last executing test programs: 11m25.822571555s ago: executing program 1 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 11m25.344110952s ago: executing program 3 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0xb}, 0x10}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x7, 0x1, 0x8, 0xc, 0x8}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x80, &(0x7f0000000140)=""/128, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xe, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x26, &(0x7f0000000480)="54b09617b09ec990973b7583a60fde683cb5d3aae7cefb8b9e0152f42058431bd445c984d1a4", 0x5d, 0x0, &(0x7f00000004c0)="0a7c27b8c010e8cbb6355b4e681a10baee4870cb0fca5c8eea5868592048f3ca29d050bc50e5ce07420138700d0425c1c393282b4ec314750a35191583d0ee47b5d6d56b4a1086639f4a9007c3b1b63f1e6833f70c6f910e4b31f4207e"}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x7}, 0x10) 11m25.342575106s ago: executing program 1 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20}}]}, 0x24}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x1, 0x17e, [0x0, 0x0, 0x0, 0x0, 0x200000000100, 0x20000000021e], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x14, 0x8848, 'macvlan0\x00', 'vlan0\x00', 'veth1_to_hsr\x00', 'veth1_to_hsr\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xee, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', {0x2}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1f6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x9, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x6}]}, @fwd={0xb}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x15, 0x0, 0xf, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @volatile={0x8}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x66245a6058c5efa5, 0x30, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000040)=""/3, 0xa5, 0x3, 0x0, 0xf635, 0xe2d56a908b7c244e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r3, r4, 0x5, 0x4, 0x5}, 0x50) 11m25.203104137s ago: executing program 4 (id=848): setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000180), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abdffff0000df25320000000c0099000008000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc2, &(0x7f0000000400)=""/194, 0x0, 0x0, '\x00', r4, @sk_msg}, 0x94) 11m25.143526286s ago: executing program 1 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400040000000007040000f0ffffffb702000003c2df0000000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001900000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r5, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000540)={0x2, 0x1000}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r6, r3, 0x4, r2}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x884) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r14 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r15, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendto$packet(r12, &(0x7f0000000180)="c7d929c78a19ccd713766a7bf14dfe5b5771a12e0ea264ac58540c7324bfb197b50c66986e19ead3d99e9336e196d42a5e9f2e8612c7", 0x36, 0x8000, &(0x7f00000000c0)={0x11, 0x5, r15, 0x1, 0x9, 0x6, @random="0901fd4de775"}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r11, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000845}, 0x4000804) r16 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 11m25.1403106s ago: executing program 3 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) 11m24.989695178s ago: executing program 4 (id=851): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4c831, 0xffffffffffffffff, 0x370ed000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010471"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000940)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$nl_route(r4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000001680)=0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x200, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={r9, 0x7ff}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11m24.977591998s ago: executing program 3 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f1700010027000000270000000600002900000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2000}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a02000000006558", 0x9}], 0x2) 11m24.740179797s ago: executing program 4 (id=854): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d0, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x190, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x10}}, @TCA_BPF_ACT={0x184, 0x1, [@m_simple={0x180, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'veth0_to_hsr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7581, 0x1, 0x6, 0x8}}, @TCA_DEF_DATA={0x11, 0x3, 'veth0_to_hsr\x00'}, @TCA_DEF_DATA={0x7, 0x3, ')^\x00'}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/61, 0x3d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 11m24.709393193s ago: executing program 1 (id=855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x89}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/3569, @ANYRES16=r0, @ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4b}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r7) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xb}, 0x20) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r6, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r9, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x88, r10, 0x2, 0x70bd25, 0x25dfdbed, {}, [@NLBL_MGMT_A_IPV4ADDR={0x0, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 11m24.696992214s ago: executing program 3 (id=856): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 11m24.58028732s ago: executing program 4 (id=857): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000c8d1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 11m24.520056849s ago: executing program 3 (id=859): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="580020001000cf85c1ac538a04b3fb8c2404ae74b9d4ceda5775e0abbc0000", @ANYRES32=0x0, @ANYBLOB="faf0807dbcedf71a24001280110001006272696467655f736c617665000000000c0005800500190000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x1, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x12b8, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x1006, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x84, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x2, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0xfffffff9, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x717c, 0x0, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x5, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x58b, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0xffffffffffffffff, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x0, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0xffffffff, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x3, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x80000002, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0xfffffffc, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x12d3, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x82, 0x3, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0x5, 0x7, 0x9, 0xfffffffe, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x2006, 0x9, 0x0, 0x944, 0x2, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x2, 0x4, 0x9, 0xfffb, 0x9d1, 0x1, 0xf, 0x8, 0x44, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="bc000740", @ANYRES16=r15, @ANYBLOB="00082bbd7000fcdbdf250600000008000500040000000a00e80008021100000000001c00e700bb3bb4c07b841e4124a0ad486b6a701027179ffda3faea851c00e700dd8e96420fb6c32372668dcde2b18f0af82be672a1720fba040017800a00e80008021100000100002400178004000200040005000400030004000100040003000400040004000400040005001c00e700a19c8fa1acff3a74a72d0e1781ee8ae7681744d1d3fd8ca20a0018000303030303030000"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 11m24.433340522s ago: executing program 4 (id=860): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x36, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) ioctl$FICLONE(r0, 0x40049409, r1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f000700002009000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edc2ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce00004968"], 0x0) 11m24.160634388s ago: executing program 1 (id=862): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffffc}, 0x48) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='a *:* vw\x00'], 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0), 0xe) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'gretap0\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x10d, 0xfffffffffffffff9, 0x2, 0xc, 0x2800000000000009, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)) 11m24.020244596s ago: executing program 3 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ba024e", 0x28, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x73}, @routing={0x33, 0x0, 0x0, 0x9}, @routing={0x29, 0x0, 0x0, 0xfa}], {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x7, "3338b9", 0x2, 'sNV'}}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2400c891}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12123, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 11m23.716764456s ago: executing program 32 (id=863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1}, &(0x7f00000004c0)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup(r2, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) r6 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) setsockopt(r6, 0x8, 0xfffffff8, &(0x7f00000001c0)="3bcc201f3e20dd1d565cc001e69374112e6180ab6caa3d66c7344e4f4a5c02ea6576a5b4aa4ac0dd6178ce4796e1a58d7b0e365aea53e34c6d1a12ff554ad7a1dc58bc2a44b09cf76d3afb2017b32a738ff74fbe6f87bb58ad65dff68e1da900fc504070db33", 0x66) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r8, 0x0, 0xa) r9 = openat$cgroup_devices(r7, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_type(r5, &(0x7f0000000100), 0x9) 11m23.280716771s ago: executing program 33 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ba024e", 0x28, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x73}, @routing={0x33, 0x0, 0x0, 0x9}, @routing={0x29, 0x0, 0x0, 0xfa}], {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x7, "3338b9", 0x2, 'sNV'}}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2400c891}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12123, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 11m23.270605803s ago: executing program 4 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x10, 0x4}, {0xfff1, 0xa}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB="0b000080976b640c68062d00"], 0x24}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$tun(r8, &(0x7f00000002c0)={@val={0x8, 0x800}, @void, @llc={@snap={0x0, 0x1, "95", '\x00', 0x209}}}, 0xc) sendto$inet(r8, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10022, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) sendmmsg$unix(r3, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x22}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0x2f}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r9}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0xa0}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) 11m23.219445222s ago: executing program 34 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x10, 0x4}, {0xfff1, 0xa}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB="0b000080976b640c68062d00"], 0x24}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$tun(r8, &(0x7f00000002c0)={@val={0x8, 0x800}, @void, @llc={@snap={0x0, 0x1, "95", '\x00', 0x209}}}, 0xc) sendto$inet(r8, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10022, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) sendmmsg$unix(r3, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x22}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0x2f}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r9}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0xa0}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) 11m23.174997909s ago: executing program 1 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40100) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @multicast2}, 0x2}}, 0x2e) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0x1, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x0, @void}}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r6, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r10 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f0000000080), r10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 11m22.978134268s ago: executing program 35 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40100) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @multicast2}, 0x2}}, 0x2e) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0x1, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x0, @void}}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r6, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r10 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f0000000080), r10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 4m57.941405131s ago: executing program 5 (id=5015): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8000000}], 0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0x40, {{0xd, 0x4, 0x0, 0x11, 0x34, 0x64, 0x0, 0x69, 0x4, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x3, [{@empty, 0x3}, {@local, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x8, [{@local, 0x1ff}]}]}}}}}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x0, 0x2, 0x0, 0x0, "9051a8cde8c20c8b"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) (async) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) sendto$inet6(r2, 0x0, 0x0, 0x1, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m57.22416688s ago: executing program 0 (id=5020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x81800) connect$phonet_pipe(r1, &(0x7f00000003c0)={0x23, 0x4, 0x4}, 0xffffffffffffffbb) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="7ffbc0d946da057c682ea031af54a6c2eae89985cc", @ANYRESDEC, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x118}}, 0x440c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000007c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0xfffffff9, @mcast2, 0x6}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0x2, 0x8) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x8) r7 = syz_genetlink_get_family_id$tipc2(0x0, r6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r3, 0x4}, 0x8) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3af43971ff81a909b91dfa", @ANYRES16=r7, @ANYBLOB="04002bbd7000fcdbdf250e000000000104800900010073797a3000000000340007801c000780080003007b00000008000400010000000800020004000000140007800800020007030000080003000800000034000780080003003d000000080002004000000008000400ff7f0000080003000300000008000400f7ffffff08000400400000000c00078008000100110000004c0007800800040003000000080001001a00000008000200018000000800030001000100080004000800000008000200e40f0000080002000100008008000400ff7f00000800020004000000"], 0x114}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100004000000000000000000000007871c47bd34b9ff460f6c2bc2000a20000000000a05000000000000000000070000010900010073797a300000000014000000090a0104000000000000000007000000700000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004400038040000080080003400000000234000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800a0001006c696d6974000000140000001000010000000000000000000084000a"], 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100001042dbd7000000000000000776d6d0000", @ANYRES32=0x0, @ANYBLOB="00000000020000002000128009000100626f6e640000000010000280080007000900000004000880"], 0x40}}, 0x8004) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="e98a9e464f7424000000000000000008000000b1c0cbab0140ab29db2110911fad766d378d3e2cb216aa8f147d71137aaa4586adec3ca2aeaa6ccb45065edfec127bdf660915ce", @ANYRES32=r9, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1}, 0x0) 4m57.022056144s ago: executing program 0 (id=5024): r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r1], 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 4m56.900324186s ago: executing program 5 (id=5025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x68, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x808c2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000025210b1202e8fb3861a508a8fda2982853c992af29559ae0d0eaba941b3f7ad2935bc31d76588e6f9af6f5806b70e7aa90d3b891e5e861b0e72f711f2aabe0633b1cc798df8f130f2397812feb5a443b8933174a8a62513e14928136d8f5c7ca052e57809b75f78fad36136492841617b04f54743f9b6d39154a86574e2b2564b72d608973e187f5463779", @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf250100000014000b00ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 4m56.899403103s ago: executing program 0 (id=5026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2d, 0x3, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m56.711832617s ago: executing program 5 (id=5029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 4m56.708684708s ago: executing program 0 (id=5031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1e00000000000000060000000700000000000000", @ANYRES32, @ANYBLOB="000000000000c9c70000000000a479d0001300001a0000046064304379696caf0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000800"/28], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000001480)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf252d0000000c00e400720000001dfe120039004500d4babf6eef5f58ad9651082f604ee10eec008de8412db3147168fc1a629b1ffd2fbfcd38c9b0c335ff36bf936496930226a507a851000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2a, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000ffdbdf253a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730091e19e35c004e9a9610db7"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000015c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x40840) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd7000feff01004400000008000300", @ANYRES32=r4, @ANYBLOB="0c007000054006eaff000004001800030303030303000000"], 0x34}}, 0x0) syz_emit_ethernet(0x3d1, &(0x7f0000000000)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2339603803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adadb5084fceb82b77c33c226dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978181d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000050b17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd159f51a948b5b303f4f0032140fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb05145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0000000000000000000005090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"], 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000000c0)="bf911b5c0fa7fe25a4c2a7128dc13a8765b48394a8a8e5c06aa57059fdd7991d072843bd3b519304fac2fee758245c1883095fc157af5f2b99b7dde4f6f6bbc851ce4d55353827536dbbff2b3f8dd0a777bd8cc84e38b632f2d6a6ac5e4688188937fc13c32f9b783eba12152d8c330cfcfa0d2271e284fe81c53a04604ce7e5d3dd072d462be8e7fa33adfc3932602ddaf63a47be8cd100a5febf9a0f80a1103d19c314797fec1819c3ad4bec98183021ed8e8d1a07868b5ff4eb34541c3e37f4078e5091d0954c65f313834aac18cab451d1066936a93431442f3315f2afdcfbe60e6546db3f39d879eb434bcae011a02ae74795d9abbcb2a6002433a4d71b0b2ee19de88d701551dbd1439afaefe6769c088af2114412277236425e18fc5ae9eb55a153049274e51564403850a1df1c895151ef9e24bd90a1a45a65a881a8de24a7766d1efc46fe6c66280f0d0ae5a614f1a8d2bf19e8b939a00c041118a552d75bcb676999298d64cf6f3c23a67aee402d6a50bc02153519d8f2dfcdd52d3a96ea4e712eb7c923df34b308e5dd212d2d21bdb709d43a14265b752ccd01722e82da0338b79e6910fe0831376ce90b25cf6887a637f8f3a2aeee3751b2fab617b8aa172d5afd14da68b3ece321cd23822a4ba80715710fc1eab994d3cc686d378d45c52371cf48511e21313bf9461a179f59de901899d0ff47400662f1edd06d099e9a29116bd61492a61d9f3ed5d668ebee2d6e65743d71df1e34b786f9524172777ba9b517141ddc79a3b96826d95dcc0c86d82aa749131c8d2f93774ebf6b21e1dd5751cbf654d45467e072fcf42d9b8a4fb2b5f7cb2343fcca1aec33ca77c2700150d1e4beab604c2ecd3e987d5ad66b03734c2903cefebecd47d641aea232fe69bbe4c1fdd7330030173be55936995842fdd05a508000c32ba9c3ad2ff07a8257f6df5d42f514519b02fd757930bb4a283beee99140b6ab6777c084724322e22bb741af36adb4c31bc385bff6b025db1cf9b2597ed9156c1439ca07a101895792d4f0fd6b426fe7f3c634f9426471d40452f571754610b931b2dd0a8334dab3d35d7c31b394ac922d9f7b220fbdfc97b9a2b09dcbcaffc6fb39dd76cadef63c80fd04b1d930856268e0cf51ada41278e0b252ea48594d0f8f95684521c06b31526217637fc2ff60d8f97488efea526976b7020d7e9d54f9880cb78d07220e3973dd23cb49a6f58796c409d3a9667f4d631294e40b30e1a2ab46c9998169af78be0806c10f19333ef61de8b55d38f483ed08dfa1519e7c8d66d998e4c37ddd0fc560fa1759bde729d239b4a95444e123551710c7167c952056ac1aa3c8508c86b292d41877f60f25e78a1d3a73b2718c32e8b956e54f85a7a3e999b2f98d9b734c4bb17b7d5e0ec874f917ec34ce23470f9ca82b12929ee414c1c8a628c43e740cbbf05f81734f41f09d9be930529c61590b556fd36182e4e3e099323ac76713c5149fc578337eeca91c0701f8f42a9f44966e1473c4ea193634483d883ae9d89c51819b3b677a7e4b88db835cc01a4ac16bfbe762c70306c3cae644f6f988ed938822d82110447298c7e28ef6f3113ba7d951603c28c5293e1dbe5c141cdefbf6192aa801e8a9845b136da3f64d753650e9b04fd52ba662d16d6ca8217f19d2db3ed3d6f526f3e36dd8d68c115f082cc27b57c53a9cbab143bf6c7e2016b5e27326fbce7377c9c3ee944498fe9ebc90faffbbd8e775b4dc6cbdcbccdda6b0da4817aab72e1850b6bedfcef2e893e6de711ca502fc7e223a7238a747dcae507a3eeef9eb2026e439e6123741d7e30f67affba5829f381eb7b8b1220d2d5234c8199aba8c1d87259ea869a090e360a2840c776d1e9e8da092267323a902814bbc733493da57e2acdedf6a2e8ba1fa0eee2a91c3f6e14c20ac3129935eb73773eda73e9caf7c0f5930a53eecf501f291428f4325eda321d63fac753dac6ced2f9139ac8b2b91c18a2d090d6e6b012794bead480472014ff8381ac4598e63627fc898674d3011d48b7e5b46f65c9273e88f8add4c52734a1f7cf02566deaf20987b0ae546a06c2f2350764d9316e5a06318f5070b07ff541a740ab82dc602ad177b9800c0cbf11ab3aafa55732904d22a9ee227b8fb56aba6b69056c39270c6a3ab3e6c33fec0e4a7f47326e2fb8bbed2a6914eb61068b6473ae601b6ff926369c2f984141c78af5e0642d6ec96bf9edf67b1d3f1a0dba32ec887411b9a1d7fd4efcfbef2eb7dac56158b3d60587825c95b581c5fa66cf6c7c19fa8115650e06e1ba91bf0456a318e114acc12c3b15499cdf8fdae6f11fef33d113e7127bd690656562f089e21210e805cb47636a0968c7328a8c1fef07bdbc162524bf7a6eb0031102fe33fda7ccd44c1f547b54e7eac4033944faff714da4e49428aec561b617b17acb66e63b7bcb744d2b35cd2c15c40555b4683c93259616e34aaa732c39b59311fb00cf0a9d97688775c231477e46764484f96f6987d851867fd94a81da405dcb6fdae214a8e138f67e3d4f178f3652796316e9b7a96ebb4dfa4031240a045cc8d1d2988317a35cf2a99b49e4ef364c1b55cfb912d8ccac40da2ca3c7078277e5b8a20b82c5aeda75534032d035d450c74c0ef699fe7c84d33853c06c89f0749520880cc5130add3d6e9e83a60481e174e9e907d89e847c36cd93f16e51db268b389ccf7369d9ba6b1ce548760ed13cdc44ea72bc1b334f4805d79b8ec5200a8bb8318e19c59bb2b90deecf1b4d92ac2d426c58cfa29ff6d5454ffecc26c537fd044cbbf51457f8d35378cdfe75df0bf3d9a599039f6682d817e2049015395ece086d745535f636fdda0abcfc78249a23592b25be8e2f43be106c08693407cceb178616a8217d9cb0ec48f0891ac2ee3290871f841c67e39f54592f489f4fd4b6e379e9dbfcb0c3947f68aa37659964dd7941c7ea2a585eefcf19b62b5c98b6482804e1545d786203737a79c660e5a4f3757e1cb5ee2eb436ae8a5cad0af9cb1407380d311945aee302f11fad96f315600637037138b16af8ad67c4ba42241a32b6a1640db8f2a1eaf0299ddf64dce855954657025ff24ddc24becd35b4fbdd1c0afcb5482d63f7254d8d59e8147ab1d0861ef0fa85df9633de72ecd60d08346b31990f71a0c73cb80180553858f65512d3f55cab38e56befe5df4f6e63eb320c8dbbc7b9eba521ca3b81fb6d6757b3eaddf76532014c1b5bbd44696cff8937885756c2f292da3ea8396553e32d373111e61707545d1601b56fa1aab690cc4db99976b28b4f80b50ed52175350c9495992f100d0f7203941e3ef294e3ed08bb5fee485c558192dfc4b200513461c2dd4b41877e693cbf0ee1dcce0c4406cea104de5792b5a727252263fd91dbd36d732e3ae0efb6afc483a933342519b1e3bbe7329eba1b1495a41483f74ca3e08e3f7ff26fc43cca65438c0793f09561dcb2a107a0c91ca13a77a12c579f030a15b3292b0196a3b4a2472f790df9e3e8991fe26882e413f5631d04d25218f157fe8d1e4449619df62cfdfa5bf2feb7038f819dbfa368b674f35078c53e455e4f90c776e6f067d2fd2aed37a1d700b09d71e36c1c6c013addb405293a8c6fb70fabb679e4b026758299af83e828317aa86534355ea20c1bac55e9653e2da02085acb0176f327a51f1d258dcf0d9c19a6e6b62adf693654305a9017e28fbff0d08773c147b0406da84c540e030ba69853c3ebdf4d1583f9fe6c97feb2add471716f4f1419beddbaf2d9ac6798b9346211bb82456a824ccdc6773690301ed6b8ab316c135390a88e4736385732e4a12994ca6d66784e3c411b53c68b706815a617b06d0281f1456b74b6561262b7904a9fcc529ba513842afe963954a2088bb80d6fdf916296bf41cc5605bca6c971c5b25722133cfb8472a90a807fe23e9d25383ebd516d406a5c8b8c2cf753782640a4a1cacc2739c489546e4502ab4fbbf253b5f42698b1d56871a63e7d39c27526ccf3416f802f421c73cbf41a1144d509a70fd78183abb4d34f11835df348d9c041bc7a93dc326fc55f7239c945eec3738e2125640956bd5769f20f4beb28268fe96400f836b4df6a9a4b36d7a5584ad96cc7d50940bd8bc8ca5e88edf9cd583e7d354be9ab84e792b3fe2a99baaf0c852c5b1414376b5343ee00b9197f5a6c158936e66af8d85600a87433837838f7e845c29e217eef35cf0c0b41e458502c561202c1bae8fa1da0dee6097d513cd54e8077ff364ab30eee2747d0cd87e45a27d6492e52bb4d38718b26974dfb1b94afcd964e223a393f5019fd4340f82148f3430369cdcc7ad2356f32063fbdcc6857e100d35d7d40a4ffd378e13c938aeefa7be4b31aaec6f215bea3778ca35a528ba6b4c525b31748227e43ab99da402f4542a028b27bba371c23851810b1d89dbdb94d34e803e3b09e980e45b3e7b6f9cd4aac58e72ac96a6a32aa44a3f3b224968aa5cb9e44381b3893354475592970f45fbf0b2bf3617e468d29f4dbd0d3d061984936c1ddd22a06afd88bf9a656c8b36ce285f47e6ebf839d7f179ba93f4b3d9cfcf72e1a3946fe4dfc83368e1fd14bab31a1eb3701e8333ca30af4912dc19dc66216db78c5b410798a4ea136859ee70902bc6ab99681d4655dd701eb5e9c0558435c81e363dc7fa7c37eca329c44287a3afcc770767a5aa4df89b3a80ec760a4b006eabf11e546ebc64469f74e160824349c7870016ba3950dcd83451f42fb6a5b7615b16e08bf6bc35f1e55141f04e2c8c70121378af22cfec28dd878656784fff195f3e517c2a8507d6c88d718425f841a5b21c76c040dde11f003a2a84d823fd3f1990031db1170277e6669d9f189cb144ccd86558f03885055b92f33180437408ed6a835ce571087e724a994111d12dc12f44d988978e9a2d0e76aca57d591468e4a3bc52976adca03c4cfce34a19cf52ee2faa3e14a84d4298fd8f83d12813ae1a8c2cab391c59103c2e96b3fd2114bc25f6058670ea3230850430bcb421e16f3d50cd96fd51e77575b5773263c3fad555a396484f4db47f60229858aea185c7ab6a5468766e6c4e103d565da62666aefe4dcb2c42cf44496a5cd9c977f246be62c7eef93ea66da54679f46194498ae3163eae094e602115a39e9c4ed9a31ea023a6088a3ef6f3fbbaf206ba86bedccbe10c51b87f5af8f3a38f12ffa4333e1979cc6c7407def1aa47bf19d2432365a82b88c15ef7e89fdcad8b8f47fa54ff1c76316a8d4d2ae212a96e97475b82deabc490dc55853702138bfc1674e5e51fadff6a5eb3198bd9d8986e13714042e787157b4a6f7d3ba50beb5e86658d96d3b3967fd3237168efa2e52ffcd58fd1eac2e43260957dc85a161d7924b048809d3299589660740999cca5f19f777adc8129461958f77eeecb92096a6941022336ec78ea137b2817712d515d47430bb8c04937c9fd9832a70da550fc5722b3c7941e3b499ec2b4e7a957b1b44b4a6993c8e247dae5355f0c267c5b304a59e5da11a91944069875764cd43f77e123e2896f85b79b5ba2c837823e8c97680105872d88cd0f50c064d391987884ffa542fdfac529807695d4d4a735fc4beed0780a84b0bf0c14b81b3dda752dff8bcd6476d5112ffed08d5d3953cfaa3fb51f974aac3dea160d06ea8d0dca910d803c6d378ad1ca762a9f90fa9aea02c2f2fb953d71f12718990b768fb39b6278ed9f023edb909c0bd8d36bf66e4b45d8618d2903ead82d778f56068636dc50b6ba368", 0x1000}], 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="140000000000000000000000020000000100008000000002000000000000000000000000020000002607000000000000140000000000000000000000010000006a00000000000000180000000000000000000000070000004408476000000000140000000000000000000000010000000900000000000000914d1a93d637a22e868dfa2ca0334146e1a35df11287db2a2afff4e5e179b94ef64e53e1fd29c9c006935eae28b6d2f395f06bd927fe3e880425fef0710c7083a7b0163315b9b7c6f3c604ab7a1645e8e466779d94b89883e19d7716237eb6695fbbf7096ed3a0458c22058adce4f07698159858ea2357507c7b"], 0x78}, 0x4040020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001940)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000826dd7000fbdbdf256c0000000800a10000000000050019010a0000000800a100040000000800a00003000000050019010e000000080026006c09000008009f0002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x400c020) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) 4m56.492290326s ago: executing program 5 (id=5034): r0 = socket(0x10, 0x3, 0xd8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008911}, 0x0) 4m56.449243014s ago: executing program 5 (id=5035): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/120, 0x78}], 0x9, &(0x7f0000000840)=""/104, 0x68}, 0x2100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000900)={0x0, 0x0, @status={[0x8, 0x0, 0x3, 0x3, 0x80000000, 0x4]}, [0x1, 0x8000, 0x9, 0x0, 0x676, 0x8000, 0x3, 0xa8fa, 0x9, 0x4cd, 0x100, 0x0, 0x4, 0x7, 0x1, 0x1, 0x7, 0x4, 0x7, 0x8, 0x5, 0x3ca, 0x1, 0x588, 0x7, 0x7, 0x7fffffffffffffff, 0x0, 0x6, 0xf, 0xffff, 0xfffffffffffffff9, 0x3, 0x0, 0x0, 0x8001, 0xd49, 0x4, 0x8, 0x6, 0x8, 0xffffffffffffffff, 0x9, 0x7, 0x3, 0x1, 0xfffffffffffffff3, 0x6, 0x8542, 0x0, 0x8000000000000001, 0x4, 0x54, 0xfe6c, 0xd42d, 0x4, 0x3, 0x0, 0x3, 0x7, 0x7, 0x80000001, 0x2, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'wm\x00'}, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}}, 0x0) 4m56.421491371s ago: executing program 0 (id=5036): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="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", 0xf50}], 0x2) (async) close(r1) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m56.151727108s ago: executing program 0 (id=5040): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x80) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x1003}}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000440012800c0001006d6163766c616e00340002800800070000040000280005800a0004000000000000000a000400aaaaaaaaaabb00"/76], 0x64}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000500)={0x9, 0x4, 0xa, 0xfa87}, 0x10) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r8, 0x400448e3, 0x0) socket(0x22, 0x2, 0x4) r9 = socket$isdn(0x22, 0x2, 0x26) close(r9) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x2d0, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "334ee87c60a4602ee8d037c081c59bb4edf9473f62f0f4ef270c5f00f7806a81e46e2cb6876239a4f64f82617d80b2d44ca8624408bc21a75201db05b3c375ac142f0cc2ae5128e7b05d0f1ca87f64497a3d5f39bb3dfde50323c11d3cf6ff0725795bcb3191abe0b5df154bbb1d33ed934a83395d47fe7958d314ea04d0f1d709f191febb2103c397ad2c7f82430b68a43c1f53fae5e2123f7464a45fddfa5d"}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "55bd3b2beebde741f7061bfdc5ad1c3ba7ff9e"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "4468eb4918b193b795984fe52110333a4956147f3d3467870c9e95b45dade7f5cff73a89dc6c4802f5f484a78ac8be3a78638fb764e4fc18a2b0ff30f07139f6705e5390214a896b73f2d65c091f9560112f30f8a51b136096e1cb8dc173bd93694a343e1875af98463a9d66c553995495ed9c976925e789629b14"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'{$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}:@*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\'v\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 4m55.736383644s ago: executing program 36 (id=5040): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x80) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x1003}}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000440012800c0001006d6163766c616e00340002800800070000040000280005800a0004000000000000000a000400aaaaaaaaaabb00"/76], 0x64}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000500)={0x9, 0x4, 0xa, 0xfa87}, 0x10) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r8, 0x400448e3, 0x0) socket(0x22, 0x2, 0x4) r9 = socket$isdn(0x22, 0x2, 0x26) close(r9) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x2d0, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "334ee87c60a4602ee8d037c081c59bb4edf9473f62f0f4ef270c5f00f7806a81e46e2cb6876239a4f64f82617d80b2d44ca8624408bc21a75201db05b3c375ac142f0cc2ae5128e7b05d0f1ca87f64497a3d5f39bb3dfde50323c11d3cf6ff0725795bcb3191abe0b5df154bbb1d33ed934a83395d47fe7958d314ea04d0f1d709f191febb2103c397ad2c7f82430b68a43c1f53fae5e2123f7464a45fddfa5d"}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "55bd3b2beebde741f7061bfdc5ad1c3ba7ff9e"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "4468eb4918b193b795984fe52110333a4956147f3d3467870c9e95b45dade7f5cff73a89dc6c4802f5f484a78ac8be3a78638fb764e4fc18a2b0ff30f07139f6705e5390214a896b73f2d65c091f9560112f30f8a51b136096e1cb8dc173bd93694a343e1875af98463a9d66c553995495ed9c976925e789629b14"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'{$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}:@*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\'v\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 4m55.691519427s ago: executing program 5 (id=5042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 4m55.673418274s ago: executing program 37 (id=5042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 1.851154247s ago: executing program 6 (id=8606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/69, 0x45}], 0x1}, 0x6}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/24, 0x18}], 0x5, &(0x7f0000000640)=""/119, 0x77}, 0x2}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/224, 0xe0}], 0x4}, 0xe}], 0x3, 0x40000023, &(0x7f0000000a40)={0x0, 0x989680}) 1.629387307s ago: executing program 6 (id=8610): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000100)="2f183b4351", 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000c40)="bad330752181516b2b316f3a277f953286dd", 0x12, 0x2000041, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @link_local}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000140)=""/155, &(0x7f00000000c0)=0xcb) 1.432249212s ago: executing program 7 (id=8614): pselect6(0x40, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x5, 0x100, 0x6f2, 0x5, 0x101}, &(0x7f00000000c0)={0x6772, 0x9afb, 0x8000000000000000, 0x2, 0x1, 0x4, 0x3ff, 0x5}, &(0x7f0000000100)={0x20, 0x0, 0x10000, 0x3, 0x6, 0x0, 0x40, 0x10}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4040000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2e4e}, {0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x54, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x85}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x810) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000084f7423f9459ea0f651beba4cd1415e279cb49697b3f333d63bdc7c616e22897dc9f3f13af7d2d1ed41d25500179ef17d31b9759e60b9dba658317e7b848cad7cab350bbcfe3fa2974f904a9fef95fde5012f5ebf500a581101c408c555f7341486535ea20679ee608855fb81f05b4c2e25c8269a1239b7189866d28163659b9719b22", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf25040000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.414533587s ago: executing program 2 (id=8615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) r4 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendto$packet(r4, &(0x7f0000000440)="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", 0xfe, 0x200c0040, &(0x7f00000000c0)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) (async) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendto$packet(r4, &(0x7f0000000440)="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", 0xfe, 0x200c0040, &(0x7f00000000c0)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) 1.354756239s ago: executing program 7 (id=8616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) 1.295936933s ago: executing program 9 (id=8617): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000301010400000000000000e7ec7c4c331bbfd9801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f00000002c0)={@default, @bcast, 0x3, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) (async) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f00000002c0)={@default, @bcast, 0x3, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000240)={r5}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1.247883791s ago: executing program 2 (id=8618): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) listen(r3, 0xfffffff8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x54}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.128404998s ago: executing program 6 (id=8620): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x2, 0x3, 0x0, 0xb, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x24}, 0x94) 1.128065451s ago: executing program 7 (id=8621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x2000c040, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001801400018008000100ac1414bb0800020000a0ebe9c1000280250001003a0000000c001980080001000d000000"], 0x44}}, 0x4000000) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r8, 0x1) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xda, 0x33, &(0x7f0000000000)="b7b7c2c75ca80e0f69c5c729aeff793372f1527672796db27f9fbf3531539f0851a0d35be2971a5993fa5de5ac61d3e0a860b33a5f911fab2948a3e3cbcb467725e0da53c872bced6e47355db56a983362ab1bdd10674e8f121ab38cbfe7a0aadbb6c8b3491245474004eecde6303ffba8c8d8623e77f43d3c306b76f90b3ea79119b5ccd4ac36e2d809faf2aa33397bfd4bd5c61c5df3636882b238c791a99ce654bba187e0e55e3b2440d397de912fb84f0b149303596abaaa951192908047ca867c7b8c0a58be2c87ca9c59b9728f66abcefa3078dbd69292", &(0x7f0000000100)=""/51, 0x9, 0x0, 0x6e, 0xf4, &(0x7f0000000140)="9fd86fd04878e585d87a84ccfbf3be7e2723f742f9d8fc27f554052acf4dd08688de5a223338c87366dd421751214b5a6ab85f4b16a523748c7eae1784c69fc499569be0763d0f13eb4b504598d96104fa562d142340c5d52e63f041df41db1ac9d8d3d6fede05bf239115aaafcd", &(0x7f00000001c0)="718ebac2ac3d908a4540e8102dae9a306bfef3e0df554ab2534d27f826859f52b7e77ac20338c1d75734b6d3dc959067b3fbc0c132394fb265cd678c55d6e4aabb2f9632c1be1fb1c0afe59ba636c5319f2b292da8d40607366188c9b0ffef9f917605528d03c7b296168116243b599ab1d6d9bdec116be13d47413cb7d38843f7bf944659739148daa7b8971621fa445c5f88f28bbddad7812955d8f65a3caada5bb4dde93c96572343bf17bdd59d9154edc0237662a12ac16d065ddca6f265ce6a139ab32ea9b55dffe0f37b55925a57af6a25698e042295141a3cf09d543e6a00eada8f2f7b317956ccb2e5bfed2e3e41e6bd", 0x4, 0x0, 0x3ff}, 0x50) 1.127329648s ago: executing program 8 (id=8622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r5, r4, 0x5}, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="440600002c000100fefffffffcdbdf253406f28015040980102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf6900fe8004007a800cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba00000004007980b10135800800d900e000000218d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22ae26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c34140800be00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00dd06fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8ef7ff27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYRES32=r9, @ANYBLOB="00000008000100", @ANYRES32=r8, @ANYBLOB='\b\x00A\x00', @ANYRES32=0x0, @ANYBLOB="18002a8008000b00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="2400a78020009b800400fd8014000e0000000000000000000000ffffac1414bb040053800400fd000800ce00ac1414bb0c00ce000900000000000000"], 0x644}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$inet(0x2, 0xa, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000340)={0x0, 'virt_wifi0\x00', 0x4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xa0, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r13}, 0x10) r14 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800) tee(r14, r13, 0x25d1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r15) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r17, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.019623244s ago: executing program 6 (id=8623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x78, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x7, 0x1, 'lo\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ',-\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044041) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r6], 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d", 0x4, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000100)) 993.692477ms ago: executing program 2 (id=8624): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 899.564792ms ago: executing program 8 (id=8625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000a00000000000001000000001e006102020000000100020000000000000000001000000003000000020000000000000b020000000061612e2e00"], &(0x7f0000000140)=""/66, 0x52, 0x42, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x13, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 898.570935ms ago: executing program 9 (id=8626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0xa7}}, 0x8000) 858.696238ms ago: executing program 9 (id=8627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda01}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0xfffffffffffffffe, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) 809.187738ms ago: executing program 2 (id=8628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000007c0)='%', 0x1, 0x4a841, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="c91cc21b1e202bba4cbc849651bbb1994f5404ff19d438ca176232c58a38be7761407743d190c94d017acdfc0334f50f0622456ef64c8e8a1bf308f818f796f107fe486684f227fb3e4ab77d2f1ef8e12356c81a7a62485d5d057ac27cded5759ef3f02e35279794106bba8f11ed7e04e16ed9b91742a483a845d4cc6ce3865b94436a358e6338c5e6c812073735111c20e5f10bf850776bdcd6de22277459e61ef4b5303e", 0xa5}], 0x1, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xff}], 0x48, 0x4}, 0x80) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf2516000000540005801c000280080004000000000008000200f1ffffff080003000200000008000100657468002400028008000200090000000800040001000000080001001800000008000200060000000800010075647000480106804400040067636d28616573290000000000000000000000000000000000000000000000001c0000009cabf888627c2d6c14771f18dfc2a64f6e88e3ca25d56ab89d8bc530fa000300c4f22bba054bb496eb978aa4593451edf8db281cb30555f6f9b7d1e87ab10e6981a77fcb3c504c6d0481aaa4d9da37301f972f0551638ab0257255afe0660da2f12fa69aeef4efa65e937d3ef30a75887b371c020aa18cefa05ee164e52006f46a4e5f81b4ff6a57b4e38606102c3b9db56f66fa0a5ce1586574a4503bcfe0cea5d9ca39e9bd74444b3d1400eed9c53bde7277561a3b68ebc618b7a845ce51fa0ab4063f189ba72aa184af171359f63a292ce1fb180fa978151884502ed38c61e01b574ef3c0f85135c9812807419af7900ef85f5ccd0272b633829a9f3cea28f21c3ed0b13b370d822fbfa391b5eb3d7d465277726c00000400050024000980080002000300000008000200bf0c000008000100090000000800020002000000fd403faaa2c4910e3fc7240ef7ef52ab3a4b2d18ecd72cb627ad98ba777318d4c74fa4f3fc2a41da0ec74b029c7b09eabe9c69606fe02cbb4377871aeca1df1f7c0ba402f05eda124f3beaaa3de5c44a5e9810eefa9941bf0deb66ef7eaa74cec0a2d0a8ed2b09c9271e7bd0"], 0x1d4}, 0x1, 0x0, 0x0, 0x24008010}, 0xc8c2) 699.243362ms ago: executing program 9 (id=8629): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltaction={0x1c, 0x31, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 64) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000040)={@remote, @remote, 0x0, "7a9365f6d841995cfa187ef5b09eb68b28eeb0a6e6de3e13b76757c9f731cbd4", 0x4, 0x10001, 0xf7}, 0x3c) (rerun: 64) 698.302683ms ago: executing program 8 (id=8630): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800600050046230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 551.002075ms ago: executing program 9 (id=8631): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000340)=0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x4044) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x424081, 0x0) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x1) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev, @in=@loopback}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) shutdown(r2, 0x1) 454.740465ms ago: executing program 8 (id=8632): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000012ceaf28286f261b440a81e65088bb9d3fcf069c99e33a364941cf730d9627c4eeb08e472458f130eb46d82087db08744b643b0243a8955c27e38bc836f6ae0065b0be7b9e348146301d70b463cf6693765540f2fd5c9dcbcac3d6d7d0745d1b8c217c30b31ff6cae24f54c961d40a5ca8fba3dbc6dc72273efc478f6a064f9f125e8efd4976adc8b0"], 0x24}}, 0x0) 372.24919ms ago: executing program 7 (id=8633): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd09000100"], 0x2c}}, 0x0) (async) sendto$rxrpc(r0, &(0x7f0000000240)="0fbcde3e1dfc8cbc7b2d77a538ec65df843708bb98ecc9538814ee88b9878b23bca698708e86981d90824babdcbfd72a912bac6b7416c86b5e4a7351c9afb100ee0c33699f5ffafec03e3c80f895cc2d6b48fdb79445c715478d214b1b1f57141fec966b174d2ac1f49062bcd12425b1a2dd2d3ee0d95370012ab5f44c1e01cf49a47fce7cfe422c183a71e4e290e75e2c918e021093de5f8c8655681d3aee8de35aff8d04d35763fd2c881b288fc41ed5cf5302ce36608b25c7593053d838a3aa1cef16679abd74d2bf53", 0xcb, 0x8001, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000700), &(0x7f0000000740)=0x8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) 371.912527ms ago: executing program 8 (id=8634): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x148}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x8, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040f0}, 0x4008000) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 219.302202ms ago: executing program 6 (id=8635): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x10c, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb0, 0x1, [@m_ct={0xac, 0xa, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x101, 0x10000000, 0x0, 0x2}}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000300)="d4ecf7ff0f2df276fa3dcf10b02dc7bd26c733c0728ce3d825", 0x19, 0x84, &(0x7f0000000540)={0x2, 0x0, @rand_addr=0x64010102, 0x2}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb75520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00004f9d0db173ce3650e56cf3c5cf4eb9a3d5fdf0bc4ec6a274c6b7e996eecec88f81a7558b5a9efadf16b09427773c04cb1f459b8ffefb6f8a460882975d546f6d6e51bb448a4b7c9c8c920d7fc059446295ed37ddbbefa22511967ca4ff556a4171da7db04c48a6504c3fcf5975a2e1346c045b4d18b137a3631ed9913b9939a25c923bd965726e4cea8a50d13648597987a3a7ae8f926b38001d210da4a2e3bb72fe079ca3f3d68a27b92b8e68ae00a6de32e17cc338f3d9581e3cad7e25ac48df4e64f2c1cb74c7cf850ce1f6a97fce82925f871f23e5f5bfe1db0d94a91014119114132d7ce126c6b6e401a288f04670a12fd39e8fc89bb32b2988626b713fbbe87b218fa356d3205bbecc11773502020e3b92f32989911c3039f9ae9857fba65e92bdec6762f6fc325cec68dc9d73ae000000000000"], 0x138}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 209.426036ms ago: executing program 7 (id=8636): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) 152.422692ms ago: executing program 2 (id=8637): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @jmp={0x5, 0x0, 0x4, 0x1, 0xe, 0xffffffffffffffc0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 130.103415ms ago: executing program 9 (id=8638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d61632873686131290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000002bbd70002bbd70002bbd700026bd700004"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="90007f0a0a00e1ff0080048546e9d2078b8d583adf4e801a839da6c6c32b800000000700e9df4d1b7835c428242199b3a709e5b4d3b66f7ace1d598803db751f84041f7e76f78aa30e8d737bd9295d84213a38014f28d86bdb024ff5614ef7ce356bd79fd3a04b1fd45b9c8f4b160486d50ff0c959da093e2621debfaa3666da6a704ace6b2c7142a3540aec40a0be20e374d953e36c76f193810b3dae6a2a3acdce6b13"], 0x30}, 0x1, 0x0, 0x0, 0x2bfdd7b83b402990}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000fc0)={0x50000002}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x40, 0x4, 0x4, 0x401, 0xc, 0xe36, 0xd, 0x4}, &(0x7f0000000080)={0x7, 0x100000001, 0xfff, 0xffff, 0x7fff, 0x1, 0x9, 0xde65}, &(0x7f0000000100)={0xfffffffffffffff3, 0x3, 0x2, 0xb0, 0x3, 0x6, 0x97, 0x500000}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000f80)={&(0x7f0000000180)={[0x4]}, 0x8}) 68.219874ms ago: executing program 8 (id=8639): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = epoll_create1(0x80000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) r4 = epoll_create1(0x80000) r5 = epoll_create1(0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f0000000340)="f87d58f014cb3c4da6c92f1d156c97902440c721d2d7d77c4aef09ad95f68fdecc2439a05b9839d3da5da0b0ed193dd5284df92507c2addb3ca24fb162153f60a88fb72ed5e5eefdd92125be66757b6bf90a7b0a23978a011d2cdb5e9138e444f7961d0abec3ec00b4eea9ae8c875ce7b60162464850efc502ff21339869d12ddadce7db23360507d7a664604f439bbd1fe95ad404b433d2be37eb4f883fd60eb739e7c548bb579655bb14a46b82d7ad1145351e3681bdf10b9fb2e7c8df1c93497b4efb8d77de0da5146f66a6329a4e8395b15c9ea19f83e5d4294b3568ba91a61caada9ff81000874718", 0xeb, 0x8045, &(0x7f0000000180)={0xa, 0x0, 0x190, @dev={0xfe, 0x80, '\x00', 0x13}, 0x649, 0x4}, 0x20) sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000200), &(0x7f0000000280)=0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40000000}) close(r4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0) 4.325582ms ago: executing program 2 (id=8640): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000500)={@private2, 0xa}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r3, &(0x7f0000000b00), 0x0, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket(0x14, 0x2, 0x4) openat$cgroup_devices(r5, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x61e1, 0x0) sendmsg$tipc(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="d05351be37a64c9ec383bce7eef6992c8088a3be7b", 0x15}, {&(0x7f00000004c0)="48c05a3326ad6b37105ba32641f1ca5a1444bdefa5565583705cdbb3310d70b44490ff4c8464165df815832b1974", 0x2e}, {&(0x7f0000000580)="d16bb5a9928a7d4e577360104e6146aa7d39b09bd825e320d7ed4081525955abc40f00981c928c15bc829f692a", 0x2d}], 0x3, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) gettid() socket(0x10, 0x803, 0x200000) 806.282µs ago: executing program 6 (id=8641): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r2, @in={{0x2, 0x4e21, @private=0xa010100}}, [0x5, 0x9, 0x4, 0x8, 0xbe11, 0x800, 0x5, 0xb, 0x3, 0x2, 0x60000, 0x10, 0x80000001, 0x1, 0x6]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x891f, &(0x7f0000000000)={'nicvf0\x00', 0x2}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r2, @in={{0x2, 0x4e21, @private=0xa010100}}, [0x5, 0x9, 0x4, 0x8, 0xbe11, 0x800, 0x5, 0xb, 0x3, 0x2, 0x60000, 0x10, 0x80000001, 0x1, 0x6]}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r5, 0x891f, &(0x7f0000000000)={'nicvf0\x00', 0x2}) (async) 0s ago: executing program 7 (id=8642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x200, 0x70bd26, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x48}}, 0x4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0x22, 0x1, 0x1000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000845) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x40030) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x158, 0x16, 0x800, 0x70bd25, 0x25dfdbfd, {0xc}, [@generic="066d2ed39f52af20ffe9e90e9497aa30fab8edcd23ee16e243d3493385d4b29582f26e2d713c1303d78f8ef029f88fcb9f382554bb145d5854d82e72c45b6284db5785c775581b7c6a0626e8", @generic="f4e6a3818fd41c60c6db25e0aeb6742d00d796b719c5707012d8d99cd885fcb5f9106bbf7c6c81998351401afbcbc9e475", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@local}, @typed={0x28, 0x127, 0x0, 0x0, @binary="e98a8dde326fab6b2e5ee1a5b881af3a0351903dc320d0caab81ec7c7e050a209cd43f33"}, @generic="85d4fdb71f405ac81c28549cae1198c88dde688d4695c16574ec623d3072af1a3a38af9cf4d77f44ab4e1cfbe6e2c5800174d0adff0cae3694a84e33b693b8a7119df00ca3eb3462c5ce0675f2287bc2f86413c5fec6a6af0efdf883b483d3ff7c546013b3ce099ff5b40546f7705c4032a5faebe37ca850e41c26", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x3}, @nested={0xf, 0x6d, 0x0, 0x1, [@generic="20ab91135409f5b049abca"]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000844}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x800) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000b40)=[{}, {}], 0x10, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1d, 0x2a, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6722}}, @generic={0x1, 0xf, 0x8, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @alu={0x7, 0x0, 0xc, 0x4, 0x2, 0x18, 0x4}, @jmp={0x5, 0x0, 0x6, 0xb, 0x8, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x2, 0x8, 