last executing test programs: 19m36.859956782s ago: executing program 32 (id=2144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x141) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0xd3, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0xf109, 0x2, 0x8, 0x18, 0x9, 0x3, 0x0, {0x0, 0x2, 0x9, 0x800, 0x968, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@gettfilter={0x24, 0x2e, 0x1, 0xc83, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xd, 0xfff1}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r7, r7, 0x0, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@arena={0x21, 0x0, 0x0, 0x40, 0x20400, r3, 0x6, '\x00', r6, r2, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r10, r9}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000480), &(0x7f00000004c0)=r8}, 0x20) close(r8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r9, &(0x7f0000000540)}, 0x20) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r13, 0x2) recvmsg(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x40000001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3d2b759b20bf2636, 0x10012, 0xffffffffffffffff, 0x0) 19m8.178168847s ago: executing program 33 (id=2249): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000001380)={'syztnl0\x00', 0x0, 0xa9, 0x700, 0xcf, 0x2, {{0x2f, 0x4, 0x0, 0x3, 0xbc, 0x64, 0x0, 0x8, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x54, 0xb3, 0x1, 0x4, [{@multicast1, 0x2}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x2}, {@broadcast, 0x4}, {@remote, 0x10001}, {@multicast2, 0xb0}, {@private=0xa010102, 0x6}, {@multicast1, 0x160a}, {@empty, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010101}, {@broadcast, 0x8001}, {@remote, 0xc0e}, {@remote, 0x200}]}, @noop, @rr={0x7, 0x1f, 0xe8, [@multicast2, @private=0xa010102, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000cc0)={@local, @rand_addr, 0x0}, &(0x7f0000000d00)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000dc0)={'ip6gre0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xe, 0xcea4, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x700, 0x80, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e00)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e40)={0x0, @multicast1, @empty}, &(0x7f0000000e80)=0xc) r9 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x6a, 0x4, 0x20000000, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x9, 0x40, @loopback, @private2, 0x8000, 0x80, 0x800, 0x71}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001200)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x1a0, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x14000008}, 0x80) r12 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r13) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, 0x26b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r15, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x1}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r14, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) 13m57.174990336s ago: executing program 34 (id=3076): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x7, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000a40), 0x56) (async) sendmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x600, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0xf}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005"], 0xbc}}, 0x0) 13m56.013883789s ago: executing program 35 (id=3079): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) close(r0) 11m5.541291969s ago: executing program 6 (id=3274): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x8040000}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7911a800000000005501020300000000b70000000000000095000000000000c53300000088000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000314080027bd7000fddbdf25090002007bed7afd000000000800410072786500140033006e6574706369300000000000000000000900020073797a310000000008004100736977001400330070696d72656731000000000000000000df3c51c4acfd4b785ffcde004b8c2f0682f20b108be5edab0c63b748496f98584fead35a4accde32871f2354cdb6bf8c4d15bc010a25343954b536ca7932c30f913ec70dce2015d444c25ff4670d4ecd4f0f13ca998b5d"], 0x60}}, 0x20040004) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000600)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@delqdisc={0x58, 0x25, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0xd}, {0x3, 0x9}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xc7, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}]}, 0x58}}, 0x4000840) 11m4.14568326s ago: executing program 6 (id=3277): sendmsg$xdp(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@dellink={0x60, 0x11, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20, 0x1d600}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffffff00}, @IFLA_CARRIER={0x5, 0x21, 0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1366}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "c859b140b41174a2f5d18568774622b2fceb0f844e42c372ac"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x9c) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0}, &(0x7f00000013c0)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000001400)='ns/net\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b00)={0xffffffffffffffff, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x10, 0x8, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0xb, 0x0, 0xfffffffffffffffe, 0x10}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}]}, &(0x7f0000001540)='syzkaller\x00', 0x16b, 0xed, &(0x7f0000001580)=""/237, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0x6, 0x7, 0xb0e6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40), 0x0, 0x10, 0x6}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 11m2.50952698s ago: executing program 6 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'bond0\x00', 0x0}) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000040)={0x7f, 0x7, 0x3f, 0xb}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x4048800) 11m0.253723462s ago: executing program 6 (id=3284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xb, 0x1, 0xcf) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x24, 0x8}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x26000010}, 0x4840) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x35, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x7, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x2000001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58000000210010002dbd7000ffdbdf2500000000000000000000000001000000640101010000000000000000000000004e2000784e2200050200800001000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="00000000020000000800160003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000006ac0)=[{{&(0x7f00000034c0)={0xa, 0x4e22, 0x7, @loopback, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000003900)=[@rthdrdstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0x950e04620a2148d0}}}], 0x30}}], 0x1, 0x20000020) 10m57.707261423s ago: executing program 6 (id=3288): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x7, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000900), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) r3 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x1, 0x0, 0xc) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf25010076dd08000400ac1e0101080002000100000014000c00fe8000000000000690fb39001e0600060002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xe}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)={0x1b4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xcbaf919d7385f1bf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x78, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffff52}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20004010}, 0x40001) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', {}, 0x7fff}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42118, 0x42002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) 10m56.698290434s ago: executing program 6 (id=3292): unshare(0x6060600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, 0x0, 0x0, 0x4}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000002c0)=0x48d, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) (async) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="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", 0xff6a}], 0x1}}], 0x1, 0x34001401) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814) 10m40.855039156s ago: executing program 36 (id=3292): unshare(0x6060600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, 0x0, 0x0, 0x4}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000002c0)=0x48d, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) (async) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="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", 0xff6a}], 0x1}}], 0x1, 0x34001401) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814) 9m24.180194383s ago: executing program 3 (id=3370): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="6b3e99e411", 0x5, 0x40051, &(0x7f00000001c0)={0xa, 0x4e21, 0x24d, @private1}, 0x1c) r3 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) write$cgroup_devices(r3, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) 9m23.36545508s ago: executing program 3 (id=3373): syz_emit_ethernet(0x1016, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) 9m22.970316851s ago: executing program 3 (id=3375): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 9m22.121253899s ago: executing program 3 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x6af) ppoll(&(0x7f0000000040)=[{r1, 0xa0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001000000014000000"], 0x0, 0x36, 0x0, 0x1}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 9m19.637593609s ago: executing program 3 (id=3379): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000a4a2bbbbbbbbbbbb080045c0002c0000e0000f119078f8000000000000000000000100189078e18f13f118c979b37e1970e3c3d602de"], 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "905ebacafd0f1d5dedaaae2a82121693c81e9e53c50e40e3", "f0804732012f81a9c02f14f7db06e894a2d7434f8f7acb89b7c07364b35d108d"}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x10) 9m18.781822303s ago: executing program 3 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000080014002d", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x800) 9m2.811747923s ago: executing program 37 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000080014002d", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x800) 8m19.809036076s ago: executing program 7 (id=3412): r0 = socket(0x28, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket(0x28, 0x5, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) 8m18.285458432s ago: executing program 7 (id=3413): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x8, 0xff, 0x21, @mcast1, @private0, 0x80, 0x40, 0x9, 0x1}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 8m16.584231562s ago: executing program 7 (id=3414): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000180)=0x40, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="443d07c6d16e3f113ee5ccc74f000000c7fb35f658ca32f9ca5e1d34d5907544f36e16e8dc6b9b47", 0x28}], 0x1, &(0x7f0000000340)=ANY=[], 0xc}}], 0x1, 0x8014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 8m16.026659283s ago: executing program 7 (id=3415): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\'&*}\x00', 0x8800, &(0x7f0000000040)={@align=0xe4, {0x3, 0x4, 0x401, 0x8000}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x768}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\'&*}\x00', 0x8800, &(0x7f0000000040)={@align=0xe4, {0x3, 0x4, 0x401, 0x8000}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x768}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc4014}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20020804) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20020804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040081}, 0x20008090) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8807}, 0x8044) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8807}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x40104) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x1409, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x4000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b80)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000e00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1e0, 0x2a, 0x2, 0x70bd28, 0x25dfdbfe, {0x20}, [@typed={0x5, 0x36, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0xf8, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @pid=r7}]}, @nested={0xfb, 0x48, 0x0, 0x1, [@generic="203af1258879eaf137f5ff8ece9c6ebbd203fae66add6b39ab477ab40a105c295432de07130b4a9b02a6ca2e62f6f434b53c4a67d3f417af7d31aaa2ba469cd3531d7cd56b9ddf5c251311aeb5287c12eeae593816b8cb5aace2dbade38b2660f38c79cb88e7efb4f055a70b55905e9689618c72d8a1399d764a81fe663e157a3a6bf16d555851684f5de141f592b54de8652e63780e2fcf98651cfce0d8cfa3605185398a3c8cb4cdb6f0780bb00cf386c8aeebf58187ff39c6d081bc02b4bffd044d6ab84056582497bac485dc35b1e9d93c6d2497362c12d95c7e9ee322c8cee1aa26c7b3148a40436b36bfda3f070af00f6a8032f2"]}, @generic="36ffc2d2e5e4cb33f94b5b73cc09ee074ec693a498553358e2c7b7f9356635c9e272be1e6eab9eca9c7ca91a53517111100239bc826863ff36521e6980bfd8c8067eff999ffa4923afa4ed859277b696ed2e409b0644562e53d1244cb2f401de8d66cc5c58f8773471e050aa6c9339faa608cf3a4671722e520a05f31a59c0ac59f1e66c596809a555e456529b4ef6e0e822f9c7236d27f9ae881048c6fa22ffed8fbccac7c041db6a52071ab5c368c52b", @nested={0x8, 0x9d, 0x0, 0x1, [@nested={0x4, 0x47}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x20) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000895}, 0x4004803) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000895}, 0x4004803) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x8c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44040}, 0x40000) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x8c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44040}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2fc, r10, 0x308, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff60}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "8cb6d2724f661b52cc4cc40ca9eef3f9b95cde1fcf7452122314df552e072d07ee53585380b501027286babdd37cd0b5b66633df44b73f41f9f2c325ce3b57ebd1deb7a28fd613975b626945fd908dd24f570f70f92639b57ad35fe1659c4f9bf6797cc31d2e1e4cffab39bfbca2a8c1f15cd15aea66111b57557ef18b2fd2e781f155f5d40ed6f93421ef5743b863a092b737e18242bebeddba38e4a7286a4071a016a3"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "16c6f1d4f3668f938d1b7ab31c58bbe0ea3a363661b385d9f247e2051d9185a6fd6f0a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27b8ca0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe01}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r11 = socket(0xb, 0x800, 0xfffffffe) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001580)={0x8021, 0x1}) ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f00000015c0)='virt_wifi0\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001600), 0x3) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r13, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x20004800) 8m14.857658776s ago: executing program 7 (id=3416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x81, 0x14, &(0x7f0000000200)="1f00d10000000000", 0x8) (async) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000700)={r3, 0x3}, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000400)={0x0, 0x8003, 0x1}, &(0x7f0000000440)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000600)=0x401, 0x4) connect$inet6(r6, &(0x7f00000006c0)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c) (async) shutdown(r5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f00000004c0), 0x4) (async) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000640)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000680)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) (async) recvmsg$unix(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r11, 0xe44a0000) (async) close(r11) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r13, @ANYBLOB="0000000000000000c300e8010000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r12, 0x40186f03, &(0x7f0000000040)={0x5, 0x14, 0x0, 0xfffe}) (async) splice(r5, 0x0, r4, 0x0, 0x800, 0x0) 8m13.571512377s ago: executing program 7 (id=3417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x20008060) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d300000006d6f0078c04fd4c083261d13cee6f340275d"], 0x34}}, 0x20042000) 7m57.71942297s ago: executing program 38 (id=3417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x20008060) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d300000006d6f0078c04fd4c083261d13cee6f340275d"], 0x34}}, 0x20042000) 3m10.407504467s ago: executing program 4 (id=6397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}, 0x0, 0x7ffe}, 0x90) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x114}, {&(0x7f0000000540)={0x85, 0x16, 0x100, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x46, 0x0, 0x0, @ipv6=@local}]}, 0x18}], 0x2, 0x0, 0xfffffffffffffed7, 0x240084d5}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x3, 0xfffffffb, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x141) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000240)="faffffff", 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xc0802, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000300)=0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000003c0)=0x240089c) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000440)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r6, &(0x7f0000000480)=[{&(0x7f00000004c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000100)=""/46, 0xffffffffff600000, 0x1000, 0x0, 0x1}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r10, 0x0, 0x0) 3m9.971615201s ago: executing program 4 (id=6403): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410aced11b8fdfc60830000000000000000000000000001"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) 3m9.798809491s ago: executing program 4 (id=6406): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r2, 0x118, 0x2b, 0x0, &(0x7f0000000400)=0x46) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061117c0000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00'}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000580)="ff71caef96bb3b626bea043dac98131972e54fa305da7fad4a370eeb37bf051339876c4079664323c8f5ebe0d5448d63d029e71205e19fd208c9a766001dabd9289804e182353c9a588cc8e000469841311b98e213c291e398d992ff24a68026f509abd0ddc58867c9a142c5d02720f53e0403dea19ecffabf2e8f41517b4bafb128d10f91d3252d187f7450017eae00e42a93483b805001987a048159eda03560939cb36a2c9e441c3fc1", &(0x7f00000001c0)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240), &(0x7f0000000280)=""/6, 0x2}, 0x20) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000640), 0x3) (async) getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, &(0x7f0000000680)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}]}, 0x2c}}, 0x20000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r1, &(0x7f0000000380), &(0x7f00000003c0), 0x2}, 0x20) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x3c) 3m9.217452843s ago: executing program 4 (id=6409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x10000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m9.004960679s ago: executing program 4 (id=6412): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r6, &(0x7f0000000540)=[{{&(0x7f0000000580)=@tipc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000880)=""/4081, 0xff1}, {&(0x7f0000001880)=""/251, 0xfb}, {&(0x7f0000001980)=""/52, 0x34}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(r6, &(0x7f0000001ac0)=""/7, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback}}}}}}, 0x66) ioctl$NS_GET_OWNER_UID(r0, 0x8008b70d, 0x0) 3m8.628890067s ago: executing program 4 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000002c0)="2c00000027000100010000000000000004010000180001800800010004000000080002000300000004000300", 0x2c) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x80080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x40, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f400"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async) syz_emit_ethernet(0xa7, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x1d}, 0x20) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) (async) close(0x3) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="03002bbd7000fddbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="0480"], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000008f10c01e4945bbcb8894", @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r14, &(0x7f00000001c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7d931bbd03ee29f739c7ed15d8524164b454bde16c22519d942dfcb94126", @ANYRES16=r15, @ANYBLOB="010025bd7000fedbdf2507000000080007000a01010108000800ac14143508000c000200000006000b002900000006000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048024}, 0x24000851) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f00000022c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0xffffffffffffff97, 0x10, &(0x7f0000002340), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) 2m53.208016237s ago: executing program 39 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000002c0)="2c00000027000100010000000000000004010000180001800800010004000000080002000300000004000300", 0x2c) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x80080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x40, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f400"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async) syz_emit_ethernet(0xa7, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x1d}, 0x20) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) (async) close(0x3) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="03002bbd7000fddbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="0480"], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000008f10c01e4945bbcb8894", @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r14, &(0x7f00000001c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7d931bbd03ee29f739c7ed15d8524164b454bde16c22519d942dfcb94126", @ANYRES16=r15, @ANYBLOB="010025bd7000fedbdf2507000000080007000a01010108000800ac14143508000c000200000006000b002900000006000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048024}, 