, 0x38}}, 0x2004c040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 812.201347ms ago: executing program 8 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b113a0000000000851000f20661f1000200000085000000080000007f6290d002982a1695000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 695.939703ms ago: executing program 9 (id=2227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) 472.615727ms ago: executing program 1 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0xc8, 0x30, 0x1, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x17, 0x6, "511d2e4c075eca24e21530fa4d4ab9eb53bf37"}, {0xc}, {0xc, 0x8, {0x2, 0xeb804a98c420662d}}}}]}]}, 0xc8}}, 0x0) 471.871973ms ago: executing program 0 (id=2229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, r8, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) listen(r2, 0x40) (async) close(r7) 413.22846ms ago: executing program 1 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="200001000000000000000000fe80000000000000000000000000002b86dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01032cbd6000050000001500000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 382.704634ms ago: executing program 9 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000680), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="98080000020000ddfe", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100fff30000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa40000", @ANYBLOB="07dbddb2ef9806ebff8675d9d5321d4b419d66516fb7804e915ff5c85785c1d2"], 0x0, 0xde2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd75c, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) connect$inet6(r2, &(0x7f00000006c0)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000700)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x384}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r6) getsockname$packet(r6, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000d40)=[@in6={0xa, 0x4e20, 0x3, @private1, 0x8aa}, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xab89}], 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000004c0004800800024067b33f2808000140000000001400030076657468305f746f5f62617461647600080001400000000108000140000000031400030076657468315f746f496873720000000008000540fffffffc14"], 0xc8}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/81, 0x51, 0x1, &(0x7f00000007c0)=""/206, 0xce}, &(0x7f0000000900)=0x40) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd4, 0x2, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24044084}, 0x4000000) pwrite64(r8, &(0x7f0000000d80)="5280d264aa63264e01eab028b6909d68a68b7f222631f3fff3d75a6e4be8186f086f79d2a393735476dfa93b707648a1d3ff58fbd3214be0f9b838bf44024c4fbfd40d418c1e11400135947838beb3cf671e1a75a8bebe9998196581f44bee570cf20d74ffda3857bfddfe2ed057f9feecca3aa25035257100a39f5e3c557dd5d059ab8ded4a80d18402d64f3ff304895680ddda0266758edf2f44ba6a822316dbda6347c82b4ede5d08cb8cfcce417300c80d5a744b313fa35a91872d6789b520fcb416b13711c66e61e2ad35fe4b697041ab9bb62f123a7f5d20a131158cb8f60eefcef08432464e0b87", 0xeb, 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 332.64148ms ago: executing program 8 (id=2232): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x212, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x8080) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r2, &(0x7f0000000200)='@~}\x00', 0x8002, &(0x7f0000000240)={@_ha_fsid={[0xa, 0x26abf39]}, {0xff, 0x6, 0x596a0f9e, 0x80000000}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xffffb8b3}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000480)={{r2, &(0x7f0000000340)='team0\x00', 0x1, &(0x7f0000000380)={@align=0x8, {0x0, 0x2, 0x3, 0x9}}, 0xf, &(0x7f00000003c0), &(0x7f0000000400)=0x1}, {[0x8, 0x3ff, 0x4, 0xe69]}, 0x0, 0x17, &(0x7f0000000440)=""/23}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000000700)=""/227, 0x29, 0xe3, 0x0, 0x28}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x200, 0x0}, 0x8) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0x1c, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x9, 0x7, 0xa, 0x4, 0x8}, @exit, @jmp={0x5, 0x0, 0x8, 0x4, 0xa, 0x2}, @alu={0x4, 0x0, 0x7, 0x5, 0x1, 0x1, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='syzkaller\x00', 0x80b, 0x4d, &(0x7f0000000640)=""/77, 0x40f00, 0xa, '\x00', r3, @fallback=0x2a, r6, 0x8, &(0x7f0000000840)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x2, 0xc37, 0x401}, 0x10, r7, r8, 0x7, &(0x7f00000009c0)=[r9, r0], &(0x7f0000000a00)=[{0x4, 0x1, 0x6, 0x6}, {0x2, 0x1, 0xc, 0x2}, {0x0, 0x2, 0x1, 0x8b3afc489fdfc458}, {0x3, 0x2, 0x5, 0x6}, {0x0, 0x5, 0x6, 0xb}, {0x5, 0x5, 0x9, 0x6}, {0x0, 0x3, 0x2, 0x5}], 0x10, 0x6}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000b40)={0x8000200c}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x90d3, 0x1000, &(0x7f0000000d00)=""/4096, 0x41100, 0x4a, '\x00', r3, 0x17, r4, 0x8, &(0x7f0000001d00)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x172ad, r4, 0x4, &(0x7f0000001d40)=[r0], &(0x7f0000001d80)=[{0x4, 0x5, 0x1, 0xa}, {0x4, 0x4, 0x5, 0x2}, {0x3, 0x5, 0x7, 0x4}, {0x4, 0x1, 0x7, 0x3}], 0x10, 0xb48a}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001e80)={'veth0_to_batadv\x00'}) connect(r4, &(0x7f0000001ec0)=@caif=@rfm={0x25, 0x7, "2beb1e3341986c7ae4b7274c9ee111b1"}, 0x80) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r11, &(0x7f0000002180)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f80)={0x18c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1153}, {0x6, 0x11, 0xe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd1}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$AUTOFS_IOC_FAIL(r10, 0x9361, 0xe) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000021c0)={'vlan0\x00', 0x6}) splice(r4, &(0x7f0000002200)=0xb, r8, &(0x7f0000002240)=0x7567, 0x8000, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002400)={r6, 0x20, &(0x7f00000023c0)={&(0x7f0000002280)=""/23, 0x17, 0x0, &(0x7f00000022c0)=""/231, 0xe7}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)=@getneigh={0x14, 0x1e, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000002540)={0x0, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast]}) r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000002580), &(0x7f00000025c0)=0x10, 0x800) getsockopt$PNPIPE_HANDLE(r12, 0x113, 0x3, &(0x7f0000002600), &(0x7f0000002640)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000002680)={0x0, 0x800}, &(0x7f00000026c0)=0x8) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000002700)={r13, 0x8}, &(0x7f0000002740)=0x8) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000002780), &(0x7f00000027c0)=0x4) 332.183237ms ago: executing program 3 (id=2233): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34afd}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0xd) sendmsg$802154_dgram(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)="1948e6", 0xfffffec8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x5, &(0x7f0000000000)=[{0x8040, 0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x16, 0x0, 0x6, 0x1}, {0x8000, 0xe1, 0x77, 0x1}, {0xc96a, 0x8, 0xf7}]}, 0x10) sendmmsg(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34afd}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x80000) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0xd) (async) sendmsg$802154_dgram(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)="1948e6", 0xfffffec8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x5, &(0x7f0000000000)=[{0x8040, 0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x16, 0x0, 0x6, 0x1}, {0x8000, 0xe1, 0x77, 0x1}, {0xc96a, 0x8, 0xf7}]}, 0x10) (async) sendmmsg(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) (async) 190.724265ms ago: executing program 8 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x401, 0x0, 0x25dfdbfb, {}, [@NHA_GROUP={0xc, 0x2, [{0x2}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 182.526283ms ago: executing program 0 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) (async) syz_emit_ethernet(0x81, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000300)=""/185, 0xb9}, 0x401}], 0x1, 0x10041, 0x0) 136.943054ms ago: executing program 3 (id=2236): socket(0x15, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', 0x0}) socket(0x15, 0x5, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2000000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', 0x0}) (async) 41.77409ms ago: executing program 8 (id=2237): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='pids.events\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000005c0)={r4, 0x40, 0x8}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000021907800000000ffffffff12009078e0010002020000000000000000000000379748d5669fe6dcd2d1bcb05b7ac9de7ef55c429316770000000000f0b6877b0a8b"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000001000000030000000100000080010000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000005000000050000003f6cea000000000000000000"], 0x50) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000780)={r10, 0x67b1556b, 0x79aa, 0x400}) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) recvfrom(r9, &(0x7f0000000840)=""/202, 0xca, 0x40, &(0x7f0000000940)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f00000009c0)={r12, 0xa11c}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000a00)={r12, 0xd}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f0000000a40)={r12, 0x7}, &(0x7f0000000a80)=0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="090325bd4d00fc162bbb7d033728d197446e851b6af450e7ab6d2e8e967e3676c326898e8512782089ad3cf49c5f4686a76c8ecfa4ab25b46809d57c56866337b41837d3b5bcae29effa0a1f8bdb0f2e67e41f29ac62e07c8a6a3630d0a5802a9887623156c001811216504c04fd4deccb8a774c4b26ebc7e55e6cbc6a40d74ba34a7fe560c5e4a5242e412bec756156fa77c87c328a2293ad9291f2a11e0cf7293c49f755d64e0a6756e4be4d05665a8d278281f52cba3b8f3869e4766dd3528d6b8e40c76dd89c448c9c7ce0d7284a6c8722fead9524df8e157300000000000000000000000000000000b0d273fa522af3d20aba5ca5f562db3dc5ccbe72168b7d42e6c1e5e25985fe16d2286ab9d2788380f15b2c437bbdcbe03623a795976860e042b0c4fb2b83097472f9ba4ddaf4e97283c30907fc0b4e755a0f4d924f1c7fb6763923b8fe9dd4cfa05513feac6e1320137858be79831cc6ce6ac5fbf0d0"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x48000009, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1100104a24be4ebb496d2f25ff000000", @ANYRES32=r16, @ANYBLOB="420001001802040008001f000500000005001000e10000000400140024000e0003000000000000000700000000000000ffffffff00000000000009010000000005002100af000000"], 0x60}}, 0x0) 0s ago: executing program 1 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x4844) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r7, &(0x7f0000000840), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x40004010) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r9, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20004041}, 0x40055) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) kernel console output (not intermixed with test programs): 131.650245][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650254][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650264][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650443][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650455][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650464][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650474][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650655][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650666][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650675][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650685][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650868][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650878][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.650888][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.650897][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651126][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651137][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651147][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651157][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651345][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651356][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651365][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651375][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651560][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651571][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651579][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651588][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651770][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651781][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651790][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651800][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.651986][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.651996][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652012][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652022][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652216][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652226][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652235][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652245][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652434][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652444][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652454][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652464][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652654][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652665][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652675][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652684][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652871][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652882][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.652891][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.652901][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653092][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653103][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653112][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653122][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653310][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653320][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653330][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653340][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653527][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653537][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653547][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653556][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653747][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653757][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653767][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653777][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653974][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.653984][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.653994][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654010][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654203][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654213][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654223][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654232][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654420][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654430][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654440][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654450][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654635][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654645][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654655][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654664][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654853][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654863][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.654873][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.654883][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655112][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655123][