0xa, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x6b, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x0, 0x9, 0x10}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000fc0)=[0x1], &(0x7f0000001000)=[{0x2, 0x2, 0x3}, {0x0, 0x1, 0xe, 0x5}], 0x10, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x5e8bd871, 0x81, 0xe7be, 0x1403, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0x1, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pS \x00'}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x9, 0x12, &(0x7f00000008c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0xc, 0x0, 0x3, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}], &(0x7f0000000980)='syzkaller\x00', 0xffffff9a, 0x16, &(0x7f00000009c0)=""/22, 0x41000, 0x70, '\x00', r4, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x80000000, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xc, 0x2, 0x7}, 0x10, r8, r9, 0x4, &(0x7f0000001500)=[r10, 0x1, r11, r12, r13, 0xffffffffffffffff, r14, r15, r16], &(0x7f0000001540)=[{0x3, 0x2, 0xe, 0xc}, {0x3, 0x5, 0x10, 0xc}, {0x1, 0x4, 0xb, 0x6}, {0x2, 0x4, 0xd, 0x7}], 0x10, 0x8}, 0x94) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r17, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x64, r18, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001800)={'wlan0\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001840), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 3'. [ 715.754701][T31286] netlink: 'syz.2.7023': attribute type 21 has an invalid length. [ 715.772589][T31286] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7023'. [ 715.798764][T31284] netlink: 'syz.2.7023': attribute type 4 has an invalid length. [ 715.822794][T31284] netlink: 'syz.2.7023': attribute type 5 has an invalid length. [ 715.840824][T31284] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7023'. [ 715.879381][T31286] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7023'. [ 715.906514][T30971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 715.933621][T30971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 715.959753][T30971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 715.995380][T30971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.192804][T30971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.245265][T30971] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.263820][T31320] ipt_ECN: cannot use operation on non-tcp rule [ 716.265308][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7032'. [ 716.299512][T21652] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.307047][T21652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.333455][T21652] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.340685][T21652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.379769][T31321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.425234][T31321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.497444][T31323] syzkaller0: entered promiscuous mode [ 716.530668][T31323] syzkaller0: entered allmulticast mode [ 716.538043][T31329] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 716.687689][T31331] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 716.687959][T31334] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 716.709375][T31331] bond4 (unregistering): Released all slaves [ 717.474153][T31346] validate_nla: 2 callbacks suppressed [ 717.474176][T31346] netlink: 'syz.9.7040': attribute type 1 has an invalid length. [ 717.532591][T31346] netlink: 'syz.9.7040': attribute type 4 has an invalid length. [ 717.552271][T31346] netlink: 9422 bytes leftover after parsing attributes in process `syz.9.7040'. [ 717.587915][T31346] netlink: 'syz.9.7040': attribute type 1 has an invalid length. [ 717.601374][T30971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.608392][T31346] netlink: 'syz.9.7040': attribute type 4 has an invalid length. [ 717.617109][T31346] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.7040'. [ 717.632276][T31346] netlink: 'syz.9.7040': attribute type 10 has an invalid length. [ 717.937726][T31365] netlink: 'syz.2.7045': attribute type 4 has an invalid length. [ 717.983405][T31367] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7046'. [ 718.007672][T31372] netlink: 'syz.7.7047': attribute type 30 has an invalid length. [ 718.162430][T31376] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 718.333695][T30971] veth0_vlan: entered promiscuous mode [ 718.377614][T30971] veth1_vlan: entered promiscuous mode [ 718.477199][T31389] syzkaller0: entered promiscuous mode [ 718.482993][T31389] syzkaller0: entered allmulticast mode [ 718.585564][T30971] veth0_macvtap: entered promiscuous mode [ 718.604942][T30971] veth1_macvtap: entered promiscuous mode [ 718.638041][T30971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.656568][T30971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.679566][ T25] block nbd5: Possible stuck request ffff888025608000: control (read@0,1024B). Runtime 120 seconds [ 718.687302][T22322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.699763][ T25] block nbd5: Possible stuck request ffff888025608200: control (read@1024,1024B). Runtime 120 seconds [ 718.707841][T22322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.711542][ T25] block nbd5: Possible stuck request ffff888025608400: control (read@2048,1024B). Runtime 120 seconds [ 718.734840][ T25] block nbd5: Possible stuck request ffff888025608600: control (read@3072,1024B). Runtime 120 seconds [ 718.782529][T22322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.901152][T22322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.168000][T31420] netlink: 'syz.2.7062': attribute type 1 has an invalid length. [ 719.231815][T31420] netlink: 'syz.2.7062': attribute type 5 has an invalid length. [ 719.287635][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.307780][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.426766][T22346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.453188][T22346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.513335][T31425] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 719.874836][T31438] tipc: Started in network mode [ 719.901382][T31438] tipc: Node identity 7a6842bd3e15, cluster identity 4711 [ 719.922305][T31438] tipc: Enabled bearer , priority 0 [ 719.945597][T31440] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.963308][T31438] syzkaller0: entered promiscuous mode [ 719.968833][T31438] syzkaller0: entered allmulticast mode [ 720.037248][T31438] __nla_validate_parse: 8 callbacks suppressed [ 720.037273][T31438] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7066'. [ 720.087168][T31438] tipc: Resetting bearer [ 720.143980][T31437] tipc: Resetting bearer [ 720.291216][T31437] tipc: Disabling bearer [ 720.476595][T31470] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7073'. [ 720.782007][T31486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7077'. [ 720.899550][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7078'. [ 720.909042][T31488] wg1 speed is unknown, defaulting to 1000 [ 720.912707][T31491] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 721.005893][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.019060][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.030041][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.039088][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.047167][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.232553][ T25] block nbd7: Possible stuck request ffff888025698000: control (read@0,1024B). Runtime 90 seconds [ 721.250802][ T25] block nbd7: Possible stuck request ffff888025698200: control (read@1024,1024B). Runtime 90 seconds [ 721.261868][ T25] block nbd7: Possible stuck request ffff888025698400: control (read@2048,1024B). Runtime 90 seconds [ 721.274604][ T25] block nbd7: Possible stuck request ffff888025698600: control (read@3072,1024B). Runtime 90 seconds [ 721.386658][T31500] wlan0 speed is unknown, defaulting to 1000 [ 721.410558][T31500] wlan0 speed is unknown, defaulting to 1000 [ 721.412877][T31495] wg1 speed is unknown, defaulting to 1000 [ 721.433613][T31500] wlan0 speed is unknown, defaulting to 1000 [ 721.552758][T31507] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 721.606796][T31500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 721.959158][T31500] wlan0 speed is unknown, defaulting to 1000 [ 721.998956][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.069847][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.093607][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.151517][T31519] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 722.182142][T31515] syzkaller0: entered promiscuous mode [ 722.187659][T31515] syzkaller0: entered allmulticast mode [ 722.204064][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.232257][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.397218][T31500] wlan0 speed is unknown, defaulting to 1000 [ 722.583718][T31495] chnl_net:caif_netlink_parms(): no params data found [ 722.996049][T31553] netlink: 'syz.2.7092': attribute type 7 has an invalid length. [ 723.068606][T31495] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.081813][T31495] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.095855][T31495] bridge_slave_0: entered allmulticast mode [ 723.110047][T31495] bridge_slave_0: entered promiscuous mode [ 723.133215][T31550] syzkaller0: entered promiscuous mode [ 723.142028][ T5152] Bluetooth: hci0: command tx timeout [ 723.153900][T31550] syzkaller0: entered allmulticast mode [ 723.176562][T31495] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.270915][T31495] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.278280][T31495] bridge_slave_1: entered allmulticast mode [ 723.303068][T31495] bridge_slave_1: entered promiscuous mode [ 723.618882][T31570] xt_HMARK: spi-set and port-set can't be combined [ 723.662413][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7097'. [ 723.705593][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7097'. [ 723.968733][T31581] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7100'. [ 724.125255][T22355] dvmrp6 (unregistering): left allmulticast mode [ 724.137675][T31592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7100'. [ 724.159776][T22355] dvmrp0 (unregistering): left allmulticast mode [ 724.607433][T22355] bond0 (unregistering): Released all slaves [ 724.746832][T22355] bond1 (unregistering): Released all slaves [ 724.881768][T22355] bond2 (unregistering): Released all slaves [ 725.019409][T22355] bond3 (unregistering): Released all slaves [ 725.169762][T22355] bond4 (unregistering): Released all slaves [ 725.230865][ T5152] Bluetooth: hci0: command tx timeout [ 725.244413][T31560] syzkaller0: entered promiscuous mode [ 725.250116][T31560] syzkaller0: entered allmulticast mode [ 725.491319][T31612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7106'. [ 725.540090][T31613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7106'. [ 727.300671][ T5152] Bluetooth: hci0: command tx timeout [ 727.439206][T31495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.448729][T22355] tipc: Disabling bearer [ 727.460243][T22355] tipc: Left network mode [ 727.463194][T31495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.544338][T31495] team0: Port device team_slave_0 added [ 727.565699][T31495] team0: Port device team_slave_1 added [ 727.751159][T31627] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7110'. [ 727.811121][T31495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.818120][T31495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.866867][T31495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.887115][T31627] xfrm1: entered promiscuous mode [ 727.892533][T31627] xfrm1: entered allmulticast mode [ 727.894319][T31639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7113'. [ 727.924755][T31639] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7113'. [ 727.943338][T31495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.961305][T31495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.994047][T31495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.116484][T31649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7115'. [ 728.266525][T31495] hsr_slave_0: entered promiscuous mode [ 728.282051][T31495] hsr_slave_1: entered promiscuous mode [ 728.292558][T31495] debugfs: 'hsr0' already exists in 'hsr' [ 728.303958][T31495] Cannot create hsr debugfs directory [ 728.698765][T22355] hsr_slave_1: left promiscuous mode [ 728.771651][T31677] x_tables: unsorted entry at hook 3 [ 728.891710][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7126'. [ 729.385244][ T5152] Bluetooth: hci0: command tx timeout [ 730.035909][T31714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7135'. [ 730.057882][T31710] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7134'. [ 730.070562][T31714] netlink: 'syz.2.7135': attribute type 10 has an invalid length. [ 730.133233][T31710] bond4: (slave ip_vti0): Device is not bonding slave [ 730.140868][T31710] bond4: option active_slave: invalid value (ip_vti0) [ 730.153440][T31710] bond4 (unregistering): Released all slaves [ 730.192240][T31722] bond0: Error: Cannot enslave bond to itself. [ 730.198578][T31727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7133'. [ 730.291093][T31728] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 730.459510][T22355] IPVS: stop unused estimator thread 0... [ 730.700698][T31750] __nla_validate_parse: 2 callbacks suppressed [ 730.700721][T31750] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7143'. [ 731.020903][T31769] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7149'. [ 731.138135][T31495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.178560][T31495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.226450][T31778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7150'. [ 731.232487][T31495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 731.300204][T31778] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 731.338761][T31778] ip6gretap1: left allmulticast mode [ 731.357655][T31778] bond0 (unregistering): Released all slaves [ 731.401373][T31495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 731.421173][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7152'. [ 731.806061][T31495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.856919][T31818] wg1 speed is unknown, defaulting to 1000 [ 731.881338][T31818] wlan0 speed is unknown, defaulting to 1000 [ 731.963044][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7164'. [ 731.983132][T31829] openvswitch: netlink: Flow actions attr not present in new flow. [ 732.056851][T31833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7165'. [ 732.085375][T31495] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.338994][T22329] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.346252][T22329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.388835][T31847] netlink: 13 bytes leftover after parsing attributes in process `syz.9.7170'. [ 732.428518][T22322] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.435792][T22322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.552255][T31855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7171'. [ 732.588960][T31842] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7168'. [ 732.798517][T31495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.152528][T31495] veth0_vlan: entered promiscuous mode [ 733.168157][T31495] veth1_vlan: entered promiscuous mode [ 733.197833][T31495] veth0_macvtap: entered promiscuous mode [ 733.207463][T31495] veth1_macvtap: entered promiscuous mode [ 733.226688][T31842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7168'. [ 733.264033][T31495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.292872][T31495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.348674][T22329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.379230][T22329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.428560][T22329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.464787][T22329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.688616][T31878] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.696515][T31878] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.733228][T22329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.749710][T22329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.801322][T22329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.809296][T22329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.095914][ T5152] block nbd8: Receive control failed (result -1) [ 734.151250][T31907] openvswitch: netlink: IP tunnel dst address not specified [ 734.357465][T31911] tipc: Enabled bearer , priority 0 [ 734.442692][T31914] syzkaller0: MTU too low for tipc bearer [ 734.454124][T31914] tipc: Disabling bearer [ 734.705218][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.733263][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.744784][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.755285][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.772129][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.927564][T31921] wg1 