0x24000851) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b700000064000000bca3000000000000240300001afeffff720af0fff80200ff71a4f0ff000000001f030000000000002e040200000000002604fdffffff000a6114080e000000001d430000000000007a0a00fe003d001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa035f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6d46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16fe8ddf44572a3996e7f653da18ec0ae564162a27afea62d84f3a10076443d601009393bf52d2105bd901128c7e0ec82701c8204a09eeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081dad507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39b21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6e78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b2045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98812106dec28eaeb883418f5624e93aca9e560efa826e5d0c4bd26ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ffc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2540d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d5ef903a554d651186a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a687b8bd9259bc31b6b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f692192571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09d28c853c28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5cd2baf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a896192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b37463f000000a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12b92d7ae633d44086b3f03b20d54abc46271a30f1240fc52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434000000000000000000000000000000000021000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73943df80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c2f63453c7e228919b7500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b512e34182084a3a3b2beb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a316572e92d44ca450b1457c64baeaf8d23f30097126ef7586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd630780d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddffff070000d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267c451ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d00000000caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af620000232ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe88100000000000003568bbc2f89596ceacbcbd1c76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0044f57d15e37e34fc5915499b88ae780a7bae4df603bd3c72808cf300440b1b63615b454a161d5fc1d1308f39b3aff5c03eef2e63a013f8a5bf4da6aa1b7d5ec55e8c7a0405fe718e42d4d613f992a0cbc16cb251386acae02f665544c9c02adae5839f1e00006e42fc051a0cb8685667c2edf4522f0f2a8eb7c7b56063a959c4b881e3dbff3c911435e84bc57f36afb8ff78168719dc5ed47eb309f8a12db461beffd0d091a132330579c9afac1a4ad2794987927eb61ad82a61a144d33283eaeda4836a684a6e2716d83e60f5e0e1ab6376960224dc96c839a1fef49475cc0e3053eeb4aebd0e1696f20d458f1aac2d2d871221d3a2d0e1790584ba14b9145a3f81298ae7871f0191a740a8e53b0b6f152dc4d8f28eaa2a5acadd2313f55287aa6ea469b90575839cd763b4703e87fbd6bd134c2cb62996c5d28e73df35744f19143c0b57a26d692dd9a5cf3ab615e432e38b0cbbcced5c39a73fc8e50e6590605cc0b7db1dbca3ea6fbcdff0e18fdeeb5360642d77171433e78bd9300fd171fc83700f0e92b116e7846719eecd94331354b35b9aac42b34fac350decfe5c2eac926f0a007cb6e3bda3effb84b4607468aaad19dcf0d54e5f4ed4ade1fca17d39be192a10516fb34eb6cde71136bb2b4ce1306c17744fefc2b884bdfebad173147780d8b0129f194a60ed6935400000000000000000000000000000000000000000000000000000000000004c8653a0befb2c2795c52e0efae157f1bb138dc7f7d566c964ecfaf388bd173e0174bc5a49d0595de6e1cb51ead265b156412045a00f396d3e180a71897028714e8730d44895d12589a2e0d8d7e4e6f03633ef0f714edad8a2515ac4886efe8c5e006ef4638a4c52577e7d04c2ca9b714aaabde444490ff17d8baad3e65a716a16492b9a887613426ef82e371f531f18d48a4dee61380595792dc07194a4184a76e1e5d1cb39e58f391af74825f4893f063ac0c722bd6e162b8e7ac7a0f7eb13b5267335fd87e13dda7aa19157a0a1a1c2905358c8fc2cd066ea0680b013109f06c293eb1867fbf919fa12364f5ca680bc96cc326e5d757305595bc124b824897524cdcf000000000000"], &(0x7f00000022c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0xffffffffffffff97, 0x10, &(0x7f0000002340), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) 2m45.057301801s ago: executing program 9 (id=6623): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="1c", 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="e499", 0x2}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff27, 0x0, 0xfc65}, 0x97908f59f534b920) sendmsg$inet(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="04", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/247, 0xf7}], 0x1}, 0x40000122) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x20004014) 2m44.67329642s ago: executing program 9 (id=6626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r3, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c19d52276"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020027bd7000fedbbc25270000000c009900070000002e000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 2m44.50491281s ago: executing program 9 (id=6628): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getpeername$inet6(r1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) 2m43.265354553s ago: executing program 9 (id=6636): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 2m42.627703197s ago: executing program 9 (id=6642): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000003c0), 0x4000000000001f2, 0x0) (async) sendmmsg(r0, &(0x7f00000003c0), 0x4000000000001f2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f00000000c0)="d087ffd0f92c5405a2e0e68e229a271b7604c03b") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m42.309110397s ago: executing program 9 (id=6647): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bond\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x55, &(0x7f0000000340)=0x7, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x5, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x9, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x592, [{0x2, 0x1, 0x5, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 2m27.298022238s ago: executing program 40 (id=6647): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bond\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x55, &(0x7f0000000340)=0x7, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x5, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x9, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x592, [{0x2, 0x1, 0x5, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 9.560038131s ago: executing program 1 (id=8184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x620, 0x370, 0x0, 0xffffffff, 0x228, 0x0, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x48, [0x9, 0x2], 0x4, 0x8, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @local, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2], 0x10}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x19, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@local, @icmp_id=0x68, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xed3e, 0x5], 0x3, 0x10, 0x2}}, @common=@hl={{0x28}, {0x3, 0x81}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@empty, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0xff9c}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffff00], 'syzkaller0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x4, 0x1, 0x33e5ce16214d272e}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv4=@rand_addr=0x64010100, @icmp_id=0x65, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@multicast1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x67, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="400100001a000700feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00fffeffff"], 0x140}}, 0x844) 9.453651261s ago: executing program 1 (id=8187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r2, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0xc88, 0x65, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x1}, {0xfff3, 0x2}, {0x3, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc5c, 0x2, [@TCA_U32_POLICE={0x80c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x3, 0xb, 0x6, 0x72, 0x1, 0x7fff, 0x9, 0xf03, 0xf, 0x6, 0x6, 0x2, 0x3, 0x4, 0x7fff, 0x4, 0xfffffffb, 0x10000, 0x1, 0xd, 0x9, 0x4, 0x9, 0x3, 0x2, 0xfffffff7, 0x7, 0x9, 0x200, 0x4, 0x7, 0x3, 0x3b8c2395, 0x6, 0xd4bb, 0x3a28, 0xfffffbff, 0x80000001, 0x7, 0x8, 0x0, 0x7fffffff, 0x3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x3, 0x2, 0x5, 0x0, 0xc96, 0x9, 0x2, 0x6, 0x7fff, 0x605, 0x9, 0x9, 0x8, 0x3, 0x14, 0x3, 0x9, 0x3, 0x2, 0xf, 0x6, 0x2, 0xff, 0x2, 0x1000, 0x6, 0x5, 0x9, 0x3, 0xd2, 0x101, 0xff, 0x9, 0x3, 0xfffffffe, 0x0, 0x1000, 0x7f, 0x1, 0xff, 0x8, 0x80000000, 0x8001, 0x1e6, 0x1, 0x5, 0x4, 0x4, 0x9, 0x3, 0x18, 0x10001, 0x8, 0x10001, 0x7, 0xffffffff, 0x3ff, 0x8e2d, 0x1a48, 0x800, 0xc, 0x12, 0xa, 0x4, 0x100, 0x1aa, 0x6, 0x3, 0xc3, 0x8, 0x8000, 0x8, 0x2176, 0xd70f, 0xa, 0x5, 0x7, 0xe2, 0x2, 0x9, 0x10000, 0x8, 0x563, 0x1e, 0x0, 0x401, 0x3, 0x5, 0x708f, 0x7, 0xffffffff, 0x852f, 0x5f1, 0x100, 0x4, 0x5, 0x7, 0x6, 0x9, 0x80000001, 0x800, 0x1, 0x6, 0xaa4, 0x3, 0x3, 0xfffffc01, 0x7f, 0x1, 0xba8e, 0x1, 0xffff8000, 0xffff3627, 0x800, 0x9, 0x3, 0xfffffffb, 0x0, 0x9, 0x6, 0x1, 0x6, 0xe, 0x7, 0x7, 0x1, 0x2, 0x5, 0x80, 0x80, 0x0, 0x4, 0x8e30, 0xb, 0x200, 0x4, 0xfae, 0x8000, 0x8, 0x10000, 0xfffffffc, 0x4, 0xfffffff8, 0x369, 0x9, 0x57ed, 0x3, 0x0, 0x4c07, 0x7, 0x0, 0x80, 0x10001, 0xfffffffc, 0x3, 0x2, 0xd7, 0x5, 0xb, 0x3, 0x5, 0x9, 0x1, 0x0, 0x10, 0x1, 0x4, 0x7, 0x200, 0x2, 0x3, 0x8, 0x3ff, 0xffff, 0xb, 0x9, 0xbd, 0x7, 0xfffffffb, 0x423d, 0xfffffffe, 0xc6b2, 0x4, 0x8, 0x6, 0x9, 0x6, 0x2, 0xa, 0x2, 0xe, 0x7, 0x6, 0x7, 0x4, 0x7fff, 0x1, 0x932, 0x4, 0x101, 0x12a, 0x6, 0xfffff77b, 0x3, 0xffffff0d, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x80000001, 0x80, 0x1, 0x9, 0x5, 0xffff, 0x3, 0x36, 0x5b, 0x9, 0x9, 0x8, 0x5, 0x3, 0x0, 0x1, 0x128, 0x1000, 0x1, 0x7757, 0x5, 0x0, 0x6, 0x1, 0xfffffff9, 0xb, 0x9, 0x9, 0x4, 0xff, 0xb, 0x100, 0x7fffffff, 0x9, 0x5, 0x1af3, 0x0, 0x2, 0x5, 0xfffffff9, 0xfffffffc, 0xfffffff8, 0x2, 0x688f41ed, 0x2, 0x2, 0x6, 0x1, 0x8000, 0xfff, 0xfffff800, 0x1, 0x401, 0x602, 0x9d4, 0xffffffff, 0x61, 0x1, 0x7, 0x1, 0x30, 0x9, 0x8, 0x1d74, 0x7, 0x8, 0x7, 0x9, 0x161, 0x4, 0x4, 0x22, 0x6, 0x101, 0x8, 0x80000000, 0x2, 0x1, 0x40, 0x2, 0x0, 0x5, 0xe3e, 0x400, 0x3ff, 0x7, 0x80000000, 0x0, 0xffff, 0x1, 0x69, 0xb8c9, 0x0, 0x1, 0x84, 0x8, 0x0, 0x6, 0x80, 0xf5a, 0x2, 0x173f, 0x22d5, 0x5, 0x0, 0x10, 0xa9, 0xfffffffe, 0x4, 0x3, 0xc2, 0x8000, 0x1, 0x6, 0x8, 0xd, 0x7, 0xdf, 0xfffffffe, 0x46000000, 0x4, 0xffff, 0x1000, 0x10001, 0x2a83, 0x1, 0x0, 0x1, 0x9, 0x23, 0x3, 0x6, 0x3a8, 0xc, 0x1, 0x81, 0x87, 0x1, 0x1000, 0x6, 0x4, 0x1, 0x7fff, 0x3ae877e1, 0x15e3, 0x2, 0x10001, 0x3, 0x8001, 0x1, 0x66, 0x6, 0x7, 0xffff, 0x3, 0xfff, 0x9, 0x546f, 0xb, 0x1, 0xaf44, 0x6, 0x1, 0x8, 0x1, 0x47363338, 0x4, 0x6, 0xf, 0x10001, 0x3, 0xfffffffa, 0x6, 0x0, 0x6, 0x8, 0x3, 0x888, 0x5, 0x5, 0x5af91a6f, 0x1, 0x3ff, 0xcfb4, 0x8ade, 0x7955, 0xa1, 0x9, 0x3, 0x6, 0x200, 0x6, 0xdd3b, 0x80, 0xf9bb, 0x401, 0x5, 0x8, 0x40, 0xfffffff7, 0x3, 0x4, 0x1, 0x5, 0x1fbf97d3, 0x3, 0xf9a5, 0x7, 0x7, 0x9, 0x2, 0x1d, 0x6, 0x7ff, 0x5, 0x4, 0x8, 0x9, 0x1, 0xc, 0xfb, 0xffffbfb0, 0x100, 0xdc400000, 0xffff6c63, 0xfffffffd, 0x400, 0x6e, 0x9e1, 0x833f, 0x49369800, 0x1, 0x3, 0xfffffffa, 0x40, 0x7, 0x0, 0xd, 0x1, 0xfffffcb5, 0x5, 0x2, 0x6, 0x7, 0x9, 0x2, 0x3fff80, 0x0, 0x6, 0x7, 0x2, 0x4, 0x8, 0xffffffff, 0x7fff]}]}, @TCA_U32_POLICE={0x42c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x61}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xec, 0x3, 0x3, 0x0, 0x2, 0xd, 0xba2, 0x8000, 0x7, 0x2, 0x6, 0x1, 0x2, 0x1, 0x7, 0x80000001, 0x3, 0xfffffffb, 0x8, 0x2, 0x0, 0xc3e, 0x3, 0x3, 0x3, 0x9, 0xe08, 0xfff, 0x2, 0x0, 0x3, 0xc, 0x7f, 0x80000001, 0x5, 0xf14, 0x5, 0x1000, 0xee9e, 0xf7cb, 0x0, 0xffff166e, 0x3, 0x4, 0x800, 0xf42d, 0x6, 0x9, 0xffffffff, 0x4, 0xfffffffb, 0x8b8e, 0x8000, 0x1, 0x9, 0x7fffffff, 0x0, 0x6, 0xffffffff, 0x5, 0x800, 0x3, 0x2, 0xd64, 0xffff, 0x8001, 0x0, 0x1000, 0x6b, 0x6, 0xff, 0xfffffffa, 0x3, 0x9, 0x200, 0x7, 0x2d1, 0x1, 0x88f1, 0x80000000, 0x4, 0x80, 0xced, 0x9, 0x1, 0x4d7, 0x6, 0xf6f, 0xc, 0x7, 0x8, 0x72, 0xf3b6, 0x7ff, 0x644c, 0x2, 0x6, 0xffff, 0x3ff, 0x100000, 0x0, 0xffffffff, 0xc, 0x4c, 0x3, 0x67d, 0x6, 0x0, 0xfffffff7, 0x5, 0x8001, 0xfffffff9, 0xfffffffc, 0x7, 0x1, 0x7f, 0x200, 0x5, 0x100, 0x7f35, 0x1, 0x6, 0x3, 0x4, 0x2, 0x0, 0x8001, 0x10, 0x8, 0x0, 0xffff, 0x8, 0x6, 0x7, 0x7, 0xebf80, 0x2, 0x7, 0x1, 0x5, 0x3, 0xa, 0x200, 0x0, 0x7, 0x3, 0x7fff, 0x7, 0x10000, 0x5, 0x0, 0x80000000, 0x1, 0x3, 0x8, 0x0, 0xfffff5e0, 0x4c, 0x0, 0x6, 0x6, 0x8, 0x800, 0x1ff, 0x10000, 0x7e5, 0xffffffff, 0x4, 0x9, 0x5, 0x200, 0x9, 0x2, 0x7, 0x9, 0x135c, 0x5, 0x6, 0x71c9bc1b, 0x0, 0x5, 0x5, 0x100, 0x4, 0xff7c, 0x2, 0xfff, 0xa, 0x8, 0x7, 0x40, 0x5, 0xfffff000, 0x7e5a, 0x7, 0x1, 0x3, 0xbce6, 0x7, 0x9, 0x8, 0x8, 0x4, 0x8, 0x0, 0x40000000, 0x10000, 0x100, 0x0, 0x1, 0x9cd5, 0x8, 0x1, 0x0, 0xb, 0x7ff, 0x5, 0x1, 0x10, 0x8001, 0xf, 0x0, 0x7df, 0x5584, 0x401, 0x9, 0x5, 0x51d, 0xeb2, 0xfffffff8, 0x800, 0xffffffff, 0xffff, 0x0, 0x80, 0x7, 0x9, 0xfffffff9, 0x3a9, 0xc4, 0xa, 0x4, 0x7, 0x5, 0x4, 0x8, 0x0, 0x0, 0x1fffc0, 0x0, 0x3, 0x1, 0x0, 0xffff4c47, 0x33f8, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_U32_LINK={0x8, 0x3, 0x200}, @TCA_U32_MARK={0x10, 0xa, {0xffffffce, 0x20000}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0xc88}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.151380835s ago: executing program 1 (id=8192): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x20, 0x0, 0x0, 0x800, 0x1}, 0x48) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004a40)=""/14, 0xe}], 0x1, &(0x7f0000000140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000001300)=""/123, 0x7b}, {&(0x7f0000001380)=""/136, 0x88}, {&(0x7f0000001440)=""/33, 0x21}, {&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/14, 0xe}, {&(0x7f0000001580)=""/44, 0x2c}], 0x7, &(0x7f0000001640)=""/43, 0x2b}, 0x9}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001700)=""/157, 0x9d}, {&(0x7f00000017c0)=""/24, 0x18}, {&(0x7f0000001800)=""/22, 0x16}], 0x3}, 0xf}, {{&(0x7f0000001880)=@nfc_llcp, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/174, 0xae}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/31, 0x1f}, {&(0x7f0000002a00)=""/91, 0x5b}, {&(0x7f0000002a80)=""/241, 0xf1}], 0x5, &(0x7f0000002c00)=""/252, 0xfc}, 0x657}, {{&(0x7f0000002d00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/237, 0xed}, {&(0x7f0000002e80)=""/11, 0xb}], 0x2, &(0x7f0000002f00)=""/2, 0x2}, 0x17c7d216}, {{&(0x7f0000002f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000004580)=[{&(0x7f0000002fc0)=""/4088, 0xff8}, {&(0x7f0000003fc0)=""/210, 0xd2}, {&(0x7f00000040c0)=""/99, 0x63}, {&(0x7f0000004140)=""/91, 0x5b}, {&(0x7f00000041c0)=""/166, 0xa6}, {&(0x7f0000004280)=""/237, 0xed}, {&(0x7f0000004380)=""/166, 0xa6}, {&(0x7f0000004440)=""/220, 0xdc}, {&(0x7f0000004540)=""/33, 0x21}], 0x9, &(0x7f0000004640)=""/140, 0x8c}, 0x7fff}, {{&(0x7f0000004700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)=""/118, 0x76}, {&(0x7f0000004800)=""/96, 0x60}, {&(0x7f0000004880)=""/92, 0x5c}], 0x3, &(0x7f0000004940)=""/241, 0xf1}, 0x800}], 0x7, 0x10120, 0x0) 8.89305494s ago: executing program 1 (id=8195): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffdf8, 0x1c3ff}]}}) 8.854086122s ago: executing program 1 (id=8197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "00001200", "edfc4a7c2853770307e48bfdb8644800", "6eb4a89a", "c277dbc4b45a157c"}, 0x28) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 8.512022285s ago: executing program 1 (id=8203): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000049000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001408000"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.238111221s ago: executing program 2 (id=8295): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) 2.223905114s ago: executing program 8 (id=8296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}]}, 0x104}}, 0x20000800) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x6}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0xd}, 0x94) 2.048927651s ago: executing program 2 (id=8298): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000180)={'tunl0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r2, &(0x7f0000000480)={0x18, 0x0, {0x1, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x5) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/169, 0xa9, 0x0, &(0x7f0000000680)=""/7, 0x7}, &(0x7f00000006c0)=0xffffffffffffff8b) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4048940) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000700)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f00000001c0), 0x12) (async) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000500)='5', 0x1}], 0x1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x7, 0x81, 0x10001, {0x77359400}, {r11, r12/1000+60000}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "809f72717fd36f2b385793dd85c81aa6025bda5fbd7ea284a0db197dbc2a93d553cf050551c7774d3518b3c609966323d00db03531d2844ca30ba42fe0c12dbe"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x97ab, 0x57}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008081) 2.046220139s ago: executing program 8 (id=8299): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x1, @in={{0x2, 0x4e22, @multicast1}}, 0x100, 0x6, 0x0, 0x100, 0x28, 0x0, 0x4}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x400, 0x7, 0x80}, 0x10) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000140)='\x00', 0x20400, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x8]}, {0x3, 0x9, 0x8, 0x103}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xffffffc0}) (rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000380)=0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x4c, 0x66, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {0xf, 0x4}, {0x0, 0x10}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x773}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5a11fe888ff44f63}, 0x4801) (async) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4) (async) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000640)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000680)) (async) r6 = accept4(r2, &(0x7f00000006c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000740)=0x80, 0x80000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x57}, @IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24002001}, 0x8000) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000940)=r3, 0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000000980)={r3}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a00)={r7, 0x800, 0x7, 0x665, 0x27a1, 0xd9}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CT={0x3c, 0xb, 0x0, 0x1, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_PAYLOAD={0xe, 0xa, "1cfbc0b7500a7bf0dd8c"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f0000000b80)={r3, 0xffffffffffffffff, 0x800}, &(0x7f0000000bc0)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000c00)={r7, 0x738, 0x20, 0x3, 0x7f}, &(0x7f0000000c40)=0x18) (async) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_SET_RESBLKS(r11, 0xc0105872, &(0x7f0000000c80)={0xff, 0xfff}) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd25, 0x25dfdbfd, {0x2, 0x80, 0x4a6370cde38ab4ad, 0x6f, 0x4, 0x0, 0x0, 0x8}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c144}, 0x5417a9993df955b8) (rerun: 32) r12 = socket(0x17, 0x80008, 0x7) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r12, 0x84, 0x81, &(0x7f0000000dc0)={r1, 0x10}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000000e00)={r3, @in6={{0xa, 0x4e24, 0x57e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}}, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000ec0)={r9, 0xcf1, 0x30, 0x44f7, 0x2}, &(0x7f0000000f00)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000f40)={r3, 0xffffffffffffffff}, &(0x7f0000000f80)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000000fc0)=@sack_info={r9, 0x7, 0x9}, &(0x7f0000001000)=0xc) 1.789686244s ago: executing program 8 (id=8300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000740), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f00000002c0)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/17], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x29c, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12420}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond0\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}]}, @IFLA_VFINFO_LIST={0x1f0, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xcea, 0x97}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x101, 0x8001}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9ab, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xe48, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1905, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x2ff}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x1a0000, 0x8}}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xfbc, 0x51a, 0x88a8}}, {0x14, 0x1, {0x80000000, 0xee1, 0x10, 0x8100}}, {0x14, 0x1, {0x7ff, 0x57f, 0x6, 0x9a8}}, {0x14, 0x1, {0x0, 0x452, 0x9, 0x8100}}, {0x14, 0x1, {0x8, 0x43c, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x5e8, 0x6, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80001fe, 0xfffffffffffffc01}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x101, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffffffff, 0x7ff}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x43b, 0x9, 0x88a8}}, {0x14, 0x1, {0xfffffffc, 0xef1, 0xba4, 0x88a8}}, {0x14, 0x1, {0x4, 0x7e9, 0x9, 0x8100}}, {0x14, 0x1, {0x0, 0x479, 0x7, 0x8100}}]}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xa}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xba}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x87}, @IFLA_LINK_NETNSID={0x8}]}, 0x29c}}, 0x20004800) 1.616138015s ago: executing program 8 (id=8302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) listen(r0, 0xfffffffd) (async) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef40900008800b791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 1.496790074s ago: executing program 8 (id=8304): r0 = socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x0, 0x28, [0x3, 0x5, 0x6, 