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655132][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655142][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655334][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655344][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655354][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655363][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655545][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655556][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655565][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655574][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655768][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655778][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655788][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655797][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.655984][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.655994][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656010][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656020][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656212][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656223][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656233][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656242][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656430][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656440][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656450][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656459][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656642][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656652][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656662][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656672][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656865][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656875][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.656884][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.656894][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657082][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657091][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657099][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657108][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657295][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657305][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657315][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657324][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657497][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657508][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657516][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657526][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657709][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657719][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657729][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657738][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657909][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657919][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.657928][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.657936][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658116][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658128][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658137][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658147][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658325][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658336][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658345][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658355][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658535][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658546][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658555][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658563][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.658744][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.658755][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.824406][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.824428][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.824658][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.824670][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.824678][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.824686][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.829868][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.829888][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.829898][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.829908][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.830085][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.830095][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.830104][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.830114][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.832962][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.832979][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.832989][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.832999][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.836524][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.836541][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.836550][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.836561][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.842969][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.842988][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.842999][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843009][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843446][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843459][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843467][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843477][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843669][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843679][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843689][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843698][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843875][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843890][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.843898][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.843908][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.844082][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.844093][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.844102][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.844111][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.846592][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.846606][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.846616][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.846626][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.847635][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.847649][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.847658][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.847667][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.847874][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.847885][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.847894][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.847903][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848079][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848089][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848099][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848108][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848285][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848295][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848304][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848313][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848500][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848510][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848544][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848554][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848732][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.848742][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.848751][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.853410][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.862473][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.862498][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.862508][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.862518][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.864990][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.865005][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.865015][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.865025][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.865871][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.865883][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.865892][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.865902][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.866083][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.866093][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.866102][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.866112][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.867461][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.867473][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 131.867489][ T8387] Bluetooth: hci0: unsupported parameter 5135 [ 131.867498][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 132.544380][ T8415] netlink: 'syz.2.711': attribute type 39 has an invalid length. [ 132.758098][ T8417] tipc: Can't bind to reserved service type 2 [ 132.794260][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.438001][ T8439] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 133.537746][ T8449] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 133.867563][ T8476] __nla_validate_parse: 3 callbacks suppressed [ 133.867582][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.729'. [ 133.997951][ T8487] netlink: 872 bytes leftover after parsing attributes in process `syz.2.731'. [ 134.065897][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 134.065936][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 134.112488][ T8508] netlink: 872 bytes leftover after parsing attributes in process `syz.2.731'. [ 134.188562][ T8510] netlink: 48 bytes leftover after parsing attributes in process `syz.5.734'. [ 134.369843][ T8512] syzkaller1: entered promiscuous mode [ 134.369864][ T8512] syzkaller1: entered allmulticast mode [ 134.375211][ T8513] syzkaller1: left promiscuous mode [ 134.375230][ T8513] syzkaller1: left allmulticast mode [ 134.500885][ T8529] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.640314][ T8537] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.643057][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.6.745'. [ 134.724149][ T8545] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 134.767073][ T8545] team0: left promiscuous mode [ 134.772841][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.782936][ T8545] team0: entered promiscuous mode [ 134.783863][ T8545] bond0: (slave team0): Enslaving as an active interface with an up link [ 134.842146][ T8549] netlink: 'syz.5.749': attribute type 1 has an invalid length. [ 134.911796][ T8549] bond2: entered promiscuous mode [ 134.912333][ T8549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.918026][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 134.970064][ T8552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.980275][ T8552] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 134.980299][ T8552] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 135.010684][ T8552] bond2: (slave ip6gre1): making interface the new active one [ 135.010706][ T8552] ip6gre1: entered promiscuous mode [ 135.024915][ T8552] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 135.557856][ T8596] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 135.557876][ T8596] netlink: 'syz.4.762': attribute type 3 has an invalid length. [ 135.557887][ T8596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.762'. [ 135.985043][ T8637] netlink: 'syz.6.774': attribute type 2 has an invalid length. [ 136.105784][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.774'. [ 137.123015][ T8665] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 137.357136][ T8679] openvswitch: netlink: Missing valid actions attribute. [ 137.357181][ T8679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.393698][ T8684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.430883][ T8684] netlink: 'syz.4.789': attribute type 2 has an invalid length. [ 137.526787][ T8684] : entered promiscuous mode [ 137.682795][ T8702] netlink: 'syz.6.792': attribute type 1 has an invalid length. [ 137.916255][ T4932] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 138.089830][ T8730] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 138.105469][ T8730] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 138.327080][ T8754] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 138.600379][ T8765] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 138.626662][ T8765] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 138.749663][ T6475] bond0: (slave bond_slave_0): interface is now down [ 138.749691][ T6475] bond0: (slave bond_slave_1): interface is now down [ 138.811803][ T8778] bridge5: entered promiscuous mode [ 138.811823][ T8778] bridge5: entered allmulticast mode [ 138.855931][ T8778] team0: Port device bridge5 added [ 138.962614][ T8779] __nla_validate_parse: 12 callbacks suppressed [ 138.962634][ T8779] netlink: 76 bytes leftover after parsing attributes in process `syz.5.817'. [ 139.656015][ T8848] syzkaller0: entered promiscuous mode [ 139.656036][ T8848] syzkaller0: entered allmulticast mode [ 139.670273][ T6475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.670368][ T6475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.670804][ T6475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.671876][ T6475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.936596][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 139.936616][ T8866] netlink: 2 bytes leftover after parsing attributes in process `syz.4.841'. [ 140.081152][ T8871] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 140.081177][ T8871] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 140.492722][ T8887] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 140.587270][ T8887] bond3 (unregistering): Released all slaves [ 140.801492][ T8904] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 140.804774][ T8904] bond3 (unregistering): Released all slaves [ 141.264669][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.5.853'. [ 141.280359][ T59] bond0: (slave bond_slave_0): interface is now down [ 141.280380][ T59] bond0: (slave bond_slave_1): interface is now down [ 141.288476][ T8934] netlink: 'syz.5.853': attribute type 2 has an invalid length. [ 141.317526][ T59] bond0: now running without any active interface! [ 141.541615][ T8955] netlink: 48 bytes leftover after parsing attributes in process `syz.5.859'. [ 141.845321][ T8980] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 141.907660][ T8980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.908516][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 141.958135][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 142.128548][ T8995] netlink: 14 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.148381][ T8995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.164882][ T8995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.182073][ T8995] bond0 (unregistering): (slave team0): Releasing backup interface [ 142.182950][ T8995] team0: left promiscuous mode [ 142.204566][ T8995] bond0 (unregistering): Released all slaves [ 142.223018][ T8999] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 142.223040][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 142.325624][ T9005] pim6reg527: entered allmulticast mode [ 142.556201][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.876'. [ 142.645731][ T9023] netlink: 'syz.6.876': attribute type 24 has an invalid length. [ 143.150239][ T9059] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 143.467594][ T9070] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.476667][ T6476] IPVS: starting estimator thread 0... [ 143.496737][ T9067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.562098][ T9076] IPVS: using max 35 ests per chain, 84000 per kthread [ 143.566965][ T9079] IPv6: sit1: Disabled Multicast RS [ 143.584003][ T9079] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.772552][ T9086] sit0: entered promiscuous mode [ 143.903889][ T9101] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 144.223107][ T9126] netlink: 'syz.5.904': attribute type 5 has an invalid length. [ 144.624728][ T9147] __nla_validate_parse: 6 callbacks suppressed [ 144.624749][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.910'. [ 144.706515][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.6.913'. [ 144.933708][ T9162] bond0 (unregistering): Released all slaves [ 145.714976][ T9224] dvmrp8: entered allmulticast mode [ 145.742755][ T9226] netlink: 348 bytes leftover after parsing attributes in process `syz.5.927'. [ 145.944525][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 145.944560][ T9245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.946579][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 145.946619][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.947134][ T9241] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.947487][ T9241] gretap1: entered promiscuous mode [ 145.947503][ T9241] gretap1: entered allmulticast mode [ 146.005309][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.933'. [ 146.005329][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.933'. [ 146.119791][ T4932] block nbd1: Receive control failed (result -32) [ 146.175322][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 146.265390][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 146.300129][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.5.938'. [ 146.307010][ T9271] syz_tun: entered allmulticast mode [ 146.332739][ T9268] bridge0: port 3(bond0) entered blocking state [ 146.332815][ T9268] bridge0: port 3(bond0) entered disabled state [ 146.344785][ T9268] bond0: entered allmulticast mode [ 146.344809][ T9268] bond_slave_0: entered allmulticast mode [ 146.344871][ T9268] bond_slave_1: entered allmulticast mode [ 146.378561][ T9268] bond0: entered promiscuous mode [ 146.378584][ T9268] bond_slave_0: entered promiscuous mode [ 146.390988][ T9268] bond_slave_1: entered promiscuous mode [ 146.397028][ T9270] syz_tun: left allmulticast mode [ 146.743154][ T9298] geneve3: entered promiscuous mode [ 147.357678][ T9326] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 147.389072][ T9328] netlink: 'syz.6.958': attribute type 8 has an invalid length. [ 147.433628][ T9328] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 147.531489][ T9337] xt_hashlimit: overflow, try lower: 3/0 [ 148.216612][ T9383] ovs-s: entered promiscuous mode [ 148.252225][ T9378] netlink: 'syz.4.972': attribute type 5 has an invalid length. [ 148.469754][ T4932] Bluetooth: hci6: command tx timeout [ 148.642671][ T9407] ip6gre1: entered allmulticast mode [ 148.644681][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.763675][ T9409] veth3: entered promiscuous mode [ 148.763696][ T9409] veth3: entered allmulticast mode [ 149.589012][ T4932] Bluetooth: hci1: command tx timeout [ 149.845299][ T9441] __nla_validate_parse: 10 callbacks suppressed [ 149.845312][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 149.848413][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 149.925225][ T9446] netlink: 52 bytes leftover after parsing attributes in process `syz.3.992'. [ 150.206175][ T9465] tipc: Started in network mode [ 150.206211][ T9465] tipc: Node identity ac14142f, cluster identity 4711 [ 150.207817][ T9465] tipc: Enabled bearer , priority 10 [ 150.208256][ T9465] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 150.255516][ T9468] netlink: 80 bytes leftover after parsing attributes in process `syz.3.999'. [ 150.311110][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 150.315654][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 150.426423][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.426900][ T9480] team0: Cannot enslave team device to itself [ 150.492891][ T9482] netlink: 'syz.4.1006': attribute type 16 has an invalid length. [ 150.492910][ T9482] netlink: 'syz.4.1006': attribute type 3 has an invalid length. [ 150.492920][ T9482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1006'. [ 150.770612][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 150.940597][ T9518] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 150.941277][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1016'. [ 151.153035][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1017'. [ 151.239838][ T6476] IPVS: starting estimator thread 0... [ 151.249885][ T9525] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 151.266178][ T9525] hsr_slave_0: left promiscuous mode [ 151.267168][ T9525] hsr_slave_1: left promiscuous mode [ 151.329295][ T8192] tipc: Node number set to 2886997039 [ 151.339156][ T9526] IPVS: using max 31 ests per chain, 74400 per kthread [ 151.428350][ T9536] dvmrp1: entered allmulticast mode [ 151.435680][ T9536] __bpf_mt_check_bytecode: 23 callbacks suppressed [ 151.435799][ T9536] xt_bpf: check failed: parse error [ 152.600194][ T9567] lo: entered allmulticast mode [ 152.635732][ T9565] lo: left allmulticast mode [ 152.734742][ T9578] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 152.764868][ T9578] bond4: entered promiscuous mode [ 152.765156][ T9578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.788993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.807883][ T9578] bond4: (slave bridge3): making interface the new active one [ 152.807905][ T9578] bridge3: entered promiscuous mode [ 152.821645][ T9578] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 152.879979][ T9583] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 153.044920][ T9591] smc: net device team0 applied user defined pnetid SYZ2 [ 153.045316][ T9591] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 153.045327][ T9591] netlink: 'syz.3.1036': attribute type 3 has an invalid length. [ 154.410187][ T9617] wg1 speed is unknown, defaulting to 1000 [ 154.410887][ T9628] syzkaller1: entered promiscuous mode [ 154.410904][ T9628] syzkaller1: entered allmulticast mode [ 154.530598][ T9626] wg1 speed is unknown, defaulting to 1000 [ 154.988598][ T9635] tipc: Enabling of bearer rejected, failed to enable media [ 155.061952][ T9635] syzkaller0: entered promiscuous mode [ 155.061977][ T9635] syzkaller0: entered allmulticast mode [ 155.105403][ T9638] netlink: 'syz.3.1046': attribute type 10 has an invalid length. [ 156.889653][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.890889][ T9638] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.025018][ T9644] __nla_validate_parse: 13 callbacks suppressed [ 157.025037][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1049'. [ 157.106555][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1051'. [ 157.106588][ T9649] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1051'. [ 157.106602][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1051'. [ 157.215312][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 157.220830][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 157.265464][ T9649] vlan2: entered allmulticast mode [ 157.265485][ T9649] veth1_macvtap: entered allmulticast mode [ 157.268408][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.276393][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.277909][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.286226][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.286790][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.908307][ T9679] bridge_slave_0: left allmulticast mode [ 157.908333][ T9679] bridge_slave_0: left promiscuous mode [ 157.911979][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.937682][ T9679] bridge_slave_1: left allmulticast mode [ 157.937706][ T9679] bridge_slave_1: left promiscuous mode [ 157.937902][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.965293][ T9679] bond0: (slave bond_slave_0): Releasing backup interface [ 157.987505][ T9679] bond0: (slave bond_slave_1): Releasing backup interface [ 158.015273][ T9679] team0: Port device team_slave_0 removed [ 158.024423][ T9679] team0: Port device team_slave_1 removed [ 158.025286][ T9679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.025302][ T9679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.037026][ T9679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.037048][ T9679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.087042][ T9690] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 158.139682][ T9656] wg1 speed is unknown, defaulting to 1000 [ 158.352329][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 158.682420][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.683897][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.684052][ T9656] bridge_slave_0: entered allmulticast mode [ 158.685886][ T9656] bridge_slave_0: entered promiscuous mode [ 158.738463][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.738646][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.755178][ T9656] bridge_slave_1: entered allmulticast mode [ 158.758950][ T9656] bridge_slave_1: entered promiscuous mode [ 158.843868][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 158.857100][ T9723] netlink: 'syz.6.1066': attribute type 16 has an invalid length. [ 158.857120][ T9723] netlink: 'syz.6.1066': attribute type 17 has an invalid length. [ 158.888293][ T9723] sit0: left promiscuous mode [ 158.961515][ T9723] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 158.963863][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.966756][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.063970][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 159.063990][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 159.099745][ T9656] team0: Port device team_slave_0 added [ 159.102589][ T9656] team0: Port device team_slave_1 added [ 159.147754][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.147771][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.147790][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.196310][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.196326][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.196348][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.252642][ T9737] netlink: 'syz.6.1070': attribute type 11 has an invalid length. [ 159.298623][ T9656] hsr_slave_0: entered promiscuous mode [ 159.307082][ T9656] hsr_slave_1: entered promiscuous mode [ 159.307798][ T9656] debugfs: 'hsr0' already exists in 'hsr' [ 159.307815][ T9656] Cannot create hsr debugfs directory [ 159.358638][ T4932] Bluetooth: hci7: command tx timeout [ 159.376370][ T9745] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 159.496128][ T9749] netlink: zone id is out of range [ 159.496145][ T9749] netlink: del zone limit has 4 unknown bytes [ 159.500760][ T9751] netlink: zone id is out of range [ 159.500774][ T9751] netlink: del zone limit has 4 unknown bytes [ 159.526282][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.646473][ T9756] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 159.666785][ T9656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.684435][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.687015][ T9656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 159.707267][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.769004][ T9656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.771975][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.796187][ T9656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 159.807378][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.856999][ T9773] Bluetooth: MGMT ver 1.23 [ 159.873855][ T9760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.886170][ T9760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.902316][ T9760] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 160.011332][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.027061][ T5737] hid-generic 0005:0018:63AA.0002: item fetching failed at offset 5/7 [ 160.033009][ T5737] hid-generic 0005:0018:63AA.0002: probe with driver hid-generic failed with error -22 [ 160.056515][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.077651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.077810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.106476][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.106570][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.728130][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.227892][ T9656] veth0_vlan: entered promiscuous mode [ 161.235391][ T9656] veth1_vlan: entered promiscuous mode [ 161.285987][ T9656] veth0_macvtap: entered promiscuous mode [ 161.299497][ T9656] veth1_macvtap: entered promiscuous mode [ 161.321751][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.338151][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.386589][ T6476] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.386755][ T6476] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.404916][ T2986] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.430186][ T4932] Bluetooth: hci7: command tx timeout [ 161.479015][ T6476] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.485123][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.485154][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.505328][ T9823] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 161.505348][ T9823] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 161.505359][ T9823] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 161.505369][ T9823] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 161.588963][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.593975][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.593995][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.662663][ T9828] bond5 (unregistering): Released all slaves [ 161.982090][ T9850] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 162.029409][ T9852] __nla_validate_parse: 10 callbacks suppressed [ 162.029427][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1094'. [ 162.590193][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 162.659640][ T2986] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.660485][ T2986] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.660530][ T2986] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.660560][ T2986] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.667965][ T9900] ip_vti0: entered promiscuous mode [ 162.724715][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1106'. [ 162.966881][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.101841][ T9923] netlink: 'syz.6.1110': attribute type 9 has an invalid length. [ 163.101863][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1110'. [ 163.219965][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 163.220594][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 163.222765][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 163.227818][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 163.228476][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 163.509749][ T4932] Bluetooth: hci7: command tx timeout [ 163.536950][ T9926] wg1 speed is unknown, defaulting to 1000 [ 163.841767][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.841882][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.841982][ T9926] bridge_slave_0: entered allmulticast mode [ 163.843180][ T9926] bridge_slave_0: entered promiscuous mode [ 163.846123][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.846290][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.846665][ T9926] bridge_slave_1: entered allmulticast mode [ 163.848309][ T9926] bridge_slave_1: entered promiscuous mode [ 163.894360][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.897836][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.927849][ T9926] team0: Port device team_slave_0 added [ 163.930623][ T9926] team0: Port device team_slave_1 