speed is unknown, defaulting to 1000 [ 734.945088][T31930] pimreg1: entered allmulticast mode [ 734.987481][T31921] wlan0 speed is unknown, defaulting to 1000 [ 735.347013][T31946] netlink: 'syz.9.7192': attribute type 11 has an invalid length. [ 735.595609][T31957] openvswitch: netlink: IP tunnel dst address not specified [ 735.606151][T31921] chnl_net:caif_netlink_parms(): no params data found [ 735.623824][T31957] netlink: 'syz.9.7197': attribute type 21 has an invalid length. [ 735.649938][T31957] netlink: 'syz.9.7197': attribute type 4 has an invalid length. [ 735.659385][T31957] netlink: 'syz.9.7197': attribute type 5 has an invalid length. [ 735.682918][T31957] netlink: 'syz.9.7197': attribute type 21 has an invalid length. [ 735.707165][T31957] netlink: 'syz.9.7197': attribute type 4 has an invalid length. [ 735.718533][T31957] netlink: 'syz.9.7197': attribute type 5 has an invalid length. [ 735.726831][T31957] __nla_validate_parse: 14 callbacks suppressed [ 735.726855][T31957] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7197'. [ 735.745099][T31963] x_tables: duplicate underflow at hook 4 [ 735.991962][T31921] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.019028][T31921] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.055550][T31921] bridge_slave_0: entered allmulticast mode [ 736.092664][T31921] bridge_slave_0: entered promiscuous mode [ 736.125444][T31921] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.151668][T31921] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.171432][T31921] bridge_slave_1: entered allmulticast mode [ 736.186659][T31921] bridge_slave_1: entered promiscuous mode [ 736.220981][T31993] netlink: 'syz.7.7207': attribute type 23 has an invalid length. [ 736.312866][T31921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.441999][T31921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.754219][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7210'. [ 736.789074][T32004] syzkaller0: entered promiscuous mode [ 736.795928][T32004] syzkaller0: entered allmulticast mode [ 736.805482][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7210'. [ 736.820857][ T5152] Bluetooth: hci3: command tx timeout [ 736.898603][T32014] xt_cluster: node mask cannot exceed total number of nodes [ 736.915946][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7211'. [ 738.901021][ T5152] Bluetooth: hci3: command tx timeout [ 738.935425][T31921] team0: Port device team_slave_0 added [ 738.969365][T31921] team0: Port device team_slave_1 added [ 739.072070][T31921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.079076][T31921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.114129][T31921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.127625][T31921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.135314][T31921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.195846][T31921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.328966][T31921] hsr_slave_0: entered promiscuous mode [ 739.337789][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7215'. [ 739.360625][T31921] hsr_slave_1: entered promiscuous mode [ 739.374084][T31921] debugfs: 'hsr0' already exists in 'hsr' [ 739.387478][T31921] Cannot create hsr debugfs directory [ 739.736544][T32051] Cannot find add_set index 2 as target [ 740.005840][T31921] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.040187][T31921] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 740.058793][T31921] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 740.239320][T31921] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.290515][T31921] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 740.320603][T31921] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 740.437519][T32069] sit0: entered allmulticast mode [ 740.488157][T32077] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7226'. [ 740.490541][T32078] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7226'. [ 740.510153][T31921] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.522476][T31921] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 740.533232][T31921] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 740.604625][T31921] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.626438][T31921] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 740.638322][T31921] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 740.673333][T32084] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7228'. [ 740.956684][T32101] syzkaller0: entered promiscuous mode [ 740.966502][T32101] syzkaller0: entered allmulticast mode [ 740.980665][ T5152] Bluetooth: hci3: command tx timeout [ 741.110135][T31921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 741.129856][T32111] IPv6: sit1: Disabled Multicast RS [ 741.147623][T32111] sit1: entered allmulticast mode [ 741.227188][T31921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 741.252359][T31921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 741.311343][T31921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 741.313754][T32119] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7238'. [ 741.461782][T31921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.469072][T32134] C: renamed from team_slave_0 (while UP) [ 741.478957][T32134] netlink: 'syz.6.7241': attribute type 1 has an invalid length. [ 741.490391][T32134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 741.516770][T32126] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7240'. [ 741.530371][T31921] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.566208][T32137] netlink: 832 bytes leftover after parsing attributes in process `syz.7.7242'. [ 741.570987][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.582722][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.621470][T22329] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.628856][T22329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.939991][T32147] xfrm1: entered allmulticast mode [ 742.056616][T32160] tipc: Failed to remove unknown binding: 66,0,0/0:1162619851/1162619852 [ 742.069511][T32160] tipc: Failed to remove unknown binding: 66,0,0/0:1162619851/1162619852 [ 742.263657][T31921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.506868][T32178] x_tables: duplicate underflow at hook 2 [ 742.519924][T32179] x_tables: duplicate underflow at hook 3 [ 742.640796][T32188] syzkaller1: entered promiscuous mode [ 742.653675][T32188] syzkaller1: entered allmulticast mode [ 743.064873][ T5152] Bluetooth: hci3: command tx timeout [ 743.069019][T32209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.118424][T31921] veth0_vlan: entered promiscuous mode [ 743.135080][T31921] veth1_vlan: entered promiscuous mode [ 743.174889][T31921] veth0_macvtap: entered promiscuous mode [ 743.199447][T31921] veth1_macvtap: entered promiscuous mode [ 743.276328][T31921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.324558][T31921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.367751][ T2983] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.401888][ T2983] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.431726][ T2983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.462874][ T2983] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.716014][T22351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.756784][T22351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.854838][T22351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.898186][T22351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.961798][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7271'. [ 744.405119][T32277] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7278'. [ 744.508975][T32285] delete_channel: no stack [ 744.539572][T32286] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 744.567521][T32286] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 744.663228][T32291] sctp: [Deprecated]: syz.6.7283 (pid 32291) Use of int in max_burst socket option. [ 744.663228][T32291] Use struct sctp_assoc_value instead [ 744.785571][T32298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7287'. [ 744.913735][T32312] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7290'. [ 744.917699][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7289'. [ 744.976720][T32312] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7290'. [ 745.247276][T22329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.256819][T22329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.350915][T32337] netlink: 84 bytes leftover after parsing attributes in process `syz.9.7299'. [ 745.621089][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.662151][T32349] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 745.687278][T32349] bond1 (unregistering): Released all slaves [ 745.776156][T32363] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 745.899801][T32365] tun0: tun_chr_ioctl cmd 1074025675 [ 745.919494][T32365] tun0: persist disabled [ 745.990258][T32374] netlink: 'syz.9.7311': attribute type 1 has an invalid length. [ 746.014454][T21652] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.024959][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.042685][T21652] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.071832][T21652] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.216967][T21652] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.258575][T32389] netlink: 'syz.2.7314': attribute type 11 has an invalid length. [ 746.266990][T32388] netlink: 'syz.2.7314': attribute type 11 has an invalid length. [ 746.392947][T32402] __nla_validate_parse: 11 callbacks suppressed [ 746.392972][T32402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7318'. [ 746.441274][T32402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7318'. [ 746.646329][T32415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.655160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.672366][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.682693][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.691030][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.704573][T22329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.719625][T32414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.741854][T22329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.772019][T32424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7326'. [ 746.782650][T32424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7326'. [ 747.210146][T32446] syz.9.7335: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 747.239347][T32450] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7334'. [ 747.269376][T32446] CPU: 0 UID: 0 PID: 32446 Comm: syz.9.7335 Not tainted syzkaller #0 PREEMPT(full) [ 747.269406][T32446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.269419][T32446] Call Trace: [ 747.269427][T32446] [ 747.269436][T32446] dump_stack_lvl+0xe8/0x150 [ 747.269470][T32446] warn_alloc+0x249/0x340 [ 747.269494][T32446] ? stack_trace_save+0xa9/0x100 [ 747.269527][T32446] ? __pfx_warn_alloc+0x10/0x10 [ 747.269557][T32446] ? kasan_save_track+0x4f/0x80 [ 747.269577][T32446] ? kasan_save_track+0x3e/0x80 [ 747.269594][T32446] ? __kasan_kmalloc+0x93/0xb0 [ 747.269613][T32446] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 747.269631][T32446] ? xskq_create+0x56/0x170 [ 747.269654][T32446] ? xsk_setsockopt+0x54c/0x990 [ 747.269674][T32446] ? do_sock_setsockopt+0x17c/0x1b0 [ 747.269701][T32446] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 747.269726][T32446] ? do_syscall_64+0xe2/0xf80 [ 747.269755][T32446] __vmalloc_node_range_noprof+0x132/0x1730 [ 747.269812][T32446] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 747.269841][T32446] ? __kasan_kmalloc+0x93/0xb0 [ 747.269870][T32446] vmalloc_user_noprof+0xad/0xe0 [ 747.269892][T32446] ? xskq_create+0xbf/0x170 [ 747.269918][T32446] xskq_create+0xbf/0x170 [ 747.269945][T32446] xsk_init_queue+0xad/0x110 [ 747.269971][T32446] xsk_setsockopt+0x54c/0x990 [ 747.269997][T32446] ? __pfx_xsk_setsockopt+0x10/0x10 [ 747.270020][T32446] ? __pfx_aa_sk_perm+0x10/0x10 [ 747.270052][T32446] ? aa_sock_opt_perm+0xff/0x1a0 [ 747.270081][T32446] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 747.270100][T32446] ? __pfx_xsk_setsockopt+0x10/0x10 [ 747.270124][T32446] do_sock_setsockopt+0x17c/0x1b0 [ 747.270158][T32446] __x64_sys_setsockopt+0x13d/0x1b0 [ 747.270218][T32446] do_syscall_64+0xe2/0xf80 [ 747.270254][T32446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.270274][T32446] ? trace_irq_disable+0x37/0x100 [ 747.270301][T32446] ? clear_bhb_loop+0x60/0xb0 [ 747.270326][T32446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.270347][T32446] RIP: 0033:0x7f2db2f9acb9 [ 747.270367][T32446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.270385][T32446] RSP: 002b:00007f2db3e9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 747.270414][T32446] RAX: ffffffffffffffda RBX: 00007f2db3215fa0 RCX: 00007f2db2f9acb9 [ 747.270430][T32446] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 747.270443][T32446] RBP: 00007f2db3008bf7 R08: 0000000000000004 R09: 0000000000000000 [ 747.270456][T32446] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.270469][T32446] R13: 00007f2db3216038 R14: 00007f2db3215fa0 R15: 00007fff6b5764e8 [ 747.270503][T32446] [ 747.573958][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.618436][T32446] Mem-Info: [ 747.622735][T32446] active_anon:4771 inactive_anon:0 isolated_anon:0 [ 747.622735][T32446] active_file:3529 inactive_file:40209 isolated_file:0 [ 747.622735][T32446] unevictable:768 dirty:135 writeback:0 [ 747.622735][T32446] slab_reclaimable:13183 slab_unreclaimable:115908 [ 747.622735][T32446] mapped:29381 shmem:1380 pagetables:1284 [ 747.622735][T32446] sec_pagetables:0 bounce:0 [ 747.622735][T32446] kernel_misc_reclaimable:0 [ 747.622735][T32446] free:1302017 free_pcp:14530 free_cma:0 [ 747.675824][T32446] Node 0 active_anon:19084kB inactive_anon:0kB active_file:14116kB inactive_file:160632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117524kB dirty:540kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14804kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 747.709055][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.751705][T32446] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 747.801270][T32446] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.832072][T32446] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 747.838272][T32446] Node 0 DMA32 free:1299500kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19284kB inactive_anon:0kB active_file:14116kB inactive_file:160632kB unevictable:1536kB writepending:540kB zspages:0kB present:3129332kB managed:2555804kB mlocked:0kB bounce:0kB free_pcp:38184kB local_pcp:16992kB free_cma:0kB [ 747.873643][T32446] lowmem_reserve[]: 0 0 1 1 1 [ 747.880286][T32446] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.913030][T32446] lowmem_reserve[]: 0 0 0 0 0 [ 747.917826][T32446] Node 1 Normal free:3893340kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19500kB local_pcp:11780kB free_cma:0kB [ 747.951985][T32446] lowmem_reserve[]: 0 0 0 0 0 [ 747.956927][T32446] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 748.014325][T32446] Node 0 DMA32: 7527*4kB (UME) 6658*8kB (UM) 3438*16kB (UME) 371*32kB (UM) 534*64kB (UME) 394*128kB (UME) 465*256kB (UM) 355*512kB (UM) 236*1024kB (UM) 111*2048kB (UME) 72*4096kB (UM) = 1299564kB [ 748.022839][ T8048] wlan0 speed is unknown, defaulting to 1000 [ 748.042065][T32470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.068543][ T8048] infiniband syz0: ib_query_port failed (-19) [ 748.069236][T32470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7341'. [ 748.130693][T32470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7341'. [ 748.139715][T32446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 748.195663][T32446] Node 1 Normal: 211*4kB (U) 60*8kB (UME) 49*16kB (UME) 91*32kB (UME) 37*64kB (UME) 11*128kB (UME) 4*256kB (ME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3893340kB [ 748.259930][T32446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.298982][T32446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.340516][T32446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.363658][T32446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.377610][T32487] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7346'. [ 748.388809][T32446] 45115 total pagecache pages [ 748.397136][T32446] 0 pages in swap cache [ 748.403042][T32446] Free swap = 124996kB [ 748.407482][T32446] Total swap = 124996kB [ 748.412365][T32446] 2097051 pages RAM [ 748.418528][T32446] 0 pages HighMem/MovableOnly [ 748.431221][T32446] 426138 pages reserved [ 748.435435][T32446] 0 pages cma reserved [ 748.489558][T32492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7347'. [ 748.579427][T32492] veth3: entered allmulticast mode [ 748.598879][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7347'. [ 748.663354][ T5152] Bluetooth: hci3: command tx timeout [ 748.751091][ T25] block nbd5: Possible stuck request ffff888025608000: control (read@0,1024B). Runtime 150 seconds [ 748.763262][ T25] block nbd5: Possible stuck request