0x7], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000100)=0xc) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000d80)="b3240ee41e66b3e87ad0939dc681875a8958bd0cffb1fa0730a8b8f32f75cf4683268b2634064ef6e6ec3044170b1cbb01d5797c00b80875567db29a3758229721da090a709b896aeee368bdf643a4221ff0923ae9dd18c446bc3bc77fa98fc81db846c038d2d8114054d14fa6a4cd4b4a37e177313adf864e21efcbf6c12a8d1c5d16fd990e8c9a0e9a35e6c7011ec0c83f63c5bd14bb727b3c353e6b2d216f00749d3b44da35d4ce8d05a2954bdaf7d9e1d49b3e5b04", 0xb7, 0x4008000, &(0x7f0000000e40)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c40)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000e3048d0c4aacf03a31c6840a92840b3b18d8440e5384c16567db1677bba1d3a3bd00a2309af860e6e5a12326f8fe00ba7e433ad5d84aa9cbbf5845c36aeb62b3411479682da24cc51a550143310fcd8e62a1b8ec3f630274a9e01e4d405a1c104b5a", @ANYRES32=0x0, @ANYBLOB="350e0500630400002400128009000100626f6e64000000001400028008000200", @ANYRES32=r6, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) getsockopt(r4, 0x200000000114, 0x2720, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fbdbdf254f000000080091bb", @ANYRES32=r12, @ANYBLOB="38007a800c000300dededb7db7c468a314000100f7e5bf051f44000000000000f341681614000200838a21a212813aa979a5daf8e45a040d"], 0x54}}, 0x4c840) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="1c005e80080005004d08000008000600020000000800070037030000"], 0x38}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) connect$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0x2a, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000bc0)=""/16, &(0x7f0000000c00)=0x10) 1.216997704s ago: executing program 0 (id=8306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000200)="8c3fdf1ab92621890900002ce7ae56e5bca6520529c2152a05c010850000000013b3823fb8512e6c", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 993.206157ms ago: executing program 0 (id=8308): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x72, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x300}, 0x844) recvmmsg(r1, &(0x7f0000000a80), 0x0, 0x40000040, 0x0) mmap(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r1, 0x6e86d000) 960.068977ms ago: executing program 0 (id=8309): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x400, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0xd, 0x9, 0x4}, {0x3, 0x1, 0x8, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 871.444979ms ago: executing program 0 (id=8310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe44, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080c00500000044478438da5cbd7500000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 641.474331ms ago: executing program 0 (id=8312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)='O', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, [0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5]}, &(0x7f0000000200)=0x100) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b000100"], 0x120}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 640.419298ms ago: executing program 2 (id=8313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40040) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x10, '\x00', @mcast1}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000300)}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008840) 526.126188ms ago: executing program 5 (id=8314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 516.693182ms ago: executing program 0 (id=8315): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00'}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200040c5) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200040c5) 461.461207ms ago: executing program 2 (id=8316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000680)={'lo\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2c, 0x17, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000328bd7000fddbdf254b0000000400ff000400ec000500f60007000000fcd1e34de43934f7bcaaf1e341a4455b7b4fce6721"], 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4008000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001800010400000000000000000a004400fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="20042dbd7000fbdbdf251b00000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800150002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x4000000000001f2, 0xfc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f0000000300)='/\x00', 0x740, &(0x7f0000000480)={@align=0xfffffffffffffff7, {0x1ff, 0x80, 0x6, 0x100000000}}, 0x8, &(0x7f00000004c0), &(0x7f0000000500)=0x7f}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000e80)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) write$nci(r8, &(0x7f0000000fc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @b={0x2, 0x2, 0x5, 0x1, 0x3, 0x4, 0x9, {}, 0x7, 0x8, 0x8, 0x1, 0x7, "f268842e5ed21a"}}, 0x17) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 423.527502ms ago: executing program 5 (id=8317): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x12100, 0x0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b330000000001dcdf2505000c0008000300a1cebe89525cd38da01819ce0e91426660c808c34b2bc1b36fa93b9303", @ANYRES32=0x0, @ANYBLOB="0c0099004000000003000000"], 0x28}}, 0x44000) (async, rerun: 32) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (rerun: 32) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) 292.730522ms ago: executing program 8 (id=8318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f0000000300)={'ipvlan0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f00000000c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r3, &(0x7f0000000140)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{0x0, 0x3, 0x47, 0x8}, {0x7, 0xff, 0x7, 0x3}, {0x6ab, 0x1, 0x7, 0xc}, {0x7f, 0x5, 0xf, 0x7e8d}, {0x5, 0x9, 0x1, 0x4}, {0x3, 0x1, 0x5, 0x4f}, {0x0, 0x8, 0x7, 0x1}, {0x6, 0x6, 0x5e, 0xfffffff7}]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000ec080018000cac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) 177.32616ms ago: executing program 2 (id=8319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000001900)="e6b52e888ad6c6eb92e91ea59d96dfbe3a25e7a8cf32107615e4b5bcd6b2ef9b173e06dad52f918adf493f71cb1dcabd8675a9f0daf9a775b254b0cc15c04030ac46f622c471f6da78c5b7ca32855a6ca2ce94d965449eb9680578bf57e04f5b41a1fdb38f6963cef873763119b6233c977bac15e3917a9ebf9485058545a60e64afd7c45ef3ec27dd7af786bfb073155bcb317c3d2959a9ae4343cae0da92f45bc9ef5a53f773085f4cde54aa65aa2cf854a6f34252950b06bbb65783641866a9b550a2386ddb32603bd8a79a1ebab5bae35472490e8107ed886a5fc67c4840461b4b85957d7fa9ab79feea569ea98cef2551b8d4bc4f2d1d6f2c6deb1f39", 0xff, 0x200080c0, &(0x7f0000001a00)={0x11, 0xf5, 0x0, 0x1, 0x10}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) read(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@private2, @rand_addr=0x64010102, 0x15, 0x1a}}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}}, 0x1c}}, 0x0) sendmsg$inet6(r3, &(0x7f00000018c0)={&(0x7f0000000400)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000440)="392d45524dc7c8c54929b8c7c516ec0438e119cd63562bc87e3cbcab052b081bd34359cc19d1d5e73df6b87174fbf2493fec3394e07dbf7baef4a0115363302f7693cf27d0544f11fe20e071", 0x4c}, {&(0x7f00000004c0)="e68a2eaa33c1e4806a0e419bd6a59ddba62aa16f28321d9e4a85fdc484128cc24be6d804bc5273fe70d3b1b365211bb02ed1f52fbe630235446b08bf76b1b3745a636993b52a5392c1256d1078882e4bd8f85d3cbb38514a17b6f610e8fea7cd2aa6fc5c332a75fa272e5503d9f5cc1be57004d295a0073979b9ec1e92048ef6de2b79128bee79f22c070b1b0591f17c0899b7b082ff6eccd56e063bfcaae4d7deb6b8a4337f61b8ca7d3effeb353f0b5b86adf1983056d3e35820d9c629f57830e1c11dafc740ece49f4711fe8dbc0d383665cbc0e7bcf6d2c2cf2161e7bf9cc4b8bde4ad936230f70943e0111ecf65", 0xf0}, {&(0x7f00000005c0)="c63ac4d0f92696795ed8f0cebecd20a65f3d2831e3f0fb0b739d47656ead2f096b09c8f5e44b3c79e40240bfa2f8303e9a6181d5a47639e98634d168317d4880b76a91", 0x43}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)}, {&(0x7f0000001680)="f2786394b6a120b0fd671212152113fb2ae6cac253c4b6cef3cc2e36147cc45034c08171553976e6fb6151bcd8cbb25930542203072ae66a822aaa39a6b7c3ab67a330052f0d9502d4ff9239af7a6efd0204018194c347f657bf0008255c52d2dec45e7db67add1070407259a703add78108de54267c3aa6611d29b5fa7eef893d6281e6fbdf380d8fb9d798ea9b10c3462c2815a4ac427b0a", 0x99}, {&(0x7f0000001740)="b809bd307878bc9ef4b737e90066f78215fedd28", 0x14}], 0x7, &(0x7f0000001800)=[@hopopts_2292={{0xc0, 0x29, 0x36, {0x62, 0x14, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xfd, 0x96, "8d363e2e9328277dd945da84ec84c0503bcb7139f378cbe47ee6700cd3bdf3634f82888f5e4f604ad07307d444653f9678ffe71648ef50113c05099f00892c62697b8ff40b3bc5e666fa1deef54fdef3989973bf4f1537d2d1e2094a9d84107b5fb9ce2eda6c9d80c46c7193331923e3e0e699a4220750a33da5bb256088b70d898fbc28f02887ca68a1e52e368903139932570a37fb"}, @jumbo]}}}], 0xc0}, 0x24000084) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 176.774784ms ago: executing program 5 (id=8320): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)="cfdfe1f7", &(0x7f00000005c0), 0x41, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x9, r5}, 0x38) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x4076cbba9945d516, &(0x7f0000000780)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r6, &(0x7f0000000900)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f0000000940)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xf, &(0x7f0000000640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0xff, 0x8, 0x3, 0x7, 0xc797}], &(0x7f00000006c0)='GPL\x00', 0x2, 0x3d, &(0x7f0000000700)=""/61, 0x40f00, 0x8, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x5, 0x7fff, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r5, r2], &(0x7f0000000a40)=[{0x0, 0x2, 0x9, 0x3}], 0x10, 0xf9}, 0x94) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x40, 0x68, 0x200, 0x3, 0x80000000, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x3b}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 149.873008ms ago: executing program 2 (id=8321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004060000000000000000", @ANYRES32=r0, @ANYBLOB="f7ffffff00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004060000000000000000", @ANYRES32=r0, @ANYBLOB="f7ffffff00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/146, 0x92}, {&(0x7f0000002f00)=""/87, 0x57}], 0x8}, 0x5}], 0x1, 0x100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000003000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 113.396114ms ago: executing program 5 (id=8322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 731.05µs ago: executing program 5 (id=8323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94d8f5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000408e955667e0060000000000000080bb9ad809d5e1cace81ccd40dd68adbef", 0xcc}], 0x1, 0x0, 0x0, 0x7400}, 0x8815) 0s ago: executing program 5 (id=8324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="280000001c00010028bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000b3020a00020081e03eeb2f9f000038f325cf961cbcca61ef39fd0974f5384f6763e279054d6ae8886b025bb66f433d9490e0348e7e89e2298678ee29f7de6c26ba683d5f0e3982695ec6a2d2951af28a95645a10d7a91b716c29e32346401700870e203b0ab0bcee476b0bebdf6f5f355abdb64161ee5c5214b7f647410409b60c0d9e40c4d3df97164322948b11089a26a77954"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000001d00)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xffff, 0x6}, {0x8, 0x2}}}, 0x24}}, 0x0) sendmsg(r3, &(0x7f0000001e00)={0x0, 0x953a, &(0x7f0000001e40)=[{&(0x7f0000001e80)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) shutdown(r5, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001c80)="974501000000000001008cc5595c4a9b8f52ac8e", 0x14}], 0x1, &(0x7f0000001cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="010000000200000005000000000000000000000000000000000000009ff7c64ce1b6eed237e643b504715a18b28d1a4c673a818c3e"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x541b, &(0x7f0000001a40)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000737a2974f2030349060ed1efec00000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000580)={0x0, 0x8, 0x94, 0x9, @vifc_lcl_addr=@rand_addr=0x64010101, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@newtaction={0x11dc, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x11c8, 0x1, [@m_skbedit={0x1068, 0x5, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7cc}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x15c, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x182}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f, 0x80, 0x1, 0x7, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff7}]}, {0xe5, 0x6, "447dc005b5cf6c1ff7f11650495183b06ecc673cdb499809259d1865daeac67ba2336bc7a6466e91296c5f4ee2cc3d9f70233ff07ce2975613b049229ca87a33f586399ed0a789b45af37fab4ce6a6256be51896db007291320e5669ac32c2fd67794e7df3b67c346519c2f714caee08c23b628ae5dc5906ac959fb140b2d0a1fa84691ae4059bf8d0eeaa404f4a16e3dca846fc05aa7066709bf73621a53db5827a61b935e8ae99152cad65db494d3fec25b3a39070c3d44e0f36253627055a754b148eb8fcd881603e301002eadc738396f88ba59c19a2fe4aa14378d6cf6ab6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x11dc}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r12, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000af00"/72], &(0x7f0000000400)='syzkaller\x00', 0xb}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): 8718][ T2368] team0: Port device team_slave_0 added [ 1555.801895][ T2368] team0: Port device team_slave_1 added [ 1555.847347][ T2368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.847373][ T2368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.847396][ T2368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.849636][ T2368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.849649][ T2368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.849671][ T2368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.923536][ T2368] hsr_slave_0: entered promiscuous mode [ 1555.925508][ T2368] hsr_slave_1: entered promiscuous mode [ 1555.927356][ T2368] debugfs: 'hsr0' already exists in 'hsr' [ 1555.927382][ T2368] Cannot create hsr debugfs directory [ 1556.001245][ T2438] C: renamed from lo [ 1556.002394][ T2438] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1556.228740][ T2368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.228765][ T2368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1556.256967][T24436] Bluetooth: hci1: command tx timeout [ 1556.264482][ T2445] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6522'. [ 1556.477199][ T2457] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6524'. [ 1556.487757][T24436] Bluetooth: hci3: command tx timeout [ 1556.560154][ T2368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.560190][ T2368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1556.621352][ T2457] ip6gre1: entered promiscuous mode [ 1556.621375][ T2457] ip6gre1: entered allmulticast mode [ 1556.715188][ T2464] ip_tables: iptables: counters copy to user failed while replacing table [ 1556.764385][ T2368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.764420][ T2368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1556.892801][ T2469] ip_tables: iptables: counters copy to user failed while replacing table [ 1557.027520][ T2368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.027556][ T2368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1557.055508][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.055560][ C0] bridge0: topology change detected, propagating [ 1557.097528][ T2490] tap0: tun_chr_ioctl cmd 1074025676 [ 1557.097550][ T2490] tap0: owner set to 0 [ 1557.337190][ T2503] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6532'. [ 1557.337222][ T2503] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6532'. [ 1557.380909][ T2368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1557.383600][ T2368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1557.384489][ T2368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1557.408616][ T2368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1557.409276][ T2368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1557.412160][ T2368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1557.413161][ T2368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1557.421075][ T2368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1557.546152][ T2368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.568996][ T2368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.587402][T19247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.587488][T19247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.589102][T19247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.589198][T19247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.692437][ T2521] syzkaller0: entered promiscuous mode [ 1557.692458][ T2521] syzkaller0: entered allmulticast mode [ 1558.148719][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6536'. [ 1558.148752][ T2541] netlink: 'syz.9.6536': attribute type 10 has an invalid length. [ 1558.148766][ T2541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6536'. [ 1558.214064][ T2541] geneve2: entered promiscuous mode [ 1558.214087][ T2541] geneve2: entered allmulticast mode [ 1558.498275][ T2570] netlink: 'syz.1.6540': attribute type 11 has an invalid length. [ 1558.566338][T24436] Bluetooth: hci3: command tx timeout [ 1558.666574][ T2571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1558.709731][ T2368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.737809][ T2582] tipc: Started in network mode [ 1558.737840][ T2582] tipc: Node identity da5cca77d067, cluster identity 4711 [ 1558.737979][ T2582] tipc: Enabled bearer , priority 0 [ 1558.841952][ T2582] syzkaller0: entered promiscuous mode [ 1558.841978][ T2582] syzkaller0: entered allmulticast mode [ 1558.842663][ T2582] tipc: Resetting bearer [ 1558.910713][ T2582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1558.941033][ T2586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1558.992368][ T2586] netlink: 'syz.1.6543': attribute type 4 has an invalid length. [ 1559.016459][ T2586] .`: renamed from bond0 [ 1559.080198][ T2602] macsec1: entered promiscuous mode [ 1559.080228][ T2602] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1559.080440][ T2602] macsec1: entered allmulticast mode [ 1559.080456][ T2602] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1559.081664][ T2602] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1559.123512][ T2581] tipc: Resetting bearer [ 1559.135276][ T2602] Bluetooth: MGMT ver 1.23 [ 1560.039516][T18413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1560.061737][T18413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1560.092339][T18413] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1560.107353][T18413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1560.138280][T18413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1560.649683][T24436] Bluetooth: hci3: command tx timeout [ 1562.247711][T24436] Bluetooth: hci5: command tx timeout [ 1562.725104][T24436] Bluetooth: hci3: command tx timeout [ 1562.910212][ T2581] tipc: Disabling bearer [ 1562.929320][ T2602] pim6reg: entered allmulticast mode [ 1562.929435][T17987] tipc: Node number set to 171690615 [ 1563.042111][ T2368] veth0_vlan: entered promiscuous mode [ 1563.074170][ T2368] veth1_vlan: entered promiscuous mode [ 1563.234995][ T2368] veth0_macvtap: entered promiscuous mode [ 1563.237961][ T2653] netlink: 'syz.1.6553': attribute type 7 has an invalid length. [ 1563.252660][ T2653] netlink: 'syz.1.6553': attribute type 7 has an invalid length. [ 1563.258342][ T2368] veth1_macvtap: entered promiscuous mode [ 1563.281654][ T2652] netlink: 'syz.9.6552': attribute type 21 has an invalid length. [ 1563.293485][T16779] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.303748][T19247] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.306824][T19250] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.307289][T19252] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.331707][ T2368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.343436][ T2368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.358272][ T2652] netlink: 'syz.9.6552': attribute type 6 has an invalid length. [ 1563.358302][ T2652] __nla_validate_parse: 2 callbacks suppressed [ 1563.358315][ T2652] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6552'. [ 1563.396542][T19247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.397406][T19247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.397441][T19247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.397472][T19247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.668697][T25165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1563.668718][T25165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.762590][ T9096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1563.762611][ T9096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.774497][ T2623] wlan1 speed is unknown, defaulting to 1000 [ 1563.788278][ T2623] wg0 speed is unknown, defaulting to 1000 [ 1563.791026][ T2623] lo speed is unknown, defaulting to 1000 [ 1564.290088][ T2710] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1564.304320][ T2710] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1564.326951][T24436] Bluetooth: hci5: command tx timeout [ 1564.493998][ T2722] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6564'. [ 1564.693586][ T2735] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6568'. [ 1564.709293][ T2738] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6567'. [ 1564.767194][ T2623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.770829][ T2623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.770999][ T2623] bridge_slave_0: entered allmulticast mode [ 1564.772737][ T2623] bridge_slave_0: entered promiscuous mode [ 1564.808586][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.808745][ T2623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.808903][ T2623] bridge_slave_1: entered allmulticast mode [ 1564.810392][ T2623] bridge_slave_1: entered promiscuous mode [ 1564.873150][ T2738] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6567'. [ 1564.911144][ T2623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.914413][ T2623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.994273][ T2623] team0: Port device team_slave_0 added [ 1565.003668][ T2623] team0: Port device team_slave_1 added [ 1565.079903][ T2623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.079918][ T2623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.079937][ T2623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.108285][ T2623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.108302][ T2623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.108324][ T2623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.165787][ T2755] Bluetooth: MGMT ver 1.23 [ 1565.165823][ T2755] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1565.302960][ T2623] hsr_slave_0: entered promiscuous mode [ 1565.308362][ T2623] hsr_slave_1: entered promiscuous mode [ 1565.311435][ T2623] debugfs: 'hsr0' already exists in 'hsr' [ 1565.311457][ T2623] Cannot create hsr debugfs directory [ 1565.679413][ T2799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1565.810018][ T2623] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.912356][ T2815] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6586'. [ 1566.070015][ T2623] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.084375][ T2835] netlink: 'syz.8.6590': attribute type 162 has an invalid length. [ 1566.263348][ T2623] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.369094][ T2623] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.405295][T24436] Bluetooth: hci5: command tx timeout [ 1566.441633][ T2850] bond1: entered promiscuous mode [ 1566.441697][ T2850] bond1: entered allmulticast mode [ 1566.442169][ T2850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1566.550560][ T2869] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6599'. [ 1566.642586][ T2623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1566.693866][ T2623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.704827][ T2623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1566.713818][ T2623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.730641][ T2623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1566.758788][ T2623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1566.761172][ T2623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1566.779736][ T2623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1566.997312][ T2623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.048959][ T2623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.101704][T19251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.101813][T19251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.147966][T19251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.148070][T19251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.793084][ T2938] netlink: 'syz.1.6618': attribute type 16 has an invalid length. [ 1567.827903][ T2940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1568.321639][ T2623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.379783][ T2969] netlink: 'syz.8.6624': attribute type 4 has an invalid length. [ 1568.426959][ T2972] __nla_validate_parse: 2 callbacks suppressed [ 1568.426978][ T2972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6626'. [ 1568.485252][T24436] Bluetooth: hci5: command tx timeout [ 1568.722089][ T2981] IPv6: NLM_F_CREATE should be specified when creating new route [ 1569.158576][ T2623] veth0_vlan: entered promiscuous mode [ 1569.182022][ T2623] veth1_vlan: entered promiscuous mode [ 1569.197132][ T3000] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6630'. [ 1569.253082][ T2623] veth0_macvtap: entered promiscuous mode [ 1569.267323][ T2623] veth1_macvtap: entered promiscuous mode [ 1569.293786][ T2623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.308982][ T2623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.338615][ T138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.607061][T19252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.694277][T19247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.696466][T19247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.887522][T19252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.887543][T19252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.901268][ T3018] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1569.922484][ T3019] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1570.108824][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.108847][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.551893][ T3047] netlink: 'syz.1.6644': attribute type 21 has an invalid length. [ 1570.551919][ T3047] IPv6: NLM_F_CREATE should be specified when creating new route [ 1570.552099][ T3047] netlink: 'syz.1.6644': attribute type 1 has an invalid length. [ 1570.573652][ T3048] netlink: 'syz.1.6644': attribute type 21 has an invalid length. [ 1570.573753][ T3048] netlink: 'syz.1.6644': attribute type 1 has an invalid length. [ 1570.712905][ T3058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6646'. [ 1570.713249][ T3058] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6646'. [ 1572.869076][ T3017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1573.039096][ T3073] netlink: 'syz.2.6649': attribute type 23 has an invalid length. [ 1573.122227][ T3081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1573.175338][ T3083] syzkaller1: entered promiscuous mode [ 1573.175359][ T3083] syzkaller1: entered allmulticast mode [ 1573.197966][ T3078] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1573.197989][ T3078] syzkaller1: Linktype set failed because interface is up [ 1573.991768][ T3088] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1574.081861][ T3092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1574.081886][ T3092] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1574.083449][ T3092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1574.183072][ T3100] netlink: 'syz.5.6659': attribute type 10 has an invalid length. [ 1574.183343][ T3100] veth1_macvtap: left promiscuous mode [ 1574.201017][ T3100] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1574.215361][ T3100] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6659'. [ 1574.215385][ T3100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6659'. [ 1574.371869][ T3112] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6663'. [ 1574.916934][ T3142] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1574.917782][ T3142] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6671'. [ 1574.917795][ T3142] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6671'. [ 1575.006151][ T3144] netlink: 'syz.5.6672': attribute type 7 has an invalid length. [ 1575.069278][ T3156] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6673'. [ 1575.070916][ T3145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6672'. [ 1575.169843][ T3145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1575.173810][ T3145] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1575.363690][ T3170] mac80211_hwsim hwsim78 rose0: entered promiscuous mode [ 1575.363722][ T3170] mac80211_hwsim hwsim78 rose0: entered allmulticast mode [ 1575.495833][ T3179] erspan0: entered promiscuous mode [ 1576.316305][ T3206] ebt_limit: overflow, try lower: 0/0 [ 1576.389208][ T3209] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1576.630559][ T3218] netlink: 'syz.2.6686': attribute type 1 has an invalid length. [ 1576.745883][ T3230] sctp: [Deprecated]: syz.2.6689 (pid 3230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.745883][ T3230] Use struct sctp_sack_info instead [ 1576.746636][ T3230] netlink: 'syz.2.6689': attribute type 29 has an invalid length. [ 1576.747083][ T3230] netlink: 'syz.2.6689': attribute type 29 has an invalid length. [ 1577.112823][ T3247] syz_tun: entered allmulticast mode [ 1577.114105][ T3247] syz_tun: left allmulticast mode [ 1577.190892][ T3251] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 1577.294211][ T3254] syzkaller1: entered promiscuous mode [ 1577.294233][ T3254] syzkaller1: entered allmulticast mode [ 1577.382981][ T3264] ip_tables: iptables: counters copy to user failed while replacing table [ 1577.603481][T25165] IPVS: starting estimator thread 0... [ 1577.671347][ T3277] syzkaller0: entered promiscuous mode [ 1577.671364][ T3277] syzkaller0: entered allmulticast mode [ 1577.717934][ T3275] IPVS: using max 34 ests per chain, 81600 per kthread [ 1578.069092][ T3292] nbd: must specify at least one socket [ 1578.267186][ T3294] wlan1 speed is unknown, defaulting to 1000 [ 1578.283634][ T3294] wg0 speed is unknown, defaulting to 1000 [ 1578.287183][ T3294] lo speed is unknown, defaulting to 1000 [ 1578.488226][ T3307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.604020][ T3318] ip6t_rpfilter: unknown options [ 1578.613823][ T3318] ip6t_rpfilter: unknown options [ 1578.698368][ T3322] v: renamed from veth0_vlan (while UP) [ 1578.743118][ T3322] netlink: 'syz.5.6716': attribute type 33 has an invalid length. [ 1579.130165][ T3334] __nla_validate_parse: 13 callbacks suppressed [ 1579.130179][ T3334] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6720'. [ 1579.130211][ T3334] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6720'. [ 1579.438763][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.439016][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.439239][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.439457][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.439674][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.439913][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.440133][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.440413][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1579.549026][ T3356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1580.311155][ T3399] ipvlan3: entered allmulticast mode [ 1580.311178][ T3399] virt_wifi0: entered allmulticast mode [ 1580.331222][ T3399] batman_adv: batadv0: Adding interface: ipvlan3 [ 1580.331238][ T3399] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.331266][ T3399] batman_adv: batadv0: Interface activated: ipvlan3 [ 1580.703363][ T3423] xt_hashlimit: size too large, truncated to 1048576 [ 1580.799514][ T3424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.858171][ T3424] bridge_slave_0 (unregistering): left allmulticast mode [ 1580.858201][ T3424] bridge_slave_0 (unregistering): left promiscuous mode [ 1580.858287][ T3424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.113629][ T3442] syzkaller0: entered promiscuous mode [ 1581.113651][ T3442] syzkaller0: entered allmulticast mode [ 1581.353764][ T3464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.451141][ T3471] x_tables: duplicate underflow at hook 1 [ 1581.559944][ T3459] syzkaller0: entered promiscuous mode [ 1581.559969][ T3459] syzkaller0: entered allmulticast mode [ 1585.518910][ T3501] Cannot find del_set index 14804 as target [ 1585.530056][ T3501] __nla_validate_parse: 62 callbacks suppressed [ 1585.530074][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6767'. [ 1585.530358][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6767'. [ 1585.542544][ T3503] veth1_macvtap: left promiscuous mode [ 1585.542569][ T3503] macsec0: entered promiscuous mode [ 1585.872553][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1585.957325][ T3526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1585.993555][T18413] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1586.002382][T18413] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1586.012620][T18413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1586.014183][ T3525] netlink: 'syz.5.6777': attribute type 1 has an invalid length. [ 1586.034347][T18413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1586.042304][T18413] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1586.096502][ T31] audit: type=1800 audit(1791916534.768:10): pid=3534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6778" name="memory.events" dev="tmpfs" ino=253 res=0 errno=0 [ 1586.800946][ T3570] 8021q: VLANs not supported on syzkaller1 [ 1587.008780][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6786'. [ 1587.037508][ T3527] wlan1 speed is unknown, defaulting to 1000 [ 1587.055900][ T3527] wg0 speed is unknown, defaulting to 1000 [ 1587.086763][ T3527] lo speed is unknown, defaulting to 1000 [ 1587.773554][ T3611] netlink: 'syz.1.6794': attribute type 1 has an invalid length. [ 1587.773594][ T3611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1587.902212][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.902374][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.902646][ T3527] bridge_slave_0: entered allmulticast mode [ 1587.904437][ T3527] bridge_slave_0: entered promiscuous mode [ 1587.907346][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.907447][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.907819][ T3527] bridge_slave_1: entered allmulticast mode [ 1587.909435][ T3527] bridge_slave_1: entered promiscuous mode [ 1587.950005][ T3527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.980343][ T3527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.085465][T24436] Bluetooth: hci6: command tx timeout [ 1588.103768][ T3527] team0: Port device team_slave_0 added [ 1588.116188][ T3527] team0: Port device team_slave_1 added [ 1588.173624][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.238791][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.239038][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.239229][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.239433][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.239629][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1588.263406][ T3527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.263425][ T3527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.263447][ T3527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.434146][ T3527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.434164][ T3527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.434187][ T3527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.983791][ T3527] hsr_slave_0: entered promiscuous mode [ 1588.984540][ T3527] hsr_slave_1: entered promiscuous mode [ 1589.002532][ T3527] debugfs: 'hsr0' already exists in 'hsr' [ 1589.002556][ T3527] Cannot create hsr debugfs directory [ 1589.229571][ T3677] netlink: 'syz.8.6807': attribute type 10 has an invalid length. [ 1589.304248][ T3677] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 1589.304479][ T3677] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 1589.889257][ T3715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1589.891605][ T3717] IPVS: set_ctl: invalid protocol: 2 172.30.0.6:20004 [ 1590.159749][ T3730] netlink: 'syz.5.6817': attribute type 1 has an invalid length. [ 1590.166220][ T3737] netlink: 'syz.5.6817': attribute type 1 has an invalid length. [ 1590.174228][T24436] Bluetooth: hci6: command tx timeout [ 1590.712593][ T3757] lo: entered promiscuous mode [ 1590.737134][ T3757] tunl0: entered promiscuous mode [ 1590.742662][ T3757] gre0: entered promiscuous mode [ 1590.779638][ T3757] gretap0: entered promiscuous mode [ 1590.803147][ T3757] erspan0: entered promiscuous mode [ 1590.815679][ T3757] ip_vti0: entered promiscuous mode [ 1590.820403][ T3757] ip6_vti0: entered promiscuous mode [ 1590.841759][ T3757] sit0: entered promiscuous mode [ 1590.858045][ T3757] ip6tnl0: entered promiscuous mode [ 1590.867779][ T3763] __nla_validate_parse: 65 callbacks suppressed [ 1590.867794][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6824'. [ 1590.867808][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6824'. [ 1590.869034][ T3757] ip6gre0: entered promiscuous mode [ 1590.910486][ T3757] syz_tun: entered promiscuous mode [ 1590.926187][ T3731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6816'. [ 1590.930249][ T3757] ip6gretap0: entered promiscuous mode [ 1590.938903][ T3757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.939466][ T3757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.940525][ T3757] bridge0: entered promiscuous mode [ 1590.944364][ T3757] vcan0: entered promiscuous mode [ 1590.950742][ T3757] bond0: entered promiscuous mode [ 1590.950761][ T3757] bond_slave_0: entered promiscuous mode [ 1590.951085][ T3757] bond_slave_1: entered promiscuous mode [ 1590.951248][ T3757] bond1: entered promiscuous mode [ 1590.957105][ T3757] team0: entered promiscuous mode [ 1590.957124][ T3757] team_slave_0: entered promiscuous mode [ 1590.957303][ T3757] team_slave_1: entered promiscuous mode [ 1590.961484][ T3757] dummy0: entered promiscuous mode [ 1590.978272][ T3757] nlmon0: entered promiscuous mode [ 1590.980916][ T3757] batadv0: entered promiscuous mode [ 1590.990596][ T3757] vxcan0: entered promiscuous mode [ 1590.992093][ T3757] vxcan1: entered promiscuous mode [ 1590.993495][ T3757] veth0: entered promiscuous mode [ 1591.000790][ T3757] veth1: entered promiscuous mode [ 1591.031228][ T3757] wg0: entered promiscuous mode [ 1591.055900][ T3757] wg1: entered promiscuous mode [ 1591.061187][ T3757] wg2: entered promiscuous mode [ 1591.063879][ T3757] veth0_to_bridge: entered promiscuous mode [ 1591.087592][ T3757] veth1_to_bridge: entered promiscuous mode [ 1591.096356][ T3757] veth0_to_bond: entered promiscuous mode [ 1591.102562][ T3757] veth1_to_bond: entered promiscuous mode [ 1591.111488][ T3757] veth0_to_team: entered promiscuous mode [ 1591.119435][ T3757] veth1_to_team: entered promiscuous mode [ 1591.154154][ T3757] veth0_to_batadv: entered promiscuous mode [ 1591.161979][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.162030][ T3757] batadv_slave_0: entered promiscuous mode [ 1591.167032][ T3757] veth1_to_batadv: entered promiscuous mode [ 1591.170086][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.170133][ T3757] batadv_slave_1: entered promiscuous mode [ 1591.173245][ T3757] xfrm0: entered promiscuous mode [ 1591.176578][ T3757] veth0_to_hsr: entered promiscuous mode [ 1591.181846][ T3757] veth1_to_hsr: entered promiscuous mode [ 1591.201771][ T3757] hsr0: entered promiscuous mode [ 1591.210996][ T3757] veth1_virt_wifi: entered promiscuous mode [ 1591.222804][ T3757] veth0_virt_wifi: entered promiscuous mode [ 1591.241055][ T3757] virt_wifi0: entered promiscuous mode [ 1591.263163][ T3757] vlan0: entered promiscuous mode [ 1591.263355][ T3757] vlan1: entered promiscuous mode [ 1591.263948][ T3757] macvlan0: entered promiscuous mode [ 1591.293236][ T3757] macvlan1: entered promiscuous mode [ 1591.297382][ T3757] ipvlan0: entered promiscuous mode [ 1591.297542][ T3757] ipvlan1: entered promiscuous mode [ 1591.297929][ T3757] veth1_macvtap: entered promiscuous mode [ 1591.317371][ T3757] macvtap0: entered promiscuous mode [ 1591.321090][ T3757] macsec0: entered promiscuous mode [ 1591.323096][ T3757] geneve0: entered promiscuous mode [ 1591.327828][ T3757] geneve1: entered promiscuous mode [ 1591.348108][ T3757] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1591.352908][ T3757] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1591.372612][ T3757] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1591.384260][ T3757] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1591.404027][ T3757] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 1591.429386][ T3757] mac80211_hwsim hwsim81 wlan1: entered promiscuous mode [ 1591.434192][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6822'. [ 1591.434462][ T3759] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6823'. [ 1591.519452][ T3763] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1591.585532][T25165] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.586744][ T9096] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.586782][ T9096] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.586812][ T9096] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.676352][ T3777] netlink: 'syz.8.6825': attribute type 1 has an invalid length. [ 1591.676371][ T3777] netlink: 'syz.8.6825': attribute type 268 has an invalid length. [ 1591.676384][ T3777] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6825'. [ 1591.876564][ T3780] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.6826'. [ 1591.876752][ T3780] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.6826'. [ 1591.876936][ T3780] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.6826'. [ 1591.877109][ T3780] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.6826'. [ 1592.248229][T24436] Bluetooth: hci6: command tx timeout [ 1592.289990][ T3527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1592.473593][ T3527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1592.498557][ T3527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1592.514027][ T3527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1592.517961][ T3527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1592.540597][ T3527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1592.547443][ T3527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1592.580745][ T3527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1592.760897][ T3829] bond1 (unregistering): Released all slaves [ 1592.913752][ T3527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.993750][ T3833] ip_tables: iptables: counters copy to user failed while replacing table [ 1593.029562][ T3527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.064131][T25165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.064234][T25165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.131738][T19250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.131844][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.301539][ T3841] ip_tables: iptables: counters copy to user failed while replacing table [ 1594.328556][T24436] Bluetooth: hci6: command tx timeout [ 1594.394319][ T3898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1594.452084][ T3527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1594.601135][ T3527] veth0_vlan: entered promiscuous mode [ 1594.653805][ T3527] veth1_vlan: entered promiscuous mode [ 1594.741350][ T3912] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1594.871133][ T3527] veth0_macvtap: entered promiscuous mode [ 1594.897851][ T3527] veth1_macvtap: entered promiscuous mode [ 1594.946563][ T3527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.953765][ T3527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.117300][T19250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.147943][T19250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.150312][T19246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.150667][T19246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.271896][ T3935] netlink: 'syz.5.6854': attribute type 1 has an invalid length. [ 1595.313934][ T3935] bond2: entered promiscuous mode [ 1595.314583][ T3935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1595.430999][ T3935] ipvlan2: entered allmulticast mode [ 1595.431021][ T3935] bond2: entered allmulticast mode [ 1595.431299][ T3935] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1595.431317][ T3935] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1595.431331][ T3935] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1595.501343][ T3935] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1595.571370][ T3939] : renamed from tunl0 (while UP) [ 1595.572935][T16779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.572955][T16779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.696737][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.696972][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.697165][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.723883][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.724128][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.724326][ T3952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1595.832144][T19250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.832198][T19250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.099524][ T3970] __nla_validate_parse: 65 callbacks suppressed [ 1596.099545][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6862'. [ 1596.099575][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6862'. [ 1596.100008][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6862'. [ 1596.100038][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6862'. [ 1596.319531][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1596.336721][T19250] IPVS: starting estimator thread 0... [ 1596.426638][ T3987] IPVS: using max 31 ests per chain, 74400 per kthread [ 1596.685610][ T4005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.721485][T16779] IPVS: starting estimator thread 0... [ 1596.757667][ T4007] netlink: 'syz.1.6871': attribute type 4 has an invalid length. [ 1596.757697][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6871'. [ 1596.806904][ T4009] IPVS: using max 34 ests per chain, 81600 per kthread [ 1597.073500][ T4028] netlink: 'syz.1.6875': attribute type 4 has an invalid length. [ 1597.088831][ T4028] netlink: 'syz.1.6875': attribute type 4 has an invalid length. [ 1597.190316][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6875'. [ 1597.294145][ T4045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6878'. [ 1597.483051][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6880'. [ 1597.503113][ T4058] hsr0: entered allmulticast mode [ 1597.503136][ T4058] hsr_slave_0: entered allmulticast mode [ 1597.503153][ T4058] hsr_slave_1: entered allmulticast mode [ 1597.578684][ T4070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6881'. [ 1597.713046][ T4061] sit4: entered promiscuous mode [ 1597.713068][ T4061] sit4: entered allmulticast mode [ 1597.750021][ T4077] x_tables: duplicate underflow at hook 1 [ 1597.944942][ T4095] syzkaller0: entered promiscuous mode [ 1597.944965][ T4095] syzkaller0: entered allmulticast mode [ 1598.150607][ T4107] netlink: 'syz.1.6889': attribute type 7 has an invalid length. [ 1598.150629][ T4107] netlink: 'syz.1.6889': attribute type 8 has an invalid length. [ 1598.180410][ T4105] net_ratelimit: 28 callbacks suppressed [ 1598.180430][ T4105] ip_tables: iptables: counters copy to user failed while replacing table [ 1598.239762][ T4109] ip_tables: iptables: counters copy to user failed while replacing table [ 1598.392832][ T4105] C: renamed from lo [ 1598.409253][ T4105] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1598.671458][ T4123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1598.762735][ T4129] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1598.762977][ T4129] syzkaller1: Refused to change device type [ 1599.243550][ T4167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1600.032415][ T4208] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1600.047898][T19251] IPVS: starting estimator thread 0... [ 1600.100143][ T4216] sctp: [Deprecated]: syz.8.6912 (pid 4216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1600.100143][ T4216] Use struct sctp_sack_info instead [ 1600.101583][ T4216] Cannot find del_set index 4 as target [ 1600.139678][ T4214] IPVS: using max 33 ests per chain, 79200 per kthread [ 1600.537393][ T4239] netlink: 'syz.2.6919': attribute type 4 has an invalid length. [ 1600.538719][ T4244] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1600.832395][ T4254] tipc: Enabled bearer , priority 0 [ 1600.842327][ T4261] syzkaller0: entered promiscuous mode [ 1600.842350][ T4261] syzkaller0: entered allmulticast mode [ 1600.869049][ T4254] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1601.386388][ T4301] __nla_validate_parse: 82 callbacks suppressed [ 1601.386410][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1601.386423][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1601.440040][ T4305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1601.503904][ T4251] tipc: Resetting bearer [ 1601.647360][ T4251] tipc: Disabling bearer [ 1601.912868][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1601.912893][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1601.958238][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1601.958263][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1602.064006][ T4339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6937'. [ 1602.104281][ T4346] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1602.180302][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.451067][ T4365] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6942'. [ 1602.490477][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1602.533602][ T4363] syzkaller0: entered promiscuous mode [ 1602.533626][ T4363] syzkaller0: entered allmulticast mode [ 1602.580580][ T138] bridge_slave_0: left allmulticast mode [ 1602.580598][ T138] bridge_slave_0: left promiscuous mode [ 1602.580769][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.735794][ T138] veth1_to_hsr: left allmulticast mode [ 1602.736025][ T138] vlan1: left allmulticast mode [ 1602.736038][ T138] veth0_vlan: left allmulticast mode [ 1602.780658][ T138] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1602.823887][ T4377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1602.823905][ T4377] IPv6: NLM_F_CREATE should be set when creating new route [ 1602.823941][ T4377] IPv6: NLM_F_CREATE should be set when creating new route [ 1602.823963][ T4377] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.142912][ T4392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1603.210482][ T4394] x_tables: duplicate entry at hook 3 [ 1603.402574][ T138] bond14 (unregistering): (slave geneve2): Releasing active interface [ 1603.452287][ T138] batman_adv: batadv0: Removing interface: syzkaller0 [ 1603.479477][ T138] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1603.479503][ T138] bridge3 (unregistering): left promiscuous mode [ 1603.479521][ T138] bridge3 (unregistering): left allmulticast mode [ 1603.529645][ T138] bond10 (unregistering): (slave bridge8): Releasing active interface [ 1603.546819][ T138] bond3 (unregistering): (slave .`): Releasing active interface [ 1603.549952][ T138] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.552169][ T138] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.553553][ T138] .` (unregistering): Released all slaves [ 1603.595329][ T138] bond1 (unregistering): Released all slaves [ 1603.615804][ T138] bond2 (unregistering): Released all slaves [ 1603.643877][ T138] bond3 (unregistering): Released all slaves [ 1603.669885][ T138] bond0 (unregistering): Released all slaves [ 1603.688569][ T138] bond4 (unregistering): Released all slaves [ 1603.722187][ T138] bond5 (unregistering): Released all slaves [ 1603.740362][T19246] smbdirect: ib_dev[syz1] removed [ 1603.759969][ T138] bond6 (unregistering): Released all slaves [ 1603.791909][ T138] bond7 (unregistering): Released all slaves [ 1603.820113][ T138] bond8 (unregistering): Released all slaves [ 1603.853651][ T138] bond9 (unregistering): Released all slaves [ 1603.877225][ T138] bond10 (unregistering): Released all slaves [ 1603.898009][ T138] bond11 (unregistering): Released all slaves [ 1603.911994][ T138] bond12 (unregistering): Released all slaves [ 1603.927405][ T138] bond13 (unregistering): Released all slaves [ 1603.959354][ T138] bond14 (unregistering): Released all slaves [ 1603.973668][ T4365] syzkaller0: entered promiscuous mode [ 1603.973684][ T4365] syzkaller0: entered allmulticast mode [ 1604.247789][ T138] IPVS: stopping backup sync thread 880 ... [ 1604.990149][ T4440] netlink: 'syz.0.6957': attribute type 3 has an invalid length. [ 1605.037156][ T4433] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1605.460783][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.460883][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.460956][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461531][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461607][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461682][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461760][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461827][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461896][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.461964][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.462034][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463298][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463383][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463459][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463528][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463596][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463665][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463758][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.463824][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.509619][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.509710][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.509780][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.509853][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.509944][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510015][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510084][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510166][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510701][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510788][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510882][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.510954][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.511024][ T4466] 8021q: VLANs not supported on xfrm0 [ 1605.511092][ T4466] 8021q: VLANs not supported on xfrm0 [ 1606.010483][ T5280] veth1_vlan: left promiscuous mode [ 1606.200635][ T4488] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6967'. [ 1606.442206][ T861] infiniband syz2: ib_query_port failed (-19) [ 1606.453726][T19246] smbdirect: ib_dev[syz2] removed [ 1606.558573][ T4501] bond0: entered allmulticast mode [ 1606.561945][ T4501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.614357][ T4511] tipc: Started in network mode [ 1606.614384][ T4511] tipc: Node identity ac141441, cluster identity 4711 [ 1606.635357][ T4511] tipc: Enabled bearer , priority 10 [ 1606.928296][ T138] hsr_slave_0: left promiscuous mode [ 1606.943136][ T138] hsr_slave_1: left promiscuous mode [ 1606.944082][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1606.944103][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.970957][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.970987][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.999936][ T138] veth1_macvtap: left promiscuous mode [ 1606.999982][ T138] veth0_macvtap: left promiscuous mode [ 1607.001688][ T4527] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1607.001984][ T4527] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1607.039903][ T138] veth1_vlan: left promiscuous mode [ 1607.040001][ T138] veth0_vlan: left promiscuous mode [ 1607.133720][ T4531] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6979'. [ 1607.853624][T19246] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1607.954094][ T860] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 1607.963348][ T862] tipc: Node number set to 2886997057 [ 1608.256616][ T4564] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6986'. [ 1608.293523][ T4563] ovs0: entered promiscuous mode [ 1608.311425][ T4571] openvswitch: netlink: Missing valid actions attribute. [ 1608.353098][ T138] IPVS: stop unused estimator thread 0... [ 1608.369607][ T4566] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1608.408423][ T4574] netlink: 'syz.8.6988': attribute type 1 has an invalid length. [ 1608.595949][ T4581] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1608.770930][ T4597] netlink: 'syz.8.6996': attribute type 4 has an invalid length. [ 1608.792229][ T4597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1608.792909][ T4597] batman_adv: batadv0: Adding interface: gretap1 [ 1608.792922][ T4597] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.792947][ T4597] batman_adv: batadv0: Interface activated: gretap1 [ 1608.903010][ T4604] netlink: 'syz.0.6998': attribute type 2 has an invalid length. [ 1609.091314][ T4613] netlink: 'syz.8.7000': attribute type 5 has an invalid length. [ 1609.275783][ T4630] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1609.597216][ T4655] hsr0: entered allmulticast mode [ 1609.597239][ T4655] hsr_slave_0: entered allmulticast mode [ 1609.597255][ T4655] hsr_slave_1: entered allmulticast mode [ 1609.599536][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7009'. [ 1609.617327][ T4655] hsr_slave_0: left promiscuous mode [ 1609.623124][ T4655] hsr_slave_1: left promiscuous mode [ 1609.661485][ T4655] hsr0 (unregistering): left allmulticast mode [ 1609.698899][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7009'. [ 1609.885827][ T4668] netlink: 'syz.0.7014': attribute type 1 has an invalid length. [ 1609.962291][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1610.020193][ T4680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1610.053442][ T4680] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1610.079154][ T4680] bond1: entered promiscuous mode [ 1610.079178][ T4680] veth0_to_bond: entered promiscuous mode [ 1610.079388][ T4680] bond1: entered allmulticast mode [ 1610.079400][ T4680] veth0_to_bond: entered allmulticast mode [ 1610.185823][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1610.186287][ T4690] Bluetooth: hci0: unsupported parameter 5135 [ 1610.186303][ T4690] Bluetooth: hci0: unsupported parameter 8192 [ 1610.186315][ T4690] Bluetooth: hci0: unsupported parameter 5135 [ 1610.186326][ T4690] Bluetooth: hci0: unsupported parameter 8192 [ 1610.191119][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1610.191571][ T4686] veth3: entered promiscuous mode [ 1610.191592][ T4686] veth3: entered allmulticast mode [ 1610.200369][ T4693] Bluetooth: hci0: unsupported parameter 5135 [ 1610.200390][ T4693] Bluetooth: hci0: unsupported parameter 8192 [ 1610.200401][ T4693] Bluetooth: hci0: unsupported parameter 5135 [ 1610.200411][ T4693] Bluetooth: hci0: unsupported parameter 8192 [ 1610.289706][ T4698] netlink: 'syz.5.7019': attribute type 3 has an invalid length. [ 1610.289726][ T4698] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7019'. [ 1610.291553][ T4698] tipc: Enabled bearer , priority 0 [ 1611.725398][ T4749] tc_dump_action: action bad kind [ 1611.915114][ T4760] batadv_slave_1: entered promiscuous mode [ 1611.993968][ T4763] syzkaller1: entered promiscuous mode [ 1611.993991][ T4763] syzkaller1: entered allmulticast mode [ 1612.020053][ T4768] netlink: 'syz.1.7042': attribute type 12 has an invalid length. [ 1612.188050][ T4777] __nla_validate_parse: 5 callbacks suppressed [ 1612.188071][ T4777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7045'. [ 1612.259800][ T4759] batadv_slave_1: left promiscuous mode [ 1612.356773][ T4782] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1612.751640][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7054'. [ 1612.780537][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7053'. [ 1612.780562][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7053'. [ 1612.844196][ T4813] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1612.874106][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7053'. [ 1612.988920][ T4817] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 1612.991691][ T4816] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 1613.123672][ T4820] gtp0: entered promiscuous mode [ 1613.123695][ T4820] gtp0: entered allmulticast mode [ 1613.211139][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1613.428656][ T4834] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1613.477446][ T4849] netlink: 'syz.1.7066': attribute type 1 has an invalid length. [ 1613.587494][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7066'. [ 1613.655627][ T4849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1613.671129][ T4856] veth1_to_bond: entered allmulticast mode [ 1613.706583][ T4860] bond3: (slave geneve2): making interface the new active one [ 1613.714512][ T4860] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1613.808945][ T4855] veth1_to_bond: left allmulticast mode [ 1614.068982][ T4885] netlink: 'syz.0.7077': attribute type 8 has an invalid length. [ 1614.069528][ T4885] netlink: 'syz.0.7077': attribute type 2 has an invalid length. [ 1614.069560][ T4885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7077'. [ 1614.106688][ T4885] : entered promiscuous mode [ 1614.193783][ T4892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7077'. [ 1614.234468][ T4900] netlink: 'syz.8.7083': attribute type 13 has an invalid length. [ 1614.430248][ T4912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1614.430279][ T4912] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1614.502519][ T4918] bridge0: port 1(dummy0) entered blocking state [ 1614.506007][ T4918] bridge0: port 1(dummy0) entered disabled state [ 1614.506178][ T4918] dummy0: entered allmulticast mode [ 1614.521962][ T4918] dummy0: entered promiscuous mode [ 1614.533102][ T4918] bridge0: port 1(dummy0) entered blocking state [ 1614.533208][ T4918] bridge0: port 1(dummy0) entered forwarding state [ 1614.661679][ T4914] erspan1: entered promiscuous mode [ 1614.661815][ T4914] syzkaller0: entered promiscuous mode [ 1614.717041][ T4936] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1614.871656][ T4952] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1614.884024][ T4952] ipvlan0: Caught tx_queue_len zero misconfig [ 1614.980972][ T4957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1615.313245][ T4982] netlink: 'syz.2.7099': attribute type 4 has an invalid length. [ 1615.530476][ T4996] ip_tables: iptables: counters copy to user failed while replacing table [ 1615.900379][ T5034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1615.904078][ T5034] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1616.549461][ T5051] netlink: 'syz.0.7116': attribute type 1 has an invalid length. [ 1616.581101][ T5051] bond2: entered promiscuous mode [ 1616.581378][ T5051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1616.603331][ T5051] bond2: (slave bridge2): making interface the new active one [ 1616.603355][ T5051] bridge2: entered promiscuous mode [ 1616.617976][ T5051] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1618.500113][ T4998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1618.740449][ T5076] geneve3: entered promiscuous mode [ 1618.740473][ T5076] geneve3: entered allmulticast mode [ 1618.872089][ T5076] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1618.896198][ T5076] bond3 (unregistering): Released all slaves [ 1618.959160][ T5101] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1618.980035][ T5083] syzkaller1: entered promiscuous mode [ 1618.980055][ T5083] syzkaller1: entered allmulticast mode [ 1619.003014][T19250] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1619.003307][T19250] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1619.003341][T19250] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1619.003371][T19250] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1619.098501][ T5106] team_slave_1: Caught tx_queue_len zero misconfig [ 1619.201304][ T5112] __nla_validate_parse: 8 callbacks suppressed [ 1619.201324][ T5112] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7127'. [ 1619.416342][ T5124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7131'. [ 1619.581114][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7132'. [ 1619.690213][ T5147] x_tables: duplicate underflow at hook 1 [ 1620.068200][ T5178] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1620.070807][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7143'. [ 1620.192323][ T5184] netlink: 'syz.8.7146': attribute type 10 has an invalid length. [ 1620.242944][ T5184] team0: Device wg2 is of different type [ 1620.273689][T24436] Bluetooth: hci1: connection err: -111 [ 1620.560688][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7151'. [ 1620.707067][ T5212] xt_cgroup: path and classid specified [ 1621.022590][ T5206] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.022625][ T5206] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1621.280278][ T5206] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.280312][ T5206] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1621.332886][ T5237] bridge0: port 4(syz_tun) entered blocking state [ 1621.333059][ T5237] bridge0: port 4(syz_tun) entered disabled state [ 1621.333220][ T5237] syz_tun: entered allmulticast mode [ 1621.359965][ T5237] syz_tun: entered promiscuous mode [ 1621.360614][ T5237] bridge0: port 4(syz_tun) entered blocking state [ 1621.360712][ T5237] bridge0: port 4(syz_tun) entered forwarding