added [ 163.953102][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.953118][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.953137][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.954443][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.954455][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.954474][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.001871][ T9926] hsr_slave_0: entered promiscuous mode [ 164.002858][ T9926] hsr_slave_1: entered promiscuous mode [ 164.003555][ T9926] debugfs: 'hsr0' already exists in 'hsr' [ 164.003571][ T9926] Cannot create hsr debugfs directory [ 165.269391][ T4932] Bluetooth: hci8: command tx timeout [ 165.570613][ T9891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.587661][ T9926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.598244][ T4932] Bluetooth: hci7: command tx timeout [ 165.633517][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.634397][ T9926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.664943][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.689237][ T9926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.711895][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.713929][ T9926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.737192][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.943775][ T9970] syzkaller0: entered promiscuous mode [ 165.943805][ T9970] syzkaller0: entered allmulticast mode [ 165.974586][ T9966] tipc: Started in network mode [ 165.974615][ T9966] tipc: Node identity 02c0b0d91a1, cluster identity 4711 [ 165.974871][ T9966] tipc: Enabled bearer , priority 0 [ 166.121048][ T9965] tipc: Resetting bearer [ 166.126364][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 166.148545][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 166.157649][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 166.171568][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 166.175548][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 166.193503][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 166.257844][ T9965] tipc: Disabling bearer [ 166.298708][ T9986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.334374][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.414725][ T9926] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.437885][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.437988][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.463446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.463566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.558108][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1119'. [ 166.915114][ T9984] wg1 speed is unknown, defaulting to 1000 [ 167.352482][ T5621] Bluetooth: hci8: command tx timeout [ 167.564388][T10025] syzkaller0: entered promiscuous mode [ 167.564410][T10025] syzkaller0: entered allmulticast mode [ 167.665195][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.768073][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 168.187518][T10065] netlink: 'syz.7.1131': attribute type 2 has an invalid length. [ 168.187542][T10065] netlink: 'syz.7.1131': attribute type 2 has an invalid length. [ 168.229268][ T5621] Bluetooth: hci9: command tx timeout [ 168.286504][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.286799][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.286974][ T9984] bridge_slave_0: entered allmulticast mode [ 168.310699][ T9984] bridge_slave_0: entered promiscuous mode [ 168.314571][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.317279][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.317426][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.317570][ T9984] bridge_slave_1: entered allmulticast mode [ 168.320419][ T9984] bridge_slave_1: entered promiscuous mode [ 168.361519][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.361725][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.363594][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.363893][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.365988][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.411948][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.413267][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.413466][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1132'. [ 168.423837][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.462692][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.530188][ T9984] team0: Port device team_slave_0 added [ 168.552078][ T9984] team0: Port device team_slave_1 added [ 168.645658][T10076] ovs-s: entered promiscuous mode [ 168.645969][ T9926] veth0_vlan: entered promiscuous mode [ 168.689554][T10078] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 168.691188][T10078] bond5 (unregistering): Released all slaves [ 168.734502][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.734869][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.734881][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.734901][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.771755][T10090] geneve2: entered promiscuous mode [ 168.771778][T10090] geneve2: entered allmulticast mode [ 168.775035][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.775684][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.777149][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.777162][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.777184][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.778075][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.826640][T10087] syzkaller0: entered promiscuous mode [ 168.826663][T10087] syzkaller0: entered allmulticast mode [ 168.831439][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.837219][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.842627][T10090] netlink: 'syz.7.1137': attribute type 5 has an invalid length. [ 168.846002][ T9926] veth1_vlan: entered promiscuous mode [ 168.847125][T10084] netlink: 'syz.6.1135': attribute type 1 has an invalid length. [ 168.966128][ T9984] hsr_slave_0: entered promiscuous mode [ 168.966797][ T9984] hsr_slave_1: entered promiscuous mode [ 168.967200][ T9984] debugfs: 'hsr0' already exists in 'hsr' [ 168.967217][ T9984] Cannot create hsr debugfs directory [ 168.987959][T10096] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 169.005568][T10096] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.069464][ T6476] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 169.069597][ T6476] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 169.069631][ T6476] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 169.069664][ T6476] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 169.151065][T10102] sctp: [Deprecated]: syz.3.1140 (pid 10102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.151065][T10102] Use struct sctp_sack_info instead [ 169.158205][T10099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.275113][ T9926] veth0_macvtap: entered promiscuous mode [ 169.320577][ T9926] veth1_macvtap: entered promiscuous mode [ 169.394111][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.412026][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.430281][ T5621] Bluetooth: hci8: command tx timeout [ 169.499730][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.657746][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.657766][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.661314][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.661371][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.661404][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.832848][ T9984] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 169.861562][ T9984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.864024][ T9984] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 169.884898][ T9984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.887207][ T9984] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 169.887529][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.887545][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.931037][ T9984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.953974][ T9984] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 169.968697][ T9984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.309378][ T5621] Bluetooth: hci9: command tx timeout [ 170.313916][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.407833][ T9984] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.441161][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.441289][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.461613][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.461714][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.693196][ T50] nci: nci_ntf_packet: unknown ntf opcode 0x2 [ 170.946880][T10204] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.116825][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.454098][ T9984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.509762][ T5621] Bluetooth: hci8: command tx timeout [ 171.710875][ T9984] veth0_vlan: entered promiscuous mode [ 171.716820][ T9984] veth1_vlan: entered promiscuous mode [ 171.743681][ T9984] veth0_macvtap: entered promiscuous mode [ 171.747054][ T9984] veth1_macvtap: entered promiscuous mode [ 171.775248][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.791380][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.810668][ T6476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.872277][ T6471] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.872323][ T6471] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.872354][ T6471] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.389670][ T5621] Bluetooth: hci9: command tx timeout [ 173.455097][T10170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.573720][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.573741][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.671524][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.671547][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.675758][T10240] __nla_validate_parse: 94 callbacks suppressed [ 173.675777][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1167'. [ 173.957716][T10266] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.1171'. [ 173.957743][T10266] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.1171'. [ 173.996825][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1174'. [ 174.014184][T10268] validate_nla: 30 callbacks suppressed [ 174.014203][T10268] netlink: 'syz.9.1174': attribute type 8 has an invalid length. [ 174.014216][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1174'. [ 174.015950][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.016954][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.182663][T10277] x_tables: duplicate entry at hook 4 [ 174.479934][ T5621] Bluetooth: hci9: command tx timeout [ 174.651757][T10302] wg1 speed is unknown, defaulting to 1000 [ 174.930070][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1184'. [ 175.006160][T10324] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1185'. [ 175.008952][T10324] unsupported nlmsg_type 40 [ 175.068512][T10324] dvmrp0: entered allmulticast mode [ 175.114813][T10326] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1185'. [ 175.165104][T10333] syzkaller0: entered promiscuous mode [ 175.165125][T10333] syzkaller0: entered allmulticast mode [ 175.252371][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1189'. [ 175.314893][T10342] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1190'. [ 175.331017][T10340] erspan0: entered promiscuous mode [ 175.777506][T10370] tipc: Enabled bearer , priority 0 [ 175.787450][T10365] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 175.787485][T10365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.862267][T10356] syzkaller0: entered promiscuous mode [ 175.862293][T10356] syzkaller0: entered allmulticast mode [ 175.862969][T10356] tipc: Resetting bearer [ 175.925548][T10355] tipc: Resetting bearer [ 176.053833][T10384] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 176.138122][T10389] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 177.600991][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.607367][T10355] tipc: Disabling bearer [ 178.622250][T10384] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.622556][T10384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.623633][T10384] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.623750][T10384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.787394][T10396] syzkaller1: entered promiscuous mode [ 178.787417][T10396] syzkaller1: entered allmulticast mode [ 178.794982][ T5737] tipc: Node number set to 416329945 [ 178.866466][T10410] __nla_validate_parse: 2 callbacks suppressed [ 178.866486][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 178.936602][ T5621] Bluetooth: hci4: Malformed Event: 0x13 [ 179.141523][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1207'. [ 179.141557][T10427] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 179.596077][T10458] ip_tables: iptables: counters copy to user failed while replacing table [ 179.712309][T10463] openvswitch: netlink: Invalid VLAN frame [ 180.302162][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1229'. [ 180.505184][T10515] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 180.538078][T10523] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1234'. [ 181.003867][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1244'. [ 181.132593][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1242'. [ 181.337434][T10584] bond1: entered promiscuous mode [ 181.342051][T10584] bond1: entered allmulticast mode [ 181.498511][T10583] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 181.526989][T10583] bond2 (unregistering): Released all slaves [ 181.815800][T10613] netlink: 'syz.6.1252': attribute type 1 has an invalid length. [ 181.911625][T10619] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1254'. [ 181.911653][T10619] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1254'. [ 182.103583][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103615][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103630][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103643][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103658][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103673][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103687][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103701][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103715][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103730][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103743][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103757][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103770][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103784][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103798][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103811][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103825][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103837][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103851][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103864][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103878][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103892][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103907][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103921][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103935][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103950][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103964][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103983][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.103999][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.104021][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.104036][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.104050][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.104064][T10625] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.147939][T10625] openvswitch: netlink: nsh attr 185 is out of range max 3 [ 182.233378][T10634] netlink: 'syz.8.1256': attribute type 2 has an invalid length. [ 182.408378][T10641] Bluetooth: hci0: unsupported parameter 5135 [ 182.408397][T10641] Bluetooth: hci0: unsupported parameter 8192 [ 182.408407][T10641] Bluetooth: hci0: unsupported parameter 5135 [ 182.408417][T10641] Bluetooth: hci0: unsupported parameter 8192 [ 182.434303][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 182.717989][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1265'. [ 182.914975][T10663] bond5: Removing last arp target with arp_interval on [ 182.936154][T10673] pimreg: entered allmulticast mode [ 183.436414][T10720] syzkaller0: entered promiscuous mode [ 183.436431][T10720] syzkaller0: entered allmulticast mode [ 184.187006][T10751] __nla_validate_parse: 13 callbacks suppressed [ 184.187028][T10751] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1285'. [ 186.047377][T10717] tipc: Started in network mode [ 186.047406][T10717] tipc: Node identity fa6ad8e049d8, cluster identity 4711 [ 186.062481][T10717] tipc: Enabled bearer , priority 0 [ 186.073602][T10723] tipc: Resetting bearer [ 186.073994][T10726] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 186.100906][T10729] veth0: entered promiscuous mode [ 186.101669][T10733] veth0: left promiscuous mode [ 186.103421][T10745] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 186.107306][T10751] gretap0: entered promiscuous mode [ 186.134971][T10716] tipc: Resetting bearer [ 186.224551][T10716] tipc: Disabling bearer [ 186.305114][T10769] tipc: Started in network mode [ 186.305144][T10769] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.305360][T10769] tipc: New replicast peer: 172.20.20.187 [ 186.306052][T10769] tipc: Enabled bearer , priority 10 [ 186.316290][T10765] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1289'. [ 186.322232][T10767] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1289'. [ 186.473180][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.629729][T10790] syzkaller0: entered promiscuous mode [ 186.629750][T10790] syzkaller0: entered allmulticast mode [ 186.840202][T10794] syzkaller0: entered promiscuous mode [ 186.840226][T10794] syzkaller0: entered allmulticast mode [ 186.846004][T10799] vlan2: entered promiscuous mode [ 186.846020][T10799] bridge0: entered promiscuous mode [ 189.378372][ T8192] tipc: Node number set to 2886997162 [ 189.526558][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.552947][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.553251][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.553833][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.562961][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.577473][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 189.731780][T10857] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 189.868200][T10867] batadv_slave_0: entered promiscuous mode [ 189.869225][T10866] netlink: 'syz.6.1317': attribute type 12 has an invalid length. [ 189.869242][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 189.870772][T10868] netlink: 'syz.6.1317': attribute type 12 has an invalid length. [ 189.870788][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 189.888289][T10866] netlink: 'syz.6.1317': attribute type 12 has an invalid length. [ 189.888309][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 189.888686][T10868] netlink: 'syz.6.1317': attribute type 12 has an invalid length. [ 189.888698][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 189.919194][ T2986] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.920616][ T2986] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.920675][ T2986] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.920706][ T2986] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.954535][T10864] batadv_slave_0: left promiscuous mode [ 190.058836][T10872] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 190.062945][T10872] bond6 (unregistering): Released all slaves [ 190.368400][T10899] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 190.742190][T10925] xt_MASQUERADE: bad rangesize 2147483646 [ 190.838257][T10931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.851843][T10931] netlink: 'syz.6.1336': attribute type 1 has an invalid length. [ 190.852165][T10931] Bluetooth: hci0: unsupported parameter 5135 [ 190.852176][T10931] Bluetooth: hci0: unsupported parameter 8192 [ 190.852182][T10931] Bluetooth: hci0: unsupported parameter 5135 [ 190.852188][T10931] Bluetooth: hci0: unsupported parameter 8192 [ 191.605620][T10971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.822441][T10984] macvtap1: entered promiscuous mode [ 191.822465][T10984] hsr0: entered promiscuous mode [ 191.822729][T10984] macvtap1: entered allmulticast mode [ 191.822742][T10984] hsr0: entered allmulticast mode [ 191.822752][T10984] hsr_slave_0: entered allmulticast mode [ 191.822764][T10984] hsr_slave_1: entered allmulticast mode [ 191.974542][T10988] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 191.978011][T10988] bond6 (unregistering): Released all slaves [ 192.142780][T10992] macvtap2: entered promiscuous mode [ 192.142802][T10992] macvtap2: entered allmulticast mode [ 192.459817][T11035] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 192.466315][T11034] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 192.795843][T11050] bridge0: port 3(syz_tun) entered blocking state [ 192.795963][T11050] bridge0: port 3(syz_tun) entered disabled state [ 192.796083][T11050] syz_tun: entered allmulticast mode [ 192.797474][T11050] syz_tun: entered promiscuous mode [ 192.797894][T11050] bridge0: port 3(syz_tun) entered blocking state [ 192.797965][T11050] bridge0: port 3(syz_tun) entered forwarding state [ 192.931954][T11054] IPv6: sit1: Disabled Multicast RS [ 193.259597][T11066] xfrm0: entered promiscuous mode [ 193.317770][T11037] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 193.633289][T11096] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 193.682110][T11096] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 193.710115][T11096] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 193.710308][T11096] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 193.710469][T11096] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 193.825744][ T50] IPVS: starting estimator thread 0... [ 193.827148][T11109] IPVS: lc: TCP 127.0.0.1:21 - no destination available [ 193.867819][T11112] tipc: Enabling of bearer rejected, already enabled [ 193.910137][T11110] IPVS: using max 45 ests per chain, 108000 per kthread [ 194.176704][T11130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.241755][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454721][T11142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.544431][T11143] bond1: left allmulticast mode [ 194.546770][T11146] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 194.583186][ T6471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.583212][ T6471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.618571][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.621590][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.727225][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.727350][T11153] bridge0: port 1(bridge_slave_0) entered listening state [ 194.749384][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.749493][T11153] bridge0: port 2(bridge_slave_1) entered listening state [ 194.752810][T11156] __nla_validate_parse: 24 callbacks suppressed [ 194.752834][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 194.811979][T11153] hsr0: left allmulticast mode [ 194.812002][T11153] hsr_slave_0: left allmulticast mode [ 194.812015][T11153] hsr_slave_1: left allmulticast mode [ 194.852356][T11153] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 194.852687][T11153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.869429][ C0] IPVS: lc: TCP 127.0.0.1:21 - no destination available [ 194.874281][T11153] geneve2: left promiscuous mode [ 194.874306][T11153] geneve2: left allmulticast mode [ 194.875374][T11153] syzkaller0: left promiscuous mode [ 194.875393][T11153] syzkaller0: left allmulticast mode [ 194.881956][T11153] sit1: left promiscuous mode [ 194.881976][T11153] sit1: left allmulticast mode [ 194.890094][T11153] gretap1: left promiscuous mode [ 194.890114][T11153] gretap1: left allmulticast mode [ 194.891046][T11153] geneve3: left promiscuous mode [ 194.892196][T11153] bond4: left promiscuous mode [ 194.892213][T11153] bridge3: left promiscuous mode [ 194.908136][T11153] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 195.137471][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d4b800: rx timeout, send abort [ 195.140304][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058d4b800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.164878][T11177] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1397'. [ 195.507617][T11195] validate_nla: 31 callbacks suppressed [ 195.507639][T11195] netlink: 'syz.6.1404': attribute type 1 has an invalid length. [ 195.637723][T11203] netlink: 'syz.8.1407': attribute type 30 has an invalid length. [ 195.637744][T11203] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1407'. [ 195.663420][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1407'. [ 196.230990][T11249] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 196.299961][T11255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.458748][T11261] ip6t_rt: unknown flags 36 [ 196.510117][T11261] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 196.515273][T11261] bond1 (unregistering): Released all slaves [ 196.533073][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 196.582590][T11264] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1425'. [ 196.599851][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 196.875018][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1427'. [ 197.657208][T11308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.843725][T11314] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 198.147796][T11332] netlink: 576 bytes leftover after parsing attributes in process `syz.8.1442'. [ 198.270001][T11332] netlink: 576 bytes leftover after parsing attributes in process `syz.8.1442'. [ 198.398581][T11340] xt_hashlimit: size too large, truncated to 1048576 [ 198.436091][T11311] veth1_to_team: mtu less than device minimum [ 198.595398][T11344] 0XD: renamed from gretap0 (while UP) [ 198.616508][T11344] 0XD: entered allmulticast mode [ 198.948562][ T5621] Bluetooth: hci6: ISO packet for unknown connection handle 2723 [ 199.015841][T11372] lo: Caught tx_queue_len zero misconfig [ 199.208981][T11383] ip6gretap0: entered promiscuous mode [ 199.210144][T11383] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 199.259888][T11383] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 199.261726][T11383] bond6 (unregistering): Released all slaves [ 199.371590][T11394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.555912][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.556310][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.556587][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.559513][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.559840][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.560121][T11401] ip_tables: iptables: counters copy to user failed while replacing table [ 199.879161][T11429] __nla_validate_parse: 39 callbacks suppressed [ 199.879182][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 199.879207][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 199.966558][T11425] syzkaller0: entered promiscuous mode [ 199.966582][T11425] syzkaller0: entered allmulticast mode [ 200.404515][ T59] IPVS: starting estimator thread 0... [ 200.492464][T11460] IPVS: using max 33 ests per chain, 79200 per kthread [ 200.553499][T11469] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1479'. [ 200.603545][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1480'. [ 200.688664][T11475] team0: Port device team_slave_0 removed [ 200.736050][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.736885][T11484] netlink: 194924 bytes leftover after parsing attributes in process `syz.3.1482'. [ 200.738263][T11485] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1480'. [ 200.763299][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.763970][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.771521][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.777566][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.819503][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.822508][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.825657][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.828202][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.834950][T11483] xt_IDLETIMER: label is empty or not nul-terminated [ 200.897608][T11486] netlink: 'syz.3.1482': attribute type 5 has an invalid length. [ 200.898152][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1483'. [ 200.898191][T11491] gretap0: entered promiscuous mode [ 200.901690][T11489] syzkaller0: entered promiscuous mode [ 200.901711][T11489] syzkaller0: entered allmulticast mode [ 200.968428][T11495] netlink: 'syz.9.1484': attribute type 21 has an invalid length. [ 200.968452][T11495] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1484'. [ 200.972561][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1481'. [ 201.235280][T11507] x_tables: duplicate underflow at hook 2 [ 201.443671][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 201.444140][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.444168][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.641283][T11526] net_ratelimit: 61 callbacks suppressed [ 201.641303][T11526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.657772][ T4932] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 201.675078][ T4932] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 201.687798][ T4932] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 201.689527][ T4932] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 201.690151][ T4932] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 201.836972][T11532] No such timeout policy "syz0" [ 202.277667][T11528] wg1 speed is unknown, defaulting to 1000 [ 202.348950][T11560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.437665][T11566] netlink: 'syz.6.1504': attribute type 10 has an invalid length. [ 202.499248][T11566] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 202.543658][T11569] can: request_module (can-proto-0) failed. [ 202.544333][T11564] dvmrp0: left allmulticast mode [ 202.599560][T11570] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1503'. [ 202.955542][T11589] syzkaller0: entered promiscuous mode [ 202.955565][T11589] syzkaller0: entered allmulticast mode [ 203.235814][T11607] Set syz0 is full, maxelem 2 reached [ 203.592505][T11528] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.592681][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.592837][T11528] bridge_slave_0: entered allmulticast mode [ 203.595383][T11528] bridge_slave_0: entered promiscuous mode [ 203.612128][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.617977][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.618147][T11528] bridge_slave_1: entered allmulticast mode [ 203.626175][T11528] bridge_slave_1: entered promiscuous mode [ 203.706732][T11640] syz_tun: entered allmulticast mode [ 203.720598][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.733232][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.749154][ T5621] Bluetooth: hci10: command tx timeout [ 203.814007][T11637] syz_tun: left allmulticast mode [ 203.864517][T11528] team0: Port device team_slave_0 added [ 203.877670][T11650] batman_adv: batadv0: Adding interface: syzkaller0 [ 203.877689][T11650] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.877719][T11650] batman_adv: batadv0: Interface activated: syzkaller0 [ 203.887629][T11528] team0: Port device team_slave_1 added [ 203.930577][T11645] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 203.969948][T11645] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.065225][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.065242][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.065263][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.118450][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.118467][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.118500][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.417584][T11528] hsr_slave_0: entered promiscuous mode [ 204.421418][T11528] hsr_slave_1: entered promiscuous mode [ 204.424101][T11528] debugfs: 'hsr0' already exists in 'hsr' [ 204.424122][T11528] Cannot create hsr debugfs directory [ 205.318466][T11724] __nla_validate_parse: 10 callbacks suppressed [ 205.318487][T11724] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1544'. [ 205.368557][T11528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.671018][T11528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.672719][T11736] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1544'. [ 205.830460][ T5621] Bluetooth: hci10: command tx timeout [ 205.868145][T11528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.883895][T11740] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1548'. [ 206.022297][T11528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.050429][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1552'. [ 206.093265][T11754] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1552'. [ 206.538524][T11528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.553983][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.619962][T11528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.643493][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.651701][T11528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.703157][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.706445][T11528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.733545][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.046438][T11528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.093074][T11528] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.118864][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.118964][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.149020][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.149145][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.314750][T11809] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1566'. [ 207.314771][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1566'. [ 207.386249][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'. [ 207.429677][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1567'. [ 207.477996][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1568'. [ 207.669275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.909483][ T5621] Bluetooth: hci10: command tx timeout [ 208.217043][T11528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.276162][T11858] : renamed from vlan1 (while UP) [ 208.330183][T11528] veth0_vlan: entered promiscuous mode [ 208.338195][T11528] veth1_vlan: entered promiscuous mode [ 208.386210][T11528] veth0_macvtap: entered promiscuous mode [ 208.404327][T11528] veth1_macvtap: entered promiscuous mode [ 208.442964][T11528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.461409][T11528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.495467][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.512978][ T6469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.560141][ T2986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.656659][T11874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.660353][ T6469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.660602][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.660616][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.739588][T11874] macvlan2: entered promiscuous mode [ 208.739611][T11874] macvlan2: entered allmulticast mode [ 208.741081][T11874] bond1: entered promiscuous mode [ 208.741978][T11874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.747658][T11874] bond1: left promiscuous mode [ 208.795000][ T6469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.795031][ T6469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.849307][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.040498][T11886] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 209.177754][T11896] macvtap0: entered allmulticast mode [ 209.177776][T11896] veth0_macvtap: entered allmulticast mode [ 209.326169][T11908] netlink: 'syz.1.1593': attribute type 20 has an invalid length. [ 209.326191][T11908] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.708620][T11933] bond0: (slave bond_slave_1): Releasing backup interface [ 209.728316][T11926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.989082][ T5621] Bluetooth: hci10: command tx timeout [ 210.159830][T11963] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 210.230845][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 210.231496][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 210.265373][T11974] netlink: 'syz.6.1612': attribute type 2 has an invalid length. [ 210.298040][T11974] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 210.311190][T11974] bond3 (unregistering): Released all slaves [ 210.516447][T11984] __nla_validate_parse: 8 callbacks suppressed [ 210.516470][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1614'. [ 210.577602][T11989] IPVS: set_ctl: invalid protocol: 4 172.30.0.9:20003 [ 210.693872][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1618'. [ 210.693907][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1618'. [ 210.693935][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1618'. [ 210.740102][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1619'. [ 210.795599][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1620'. [ 210.866334][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1620'. [ 210.882476][T12009] netlink: 'syz.6.1620': attribute type 21 has an invalid length. [ 210.882497][T12009] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1620'. [ 210.917040][T12000] bond0: (slave bridge0): Releasing backup interface [ 210.962990][T12009] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1620'. [ 211.126083][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1625'. [ 211.142030][T12026] bond0: Caught tx_queue_len zero misconfig [ 211.288522][T12035] ip6tnl0: Caught tx_queue_len zero misconfig [ 211.568615][T12052] netlink: 'syz.8.1636': attribute type 1 has an invalid length. [ 211.577892][T12044] syzkaller1: entered promiscuous mode [ 211.577938][T12044] syzkaller1: entered allmulticast mode [ 211.627957][T12061] netlink: 'syz.8.1636': attribute type 1 has an invalid length. [ 211.835277][T12076] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.835507][T12076] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 212.038232][ T5621] Bluetooth: hci4: unexpected cc 0x2035 length: 2 > 1 [ 212.038279][ T5621] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 212.038450][ T5621] Bluetooth: hci4: unexpected cc 0x2035 length: 2 > 1 [ 212.038469][ T5621] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 212.667348][T12127] netlink: 'syz.8.1655': attribute type 97 has an invalid length. [ 212.667377][T12127] netlink: 'syz.8.1655': attribute type 97 has an invalid length. [ 212.734796][T12130] netlink: 'syz.1.1656': attribute type 28 has an invalid length. [ 212.734818][T12130] netlink: 'syz.1.1656': attribute type 3 has an invalid length. [ 212.744934][T12131] netlink: 'syz.1.1656': attribute type 28 has an invalid length. [ 212.951222][T12141] vlan1: entered promiscuous mode [ 212.951242][T12141] bridge0: entered promiscuous mode [ 212.951393][T12141] vlan1: entered allmulticast mode [ 212.951404][T12141] bridge0: entered allmulticast mode [ 213.117272][T12150] Cannot find add_set index 4 as target [ 213.233613][T12150] bond2 (unregistering): Released all slaves [ 213.263435][T12157] tipc: Enabling of bearer rejected, failed to enable media [ 214.062991][T12217] syzkaller0: entered promiscuous mode [ 214.063013][T12217] syzkaller0: entered allmulticast mode [ 214.282806][T12232] openvswitch: netlink: Duplicate or invalid key (type 0). [ 214.388521][T12238] veth3: entered allmulticast mode [ 214.431648][T12240] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 214.758432][T12259] wg1 speed is unknown, defaulting to 1000 [ 215.082534][T12271] validate_nla: 4 callbacks suppressed [ 215.082555][T12271] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 215.141322][T12271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.190320][T12275] bond6: (slave veth5): Enslaving as an active interface with a down link [ 215.211710][T12271] veth0_virt_wifi: entered promiscuous mode [ 215.238161][T12271] bond6: (slave veth0_virt_wifi): making interface the new active one [ 215.247377][T12271] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 215.416668][T12289] ip_tables: iptables: counters copy to user failed while replacing table [ 215.455440][T12289] x_tables: ip_tables: osf match: only valid for protocol 6 [ 215.657607][T12303] netlink: 'syz.8.1715': attribute type 1 has an invalid length. [ 215.658221][T12304] netlink: 'syz.8.1715': attribute type 1 has an invalid length. [ 215.903467][T12311] __nla_validate_parse: 23 callbacks suppressed [ 215.903489][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1716'. [ 215.945505][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025d44400: rx timeout, send abort [ 215.945649][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025d44400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.120479][T12326] nbd: must specify an index to disconnect [ 216.278436][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 216.320275][T12337] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.320816][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1722'. [ 216.326345][T12337] veth0_macvtap: Caught tx_queue_len zero misconfig [ 216.655961][T12353] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.055620][T12374] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 217.055736][T12374] syzkaller1: linktype set to 823 [ 217.236908][T12381] netlink: 'syz.1.1734': attribute type 11 has an invalid length. [ 217.236931][T12381] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.1734'. [ 217.247477][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 217.251683][T12384] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1736'. [ 217.291814][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'. [ 217.304036][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1738'. [ 217.569965][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 217.876364][T12413] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 217.877204][T12414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1746'. [ 217.906794][T12413] syzkaller1: entered promiscuous mode [ 217.906815][T12413] syzkaller1: entered allmulticast mode [ 218.120380][T12425] ip_tables: iptables: counters copy to user failed while replacing table [ 218.168462][T12429] netlink: 'syz.3.1750': attribute type 30 has an invalid length. [ 218.223806][T12434] netlink: 'syz.3.1750': attribute type 30 has an invalid length. [ 218.309861][ T4932] Bluetooth: hci10: command 0x0405 tx timeout [ 218.351808][T12445] xt_SECMARK: invalid mode: 9 [ 218.353423][T12441] TCP: TCP_TX_DELAY enabled [ 218.369891][T12445] xt_SECMARK: invalid mode: 9 [ 218.370165][T12445] xt_SECMARK: invalid mode: 9 [ 218.370422][T12445] xt_SECMARK: invalid mode: 9 [ 218.370735][T12445] xt_SECMARK: invalid mode: 9 [ 218.371059][T12445] xt_SECMARK: invalid mode: 9 [ 218.371291][T12445] xt_SECMARK: invalid mode: 9 [ 218.371545][T12445] xt_SECMARK: invalid mode: 9 [ 218.371767][T12445] xt_SECMARK: invalid mode: 9 [ 218.372093][T12445] xt_SECMARK: invalid mode: 9 [ 218.547135][T12454] Bluetooth: ISO socket layer initialized [ 218.738228][T12476] netlink: 'syz.8.1761': attribute type 83 has an invalid length. [ 218.751832][T12476] ip_tables: iptables: counters copy to user failed while replacing table [ 218.798590][T12478] TC_ACT_REPEAT abuse ? [ 218.976833][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.992413][T12489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.176337][ T31] audit: type=1107 audit(1791593380.145:3): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='//f–EӈG I׋i7x ѧmx¢05U [ 219.176337][ T31] /pYEAP4*#_ "\My,&7êWS;',Ȉ~6Ry_uvNJ( [ 219.176337][ T31] 6*1U+y-ft"5[q:fPe{IuSǾSUU;%Xɺ6}8C0 EYB0WB_[q' [ 219.522085][T12524] syzkaller1: entered allmulticast mode [ 219.662337][T12530] bridge_slave_0: left allmulticast mode [ 219.662364][T12530] bridge_slave_0: left promiscuous mode [ 219.662681][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.668124][T12530] bridge_slave_1: left allmulticast mode [ 219.668149][T12530] bridge_slave_1: left promiscuous mode [ 219.668335][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.683844][T12532] netlink: 'syz.3.1778': attribute type 11 has an invalid length. [ 219.732964][T12530] bond0: (slave bond_slave_0): Releasing backup interface [ 219.737514][T12530] bond0: (slave bond_slave_1): Releasing backup interface [ 219.761621][T12530] team0: Port device team_slave_0 removed [ 219.766457][T12530] team0: Port device team_slave_1 removed [ 219.767227][T12530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.767248][T12530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.768331][T12530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.768343][T12530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.790193][T12530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.878739][T12537] tipc: Enabled bearer , priority 0 [ 220.120222][T12549] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 220.155542][T12549] bond7: entered promiscuous mode [ 220.156038][T12549] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.214296][T12553] ip6t_hbh: Not strict - not implemented [ 220.323042][T12558] xt_NFQUEUE: number of total queues is 0 [ 220.335285][T12555] netlink: 'syz.3.1786': attribute type 21 has an invalid length. [ 220.350813][T12565] netlink: 'syz.3.1786': attribute type 21 has an invalid length. [ 220.385808][ T31] audit: type=1800 audit(1791593381.355:4): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1788" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=733 res=0 errno=0 [ 220.620908][T12580] ip_tables: iptables: counters copy to user failed while replacing table [ 220.643989][T12580] syzkaller1: entered promiscuous mode [ 220.644011][T12580] syzkaller1: entered allmulticast mode [ 220.646356][T12580] syzkaller0: left promiscuous mode [ 220.646375][T12580] syzkaller0: left allmulticast mode [ 220.648218][T12582] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 220.765473][T12586] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 220.768605][T12586] syzkaller0: entered promiscuous mode [ 220.768627][T12586] syzkaller0: entered allmulticast mode [ 220.812977][T12592] x_tables: duplicate underflow at hook 1 [ 220.849957][T12588] ip6t_srh: unknown srh match flags 5F28 [ 221.281234][T12613] Unsupported ieee802154 address type: 0 [ 221.322963][T12613] __nla_validate_parse: 16 callbacks suppressed [ 221.322982][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1805'. [ 221.702888][T12634] erspan0: entered promiscuous mode [ 221.706107][T12637] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 221.707755][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1809'. [ 221.723365][T12638] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 221.887254][T12647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.887647][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1814'. [ 221.918975][T12648] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1815'. [ 221.919007][T12648] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1815'. [ 222.285544][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1823'. [ 222.468738][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 222.470301][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 222.470534][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 222.470549][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 222.836355][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 222.836875][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 222.837174][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 222.837471][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 222.837760][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 222.863286][T12722] bridge_slave_1: left allmulticast mode [ 222.863312][T12722] bridge_slave_1: left promiscuous mode [ 222.863520][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.900561][T12719] netdevsim netdevsim8: Firmware load for './file0/file0/..' refused, path contains '..' component [ 222.940802][T12722] bridge_slave_0: left allmulticast mode [ 222.940829][T12722] bridge_slave_0: left promiscuous mode [ 222.941077][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.109855][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 223.180683][ T6681] hid-generic 0005:0458:4155.0003: unknown main item tag 0x0 [ 223.217267][ T6681] hid-generic 0005:0458:4155.0003: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 223.280395][ T6476] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.280440][ T6476] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.280471][ T6476] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.280500][ T6476] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.397412][T12748] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20004 [ 223.497095][T12747] netlink: 'syz.1.1840': attribute type 2 has an invalid length. [ 223.499286][T12740] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.834738][T12768] nbd: must specify a size in bytes for the device [ 225.254937][T12825] netlink: 'syz.8.1859': attribute type 2 has an invalid length. [ 225.366365][T12829] syzkaller0: entered promiscuous mode [ 225.366388][T12829] syzkaller0: entered allmulticast mode [ 225.541096][T12840] netlink: 'syz.9.1866': attribute type 4 has an invalid length. [ 225.543561][T12840] netlink: 'syz.9.1866': attribute type 4 has an invalid length. [ 225.572553][T12840] netlink: 'syz.9.1866': attribute type 4 has an invalid length. [ 225.576377][T12844] netlink: 'syz.9.1866': attribute type 4 has an invalid length. [ 225.600344][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.600369][ C0] bridge0: topology change detected, propagating [ 225.600887][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.600905][ C0] bridge0: topology change detected, propagating [ 225.642474][ T12] IPVS: starting estimator thread 0... [ 225.729081][T12852] IPVS: using max 55 ests per chain, 132000 per kthread [ 225.872523][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.908651][T12870] team0: Device gtp2 is up. Set it down before adding it as a team port [ 226.054833][T12878] bond0: (slave team0): Releasing backup interface [ 226.058645][T12878] smc: removing net device team0 with user defined pnetid SYZ2 [ 226.087261][T12878] team0 (unregistering): Port device team_slave_0 removed [ 226.123870][T12878] team0 (unregistering): Port device team_slave_1 removed [ 226.418192][T12892] syzkaller0: entered promiscuous mode [ 226.418215][T12892] syzkaller0: entered allmulticast mode [ 226.461873][T12883] __nla_validate_parse: 10 callbacks suppressed [ 226.461894][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 226.493192][T12884] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 226.794197][ T4932] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 226.806439][ T4932] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 226.816897][ T4932] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 226.831022][ T4932] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 226.833860][ T4932] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 227.012820][T12916] x_tables: duplicate underflow at hook 1 [ 227.029545][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 227.029635][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 227.289489][T12926] dvmrp0: entered allmulticast mode [ 227.538146][T12941] netlink: 'syz.9.1893': attribute type 21 has an invalid length. [ 227.538171][T12941] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1893'. [ 227.585991][T12906] wg1 speed is unknown, defaulting to 1000 [ 227.645460][T12946] net_ratelimit: 61 callbacks suppressed [ 227.645481][T12946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.662945][T12946] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 227.662978][T12946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.090404][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1905'. [ 228.090427][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1905'. [ 228.276266][T12980] syzkaller1: entered promiscuous mode [ 228.276289][T12980] syzkaller1: entered allmulticast mode [ 228.309170][T12947] tap0: tun_chr_ioctl cmd 2148553947 [ 228.314787][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1896'. [ 228.358408][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'. [ 228.661523][T13006] netlink: 'syz.8.1911': attribute type 1 has an invalid length. [ 228.725640][T13006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.763256][T13014] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 228.949152][ T5614] Bluetooth: hci11: command tx timeout [ 228.953951][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.954123][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.954265][T12906] bridge_slave_0: entered allmulticast mode [ 228.956049][T12906] bridge_slave_0: entered promiscuous mode [ 228.999417][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.999590][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.999750][T12906] bridge_slave_1: entered allmulticast mode [ 229.004141][T12906] bridge_slave_1: entered promiscuous mode [ 229.067682][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.080638][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.082747][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1919'. [ 229.082768][T13030] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1919'. [ 229.172922][T12906] team0: Port device team_slave_0 added [ 229.185481][T12906] team0: Port device team_slave_1 added [ 229.226529][T13033] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 229.281283][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.281302][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.281323][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.286953][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.286971][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.286990][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.472734][T13041] 8021q: VLANs not supported on lo [ 229.505989][T12906] hsr_slave_0: entered promiscuous mode [ 229.512555][T12906] hsr_slave_1: entered promiscuous mode [ 229.513238][T12906] debugfs: 'hsr0' already exists in 'hsr' [ 229.513255][T12906] Cannot create hsr debugfs directory [ 229.906791][T13069] netlink: 'syz.9.1930': attribute type 64 has an invalid length. [ 229.940752][T12906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.106023][T13078] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1932'. [ 230.108283][T12906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.307227][T12906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.385952][T13088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1934'. [ 230.468052][T12906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.505533][T13088] syzkaller1: entered promiscuous mode [ 230.505556][T13088] syzkaller1: entered allmulticast mode [ 230.508126][T13098] syzkaller0: entered promiscuous mode [ 230.508146][T13098] syzkaller0: entered allmulticast mode [ 230.516268][T13099] netlink: 'syz.8.1938': attribute type 178 has an invalid length. [ 230.974064][T13123] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 231.029317][ T5614] Bluetooth: hci11: command tx timeout [ 231.071611][T12906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.091067][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.091908][T12906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.119150][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.119947][T12906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.156223][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.157715][T12906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.177605][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.267455][ T50] IPVS: starting estimator thread 0... [ 231.286396][T13145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.286412][T13145] IPv6: NLM_F_CREATE should be set when creating new route [ 231.286452][T13145] IPv6: NLM_F_CREATE should be set when creating new route [ 231.286488][T13145] IPv6: NLM_F_CREATE should be set when creating new route [ 231.328043][T13145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.359964][T13146] IPVS: using max 34 ests per chain, 81600 per kthread [ 231.410974][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.437785][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.458286][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.458393][ T643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.491415][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.491518][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.593975][T13152] __nla_validate_parse: 9 callbacks suppressed [ 231.593996][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1949'. [ 231.766736][T13163] ip6t_hbh: too many supported opts specified [ 231.798718][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.804094][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.804461][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.817431][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.817794][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.818136][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.818482][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.928535][T13168] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 231.957508][T13168] IPVS: set_ctl: invalid protocol: 98 172.30.1.9:20003 [ 232.647030][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.727102][T13212] syzkaller0: entered promiscuous mode [ 232.727126][T13212] syzkaller0: entered allmulticast mode [ 232.901934][T13233] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 233.094189][T13241] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 233.094212][T13241] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1972'. [ 233.094226][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 233.109210][ T5614] Bluetooth: hci11: command tx timeout [ 233.704655][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1973'. [ 235.204936][ T5614] Bluetooth: hci11: command tx timeout [ 235.268595][T13233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.272785][T13233] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 235.420293][T12906] veth0_vlan: entered promiscuous mode [ 235.471662][T12906] veth1_vlan: entered promiscuous mode [ 235.474780][T13259] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 235.546712][T13265] xt_l2tp: invalid flags combination: 8 [ 235.557840][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1979'. [ 235.569370][T13256] net_ratelimit: 58 callbacks suppressed [ 235.569400][T13256] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.572551][T13265] tipc: Enabling of bearer rejected, failed to enable media [ 235.610177][T12906] veth0_macvtap: entered promiscuous mode [ 235.627486][T12906] veth1_macvtap: entered promiscuous mode [ 235.658198][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.686261][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.820938][ T6476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.821246][ T643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.821287][ T643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.821318][ T643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.946722][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.946743][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.962985][T13281] ip_tables: iptables: counters copy to user failed while replacing table [ 235.984376][T13286] ip_tables: iptables: counters copy to user failed while replacing table [ 236.168639][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.168661][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.352877][T13307] syzkaller0: entered promiscuous mode [ 236.352899][T13307] syzkaller0: entered allmulticast mode [ 236.465180][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1990'. [ 236.992018][T13307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1881'. [ 237.033564][T13343] netlink: 'syz.9.1995': attribute type 4 has an invalid length. [ 237.048169][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1995'. [ 237.048205][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1995'. [ 237.297126][T13348] openvswitch: netlink: Invalid VLAN frame [ 237.385266][T13355] hsr0: entered allmulticast mode [ 237.385288][T13355] hsr_slave_0: entered allmulticast mode [ 237.385304][T13355] hsr_slave_1: entered allmulticast mode [ 237.542839][T13367] erspan0: entered allmulticast mode [ 237.600487][T13369] veth0_to_bond: entered allmulticast mode [ 237.618098][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2006'. [ 237.708436][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2010'. [ 237.720858][T13372] netlink: 'syz.1.2007': attribute type 2 has an invalid length. [ 237.812485][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.812507][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.923012][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2012'. [ 237.968043][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 238.067575][T13391] netlink: 'syz.0.2017': attribute type 142 has an invalid length. [ 238.115036][T13393] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2016'. [ 238.115059][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2016'. [ 238.165331][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2016'. [ 238.181841][T13395] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 238.182911][T13395] xt_l2tp: invalid flags combination: 8 [ 239.014383][T13403] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.547985][T13454] veth0_virt_wifi: left promiscuous mode [ 239.563162][T13454] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 239.574566][T13454] syzkaller0: left promiscuous mode [ 239.605931][T13454] vlan2: left promiscuous mode [ 239.611700][T13454] bond7: left promiscuous mode [ 240.375445][T13504] netlink: 'syz.8.2046': attribute type 1 has an invalid length. [ 240.375467][T13504] netlink: 'syz.8.2046': attribute type 1 has an invalid length. [ 240.556946][T13521] ip_tables: iptables: counters copy to user failed while replacing table [ 240.697659][T13532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.705944][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f9c5800: rx timeout, send abort [ 240.708159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803f9c5800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.871997][T13543] pim6reg: entered allmulticast mode [ 241.107591][T13556] nbd: illegal input index -8454144 [ 241.585441][T13578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 241.761823][T13587] veth1_macvtap: left promiscuous mode [ 241.785861][T13582] gtp0: entered promiscuous mode [ 241.785883][T13582] gtp0: entered allmulticast mode [ 241.825330][T13582] gtp1: entered promiscuous mode [ 241.825350][T13582] gtp1: entered allmulticast mode [ 241.857304][T13587] can: request_module (can-proto-0) failed. [ 241.858265][T13582] gtp2: entered promiscuous mode [ 241.858283][T13582] gtp2: entered allmulticast mode [ 241.881761][T13596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.921908][T13582] gtp3: entered promiscuous mode [ 241.921929][T13582] gtp3: entered allmulticast mode [ 241.941430][T13582] gtp4: entered promiscuous mode [ 241.941450][T13582] gtp4: entered allmulticast mode [ 241.972072][T13582] gtp5: entered promiscuous mode [ 241.972093][T13582] gtp5: entered allmulticast mode [ 242.026358][T13599] netlink: 'syz.9.2074': attribute type 1 has an invalid length. [ 242.026382][T13599] netlink: 'syz.9.2074': attribute type 2 has an invalid length. [ 242.028113][T13582] gtp6: entered promiscuous mode [ 242.028131][T13582] gtp6: entered allmulticast mode [ 242.097277][T13582] gtp7: entered promiscuous mode [ 242.097298][T13582] gtp7: entered allmulticast mode [ 242.156332][T13582] gtp8: entered promiscuous mode [ 242.156354][T13582] gtp8: entered allmulticast mode [ 242.184354][T13610] __nla_validate_parse: 19 callbacks suppressed [ 242.184373][T13610] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2077'. [ 242.187659][T13582] gtp9: entered promiscuous mode [ 242.187679][T13582] gtp9: entered allmulticast mode [ 242.226124][T13582] gtp10: entered promiscuous mode [ 242.226147][T13582] gtp10: entered allmulticast mode [ 242.256054][T13582] gtp11: entered promiscuous