ffff888025608200: control (read@1024,1024B). Runtime 150 seconds [ 748.774497][ T25] block nbd5: Possible stuck request ffff888025608400: control (read@2048,1024B). Runtime 150 seconds [ 748.797941][ T25] block nbd5: Possible stuck request ffff888025608600: control (read@3072,1024B). Runtime 150 seconds [ 749.275968][T32531] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 749.384069][T32542] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 749.906369][T32577] 8021q: VLANs not supported on wg1 [ 749.930759][T32577] 8021q: VLANs not supported on wg1 [ 749.936133][T32577] 8021q: VLANs not supported on wg1 [ 749.947936][T32577] 8021q: VLANs not supported on wg1 [ 749.956758][T32577] 8021q: VLANs not supported on wg1 [ 749.992147][T32576] pim6reg1: entered promiscuous mode [ 749.997530][T32576] pim6reg1: entered allmulticast mode [ 750.009332][T32577] 8021q: VLANs not supported on wg1 [ 750.084854][T32577] 8021q: VLANs not supported on wg1 [ 750.095090][T32577] 8021q: VLANs not supported on wg1 [ 750.113750][T32577] 8021q: VLANs not supported on wg1 [ 750.121410][T32577] 8021q: VLANs not supported on wg1 [ 750.128750][T32585] netlink: 'syz.7.7372': attribute type 1 has an invalid length. [ 750.137639][T32577] 8021q: VLANs not supported on wg1 [ 750.147258][T32577] 8021q: VLANs not supported on wg1 [ 750.159432][T32577] 8021q: VLANs not supported on wg1 [ 750.172819][T32577] 8021q: VLANs not supported on wg1 [ 750.187355][T32577] 8021q: VLANs not supported on wg1 [ 750.230649][T32577] 8021q: VLANs not supported on wg1 [ 750.236204][T32577] 8021q: VLANs not supported on wg1 [ 750.251095][T32577] 8021q: VLANs not supported on wg1 [ 750.257378][T32577] 8021q: VLANs not supported on wg1 [ 750.265269][T32577] 8021q: VLANs not supported on wg1 [ 750.271187][T32577] 8021q: VLANs not supported on wg1 [ 750.276629][T32577] 8021q: VLANs not supported on wg1 [ 750.283456][T32577] 8021q: VLANs not supported on wg1 [ 750.289300][T32577] 8021q: VLANs not supported on wg1 [ 750.315251][T32577] 8021q: VLANs not supported on wg1 [ 750.321632][T32577] 8021q: VLANs not supported on wg1 [ 750.327267][T32577] 8021q: VLANs not supported on wg1 [ 750.334339][T32577] 8021q: VLANs not supported on wg1 [ 750.340973][T32577] 8021q: VLANs not supported on wg1 [ 750.365824][T32577] 8021q: VLANs not supported on wg1 [ 750.371411][T32577] 8021q: VLANs not supported on wg1 [ 750.376957][T32577] 8021q: VLANs not supported on wg1 [ 750.383020][T32577] 8021q: VLANs not supported on wg1 [ 750.561863][T32604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 750.586024][T32607] syz_tun: entered allmulticast mode [ 750.724718][T32611] syz_tun: left allmulticast mode [ 750.957739][T32632] netlink: 'syz.7.7385': attribute type 3 has an invalid length. [ 751.106383][T32642] No such timeout policy "syz0" [ 751.147512][T32642] netlink: 'syz.9.7388': attribute type 1 has an invalid length. [ 751.318955][ T25] block nbd7: Possible stuck request ffff888025698000: control (read@0,1024B). Runtime 120 seconds [ 751.326028][T32648] sctp: [Deprecated]: syz.9.7389 (pid 32648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 751.326028][T32648] Use struct sctp_sack_info instead [ 751.330373][ T25] block nbd7: Possible stuck request ffff888025698200: control (read@1024,1024B). Runtime 120 seconds [ 751.357842][ T25] block nbd7: Possible stuck request ffff888025698400: control (read@2048,1024B). Runtime 120 seconds [ 751.368905][ T25] block nbd7: Possible stuck request ffff888025698600: control (read@3072,1024B). Runtime 120 seconds [ 751.746287][T32660] __nla_validate_parse: 6 callbacks suppressed [ 751.746311][T32660] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7391'. [ 751.867742][ T5917] net_ratelimit: 20 callbacks suppressed [ 751.867766][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.974639][T32670] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7392'. [ 752.042680][T32674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7395'. [ 752.113293][T32678] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 752.247527][T32688] : renamed from veth1_vlan (while UP) [ 752.420747][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.457419][T32700] tipc: Enabling of bearer rejected, failed to enable media [ 752.724369][T32715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7404'. [ 752.814408][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7406'. [ 752.904382][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.966493][T32728] syzkaller0: entered promiscuous mode [ 752.991554][T32728] syzkaller0: entered allmulticast mode [ 753.001276][T32730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7411'. [ 753.038197][T32734] Bluetooth: MGMT ver 1.23 [ 753.045772][T32726] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 753.062164][T32726] bond0 (unregistering): Released all slaves [ 753.079523][T32730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.116950][T32730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.296224][T32738] vlan1: entered allmulticast mode [ 753.310658][T32738] veth0_vlan: entered allmulticast mode [ 753.390052][T32749] sctp: [Deprecated]: syz.2.7416 (pid 32749) Use of int in max_burst socket option. [ 753.390052][T32749] Use struct sctp_assoc_value instead [ 753.526748][T32756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7418'. [ 753.582436][T32761] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 753.649273][ T300] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7421'. [ 753.819357][ T310] netlink: 112 bytes leftover after parsing attributes in process `syz.8.7424'. [ 753.944513][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.015148][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.024310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.990624][ T8049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.143163][T22351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.152861][ T8049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.163787][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.168782][ T406] netlink: 13 bytes leftover after parsing attributes in process `syz.7.7450'. [ 755.545861][ T427] netdevsim netdevsim8: Direct firmware load for .. failed with error -2 [ 755.560978][ T424] netlink: 'syz.7.7457': attribute type 19 has an invalid length. [ 755.578196][ T427] netdevsim netdevsim8: Falling back to sysfs fallback for: .. [ 755.845997][ T439] syzkaller0: entered promiscuous mode [ 755.859204][ T439] syzkaller0: entered allmulticast mode [ 756.012699][ T452] IPVS: length: 239 != 24 [ 756.247034][ T469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 756.671176][ T491] netlink: 'syz.8.7475': attribute type 1 has an invalid length. [ 756.752705][ T491] gretap1: entered promiscuous mode [ 756.807511][ T500] __nla_validate_parse: 5 callbacks suppressed [ 756.807531][ T500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7478'. [ 757.061513][ C1] net_ratelimit: 6 callbacks suppressed [ 757.061536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.075888][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.084070][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.487689][ T539] xt_TCPMSS: Only works on TCP SYN packets [ 757.607371][ T545] syzkaller1: entered promiscuous mode [ 757.628394][ T545] syzkaller1: entered allmulticast mode [ 758.058612][ T558] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 758.121457][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.130010][ T30] audit: type=1107 audit(1769022148.314:7): pid=562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!,nj [ 758.130010][ T30] l<|dE2K1@6JV' [ 758.165503][ T558] bond2 (unregistering): Released all slaves [ 758.233312][ T570] netlink: 'syz.2.7498': attribute type 21 has an invalid length. [ 758.460596][ T575] x_tables: duplicate underflow at hook 3 [ 758.481750][ T575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7499'. [ 758.554630][ T579] 8021q: VLANs not supported on sit0 [ 758.603956][ T582] netlink: 'syz.6.7502': attribute type 1 has an invalid length. [ 758.781244][ T593] netlink: 'syz.2.7503': attribute type 11 has an invalid length. [ 758.816677][ T593] netlink: 'syz.2.7503': attribute type 11 has an invalid length. [ 758.826444][ T593] netlink: 'syz.2.7503': attribute type 11 has an invalid length. [ 758.843441][ T593] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7503'. [ 758.865032][ T598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7506'. [ 758.889494][ T598] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7506'. [ 758.906212][ T598] netlink: 'syz.6.7506': attribute type 5 has an invalid length. [ 758.914139][ T598] netlink: 'syz.6.7506': attribute type 6 has an invalid length. [ 758.922441][ T598] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7506'. [ 758.933387][ T600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7508'. [ 758.964092][ T602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7509'. [ 758.965973][ T600] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7508'. [ 759.077907][T22350] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xc4 [ 759.104995][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.114128][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.123127][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.134206][ T604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7510'. [ 759.147379][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 759.158971][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.209432][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.217961][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.563136][ T632] syzkaller1: entered promiscuous mode [ 759.568716][ T632] syzkaller1: entered allmulticast mode [ 759.580002][ T636] netlink: 'syz.9.7519': attribute type 1 has an invalid length. [ 759.677824][ T643] netlink: 'syz.7.7521': attribute type 6 has an invalid length. [ 760.214880][ T2983] Unknown metaid 34525 dlen 0 [ 760.236448][ T676] syzkaller0: entered promiscuous mode [ 760.242507][ T676] syzkaller0: entered allmulticast mode [ 761.197049][ T717] team0: Device ip6gre1 is of different type [ 761.500675][T22344] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.534671][T22344] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.586236][T22344] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.605416][T22344] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.748835][ T752] Bluetooth: MGMT ver 1.23 [ 761.772247][ T748] bond2: entered promiscuous mode [ 761.777498][ T748] bond2: entered allmulticast mode [ 761.804652][ T748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.812747][ T756] __nla_validate_parse: 13 callbacks suppressed [ 761.812767][ T756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 761.829382][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 761.904467][ T756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7555'. [ 761.941715][ T762] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 761.942745][ T761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.099742][ T774] net_ratelimit: 57 callbacks suppressed [ 762.099765][ T774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.270998][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.544436][ T808] tipc: Started in network mode [ 762.549459][ T808] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 762.598140][ T808] tipc: Enabling of bearer rejected, failed to enable media [ 762.788454][ T817] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7569'. [ 763.088113][ T839] netlink: 'syz.8.7573': attribute type 13 has an invalid length. [ 763.110256][ T839] netlink: 'syz.8.7573': attribute type 17 has an invalid length. [ 763.281840][ T844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7575'. [ 763.297032][ T846] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7576'. [ 763.320060][ T8049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.357983][ T839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.378581][ T841] wireguard: wg2: Could not create IPv4 socket [ 763.568906][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7578'. [ 763.946808][ T882] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.7585'. [ 764.019929][ T882] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 764.202545][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7590'. [ 764.282076][ T898] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 764.340950][ T8049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.352109][ T904] tipc: Failed to remove unknown binding: 66,0,0/290586875:3722386190/3722386191 [ 764.392296][ T904] tipc: Failed to remove unknown binding: 66,0,0/290586875:3722386190/3722386191 [ 764.446215][ T909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7594'. [ 764.874186][ T936] netlink: 'syz.8.7600': attribute type 5 has an invalid length. [ 765.381850][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.894889][ T1004] netlink: 'syz.8.7618': attribute type 1 has an invalid length. [ 765.963507][ T1004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.006768][ T1010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.021833][ T1010] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 766.079719][ T1010] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 766.195370][ T1011] netlink: 'syz.7.7620': attribute type 10 has an invalid length. [ 766.229292][ T1004] veth5: entered promiscuous mode [ 766.241926][ T1004] bond3: (slave veth5): Enslaving as an active interface with a down link [ 766.261945][ T1011] dummy0: entered promiscuous mode [ 766.280924][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.288548][ T1011] bridge0: port 3(dummy0) entered blocking state [ 766.318175][ T1011] bridge0: port 3(dummy0) entered disabled state [ 766.338579][ T1011] dummy0: entered allmulticast mode [ 766.369193][ T1011] bridge0: port 3(dummy0) entered blocking state [ 766.375775][ T1011] bridge0: port 3(dummy0) entered forwarding state [ 766.421564][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.457767][ T1041] syzkaller0: entered promiscuous mode [ 766.480606][ T1041] syzkaller0: entered allmulticast mode [ 767.646080][ T1119] __nla_validate_parse: 4 callbacks suppressed [ 767.646102][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7648'. [ 767.695482][ T1128] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7649'. [ 767.705360][ T1128] openvswitch: netlink: Flow key attr not present in new flow. [ 768.786377][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7667'. [ 768.954060][ T1187] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7668'. [ 769.273666][ T1200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7674'. [ 769.315157][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7674'. [ 769.429051][ T1200] netlink: 'syz.2.7674': attribute type 1 has an invalid length. [ 769.477907][ T1203] netlink: 'syz.9.7675': attribute type 2 has an invalid length. [ 769.490892][ T1200] netlink: 'syz.2.7674': attribute type 2 has an invalid length. [ 769.512024][ T1199] netlink: 'syz.2.7674': attribute type 1 has an invalid length. [ 769.543432][ T1199] netlink: 'syz.2.7674': attribute type 2 has an invalid length. [ 769.763584][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7678'. [ 769.773381][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7678'. [ 769.782922][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7678'. [ 770.042499][ T1227] lec:lec_atm_send: lec0: Unknown message type 13 [ 770.085697][ T1204] lec:lec_atm_close: lec0: Shut down! [ 770.377194][ T1234] ipt_REJECT: TCP_RESET invalid for non-tcp [ 770.416837][ T1241] x_tables: duplicate entry at hook 1 [ 770.643661][ T1261] .: renamed from bridge_slave_1 (while UP) [ 770.662398][ T1256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7691'. [ 771.029745][ T1280] netlink: 'syz.8.7699': attribute type 1 has an invalid length. [ 771.108562][ T1280] bond4: entered promiscuous mode [ 771.127613][ T1280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.347299][ T1296] lec:lec_atm_send: lec0: Unknown message type 13 [ 771.369400][ T1275] lec:lec_atm_close: lec0: Shut down! [ 771.811286][ T1319] ipvlan2: entered allmulticast mode [ 771.829738][ T1319] batadv_slave_1: entered allmulticast mode [ 771.852883][ T1319] batman_adv: batadv0: Adding interface: ipvlan2 [ 771.859355][ T1319] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.891113][ T1319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.902838][ T1319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.913054][ T1319] batman_adv: batadv0: Interface activated: ipvlan2 [ 771.926264][ T1327] netlink: 'syz.8.7714': attribute type 6 has an invalid length. [ 772.017565][ T1332] netlink: 'syz.2.7711': attribute type 11 has an invalid length. [ 772.394260][ T1349] x_tables: duplicate underflow at hook 4 [ 772.707524][ T1357] nbd: must specify at least one socket [ 772.916112][ T1366] wg1 speed is unknown, defaulting to 1000 [ 773.587738][ T1384] can: request_module (can-proto-3) failed. [ 773.733199][ T1402] syzkaller1: entered promiscuous mode [ 773.739966][ T1402] syzkaller1: entered allmulticast mode [ 773.760896][ T1402] bridge_slave_0: invalid