state [ 1621.526932][ T5248] netlink: 'syz.5.7160': attribute type 1 has an invalid length. [ 1621.631978][ T5206] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.632013][ T5206] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1621.742127][ T5248] bond3: option mode: invalid value (7) [ 1621.743716][ T5248] bond3 (unregistering): Released all slaves [ 1621.868144][ T5256] smc: net device lo applied user defined pnetid SYZ0 [ 1621.970569][ T5206] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 1622.053999][ T5206] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.054034][ T5206] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1622.131798][ T5272] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1622.336693][T19245] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1622.336727][T19245] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1622.344792][T19245] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1622.344822][T19245] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1622.407080][ T9097] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1622.407111][ T9097] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1622.455703][T19247] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1622.455741][T19247] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1622.598206][T19245] IPVS: starting estimator thread 0... [ 1622.600966][ T5309] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1622.616259][ T5303] Bluetooth: hci0: unsupported parameter 5135 [ 1622.616281][ T5303] Bluetooth: hci0: unsupported parameter 8192 [ 1622.616292][ T5303] Bluetooth: hci0: unsupported parameter 5135 [ 1622.616303][ T5303] Bluetooth: hci0: unsupported parameter 8192 [ 1622.684934][ T5308] IPVS: using max 31 ests per chain, 74400 per kthread [ 1622.688509][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7171'. [ 1622.762411][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7175'. [ 1622.783374][ T5313] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1622.965374][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1623.042112][ T5326] xt_hashlimit: size too large, truncated to 1048576 [ 1623.240524][ T5344] netlink: 'syz.0.7185': attribute type 4 has an invalid length. [ 1623.254210][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7186'. [ 1623.299613][ T5350] netlink: 'syz.0.7185': attribute type 4 has an invalid length. [ 1623.406366][ T5356] 8021q: VLANs not supported on ip6_vti0 [ 1623.484082][ T5361] team0: Device xfrm0 is of different type [ 1623.541520][ T5362] team0: Device xfrm0 is of different type [ 1623.572902][ T5370] netlink: 'syz.0.7189': attribute type 3 has an invalid length. [ 1623.572924][ T5370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7189'. [ 1623.641345][ T5362] tipc: Started in network mode [ 1623.641363][ T5362] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1623.651386][ T5362] tipc: Enabled bearer , priority 0 [ 1623.897741][ T5397] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7196'. [ 1624.097599][ T5406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1624.175967][ T5410] nbd: must specify an index to disconnect [ 1624.182934][ T5412] nbd: must specify an index to disconnect [ 1624.344273][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7202'. [ 1624.480752][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7202'. [ 1624.607751][ T5444] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7205'. [ 1624.607774][ T5444] veth0_to_bond: default FDB implementation only supports local addresses [ 1624.668922][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7206'. [ 1624.813649][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7207'. [ 1624.832729][ T4266] tipc: Node number set to 11578026 [ 1624.962391][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1625.383455][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7219'. [ 1625.402026][ T5501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7218'. [ 1625.619153][T24436] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 1625.620700][ T5510] Cannot find add_set index 65532 as target [ 1625.774263][ T5512] netlink: 'syz.0.7221': attribute type 1 has an invalid length. [ 1625.981255][ T5544] pim6reg1: entered promiscuous mode [ 1625.981278][ T5544] pim6reg1: entered allmulticast mode [ 1626.091056][T25165] tipc: Subscription rejected, illegal request [ 1626.214234][ T5564] netlink: 516 bytes leftover after parsing attributes in process `syz.8.7232'. [ 1626.297307][ T5572] netlink: 516 bytes leftover after parsing attributes in process `syz.8.7232'. [ 1626.611762][ T5589] can: request_module (can-proto-0) failed. [ 1627.111435][ T5621] netlink: 'syz.8.7245': attribute type 12 has an invalid length. [ 1627.128455][ T5623] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1627.194782][ T5617] netlink: NAT attribute has 8 unknown bytes [ 1627.194817][ T5617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1627.198818][ T5617] netlink: 'syz.0.7243': attribute type 16 has an invalid length. [ 1627.198849][ T5617] veth0_macvtap: entered allmulticast mode [ 1627.260840][ T5629] tipc: Enabling of bearer rejected, failed to enable media [ 1627.399450][ T5643] netlink: Unknown conntrack attr (0) [ 1627.401048][ T31] audit: type=1800 audit(1791916576.068:11): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7250" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1078 res=0 errno=0 [ 1627.462435][ T5645] x_tables: duplicate underflow at hook 2 [ 1627.464374][ T5643] bond2: entered promiscuous mode [ 1627.464436][ T5643] bond2: entered allmulticast mode [ 1627.465129][ T5643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1627.702184][ T5660] erspan0: entered promiscuous mode [ 1627.702201][ T5660] erspan0: entered allmulticast mode [ 1627.779568][ T5666] ip6tnl0: Caught tx_queue_len zero misconfig [ 1628.907945][ T5742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1629.309772][ T5760] openvswitch: netlink: Message has 8 unknown bytes. [ 1629.355053][ T5770] __nla_validate_parse: 12 callbacks suppressed [ 1629.355068][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7284'. [ 1629.357832][ T5772] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7284'. [ 1629.466460][ T5778] : renamed from bond_slave_0 [ 1629.624489][ T5789] xt_IDLETIMER: label is empty or not nul-terminated [ 1629.633633][ T5788] Bluetooth: ISO socket layer initialized [ 1629.704436][ T5791] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7290'. [ 1629.762344][ T5791] bond3: Unable to set up delay as MII monitoring is disabled [ 1629.780443][ T5791] bond3 (unregistering): Released all slaves [ 1630.059990][ T5817] x_tables: duplicate entry at hook 1 [ 1630.070496][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7298'. [ 1630.082698][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7298'. [ 1630.120748][ T5819] xfrm1: entered promiscuous mode [ 1630.120778][ T5819] xfrm1: entered allmulticast mode [ 1630.238583][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7299'. [ 1630.298100][ T5830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7299'. [ 1630.301667][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7299'. [ 1630.750436][ T5853] tipc: Enabled bearer , priority 10 [ 1630.924127][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7310'. [ 1631.583013][ T5906] x_tables: duplicate underflow at hook 1 [ 1631.605794][ T5899] netlink: 'syz.0.7317': attribute type 2 has an invalid length. [ 1631.826716][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7323'. [ 1631.942180][ T5923] netlink: 'syz.5.7324': attribute type 1 has an invalid length. [ 1632.029920][ T5923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1632.066762][ T5927] vlan2: entered promiscuous mode [ 1632.066784][ T5927] bond3: entered promiscuous mode [ 1632.128737][ T5923] bond3: (slave geneve2): making interface the new active one [ 1632.128763][ T5923] geneve2: entered promiscuous mode [ 1632.152664][ T5923] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1632.184889][T25165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.185238][T25165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.185274][T25165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.275546][ T9097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.577626][ T5953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1632.741181][ T5963] ip_tables: iptables: counters copy to user failed while replacing table [ 1633.961504][ T6014] tipc: Resetting bearer [ 1634.027800][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1634.051072][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.181703][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.239890][ T5996] ip_tables: iptables: counters copy to user failed while replacing table [ 1634.374508][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.386011][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.405732][ T6014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1634.431565][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.431625][ T9097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.441635][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.441734][ T9097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.598006][ T6039] __nla_validate_parse: 7 callbacks suppressed [ 1634.598027][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1634.638389][ T4266] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1634.647427][T25165] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.012992][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7367'. [ 1635.169946][ T6074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7368'. [ 1635.172179][ T6074] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.188058][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1635.192977][ T6076] netlink: 'syz.5.7370': attribute type 7 has an invalid length. [ 1635.369961][ T4269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.546053][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7373'. [ 1635.546084][ T6089] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1635.688333][T19246] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.688558][T19246] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.974092][ T6122] netlink: 'syz.8.7380': attribute type 1 has an invalid length. [ 1636.031453][ T6122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1636.061734][ T6137] bond3: (slave geneve4): making interface the new active one [ 1636.063093][ T6137] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1636.121980][ T4269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1638.795979][ T6109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1639.011124][ T6195] netlink: 'syz.2.7389': attribute type 15 has an invalid length. [ 1639.011586][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1639.015927][ T6195] netlink: 'syz.2.7389': attribute type 15 has an invalid length. [ 1639.016275][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1639.029985][ T6197] netlink: 'syz.1.7390': attribute type 1 has an invalid length. [ 1639.070886][ T6197] bond4: entered promiscuous mode [ 1639.071326][ T6197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1639.172638][ T6204] bond4: (slave bridge2): making interface the new active one [ 1639.172663][ T6204] bridge2: entered promiscuous mode [ 1639.173557][ T6204] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1639.185966][ T6189] syzkaller1: entered promiscuous mode [ 1639.185988][ T6189] syzkaller1: entered allmulticast mode [ 1639.197548][ T6203] netlink: 'syz.2.7392': attribute type 4 has an invalid length. [ 1639.206750][ T6205] netlink: 'syz.2.7392': attribute type 4 has an invalid length. [ 1639.251125][ T6213] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7392'. [ 1639.253033][ T6212] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7392'. [ 1639.254550][T24436] Bluetooth: hci3: unexpected event 0x3b length: 11 > 10 [ 1639.605372][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1639.669591][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1639.760162][ T6242] netlink: 'syz.8.7400': attribute type 4 has an invalid length. [ 1639.760183][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.760444][ T6242] netlink: 'syz.8.7400': attribute type 4 has an invalid length. [ 1639.760456][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.760700][ T6242] netlink: 'syz.8.7400': attribute type 4 has an invalid length. [ 1639.760713][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.761007][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.761252][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.761488][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.780158][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.780433][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1639.780673][ T6242] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7400'. [ 1640.223082][ T6262] validate_nla: 62 callbacks suppressed [ 1640.223103][ T6262] netlink: 'syz.1.7405': attribute type 32 has an invalid length. [ 1640.344344][ T6273] tipc: Invalid UDP bearer configuration [ 1640.344390][ T6273] tipc: Enabling of bearer rejected, failed to enable media [ 1640.630962][ T6289] ipvlan3: entered allmulticast mode [ 1640.630991][ T6289] virt_wifi0: entered allmulticast mode [ 1640.764284][ T6283] x_tables: duplicate underflow at hook 1 [ 1641.272107][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.272323][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.272528][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.272721][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.273048][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.273247][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.273481][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.273704][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.273921][ T6335] netlink: 'syz.8.7426': attribute type 1 has an invalid length. [ 1641.523007][ T6347] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1641.537285][ T6347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1641.899205][ T6368] bridge0: port 3(syz_tun) entered blocking state [ 1641.899402][ T6368] bridge0: port 3(syz_tun) entered disabled state [ 1641.899559][ T6368] syz_tun: entered allmulticast mode [ 1641.901498][ T6368] syz_tun: entered promiscuous mode [ 1641.902358][ T6368] bridge0: port 3(syz_tun) entered blocking state [ 1641.902459][ T6368] bridge0: port 3(syz_tun) entered forwarding state [ 1641.973146][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 1642.352594][ T6395] veth0: entered promiscuous mode [ 1642.381454][ T6392] veth0: left promiscuous mode [ 1642.584136][ T6413] 8021q: VLANs not supported on lo [ 1642.584212][ T6411] 8021q: VLANs not supported on lo [ 1642.792307][ T6422] syz_tun: entered allmulticast mode [ 1642.877627][ T6423] ip_tables: iptables: counters copy to user failed while replacing table [ 1643.502417][ T6457] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1643.503260][ T6456] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1643.569333][ T6456] ip_tables: iptables: counters copy to user failed while replacing table [ 1643.701796][ T6465] ip_tables: iptables: counters copy to user failed while replacing table [ 1643.723486][ T6465] syzkaller1: entered promiscuous mode [ 1643.723508][ T6465] syzkaller1: entered allmulticast mode [ 1644.356928][ T6501] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1644.360276][ T6501] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1644.514561][ T6509] IPVS: set_ctl: invalid protocol: 1 172.30.0.6:20003 [ 1644.933632][ T6531] __nla_validate_parse: 147 callbacks suppressed [ 1644.933653][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7486'. [ 1644.949737][ T6533] IPv6: NLM_F_CREATE should be specified when creating new route [ 1644.949829][ T6533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1644.949840][ T6533] IPv6: NLM_F_CREATE should be set when creating new route [ 1644.949897][ T6533] IPv6: NLM_F_CREATE should be set when creating new route [ 1644.949920][ T6533] IPv6: NLM_F_CREATE should be set when creating new route [ 1645.092159][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7488'. [ 1645.092184][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7488'. [ 1646.367503][ T6589] syzkaller1: entered allmulticast mode [ 1646.683272][ T6603] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1646.720028][ T6613] netlink: Invalid conntrack timeout [ 1646.720060][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.924444][ T6621] validate_nla: 14 callbacks suppressed [ 1646.924463][ T6621] netlink: 'syz.2.7510': attribute type 3 has an invalid length. [ 1646.924477][ T6621] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1647.118845][ T6627] syzkaller0: entered promiscuous mode [ 1647.118889][ T6627] syzkaller0: entered allmulticast mode [ 1647.238309][ T6636] 8021q: VLANs not supported on wg0 [ 1647.285081][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1647.588584][ T6659] syzkaller0: entered promiscuous mode [ 1647.588608][ T6659] syzkaller0: entered allmulticast mode [ 1647.592366][ T6661] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1647.762759][ T6671] syzkaller0: entered promiscuous mode [ 1647.762782][ T6671] syzkaller0: entered allmulticast mode [ 1647.789099][ T6671] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7527'. [ 1647.839897][ T6675] netlink: get zone limit has 4 unknown bytes [ 1648.142102][T24436] Bluetooth: hci6: link tx timeout [ 1648.142122][T24436] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1648.152613][T24436] Bluetooth: hci6: link tx timeout [ 1648.152632][T24436] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1648.316276][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7538'. [ 1648.392446][ T6700] team0: Caught tx_queue_len zero misconfig [ 1648.408199][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7538'. [ 1648.562088][ T6705] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1648.699133][ T6714] block nbd2: server does not support multiple connections per device. [ 1648.699384][ T6714] block nbd2: shutting down sockets [ 1648.732706][ T6714] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1648.995937][ T6725] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7547'. [ 1649.096973][ T6731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1649.423741][ T6747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1650.146923][ T6794] __nla_validate_parse: 4 callbacks suppressed [ 1650.146944][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7570'. [ 1650.147093][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7570'. [ 1650.172283][T24436] Bluetooth: hci6: command 0x0406 tx timeout [ 1650.404383][ T6807] wg0 speed is unknown, defaulting to 1000 [ 1650.808055][ T6833] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 1651.125330][T18413] Bluetooth: hci3: command tx timeout [ 1651.293691][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7587'. [ 1651.377520][ T6861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1651.377539][ T6861] IPv6: NLM_F_CREATE should be set when creating new route [ 1651.377569][ T6861] IPv6: NLM_F_CREATE should be set when creating new route [ 1651.564058][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1651.661102][ T6858] wg0 speed is unknown, defaulting to 1000 [ 1651.973809][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1652.538386][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7609'. [ 1652.603043][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7610'. [ 1652.614171][ T6919] macsec1: entered promiscuous mode [ 1652.614345][ T6919] macsec1: entered allmulticast mode [ 1652.614364][ T6919] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1652.624543][ T6919] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1652.643226][ T6919] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1652.700319][ T6923] netlink: 'syz.2.7611': attribute type 58 has an invalid length. [ 1652.700334][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1652.801820][ T6925] bond3: entered promiscuous mode [ 1652.801890][ T6925] bond3: entered allmulticast mode [ 1652.802213][ T6925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1652.914024][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7614'. [ 1652.914469][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7614'. [ 1653.058250][ T6939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1653.118926][ T6942] bond0: Caught tx_queue_len zero misconfig [ 1653.204910][T24436] Bluetooth: hci3: command tx timeout [ 1653.264167][ T6953] x_tables: duplicate underflow at hook 2 [ 1653.612715][ T6961] nf_ct_set_timeout: 23 callbacks suppressed [ 1653.612734][ T6961] No such timeout policy "s" [ 1653.612744][ T6961] netlink: Failed to associated timeout policy 's' [ 1653.670569][ T6966] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1654.492887][ T7003] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1654.821249][ T7014] netlink: 'syz.5.7631': attribute type 1 has an invalid length. [ 1655.043105][ T7023] syzkaller1: entered promiscuous mode [ 1655.043128][ T7023] syzkaller1: entered allmulticast mode [ 1655.738960][ T7060] __nla_validate_parse: 3 callbacks suppressed [ 1655.738980][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7641'. [ 1655.742914][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7642'. [ 1655.922457][ T7073] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7644'. [ 1656.144904][ T7085] netlink: 'syz.0.7648': attribute type 12 has an invalid length. [ 1656.195174][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7651'. [ 1657.103146][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7662'. [ 1657.173604][ T7132] x_tables: duplicate underflow at hook 2 [ 1657.217836][ T7132] batman_adv: batadv0: Adding interface: macvtap1 [ 1657.217880][ T7132] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.217907][ T7132] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1657.312149][ T7134] netlink: 'syz.1.7663': attribute type 83 has an invalid length. [ 1657.342437][ T7142] netlink: 'syz.2.7666': attribute type 1 has an invalid length. [ 1657.355328][ T7138] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1657.437178][ T7138] ip_tables: iptables: counters copy to user failed while replacing table [ 1657.486567][ T7145] bond4: (slave geneve2): making interface the new active one [ 1657.487170][ T7145] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1657.495295][T25154] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1657.497818][T25162] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1657.497907][T25162] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1657.497938][T25162] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1657.524158][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7666'. [ 1658.013209][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7675'. [ 1658.549297][ T7198] netlink: 'syz.0.7683': attribute type 62 has an invalid length. [ 1658.550092][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7684'. [ 1658.650079][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7685'. [ 1658.664405][ T31] audit: type=1107 audit(1791916607.328:12): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1658.804367][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.804495][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.810297][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.810445][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.810571][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.810682][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.812659][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.812775][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.812908][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1658.813016][ T7215] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1659.079415][ T7226] nlmon0: Caught tx_queue_len zero misconfig [ 1659.192249][ T7228] veth5: entered promiscuous mode [ 1659.192273][ T7228] veth5: entered allmulticast mode [ 1662.645335][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1664.068166][T25162] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1664.350905][T25162] bond3 (unregistering): (slave .