mode [ 242.256075][T13582] gtp11: entered allmulticast mode [ 242.279925][T13582] gtp12: entered promiscuous mode [ 242.279945][T13582] gtp12: entered allmulticast mode [ 242.304146][T13582] gtp13: entered promiscuous mode [ 242.304168][T13582] gtp13: entered allmulticast mode [ 242.331976][T13582] gtp14: entered promiscuous mode [ 242.331997][T13582] gtp14: entered allmulticast mode [ 242.352006][T13582] gtp15: entered promiscuous mode [ 242.352026][T13582] gtp15: entered allmulticast mode [ 242.371241][T13582] gtp16: entered promiscuous mode [ 242.371259][T13582] gtp16: entered allmulticast mode [ 242.393768][T13614] netlink: 'syz.3.2079': attribute type 2 has an invalid length. [ 242.408318][T13582] gtp17: entered promiscuous mode [ 242.408340][T13582] gtp17: entered allmulticast mode [ 242.430241][T13582] gtp18: entered promiscuous mode [ 242.430261][T13582] gtp18: entered allmulticast mode [ 242.504345][T13614] : entered promiscuous mode [ 242.540173][T13582] gtp19: entered promiscuous mode [ 242.540201][T13582] gtp19: entered allmulticast mode [ 242.547217][T13582] gtp20: entered promiscuous mode [ 242.547237][T13582] gtp20: entered allmulticast mode [ 242.643958][T13582] gtp21: entered promiscuous mode [ 242.643978][T13582] gtp21: entered allmulticast mode [ 242.665171][T13631] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2084'. [ 242.733682][T13631] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2084'. [ 242.744077][T13632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2084'. [ 242.836856][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2086'. [ 243.092414][T13646] netlink: 'syz.9.2085': attribute type 10 has an invalid length. [ 243.092435][T13646] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2085'. [ 243.117507][T13646] dummy0: entered promiscuous mode [ 243.169180][T13663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'. [ 243.176756][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 243.176787][T13653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2089'. [ 243.176802][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 243.296934][T13653] vlan3: entered allmulticast mode [ 243.296956][T13653] veth1_macvtap: entered allmulticast mode [ 243.761326][T13689] veth3: entered allmulticast mode [ 244.685892][T13740] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 244.748062][T13736] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 245.011860][T13768] atomic_op ffff888038c229e0 conn xmit_atomic 0000000000000000 [ 245.406482][T13792] openvswitch: netlink: IP tunnel dst address not specified [ 245.493525][T13794] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 245.514844][T13794] bond1 (unregistering): Released all slaves [ 245.795532][T13803] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 245.814717][T13803] bond1 (unregistering): Released all slaves [ 246.261602][T13839] netlink: 'syz.8.2134': attribute type 11 has an invalid length. [ 246.342859][T13848] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 246.416626][T13850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.567630][T13934] syzkaller0: entered promiscuous mode [ 247.567653][T13934] syzkaller0: entered allmulticast mode [ 247.578130][T13935] __nla_validate_parse: 208 callbacks suppressed [ 247.578148][T13935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2158'. [ 247.763428][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2157'. [ 247.967481][T13942] syzkaller0: entered promiscuous mode [ 247.967505][T13942] syzkaller0: entered allmulticast mode [ 247.974711][T13951] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.974883][T13951] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.198718][T13953] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2163'. [ 248.243185][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 248.270342][T13974] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2164'. [ 248.270365][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 248.270376][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 248.286355][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2165'. [ 248.301606][T13977] sctp: [Deprecated]: syz.9.2165 (pid 13977) Use of int in max_burst socket option. [ 248.301606][T13977] Use struct sctp_assoc_value instead [ 248.498241][T13981] netlink: Failed to add helper -22 [ 248.498295][T13981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.706434][T13973] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 248.776617][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.776727][ T6469] bridge0: port 2(bridge_slave_1) entered listening state [ 249.052447][T14013] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2168'. [ 249.092480][T14013] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2168'. [ 249.439170][T14041] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 249.540823][T14047] xt_TCPMSS: Only works on TCP SYN packets [ 249.835529][T14071] Unsupported ieee802154 address type: 0 [ 249.905065][T14055] syz.9.2176 (14055) used greatest stack depth: 18312 bytes left [ 250.031122][T14062] syz.9.2176 (14062) used greatest stack depth: 18088 bytes left [ 250.604763][T14123] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 250.702725][T14118] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 250.864388][T14132] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 251.905366][T14199] ipt_rpfilter: unknown options [ 252.038302][T14210] sit0: entered promiscuous mode [ 252.056026][T14210] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 252.639450][T14245] tipc: Started in network mode [ 252.639488][T14245] tipc: Node identity 02f21311c6e5, cluster identity 4711 [ 252.639724][T14245] tipc: Enabled bearer , priority 0 [ 252.926899][T14257] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 253.418627][T14290] __nla_validate_parse: 15 callbacks suppressed [ 253.418648][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 253.583232][T14299] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2230'. [ 253.750368][ T32] INFO: task syz.0.322:6879 blocked for more than 143 seconds. [ 253.750391][ T32] Not tainted syzkaller #0 [ 253.750402][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.750417][ T32] task:syz.0.322 state:D stack:26816 pid:6879 tgid:6877 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 253.750483][ T32] Call Trace: [ 253.750493][ T32] [ 253.750506][ T32] __schedule+0x17db/0x58f0 [ 253.750560][ T32] ? __pfx___schedule+0x10/0x10 [ 253.750590][ T32] ? schedule+0x90/0x2b0 [ 253.750612][ T32] schedule+0x164/0x2b0 [ 253.750632][ T32] schedule_preempt_disabled+0x13/0x30 [ 253.750649][ T32] __mutex_lock+0x7c1/0x1550 [ 253.750675][ T32] ? __mutex_lock+0x5d4/0x1550 [ 253.750698][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 253.750725][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 253.750756][ T32] ? net_generic+0x1e/0x240 [ 253.750779][ T32] ? net_generic+0x1e/0x240 [ 253.750810][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 253.750836][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 253.750865][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 253.750892][ T32] ? do_syscall_64+0x166/0x520 [ 253.750911][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.750933][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 253.750975][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 253.751021][ T32] ? rcu_is_watching+0x16/0xb0 [ 253.751047][ T32] ? trace_kmalloc+0x2a/0xf0 [ 253.751071][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 253.751104][ T32] ? __nla_parse+0x40/0x60 [ 253.751134][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 253.751162][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 253.751196][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 253.751230][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 253.751271][ T32] ? bpf_lsm_capable+0x9/0x20 [ 253.751292][ T32] ? security_capable+0x7e/0x2c0 [ 253.751323][ T32] genl_rcv_msg+0x614/0x7a0 [ 253.751371][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.751398][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 253.751429][ T32] ? __asan_memcpy+0x40/0x70 [ 253.751449][ T32] ? __skb_clone+0x5c/0x6c0 [ 253.751475][ T32] netlink_rcv_skb+0x226/0x4a0 [ 253.751499][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.751527][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.751562][ T32] ? down_read+0x2be/0x330 [ 253.751586][ T32] genl_rcv+0x28/0x40 [ 253.751610][ T32] netlink_unicast+0x7bd/0x940 [ 253.751637][ T32] netlink_sendmsg+0x813/0xb40 [ 253.751667][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.751696][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 253.751782][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.751806][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 253.751835][ T32] ____sys_sendmsg+0x54e/0x850 [ 253.751860][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.751886][ T32] ? import_iovec+0x73/0xa0 [ 253.751916][ T32] ___sys_sendmsg+0x2a5/0x360 [ 253.751933][ T32] ? __lock_acquire+0x747/0x2de0 [ 253.751958][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.751980][ T32] ? futex_wait+0x2a2/0x390 [ 253.752026][ T32] ? __fget_files+0x2a/0x420 [ 253.752044][ T32] ? __fget_files+0x3a2/0x420 [ 253.752069][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 253.752093][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.752142][ T32] do_syscall_64+0x166/0x520 [ 253.752163][ T32] ? trace_irq_disable+0x3b/0x140 [ 253.752184][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.752205][ T32] ? clear_bhb_loop+0x70/0xc0 [ 253.752229][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.752246][ T32] RIP: 0033:0x7fa81579e1d9 [ 253.752309][ T32] RSP: 002b:00007fa816726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.752330][ T32] RAX: ffffffffffffffda RBX: 00007fa815a25fa0 RCX: 00007fa81579e1d9 [ 253.752345][ T32] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 253.752357][ T32] RBP: 00007fa815835888 R08: 0000000000000000 R09: 0000000000000000 [ 253.752367][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.752379][ T32] R13: 00007fa815a26038 R14: 00007fa815a25fa0 R15: 00007fffc2064ac8 [ 253.752410][ T32] [ 253.752490][ T32] [ 253.752490][ T32] Showing all locks held in the system: [ 253.752502][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 253.752543][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 253.752615][ T32] locks held by kworker/u8:8/2986: 4, last CPU#1: [ 253.752628][ T32] #0: ffff8880339ba140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.752680][ T32] #1: ffffc9000e18fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.752731][ T32] #2: ffff888076b059c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 253.752787][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x869/0xfc0 [ 253.752844][ T32] locks held by getty/5369: 2, on CPU#1: [ 253.752856][ T32] #0: ffff8880373b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 253.752903][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 253.752965][ T32] locks held by syz.1.119/6181: 2, on CPU#1: [ 253.752979][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753031][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 253.753090][ T32] locks held by syz.0.322/6879: 2, on CPU#1: [ 253.753110][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753161][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 253.753218][ T32] locks held by syz.2.862/8958: 2, on CPU#1: [ 253.753231][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753280][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 253.753447][ T32] locks held by syz.5.971/9381: 2, on CPU#1: [ 253.753461][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753509][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 253.753559][ T32] locks held by syz.4.1014/9513: 2, on CPU#0: [ 253.753571][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753618][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 253.753674][ T32] locks held by syz.7.1292/10775: 2, on CPU#1: [ 253.753687][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753737][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 253.753789][ T32] locks held by syz.6.1637/12056: 2, on CPU#1: [ 253.753802][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 253.753851][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 253.753906][ T32] locks held by syz.3.2236/14306: 1, last CPU#0: [ 253.753919][ T32] #0: ffff88807bfa7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 253.753962][ T32] locks held by syz.0.2235/14307: 2, last CPU#0: [ 253.753975][ T32] #0: ffff8880807ff180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 253.754016][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 253.754064][ T32] locks held by sed/14311: 1, last CPU#1: [ 253.754076][ T32] #0: ffff888034614cc0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 253.754127][ T32] [ 253.754133][ T32] ============================================= [ 253.754133][ T32] [ 253.754158][ T32] NMI backtrace for cpu 0 [ 253.754180][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 253.754222][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.754234][ T32] Call Trace: [ 253.754241][ T32] [ 253.754247][ T32] dump_stack_lvl+0xe8/0x150 [ 253.754272][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 253.754298][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.754325][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 253.754356][ T32] sys_info+0x135/0x170 [ 253.754378][ T32] watchdog+0xfd7/0x1030 [ 253.754405][ T32] ? watchdog+0x1c7/0x1030 [ 253.754429][ T32] kthread+0x38b/0x480 [ 253.754449][ T32] ? __pfx_watchdog+0x10/0x10 [ 253.754466][ T32] ? __pfx_kthread+0x10/0x10 [ 253.754485][ T32] ret_from_fork+0x514/0xb70 [ 253.754508][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 253.754526][ T32] ? __switch_to+0xc89/0x1420 [ 253.754554][ T32] ? __pfx_kthread+0x10/0x10 [ 253.754572][ T32] ret_from_fork_asm+0x1a/0x30 [ 253.754599][ T32] [ 253.754606][ T32] Sending NMI from CPU 0 to CPUs 1: [ 253.754634][ C1] NMI backtrace for cpu 1 [ 253.754649][ C1] CPU: 1 UID: 0 PID: 14311 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 253.754669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.754680][ C1] RIP: 0033:0x7f97a8061c1a [ 253.754697][ C1] Code: 41 57 41 56 41 55 49 89 f5 41 54 4d 89 c4 55 48 89 d5 53 48 89 fb 48 81 ec 98 00 00 00 48 89 4c 24 20 44 89 4c 24 10 0f b6 03 <85> c0 0f 84 66 02 00 00 48 89 d9 41 be 05 15 00 00 0f 1f 44 00 00 [ 253.754713][ C1] RSP: 002b:00007fffc6407770 EFLAGS: 00000202 [ 253.754729][ C1] RAX: 0000000000000073 RBX: 00007f97a7d5821e RCX: 00007f97a804fe50 [ 253.754743][ C1] RDX: 00007fffc64078f8 RSI: 00007f97a804fab0 RDI: 00007f97a7d5821e [ 253.754756][ C1] RBP: 00007fffc64078f8 R08: 00007f97a7d528c0 R09: 0000000000000001 [ 253.754769][ C1] R10: 00007f97a7d528c0 R11: 0000000009691a75 R12: 00007f97a7d528c0 [ 253.754782][ C1] R13: 00007f97a804fab0 R14: 0000003200000007 R15: 0000000000000007 [ 253.754795][ C1] FS: 00007f97a7ce3c80 GS: 0000000000000000 [ 253.757268][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 254.711321][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 254.720445][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.730492][ T32] Call Trace: [ 254.733763][ T32] [ 254.736688][ T32] vpanic+0x56d/0xa60 [ 254.740672][ T32] ? __pfx___schedule+0x10/0x10 [ 254.745539][ T32] ? __pfx_vpanic+0x10/0x10 [ 254.750072][ T32] panic+0xc5/0xd0 [ 254.753803][ T32] ? __pfx_panic+0x10/0x10 [ 254.758239][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 254.763793][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 254.769186][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 254.775362][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 254.781520][ T32] watchdog+0x1030/0x1030 [ 254.785852][ T32] ? watchdog+0x1c7/0x1030 [ 254.790268][ T32] kthread+0x38b/0x480 [ 254.794332][ T32] ? __pfx_watchdog+0x10/0x10 [ 254.799012][ T32] ? __pfx_kthread+0x10/0x10 [ 254.803623][ T32] ret_from_fork+0x514/0xb70 [ 254.808216][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 254.813333][ T32] ? __switch_to+0xc89/0x1420 [ 254.818032][ T32] ? __pfx_kthread+0x10/0x10 [ 254.822619][ T32] ret_from_fork_asm+0x1a/0x30 [ 254.827385][ T32] [ 254.830686][ T32] Kernel Offset: disabled [ 254.835105][ T32] Rebooting in 86400 seconds..