`): Releasing active interface [ 1664.351682][T25162] .` (unregistering): Released all slaves [ 1664.370102][T25162] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1664.371540][T25162] bond1 (unregistering): Released all slaves [ 1664.384146][T25162] bond2 (unregistering): Released all slaves [ 1664.401395][T25162] bond3 (unregistering): Released all slaves [ 1664.419391][T25162] bond0 (unregistering): (slave veth3): Releasing active interface [ 1664.420758][T25162] bond0 (unregistering): Released all slaves [ 1664.439063][T25162] bond4 (unregistering): Released all slaves [ 1664.449132][T25162] bond5 (unregistering): Released all slaves [ 1664.464329][T25162] bond6 (unregistering): Released all slaves [ 1664.474397][T25162] bond7 (unregistering): Released all slaves [ 1664.492790][T25162] bond8 (unregistering): Released all slaves [ 1664.570086][T25162] tipc: Disabling bearer [ 1664.570388][T25162] tipc: Left network mode [ 1664.791763][T25162] IPVS: stopping backup sync thread 25707 ... [ 1665.128970][T25162] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1665.128986][T25162] batman_adv: batadv0: Removing interface: ipvlan2 [ 1665.133152][T25162] veth0_macvtap: left promiscuous mode [ 1665.133218][T25162] veth1_vlan: left promiscuous mode [ 1665.133273][T25162] veth0_vlan: left promiscuous mode [ 1665.804333][T25162] IPVS: stop unused estimator thread 0... [ 1666.007656][T24436] Bluetooth: hci4: command 0x0406 tx timeout [ 1671.125661][T18413] Bluetooth: hci1: command 0x0406 tx timeout [ 1681.366947][T24436] Bluetooth: hci3: command 0x0406 tx timeout [ 1686.063493][ T7251] ip_tables: iptables: counters copy to user failed while replacing table [ 1686.065153][ T7255] __nla_validate_parse: 4 callbacks suppressed [ 1686.065169][ T7255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1686.077282][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1686.122301][ T7258] syzkaller0: entered promiscuous mode [ 1686.122323][ T7258] syzkaller0: entered allmulticast mode [ 1686.153706][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7701'. [ 1686.223277][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7701'. [ 1686.491109][ T7249] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.555077][T25153] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1686.555121][T25153] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1686.555152][T25153] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1686.555182][T25153] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1686.611660][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1686.611685][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1686.614209][ T7291] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1686.614228][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1686.874082][ T7304] netlink: 'syz.1.7710': attribute type 10 has an invalid length. [ 1686.955708][ T7309] netlink: 'syz.2.7711': attribute type 11 has an invalid length. [ 1687.130794][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7712'. [ 1687.162657][T25153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1687.162907][T25153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1687.186298][ T4269] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1687.231168][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7712'. [ 1687.424267][ T7328] syzkaller1: entered promiscuous mode [ 1687.424290][ T7328] syzkaller1: entered allmulticast mode [ 1687.480328][ T7343] ip_tables: iptables: counters copy to user failed while replacing table [ 1687.487704][ T7337] netlink: 'syz.8.7718': attribute type 4 has an invalid length. [ 1687.522075][ T7342] bond4: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 1687.523815][ T7342] bond4 (unregistering): Released all slaves [ 1687.585421][ T4270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1687.598487][ T7344] tipc: Started in network mode [ 1687.598512][ T7344] tipc: Node identity be61167c3ba2, cluster identity 4711 [ 1687.616179][ T7344] tipc: Enabled bearer , priority 0 [ 1687.618837][ T7347] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1687.618893][ T7347] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1687.618937][ T7347] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1687.633550][ T7347] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1687.777026][ T4269] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.001651][ T6292] smbdirect: ib_dev[syz2] removed [ 1688.327183][ T7365] xt_bpf: check failed: parse error [ 1688.328644][ T7365] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 1688.423989][ T7377] netlink: 'syz.8.7728': attribute type 1 has an invalid length. [ 1688.718252][ T4270] tipc: Node number set to 2244155004 [ 1688.839349][ T7409] macvtap0: entered allmulticast mode [ 1688.839373][ T7409] veth0_macvtap: entered allmulticast mode [ 1688.839685][ T7406] Bluetooth: hci0: unsupported parameter 5134 [ 1688.839701][ T7406] Bluetooth: hci0: unsupported parameter 8192 [ 1688.839712][ T7406] Bluetooth: hci0: unsupported parameter 5134 [ 1688.839723][ T7406] Bluetooth: hci0: unsupported parameter 8192 [ 1689.334369][ T7438] bridge0: port 3(batadv1) entered blocking state [ 1689.334499][ T7438] bridge0: port 3(batadv1) entered disabled state [ 1689.343673][ T7438] batadv1: entered allmulticast mode [ 1689.349424][ T7438] batadv1: entered promiscuous mode [ 1689.795472][ T7460] netlink: 'syz.8.7751': attribute type 16 has an invalid length. [ 1689.816918][ T6294] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1689.816938][ T6294] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1689.873043][ T7464] tipc: Enabled bearer , priority 10 [ 1689.883130][ T7464] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1689.964553][ T7472] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1690.065089][ T7473] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1690.308374][ T7491] netlink: Unknown conntrack attr (type=68, max=9) [ 1690.578209][ T7507] gre1: entered promiscuous mode [ 1690.578234][ T7507] gre1: entered allmulticast mode [ 1690.596229][ T7507] netlink: 'syz.8.7765': attribute type 1 has an invalid length. [ 1690.850014][ T7516] ip6erspan0: entered promiscuous mode [ 1691.274503][ T7540] syzkaller1: entered promiscuous mode [ 1691.274526][ T7540] syzkaller1: entered allmulticast mode [ 1691.285053][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1691.595131][ T7576] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1691.652151][ T7583] netlink: 'syz.1.7787': attribute type 1 has an invalid length. [ 1691.836162][ T7586] __nla_validate_parse: 17 callbacks suppressed [ 1691.836191][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7787'. [ 1691.933217][ T7583] bond5: entered promiscuous mode [ 1691.933611][ T7583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1691.960422][ T7584] bond5: (slave bridge4): making interface the new active one [ 1691.960448][ T7584] bridge4: entered promiscuous mode [ 1691.961342][ T7584] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1692.002623][ T7589] ipvlan4: entered allmulticast mode [ 1692.002644][ T7589] bond5: entered allmulticast mode [ 1692.002655][ T7589] bridge4: entered allmulticast mode [ 1692.018317][ T7249] Bluetooth: hci6: command 0x0406 tx timeout [ 1692.030936][ T7589] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1692.030962][ T7589] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 1692.092361][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1692.112404][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7790'. [ 1692.219341][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7788'. [ 1692.245503][ T5309] IPVS: ip_vs_send_async error -101 [ 1692.449595][ T7616] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 1692.593578][ T7620] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7795'. [ 1692.707520][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.221778][ T7667] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7810'. [ 1693.294238][ T7667] xt_NETMAP: bad rangesize 37. [ 1693.422953][ T7682] bond5: entered promiscuous mode [ 1693.423364][ T7682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1693.494110][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1693.494134][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1693.756609][ T7706] Cannot find set identified by id 4 to match [ 1693.896889][ T7711] netlink: 'syz.8.7822': attribute type 10 has an invalid length. [ 1693.899418][ T7715] netlink: 'syz.1.7823': attribute type 29 has an invalid length. [ 1693.931630][ T7711] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1693.986160][ T7711] ip_tables: iptables: counters copy to user failed while replacing table [ 1694.288206][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7830'. [ 1694.441493][ T7737] netlink: 'syz.5.7830': attribute type 29 has an invalid length. [ 1694.469071][ T7733] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1694.754885][ T6298] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.754933][ T6298] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.755030][ T6298] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.755062][ T6298] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.775160][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7834'. [ 1694.852995][ T7750] netlink: 'syz.1.7835': attribute type 1 has an invalid length. [ 1694.861440][ T7751] netlink: 'syz.1.7835': attribute type 1 has an invalid length. [ 1694.955782][ T7756] ip_tables: iptables: counters copy to user failed while replacing table [ 1695.104138][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7835'. [ 1695.203977][ T7773] bond6: (slave veth0_to_bond): making interface the new active one [ 1695.242233][ T7773] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1695.348032][ T7784] netlink: 'syz.8.7841': attribute type 4 has an invalid length. [ 1696.355646][ T7828] netlink: 'syz.5.7851': attribute type 1 has an invalid length. [ 1696.444496][ T7833] Bluetooth: hci0: unsupported parameter 5134 [ 1696.444520][ T7833] Bluetooth: hci0: unsupported parameter 8192 [ 1696.444532][ T7833] Bluetooth: hci0: unsupported parameter 5134 [ 1696.444543][ T7833] Bluetooth: hci0: unsupported parameter 8192 [ 1696.481838][ T7840] Bluetooth: hci0: unsupported parameter 5134 [ 1696.481882][ T7840] Bluetooth: hci0: unsupported parameter 8192 [ 1696.481894][ T7840] Bluetooth: hci0: unsupported parameter 5134 [ 1696.481905][ T7840] Bluetooth: hci0: unsupported parameter 8192 [ 1696.490152][ T7836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1696.658385][ T7843] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1696.669520][ T7848] netlink: 'syz.1.7856': attribute type 16 has an invalid length. [ 1696.872671][ T7867] netlink: 'syz.5.7858': attribute type 3 has an invalid length. [ 1696.935008][ T7873] netlink: 'syz.5.7858': attribute type 3 has an invalid length. [ 1697.248413][ T7891] sctp: [Deprecated]: syz.5.7865 (pid 7891) Use of int in max_burst socket option. [ 1697.248413][ T7891] Use struct sctp_assoc_value instead [ 1697.312724][ T7891] __nla_validate_parse: 9 callbacks suppressed [ 1697.312742][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7865'. [ 1697.713086][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1697.825656][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7880'. [ 1697.906280][ T7929] bond4: entered promiscuous mode [ 1697.907683][ T7929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1697.971239][ T7935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1697.971615][ T7935] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1697.984116][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1698.007007][ T7935] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 1698.452184][ T7964] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1698.493450][ T7964] bridge0: port 4(syz_tun) entered disabled state [ 1698.494091][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.494735][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.545930][ T7964] bridge0: port 4(syz_tun) entered blocking state [ 1698.546058][ T7964] bridge0: port 4(syz_tun) entered forwarding state [ 1698.546309][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.546408][ T7964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.546615][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.546755][ T7964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.549840][ T7964] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1698.551221][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1698.551518][ T7964] bridge0: port 4(syz_tun) entered disabled state [ 1698.551704][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.551877][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.603200][ T7978] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7892'. [ 1698.658103][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1698.727938][ T7984] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7895'. [ 1698.757190][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1698.779301][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1699.677432][ T8033] validate_nla: 3 callbacks suppressed [ 1699.677454][ T8033] netlink: 'syz.8.7906': attribute type 1 has an invalid length. [ 1699.710376][ T8033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1699.716545][ T8033] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1699.743798][ T8033] bond6: entered allmulticast mode [ 1699.768650][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1699.803889][ T8033] syzkaller0: entered promiscuous mode [ 1699.803913][ T8033] syzkaller0: entered allmulticast mode [ 1699.947509][ T8033] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1700.348748][ T8078] sctp: [Deprecated]: syz.2.7920 (pid 8078) Use of int in maxseg socket option. [ 1700.348748][ T8078] Use struct sctp_assoc_value instead [ 1700.529228][ T8100] C: renamed from lo [ 1700.549978][ T8100] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1700.864000][ T8118] netlink: 'syz.2.7927': attribute type 1 has an invalid length. [ 1701.027262][ T8129] veth5: entered allmulticast mode [ 1701.041695][ T8129] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1701.046624][ T8135] netlink: 'syz.1.7931': attribute type 12 has an invalid length. [ 1701.046644][ T8135] netlink: 'syz.1.7931': attribute type 29 has an invalid length. [ 1701.099177][ T8118] bond5: (slave veth0_to_bond): making interface the new active one [ 1701.099895][ T8118] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1701.225917][ T8140] C: Caught tx_queue_len zero misconfig [ 1701.636437][ T8167] netlink: 'syz.8.7935': attribute type 4 has an invalid length. [ 1701.636553][ T8162] netlink: 'syz.8.7935': attribute type 4 has an invalid length. [ 1702.243499][ T8199] tipc: Enabling of bearer rejected, failed to enable media [ 1702.331407][ T8207] __nla_validate_parse: 22 callbacks suppressed [ 1702.331427][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7949'. [ 1702.332483][ T8207] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1702.648999][ T8228] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7956'. [ 1702.654487][ T8225] syzkaller1: entered promiscuous mode [ 1702.654510][ T8225] syzkaller1: entered allmulticast mode [ 1702.692984][ T8225] syzkaller1: left promiscuous mode [ 1702.693005][ T8225] syzkaller1: left allmulticast mode [ 1702.913312][ T8243] sctp: [Deprecated]: syz.0.7960 (pid 8243) Use of int in max_burst socket option deprecated. [ 1702.913312][ T8243] Use struct sctp_assoc_value instead [ 1702.999925][ T8248] netlink: 'syz.8.7963': attribute type 12 has an invalid length. [ 1703.083167][ T8255] ip_tables: iptables: counters copy to user failed while replacing table [ 1703.157956][ T8255] netlink: 'syz.8.7965': attribute type 2 has an invalid length. [ 1703.157979][ T8255] netlink: 'syz.8.7965': attribute type 2 has an invalid length. [ 1703.277316][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7967'. [ 1703.277440][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.350234][ T8266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.397768][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7968'. [ 1703.397791][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7968'. [ 1703.523216][ T8281] x_tables: duplicate underflow at hook 2 [ 1703.553795][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7969'. [ 1703.987510][ T8307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1704.091687][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1704.091720][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1704.092530][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1704.092555][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1704.212570][ T8326] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1704.337678][ T8334] x_tables: duplicate underflow at hook 3 [ 1704.638062][ T8349] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1705.420581][ T8391] ipvlan4: entered allmulticast mode [ 1705.420604][ T8391] batadv_slave_1: entered allmulticast mode [ 1705.434256][ T8391] batman_adv: batadv0: Adding interface: ipvlan4 [ 1705.434273][ T8391] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.464420][ T8395] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1705.486917][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.486939][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.486954][ T8391] batman_adv: batadv0: Interface activated: ipvlan4 [ 1705.713355][ T8406] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1705.785671][ T8407] x_tables: unsorted underflow at hook 3 [ 1705.946156][ T8418] syzkaller1: entered promiscuous mode [ 1705.946178][ T8418] syzkaller1: entered allmulticast mode [ 1705.960037][ T8419] tc_dump_action: action bad kind [ 1705.986550][ T8424] netlink: 'syz.1.8008': attribute type 1 has an invalid length. [ 1706.053080][ T8424] veth3: entered promiscuous mode [ 1706.322032][ T8440] netlink: 'syz.1.8014': attribute type 1 has an invalid length. [ 1706.419378][ T8440] bond8: entered promiscuous mode [ 1706.419763][ T8440] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1706.440940][ T8444] bond8: (slave bridge5): making interface the new active one [ 1706.440964][ T8444] bridge5: entered promiscuous mode [ 1706.448603][ T8444] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1706.812520][ T8470] sctp: [Deprecated]: syz.1.8020 (pid 8470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1706.812520][ T8470] Use struct sctp_sack_info instead [ 1707.289958][ T8481] syz_tun: left allmulticast mode [ 1707.290045][ T8481] syz_tun: left promiscuous mode [ 1707.293393][ T8481] bridge0: port 4(syz_tun) entered disabled state [ 1707.398190][ T8481] bond1: left allmulticast mode [ 1707.406789][ T8481] bond1: left promiscuous mode [ 1707.408126][ T8481] bridge0: port 3(bond1) entered disabled state [ 1707.444048][ T8481] bridge_slave_1: left allmulticast mode [ 1707.444111][ T8481] bridge_slave_1: left promiscuous mode [ 1707.447947][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.470928][ T8481] bridge_slave_0: left allmulticast mode [ 1707.470954][ T8481] bridge_slave_0: left promiscuous mode [ 1707.471816][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.575260][ T8481] .`: (slave bridge0): Releasing backup interface [ 1707.857965][ T8501] geneve3: entered promiscuous mode [ 1707.858008][ T8501] geneve3: entered allmulticast mode [ 1707.875480][ T6298] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1707.878065][ T6306] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1707.878445][ T6306] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1707.878476][ T6306] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1708.062367][ T8506] __nla_validate_parse: 11 callbacks suppressed [ 1708.062387][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'. [ 1708.071788][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8027'. [ 1708.125492][ T8509] syzkaller1: entered promiscuous mode [ 1708.125516][ T8509] syzkaller1: entered allmulticast mode [ 1708.207170][ T8512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.242091][ T8514] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1708.242125][ T8514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.348334][ T8518] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 1708.417840][ T8520] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1708.443566][ T8523] netlink: 'syz.1.8035': attribute type 4 has an invalid length. [ 1708.560977][ T8528] netlink: 'syz.1.8037': attribute type 1 has an invalid length. [ 1709.061145][ T8544] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8043'. [ 1709.108686][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8045'. [ 1709.253356][ T8554] syzkaller0: left promiscuous mode [ 1709.253378][ T8554] syzkaller0: left allmulticast mode [ 1709.329951][ T8559] syzkaller1: entered promiscuous mode [ 1709.329975][ T8559] syzkaller1: entered allmulticast mode [ 1709.338353][ T8559] 0: reclassify loop, rule prio 0, protocol 03 [ 1709.406896][ T8566] netlink: 'syz.0.8051': attribute type 29 has an invalid length. [ 1709.426995][ T6298] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.474967][ T6292] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.606529][ T6306] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.615896][ T6292] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.643603][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8053'. [ 1709.643750][ T8570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.732911][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.970587][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8057'. [ 1710.024357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.313994][ T8600] ip6erspan0: entered promiscuous mode [ 1710.694136][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8065'. [ 1710.707520][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8065'. [ 1710.748354][ T8619] syzkaller1: entered promiscuous mode [ 1710.748377][ T8619] syzkaller1: entered allmulticast mode [ 1710.991616][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8067'. [ 1711.442277][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1711.945326][ T8679] netlink: NAT attribute has 8 unknown bytes [ 1711.945358][ T8679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.145774][ T8684] Cannot find del_set index 14804 as target [ 1712.358329][ T8695] xt_cluster: node mask cannot exceed total number of nodes [ 1712.476798][ T8701] netlink: 'syz.2.8087': attribute type 2 has an invalid length. [ 1712.498151][ T8708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1712.526303][ T8701] : entered promiscuous mode [ 1713.201825][ T8749] __nla_validate_parse: 3 callbacks suppressed [ 1713.201843][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8098'. [ 1713.201886][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8098'. [ 1713.202321][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.353579][ T8755] syzkaller0: entered promiscuous mode [ 1713.353600][ T8755] syzkaller0: entered allmulticast mode [ 1713.462064][ T8760] netlink: 'syz.8.8104': attribute type 1 has an invalid length. [ 1713.537343][ T8760] bond8: entered promiscuous mode [ 1713.537741][ T8760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1713.601304][ T8764] bond8: (slave bridge4): making interface the new active one [ 1713.601328][ T8764] bridge4: entered promiscuous mode [ 1713.602242][ T8764] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1713.666704][ T8767] geneve0: entered allmulticast mode [ 1713.704175][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8104'. [ 1713.824853][ T8767] netlink: 'syz.0.8105': attribute type 1 has an invalid length. [ 1713.884176][ T8767] veth7: entered allmulticast mode [ 1714.003783][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1714.176602][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1714.243012][ T8782] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1714.243688][ T8782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1714.431828][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8111'. [ 1714.720819][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8114'. [ 1714.747790][ T8804] netlink: 'syz.1.8115': attribute type 83 has an invalid length. [ 1714.817673][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1715.244500][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1716.405120][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1716.433137][ T8888] ip_tunnel: non-ECT from 172.30.1.6 with TOS=0x3 [ 1716.681375][ T8896] netlink: 'syz.5.8143': attribute type 10 has an invalid length. [ 1716.696899][ T8896] dummy0: left promiscuous mode [ 1716.704112][ T8896] dummy0: entered promiscuous mode [ 1716.717741][ T8896] team0: Port device dummy0 added [ 1717.093002][ T8915] tipc: Enabling of bearer rejected, already enabled [ 1717.093408][ T8916] tipc: Enabling of bearer rejected, already enabled [ 1717.368330][ T8935] netlink: 'syz.2.8155': attribute type 83 has an invalid length. [ 1718.213986][ T8976] __nla_validate_parse: 77 callbacks suppressed [ 1718.214007][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1718.226932][ T8976] ip_tables: iptables: counters copy to user failed while replacing table [ 1718.242705][ T8978] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8169'. [ 1718.250444][ T8981] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8169'. [ 1718.559683][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8173'. [ 1718.560488][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8173'. [ 1718.597387][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1718.669245][ T8999] Bluetooth: hci0: unsupported parameter 5135 [ 1718.669268][ T8999] Bluetooth: hci0: unsupported parameter 8192 [ 1718.669281][ T8999] Bluetooth: hci0: unsupported parameter 5135 [ 1718.669293][ T8999] Bluetooth: hci0: unsupported parameter 8192 [ 1718.944492][ T9014] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 1719.042739][ T9010] netlink: 'syz.8.8176': attribute type 1 has an invalid length. [ 1719.595597][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1723.562814][ T9032] netlink: 'syz.0.8183': attribute type 29 has an invalid length. [ 1723.723328][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1723.723538][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1724.009245][ T9072] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8190'. [ 1724.060485][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8190'. [ 1724.119085][ T9080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.204772][T25167] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.204806][T25167] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.204830][T25167] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1724.272984][ T9088] netlink: 'syz.5.8196': attribute type 1 has an invalid length. [ 1724.364311][ T9088] bond5: entered promiscuous mode [ 1724.367965][ T9088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1724.372891][ T9087] netlink: 'syz.5.8196': attribute type 30 has an invalid length. [ 1724.372910][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8196'. [ 1724.512433][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8201'. [ 1724.556309][ T9106] netlink: NAT attribute has 8 unknown bytes [ 1724.556342][ T9106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1724.562630][ T9114] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8203'. [ 1724.598701][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8200'. [ 1724.744567][ T9127] netlink: 'syz.2.8207': attribute type 7 has an invalid length. [ 1724.747446][ T9127] netlink: 'syz.2.8207': attribute type 5 has an invalid length. [ 1724.747463][ T9127] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8207'. [ 1724.749570][ T9125] netlink: 400 bytes leftover after parsing attributes in process `syz.2.8207'. [ 1725.086938][ T9143] netlink: NAT attribute has 5 unknown bytes [ 1725.086973][ T9143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1726.039149][ T9189] syzkaller0: Caught tx_queue_len zero misconfig [ 1726.040518][ T9189] syzkaller0: entered promiscuous mode [ 1726.040537][ T9189] syzkaller0: entered allmulticast mode [ 1726.469680][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.583208][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.621566][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.668147][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.704445][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.754210][ T9210] netlink: 'syz.2.8235': attribute type 23 has an invalid length. [ 1726.795758][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1727.088003][ T9231] xt_l2tp: v2 doesn't support IP mode [ 1727.502812][ T9252] ip_tables: iptables: counters copy to user failed while replacing table [ 1727.722235][ T9272] batadv1: left allmulticast mode [ 1727.722261][ T9272] batadv1: left promiscuous mode [ 1727.722524][ T9272] bridge0: port 3(batadv1) entered disabled state [ 1727.763545][ T9272] dummy0: left allmulticast mode [ 1727.773455][ T9272] dummy0: left promiscuous mode [ 1727.798079][ T9272] bridge0: port 1(dummy0) entered disabled state [ 1727.831995][ T9272] bridge_slave_1: left promiscuous mode [ 1727.832208][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.062495][ T9285] openvswitch: netlink: Message has 8 unknown bytes. [ 1728.062529][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1728.063960][ T9285] openvswitch: netlink: Message has 8 unknown bytes. [ 1728.063990][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.353913][ T9327] __nla_validate_parse: 11 callbacks suppressed [ 1729.353935][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8268'. [ 1729.407984][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8269'. [ 1729.450410][ T9330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1729.599992][ T9341] validate_nla: 13 callbacks suppressed [ 1729.600014][ T9341] netlink: 'syz.8.8272': attribute type 1 has an invalid length. [ 1729.739147][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8272'. [ 1729.790264][ T9350] bond10: (slave bridge5): making interface the new active one [ 1729.790738][ T9350] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 1729.843696][ T9355] ip_tables: iptables: counters copy to user failed while replacing table [ 1729.867486][ T9361] ip_tables: iptables: counters copy to user failed while replacing table [ 1730.012935][ T9375] netlink: 'syz.0.8282': attribute type 32 has an invalid length. [ 1730.012957][ T9375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8282'. [ 1730.040534][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8280'. [ 1730.064377][ T9375] syzkaller0: entered promiscuous mode [ 1730.064397][ T9375] syzkaller0: entered allmulticast mode [ 1730.133312][ T9383] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1730.361427][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8288'. [ 1730.361453][ T9398] netlink: 11 bytes leftover after parsing attributes in process `syz.8.8288'. [ 1730.391649][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8288'. [ 1730.391675][ T9398] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8288'. [ 1730.394167][ T9398] bond0: entered promiscuous mode [ 1730.394189][ T9398] bond_slave_0: entered promiscuous mode [ 1730.394371][ T9398] bond_slave_1: entered promiscuous mode [ 1730.394538][ T9398] veth0_to_bond: entered promiscuous mode [ 1730.489707][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1730.752390][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1730.813275][ T9425] netlink: 'syz.5.8294': attribute type 10 has an invalid length. [ 1730.813483][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.813759][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.829318][ T9425] bridge0: left promiscuous mode [ 1730.854350][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.854419][ T9425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.854707][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.854830][ T9425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.893087][ T9425] bridge0: entered promiscuous mode [ 1730.893610][ T9425] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1731.481053][ T9462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1731.729668][ T9473] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1731.879981][ T9481] syzkaller0: entered promiscuous mode [ 1731.880004][ T9481] syzkaller0: entered allmulticast mode [ 1732.060672][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 1732.118160][ T9486] IPVS: sh: FWM 1 0x00000001 - no destination available [ 1732.951802][ T9531] gre0: Caught tx_queue_len zero misconfig [ 1733.048085][ T32] INFO: task syz.9.6647:3061 blocked for more than 143 seconds. [ 1733.048111][ T32] Not tainted syzkaller #0 [ 1733.048121][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1733.048130][ T32] task:syz.9.6647 state:D stack:26072 pid:3061 tgid:3060 ppid:1718 task_flags:0x400140 flags:0x00080002 [ 1733.048183][ T32] Call Trace: [ 1733.048190][ T32] [ 1733.048204][ T32] __schedule+0x17db/0x58f0 [ 1733.048258][ T32] ? __pfx___schedule+0x10/0x10 [ 1733.048288][ T32] ? schedule+0x90/0x2b0 [ 1733.048311][ T32] schedule+0x164/0x2b0 [ 1733.048332][ T32] schedule_preempt_disabled+0x13/0x30 [ 1733.048350][ T32] __mutex_lock+0x7c1/0x1550 [ 1733.048375][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1733.048398][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 1733.048428][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1733.048458][ T32] ? __nlmsg_put+0xef/0x1b0 [ 1733.048482][ T32] ? genlmsg_put+0x137/0x2e0 [ 1733.048626][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 1733.048656][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1733.048684][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1733.048721][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1733.048755][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1733.048805][ T32] genl_rcv_msg+0x614/0x7a0 [ 1733.048839][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1733.048887][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1733.048927][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1733.048951][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1733.048987][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1733.049025][ T32] ? down_read+0x2be/0x330 [ 1733.049053][ T32] genl_rcv+0x28/0x40 [ 1733.049078][ T32] netlink_unicast+0x7bd/0x940 [ 1733.049111][ T32] netlink_sendmsg+0x813/0xb40 [ 1733.049145][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1733.049178][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1733.049206][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1733.049229][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1733.049257][ T32] ____sys_sendmsg+0x54e/0x850 [ 1733.049284][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1733.049315][ T32] ? import_iovec+0x73/0xa0 [ 1733.049346][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1733.049367][ T32] ? __lock_acquire+0x747/0x2de0 [ 1733.050297][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.050317][ T32] ? futex_wait+0x2a2/0x390 [ 1733.050344][ T32] ? __fget_files+0x2a/0x420 [ 1733.050354][ T32] ? __fget_files+0x3a2/0x420 [ 1733.050369][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1733.050382][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1733.050404][ T32] do_syscall_64+0x166/0x520 [ 1733.050416][ T32] ? trace_irq_disable+0x3b/0x140 [ 1733.050427][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.050438][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1733.050450][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.050461][ T32] RIP: 0033:0x7f796499e2d9 [ 1733.050472][ T32] RSP: 002b:00007f7962bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1733.050487][ T32] RAX: ffffffffffffffda RBX: 00007f7964c25fa0 RCX: 00007f796499e2d9 [ 1733.050494][ T32] RDX: 0000000004000880 RSI: 0000200000000140 RDI: 0000000000000008 [ 1733.050501][ T32] RBP: 00007f7964a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1733.050509][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.050515][ T32] R13: 00007f7964c26038 R14: 00007f7964c25fa0 R15: 00007fff63035308 [ 1733.050532][ T32] [ 1733.050572][ T32] [ 1733.050572][ T32] Showing all locks held in the system: [ 1733.050578][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1733.050586][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1733.050634][ T32] locks held by getty/5375: 2, on CPU#1: [ 1733.050641][ T32] #0: ffff888036f390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1733.050667][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1733.050714][ T32] locks held by syz.4.6416/1942: 2, on CPU#1: [ 1733.050722][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1733.050748][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1733.050780][ T32] locks held by syz-executor/2623: 4, last CPU#1: [ 1733.050787][ T32] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1733.050813][ T32] #1: ffff888031785900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1733.050845][ T32] #2: ffff88807c110340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1733.050914][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1733.050966][ T32] locks held by syz.9.6647/3061: 2, on CPU#0: [ 1733.050983][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1733.051009][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 1733.051041][ T32] locks held by syz.1.8203/9114: 2, on CPU#0: [ 1733.051048][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1733.051074][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1733.051101][ T32] locks held by syz.8.8318/9527: 1, on CPU#1: [ 1733.051108][ T32] #0: ffff8880364c8060 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0 [ 1733.051133][ T32] locks held by syz.2.8321/9535: 4, last CPU#1: [ 1733.051140][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1733.051165][ T32] #1: ffff8880429b76e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1733.051190][ T32] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ethnl_default_dumpit+0xdc/0x630 [ 1733.051216][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1733.051242][ T32] [ 1733.051245][ T32] ============================================= [ 1733.051245][ T32] [ 1733.051256][ T32] NMI backtrace for cpu 1 [ 1733.051264][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1733.051275][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1733.051282][ T32] Call Trace: [ 1733.051287][ T32] [ 1733.051291][ T32] dump_stack_lvl+0xe8/0x150 [ 1733.051307][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1733.051321][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1733.051339][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1733.051354][ T32] sys_info+0x135/0x170 [ 1733.051366][ T32] watchdog+0xfd7/0x1030 [ 1733.051381][ T32] ? watchdog+0x1c7/0x1030 [ 1733.051395][ T32] kthread+0x38b/0x480 [ 1733.051406][ T32] ? __pfx_watchdog+0x10/0x10 [ 1733.051415][ T32] ? __pfx_kthread+0x10/0x10 [ 1733.051426][ T32] ret_from_fork+0x514/0xb70 [ 1733.051438][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1733.051448][ T32] ? __switch_to+0xc89/0x1420 [ 1733.051463][ T32] ? __pfx_kthread+0x10/0x10 [ 1733.051473][ T32] ret_from_fork_asm+0x1a/0x30 [ 1733.051494][ T32] [ 1733.051498][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1733.051531][ C0] NMI backtrace for cpu 0 [ 1733.051545][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1733.051565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1733.051576][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1733.051599][ C0] Code: 3b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1733.051615][ C0] RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246 [ 1733.051632][ C0] RAX: 000000000024e355 RBX: ffffffff819bebe0 RCX: 8000000000000001 [ 1733.051646][ C0] RDX: 0000000000000001 RSI: ffffffff8e46919a RDI: ffffffff8c6dd880 [ 1733.051661][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 [ 1733.051676][ C0] R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 [ 1733.051689][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 1733.051705][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 1733.051721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1733.051735][ C0] CR2: 00007fbffe60fd58 CR3: 0000000051d06000 CR4: 00000000003526f0 [ 1733.051752][ C0] Call Trace: [ 1733.051759][ C0] [ 1733.051766][ C0] default_idle+0x9/0x20 [ 1733.051788][ C0] default_idle_call+0x72/0xb0 [ 1733.051812][ C0] do_idle+0x2e0/0x540 [ 1733.051832][ C0] ? __pfx_do_idle+0x10/0x10 [ 1733.051859][ C0] cpu_startup_entry+0x43/0x60 [ 1733.051879][ C0] rest_init+0x378/0x3a0 [ 1733.051903][ C0] ? __pfx_rest_init+0x10/0x10 [ 1733.051932][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1733.051957][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 1733.051979][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1733.052007][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1733.052035][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 1733.052119][ C0] start_kernel+0x392/0x3e0 [ 1733.052160][ C0] x86_64_start_reservations+0x24/0x30 [ 1733.052180][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1733.052198][ C0] common_startup_64+0x13e/0x157 [ 1733.052232][ C0] [ 1733.053845][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1733.933127][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1733.942229][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1733.952277][ T32] Call Trace: [ 1733.955549][ T32] [ 1733.958468][ T32] vpanic+0x56d/0xa60 [ 1733.962450][ T32] ? __pfx___schedule+0x10/0x10 [ 1733.967290][ T32] ? __pfx_vpanic+0x10/0x10 [ 1733.971794][ T32] panic+0xc5/0xd0 [ 1733.975507][ T32] ? __pfx_panic+0x10/0x10 [ 1733.979915][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1733.985367][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1733.990759][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1733.996934][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1734.003089][ T32] watchdog+0x1030/0x1030 [ 1734.007417][ T32] ? watchdog+0x1c7/0x1030 [ 1734.011834][ T32] kthread+0x38b/0x480 [ 1734.015896][ T32] ? __pfx_watchdog+0x10/0x10 [ 1734.020563][ T32] ? __pfx_kthread+0x10/0x10 [ 1734.025142][ T32] ret_from_fork+0x514/0xb70 [ 1734.029721][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1734.034835][ T32] ? __switch_to+0xc89/0x1420 [ 1734.039510][ T32] ? __pfx_kthread+0x10/0x10 [ 1734.044087][ T32] ret_from_fork_asm+0x1a/0x30 [ 1734.048849][ T32] [ 1734.052165][ T32] Kernel Offset: disabled [ 1734.056491][ T32] Rebooting in 86400 seconds..