flags given to default FDB implementation [ 773.805835][ T1407] netlink: 'syz.8.7738': attribute type 1 has an invalid length. [ 773.827154][ T1355] lec:lec_atm_close: lec0: Shut down! [ 773.912990][ T1407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 773.998905][ T1414] bond5: (slave ip6erspan0): making interface the new active one [ 774.038103][ T1414] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 774.083147][ T1405] syzkaller0: entered promiscuous mode [ 774.093998][ T1405] syzkaller0: entered allmulticast mode [ 774.123934][ T1422] __nla_validate_parse: 5 callbacks suppressed [ 774.123955][ T1422] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7740'. [ 774.771462][ T1468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7750'. [ 774.827386][ T1461] syzkaller1: entered allmulticast mode [ 774.873830][ T1474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7752'. [ 774.992477][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7752'. [ 775.169462][ T1484] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7754'. [ 775.351967][ T1498] lec:lec_atm_send: lec0: Unknown message type 13 [ 775.378735][ T1467] lec:lec_atm_close: lec0: Shut down! [ 775.471430][ T1500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7758'. [ 775.568433][ T1506] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7760'. [ 775.606802][ T1506] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7760'. [ 775.671736][ T1511] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 775.758840][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7762'. [ 775.801463][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7762'. [ 775.812334][ T1518] batadv8: entered allmulticast mode [ 775.881917][ T1522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.994390][ T1522] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 776.095348][ T1522] batman_adv: batadv0: Removing interface: ipvlan2 [ 776.192237][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.416350][ T1527] syzkaller0: entered promiscuous mode [ 776.422868][ T1527] syzkaller0: entered allmulticast mode [ 776.464516][ T1525] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 776.661061][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 776.668368][ T1576] netlink: 'syz.6.7777': attribute type 11 has an invalid length. [ 778.532135][ T5201] udevd[5201]: worker [24503] /devices/virtual/block/nbd5 timeout; kill it [ 778.552710][ T5201] udevd[5201]: seq 31178 '/devices/virtual/block/nbd5' killed [ 778.847585][ T25] block nbd5: Possible stuck request ffff888025608000: control (read@0,1024B). Runtime 180 seconds [ 778.858814][ T25] block nbd5: Possible stuck request ffff888025608200: control (read@1024,1024B). Runtime 180 seconds [ 778.870507][ T25] block nbd5: Possible stuck request ffff888025608400: control (read@2048,1024B). Runtime 180 seconds [ 778.881626][ T25] block nbd5: Possible stuck request ffff888025608600: control (read@3072,1024B). Runtime 180 seconds [ 779.335970][ T1606] __nla_validate_parse: 5 callbacks suppressed [ 779.335991][ T1606] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7787'. [ 779.569191][ T1624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7792'. [ 779.645397][ T1624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7792'. [ 779.882244][ T1641] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7796'. [ 779.892407][ T1642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7796'. [ 779.902731][ T1644] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7797'. [ 779.975661][ T1650] netlink: 'syz.6.7795': attribute type 21 has an invalid length. [ 779.984690][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7795'. [ 780.077264][ T1652] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7799'. [ 780.144153][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7798'. [ 780.147273][ T1662] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7799'. [ 780.254078][ T1667] netlink: 'syz.9.7801': attribute type 21 has an invalid length. [ 780.451451][ T1679] netlink: 'syz.9.7804': attribute type 1 has an invalid length. [ 780.465748][ T1679] NCSI netlink: No device for ifindex 0 [ 780.640840][ T1685] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.648639][ T1685] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.955087][ T1687] tipc: Enabled bearer , priority 0 [ 781.001542][ T1686] tipc: Disabling bearer [ 781.422587][ T25] block nbd7: Possible stuck request ffff888025698000: control (read@0,1024B). Runtime 150 seconds [ 781.443029][ T25] block nbd7: Possible stuck request ffff888025698200: control (read@1024,1024B). Runtime 150 seconds [ 781.454432][ T25] block nbd7: Possible stuck request ffff888025698400: control (read@2048,1024B). Runtime 150 seconds [ 781.471302][ T25] block nbd7: Possible stuck request ffff888025698600: control (read@3072,1024B). Runtime 150 seconds [ 781.975103][ T1761] veth1_to_bond: entered allmulticast mode [ 781.983309][ T1760] veth1_to_bond: left allmulticast mode [ 782.104575][ T1767] syzkaller1: entered promiscuous mode [ 782.115598][ T1767] syzkaller1: entered allmulticast mode [ 782.140959][ T1771] gretap0: entered promiscuous mode [ 782.173363][ T1775] gretap0: left promiscuous mode [ 782.211200][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.218580][ T1775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.226363][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.233506][ T1775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.254949][ T1775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 782.271892][ T1776] netlink: 'syz.9.7832': attribute type 12 has an invalid length. [ 782.283729][ T1776] netlink: 'syz.9.7832': attribute type 29 has an invalid length. [ 782.580760][ T1785] netlink: 'syz.9.7835': attribute type 6 has an invalid length. [ 782.650937][ T1785] netlink: 'syz.9.7835': attribute type 2 has an invalid length. [ 782.667514][ T1785] netlink: 'syz.9.7835': attribute type 2 has an invalid length. [ 782.794542][ T1797] x_tables: duplicate underflow at hook 1 [ 782.899821][ T1805] netlink: 'syz.9.7841': attribute type 12 has an invalid length. [ 783.015809][ T1809] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 783.048160][ T1810] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 783.121980][ T1817] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 783.523813][ T1843] syzkaller1: entered allmulticast mode [ 783.526303][ T1842] netlink: 'syz.6.7853': attribute type 83 has an invalid length. [ 783.762357][ T1853] netlink: 'syz.2.7856': attribute type 11 has an invalid length. [ 783.957592][ T1865] syzkaller1: entered promiscuous mode [ 783.965442][ T1865] syzkaller1: entered allmulticast mode [ 783.991579][ T1865] syzkaller0: entered promiscuous mode [ 783.997578][ T1865] syzkaller0: entered allmulticast mode [ 784.065919][ T1872] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 784.492791][ T1887] bond1: (slave ip6gretap1): making interface the new active one [ 784.516436][ T1887] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 784.998181][ T1928] __nla_validate_parse: 30 callbacks suppressed [ 784.998214][ T1928] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7879'. [ 785.353447][ T1937] validate_nla: 2 callbacks suppressed [ 785.353470][ T1937] netlink: 'syz.8.7883': attribute type 2 has an invalid length. [ 785.396194][ T1937] 9: entered promiscuous mode [ 785.444756][ T1937] netlink: 'syz.8.7883': attribute type 2 has an invalid length. [ 785.526282][ T1950] openvswitch: netlink: Message has 592 unknown bytes. [ 785.563721][ T1937] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 785.620729][ T1950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.865736][ T1959] syzkaller1: entered promiscuous mode [ 785.885258][ T1959] syzkaller1: entered allmulticast mode [ 786.374032][ T1985] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003 [ 786.397542][ T1985] xt_hashlimit: overflow, try lower: 3/0 [ 787.114471][ T2022] netlink: 'syz.8.7905': attribute type 11 has an invalid length. [ 787.150765][ T2022] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7905'. [ 787.275355][ T2031] netlink: 'syz.8.7909': attribute type 3 has an invalid length. [ 787.338622][ T2038] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7910'. [ 787.427789][ T2046] sock: sock_set_timeout: `syz.7.7913' (pid 2046) tries to set negative timeout [ 787.568367][ T2049] IPVS: length: 56 != 24 [ 787.777940][ T2065] .: renamed from bridge_slave_1 (while UP) [ 787.926208][ T2076] openvswitch: netlink: IP tunnel dst address not specified [ 788.030873][ T2080] netlink: 'syz.7.7926': attribute type 10 has an invalid length. [ 788.038834][ T2080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7926'. [ 788.369480][ T2101] netlink: 'syz.2.7936': attribute type 16 has an invalid length. [ 788.404197][ T2101] netlink: 'syz.2.7936': attribute type 17 has an invalid length. [ 788.506462][ T2101] gre0: left promiscuous mode [ 788.531769][ T2101] gre0: left allmulticast mode [ 788.566731][ T2101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.586726][ T2111] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7939'. [ 788.617191][ T2111] 0{X: renamed from gretap0 (while UP) [ 788.626710][ T2111] 0{X: entered allmulticast mode [ 788.632795][ T2111] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 788.732277][ T2117] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7941'. [ 788.904348][ T2122] syzkaller1: entered promiscuous mode [ 788.910337][ T2122] syzkaller1: entered allmulticast mode [ 789.206716][ T2142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7946'. [ 789.207532][ T9690] IPVS: starting estimator thread 0... [ 789.221854][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7946'. [ 789.320766][ T2148] IPVS: using max 48 ests per chain, 115200 per kthread [ 789.465794][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7950'. [ 789.666234][ T2165] bridge_slave_0: left allmulticast mode [ 789.686387][ T2165] bridge_slave_0: left promiscuous mode [ 789.702678][ T2171] netlink: 'syz.7.7953': attribute type 10 has an invalid length. [ 789.721909][ T2165] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.733130][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.744249][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.756233][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.768203][ T2165] .: left allmulticast mode [ 789.777294][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 789.777346][ T2177] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 789.798717][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 789.841567][ T2177] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 789.864592][ T2165] .: left promiscuous mode [ 789.869979][ T2165] bridge0: port 2(.) entered disabled state [ 789.921623][ T2165] bond0: (slave bond_slave_0): Releasing backup interface [ 789.954886][ T2165] bond0: (slave bond_slave_1): Releasing backup interface [ 789.997116][ T2165] team0: Port device C removed [ 790.021485][ T2165] team0: Port device team_slave_1 removed [ 790.028208][ T2165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.048139][ T2165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.058839][ T2165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.066696][ T2165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.076645][ T2165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 790.107665][ T2171] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 790.117867][ T2173] team0: Mode changed to "activebackup" [ 790.397003][ T2170] wg1 speed is unknown, defaulting to 1000 [ 790.518934][ T2190] netlink: 536 bytes leftover after parsing attributes in process `syz.7.7961'. [ 790.771477][ T2210] netlink: 'syz.7.7966': attribute type 12 has an invalid length. [ 790.773710][ T2204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.939790][ T2220] netlink: 294 bytes leftover after parsing attributes in process `syz.7.7969'. [ 791.000639][ T2220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.045761][ T2209] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7967'. [ 791.135658][ T2170] chnl_net:caif_netlink_parms(): no params data found [ 791.172462][ T2231] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.225912][ T2233] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7972'. [ 791.228498][ T2231] C: renamed from team_slave_0 (while UP) [ 791.243992][ T2231] netlink: 'syz.7.7971': attribute type 1 has an invalid length. [ 791.253193][ T2231] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 791.443152][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.491206][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.499373][ T2170] bridge_slave_0: entered allmulticast mode [ 791.507899][ T2247] netlink: 'syz.9.7973': attribute type 10 has an invalid length. [ 791.542543][ T2170] bridge_slave_0: entered promiscuous mode [ 791.568737][ T2247] team0: Port device dummy0 added [ 791.576074][ T2251] tipc: Cannot configure node identity twice [ 791.584193][ T2251] tipc: Cannot configure node identity twice [ 791.591113][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.598705][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.606351][ T2170] bridge_slave_1: entered allmulticast mode [ 791.616365][ T2170] bridge_slave_1: entered promiscuous mode [ 791.719472][ T2170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.747555][ T2170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.844512][ T2170] team0: Port device team_slave_0 added [ 791.856449][ T2170] team0: Port device team_slave_1 added [ 791.863008][ T5152] Bluetooth: hci2: command tx timeout [ 791.866135][ T2260] tipc: Started in network mode [ 791.877821][ T2260] tipc: Node identity c2166185677e, cluster identity 4711 [ 791.887197][ T2260] tipc: Enabled bearer , priority 0 [ 791.987250][ T2265] syzkaller0: entered promiscuous mode [ 792.002547][ T2265] syzkaller0: entered allmulticast mode [ 792.020360][ T2265] tipc: Resetting bearer [ 792.056020][ T2258] tipc: Resetting bearer [ 792.228538][ T2279] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7984'. [ 792.238526][ T2279] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 792.305582][ T2281] rdma_op ffff88802d0e99f0 conn xmit_rdma 0000000000000000 [ 792.519032][ T2284] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7985'. [ 792.552880][ T2287] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7985'. [ 793.942183][ T5152] Bluetooth: hci2: command tx timeout [ 794.629853][ T2258] tipc: Disabling bearer [ 794.755468][ T2302] netlink: 'syz.8.7988': attribute type 9 has an invalid length. [ 794.775248][ T2293] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7987'. [ 794.789526][ T6011] tipc: Node number set to 2775081349 [ 794.796516][ T2170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.805057][ T2170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.843496][ T2170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.865403][ T2170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.873721][ T2170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.903834][ T2170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.923631][ T2305] netlink: 'syz.8.7988': attribute type 9 has an invalid length. [ 795.082487][ T2170] hsr_slave_0: entered promiscuous mode [ 795.089483][ T2170] hsr_slave_1: entered promiscuous mode [ 795.096613][ T2170] debugfs: 'hsr0' already exists in 'hsr' [ 795.104265][ T2170] Cannot create hsr debugfs directory [ 795.122182][ T2310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7990'. [ 795.164652][ T2315] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 795.717048][ T2348] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8000'. [ 795.764425][ T2170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.800567][ T2170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.022609][ T5152] Bluetooth: hci2: command tx timeout [ 796.030279][ T2170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.047516][ T2170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.291851][ T2170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.302905][ T2170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.330692][ T2367] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.399220][ T2170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.415557][ T2170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.475254][ T2360] syzkaller0: entered promiscuous mode [ 796.484935][ T2360] syzkaller0: entered allmulticast mode [ 797.304051][ T5152] Bluetooth: hci0: command tx timeout [ 798.100740][ T5152] Bluetooth: hci2: command tx timeout [ 799.208628][ T2393] netlink: 'syz.8.8009': attribute type 1 has an invalid length. [ 799.235879][ T2393] netlink: 228 bytes leftover after parsing attributes in process `syz.8.8009'. [ 799.287000][ T2170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 799.348975][ T2170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 799.401382][ T2170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 799.425474][ T2170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 799.741267][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8017'. [ 799.751032][ T2434] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8017'. [ 799.974743][ T2170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.009926][ T2170] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.032637][T22349] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.039884][T22349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.089629][T21652] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.096902][T21652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.109678][ T2449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8021'. [ 800.175485][ T2452] 0: reclassify loop, rule prio 0, protocol 800 [ 800.465266][ T2476] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 800.676234][ T2170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.804609][ T2170] veth0_vlan: entered promiscuous mode [ 800.892425][ T2170] veth1_vlan: entered promiscuous mode [ 800.915364][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8035'. [ 801.066309][ T2170] veth0_macvtap: entered promiscuous mode [ 801.111301][ T2170] veth1_macvtap: entered promiscuous mode [ 801.183912][ T2170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.198047][ T2529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.235010][ T2170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.282916][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.296318][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.343860][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.376826][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.560060][ T2536] pim6reg: entered allmulticast mode [ 801.734889][ T2539] vlan3: entered promiscuous mode [ 801.752293][ T2539] bridge0: entered promiscuous mode [ 802.276030][ T2584] netlink: 'syz.9.8044': attribute type 11 has an invalid length. [ 802.310515][ T2584] netlink: 'syz.9.8044': attribute type 11 has an invalid length. [ 802.336127][T21652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.363999][ T2584] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8044'. [ 802.368348][T21652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.548017][ T2571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.556822][ T2571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.966219][ T2629] netlink: 'syz.8.8052': attribute type 2 has an invalid length. [ 803.019995][ T2628] ip6gre1: entered allmulticast mode [ 803.196639][ T2643] x_tables: unsorted entry at hook 2 [ 803.228410][ T2643] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8059'. [ 803.333259][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8060'. [ 803.360350][ T2647] bridge_slave_1: left allmulticast mode [ 803.404953][ T2647] bridge_slave_1: left promiscuous mode [ 803.422200][ T2647] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.471758][ T2647] bridge_slave_0: left allmulticast mode [ 803.503382][ T2647] bridge_slave_0: left promiscuous mode [ 803.541208][ T2647] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.625768][ T2662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8064'. [ 803.653221][ T2662] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8064'. [ 803.675444][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 803.698172][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 803.712468][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 803.723107][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 803.741477][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 803.872101][ T2676] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 803.892563][ T2663] wg1 speed is unknown, defaulting to 1000 [ 803.912669][ T2676] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8067'. [ 803.935780][ T2676] gretap0: entered promiscuous mode [ 804.033487][ T2676] gretap0: left promiscuous mode [ 804.072503][ T2676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.253599][ T2698] SET target dimension over the limit! [ 804.286359][ T30] audit: type=1800 audit(1769022194.504:8): pid=2696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8071" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=885 res=0 errno=0 [ 804.321546][ T2707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8072'. [ 804.351725][ T2707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8072'. [ 804.543934][ T2721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8076'. [ 804.606050][ T2725] netlink: 'syz.8.8077': attribute type 3 has an invalid length. [ 804.647575][ T2663] chnl_net:caif_netlink_parms(): no params data found [ 804.666500][ T2727] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 804.959654][ T2663] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.967581][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.976885][ T2663] bridge_slave_0: entered allmulticast mode [ 804.985888][ T2663] bridge_slave_0: entered promiscuous mode [ 804.994886][ T2663] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.002370][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.010257][ T2663] bridge_slave_1: entered allmulticast mode [ 805.019375][ T2663] bridge_slave_1: entered promiscuous mode [ 805.085945][ T2663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.099492][ T2663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.187402][ T2748] bond7: option miimon: invalid value (18446744073709551585) [ 805.195288][ T2748] bond7: option miimon: allowed values 0 - 2147483647 [ 805.204058][ T2748] bond7 (unregistering): Released all slaves [ 805.226764][ T2663] team0: Port device team_slave_0 added [ 805.236586][ T2663] team0: Port device team_slave_1 added [ 805.292212][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.299454][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.326713][ T2663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.398036][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.417339][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.494400][ T2663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.547310][ T2759] delete_channel: no stack [ 805.569419][ T2770] tls_set_device_offload: netdev not found [ 805.570713][ T2759] delete_channel: no stack [ 805.582609][ T2759] delete_channel: no stack [ 805.587924][ T2759] delete_channel: no stack [ 805.613635][ T2759] delete_channel: no stack [ 805.618384][ T2759] delete_channel: no stack [ 805.642251][ T2759] delete_channel: no stack [ 805.646804][ T2759] delete_channel: no stack [ 805.654070][ T2759] delete_channel: no stack [ 805.659053][ T2759] delete_channel: no stack [ 805.664219][ T2759] delete_channel: no stack [ 805.667996][ T2663] hsr_slave_0: entered promiscuous mode [ 805.669102][ T2759] delete_channel: no stack [ 805.680267][ T2663] hsr_slave_1: entered promiscuous mode [ 805.683352][ T2663] debugfs: 'hsr0' already exists in 'hsr' [ 805.688902][ T2759] delete_channel: no stack [ 805.696661][ T2663] Cannot create hsr debugfs directory [ 805.727572][ T2759] delete_channel: no stack [ 805.740856][ T2759] delete_channel: no stack [ 805.745570][ T2759] delete_channel: no stack [ 805.750210][ T2759] delete_channel: no stack [ 805.766211][ T2782] netlink: 'syz.6.8086': attribute type 12 has an invalid length. [ 805.796086][ T2759] delete_channel: no stack [ 805.796596][ T5845] Bluetooth: hci4: command tx timeout [ 805.810159][ T2759] delete_channel: no stack [ 805.827130][ T2759] delete_channel: no stack [ 805.832601][ T2759] delete_channel: no stack [ 805.837562][ T2759] delete_channel: no stack [ 805.842463][ T2759] delete_channel: no stack [ 805.896014][ T2759] delete_channel: no stack [ 805.902917][ T2759] delete_channel: no stack [ 805.907561][ T2759] delete_channel: no stack [ 805.929457][ T2782] bond2: option primary_reselect: invalid value (255) [ 805.930769][ T2759] delete_channel: no stack [ 805.959537][ T2782] bond2 (unregistering): Released all slaves [ 805.995085][ T2784] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 806.004560][ T2759] delete_channel: no stack [ 806.009246][ T2759] delete_channel: no stack [ 806.032585][ T2759] delete_channel: no stack [ 806.039909][ T2759] delete_channel: no stack [ 806.072054][ T2759] delete_channel: no stack [ 806.089116][ T2759] delete_channel: no stack [ 806.123244][ T2759] delete_channel: no stack [ 806.136339][ T2759] delete_channel: no stack [ 806.144452][ T2801] __nla_validate_parse: 7 callbacks suppressed [ 806.144475][ T2801] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8089'. [ 806.172326][ T2759] delete_channel: no stack [ 806.182709][ T2759] delete_channel: no stack [ 806.187441][ T2759] delete_channel: no stack [ 806.192324][ T2759] delete_channel: no stack [ 806.197498][ T2759] delete_channel: no stack [ 806.203348][ T2759] delete_channel: no stack [ 806.208777][ T2759] delete_channel: no stack [ 806.239360][ T2759] delete_channel: no stack [ 806.246009][ T2759] delete_channel: no stack [ 806.267434][ T2759] delete_channel: no stack [ 806.286126][ T2759] delete_channel: no stack [ 806.311312][ T2759] delete_channel: no stack [ 806.315987][ T2759] delete_channel: no stack [ 806.340942][ T2759] delete_channel: no stack [ 806.345623][ T2759] delete_channel: no stack [ 806.378075][ T2759] delete_channel: no stack [ 806.387268][ T2759] delete_channel: no stack [ 806.388232][ T2663] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.404922][ T2812] netlink: 'syz.8.8092': attribute type 1 has an invalid length. [ 806.409473][ T2759] delete_channel: no stack [ 806.424940][ T2759] delete_channel: no stack [ 806.437835][ T2759] delete_channel: no stack [ 806.448064][ T2759] delete_channel: no stack [ 806.455498][ T2759] delete_channel: no stack [ 806.459848][ T2821] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8093'. [ 806.463867][ T2759] delete_channel: no stack [ 806.493283][ T2759] delete_channel: no stack [ 806.501843][ T2759] delete_channel: no stack [ 806.522484][ T2759] delete_channel: no stack [ 806.527226][ T2759] delete_channel: no stack [ 806.529146][ T2663] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.550894][ T2759] delete_channel: no stack [ 806.555526][ T2759] delete_channel: no stack [ 806.560139][ T2759] delete_channel: no stack [ 806.674573][ T2663] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.709836][ T2833] netlink: 'syz.7.8097': attribute type 10 has an invalid length. [ 806.731895][ T2826] geneve2: entered allmulticast mode [ 806.743868][ T2826] batman_adv: batadv0: Adding interface: geneve2 [ 806.756082][ T2826] batman_adv: batadv0: The MTU of interface geneve2 is too small (1486) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.790874][ T2826] batman_adv: batadv0: Interface activated: geneve2 [ 806.822797][ T2833] team0: Device veth0_macvtap failed to register rx_handler [ 806.974238][ T2837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8098'. [ 807.017052][ T2663] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.018064][ T2858] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8102'. [ 807.109432][ T2865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8103'. [ 807.152767][ T2865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 807.264496][ T2663] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 807.295437][ T2663] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 807.323644][ T2663] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 807.357046][ T2663] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 807.506932][ T2897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8108'. [ 807.651812][ T2899] netlink: 'syz.8.8110': attribute type 4 has an invalid length. [ 807.803519][ T2663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.858724][ T2915] openvswitch: netlink: EtherType 0 is less than min 600 [ 807.866689][ T5845] Bluetooth: hci4: command tx timeout [ 807.894100][ T2663] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.928511][T22349] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.935761][T22349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.986004][T22349] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.993805][T22349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.090885][ T2927] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8113'. [ 808.117332][ T2927] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8113'. [ 808.124655][ T2663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.501849][ T2937] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8117'. [ 808.706932][ T2663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.792346][ T2920] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 808.911158][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.935431][ T25] block nbd5: Possible stuck request ffff888025608000: control (read@0,1024B). Runtime 210 seconds [ 808.946948][ T25] block nbd5: Possible stuck request ffff888025608200: control (read@1024,1024B). Runtime 210 seconds [ 808.960141][ T25] block nbd5: Possible stuck request ffff888025608400: control (read@2048,1024B). Runtime 210 seconds [ 808.972677][ T25] block nbd5: Possible stuck request ffff888025608600: control (read@3072,1024B). Runtime 210 seconds [ 809.047805][ T2961] ip6gre1: entered allmulticast mode [ 809.338681][ T2980] vcan0: tx address claim with dlc 0 [ 809.469706][ T2987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8127'. [ 809.515560][ T2986] tipc: Enabled bearer , priority 0 [ 809.524369][ T2985] tipc: Enabling of bearer rejected, already enabled [ 809.553493][ T2986] syzkaller0: entered promiscuous mode [ 809.559109][ T2986] syzkaller0: entered allmulticast mode [ 809.587905][ T2663] veth0_vlan: entered promiscuous mode [ 809.667702][ T2663] veth1_vlan: entered promiscuous mode [ 809.782298][ T2960] lec:lec_atm_close: lec0: Shut down! [ 809.901852][ T2663] veth0_macvtap: entered promiscuous mode [ 809.943056][ T5845] Bluetooth: hci4: command tx timeout [ 809.966821][ T3011] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 809.976328][ T2663] veth1_macvtap: entered promiscuous mode [ 810.002225][ T2984] tipc: Resetting bearer [ 810.021529][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 810.105703][ T2984] tipc: Disabling bearer [ 810.173597][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.218475][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.281333][ T4257] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.333332][ T4257] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.368637][ T4257] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.390290][ T4257] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.572986][ T3036] gretap0: entered promiscuous mode [ 810.614853][ T3036] gretap0: left promiscuous mode [ 810.655137][ T3036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.746685][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.786620][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.947172][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.956707][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.095990][ T3051] netlink: 'syz.9.8061': attribute type 23 has an invalid length. [ 811.197758][ T3041] lec:lec_atm_close: lec0: Shut down! [ 811.331687][ T3062] __nla_validate_parse: 6 callbacks suppressed [ 811.331712][ T3062] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8147'. [ 811.470944][ T25] block nbd7: Possible stuck request ffff888025698000: control (read@0,1024B). Runtime 180 seconds [ 811.482485][ T25] block nbd7: Possible stuck request ffff888025698200: control (read@1024,1024B). Runtime 180 seconds [ 811.502568][ T3062] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 811.511137][ T25] block nbd7: Possible stuck request ffff888025698400: control (read@2048,1024B). Runtime 180 seconds [ 811.522753][ T25] block nbd7: Possible stuck request ffff888025698600: control (read@3072,1024B). Runtime 180 seconds [ 812.021290][ T5845] Bluetooth: hci4: command tx timeout [ 812.336571][ T3118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8163'. [ 812.360610][ T3118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8163'. [ 812.447336][ T3118] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 812.461381][ T3121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8162'. [ 812.474413][ T3118] bond3 (unregistering): Released all slaves [ 812.552155][ T3128] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8165'. [ 812.885212][ T3137] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 813.003433][ T3145] nbd: must specify a size in bytes for the device [ 813.243646][ T3119] lec:lec_atm_close: lec0: Shut down! [ 813.419099][ T3165] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8170'. [ 813.584919][ T3175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8173'. [ 813.635351][ T3181] netlink: 'syz.2.8174': attribute type 16 has an invalid length. [ 813.681688][ T3181] netlink: 'syz.2.8174': attribute type 17 has an invalid length. [ 813.726258][ T3175] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 813.734996][ T3188] netlink: 'syz.2.8174': attribute type 16 has an invalid length. [ 813.753072][ T3175] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8173'. [ 813.764522][ T3190] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8176'. [ 813.767433][ T3188] netlink: 'syz.2.8174': attribute type 17 has an invalid length. [ 813.806325][ T3188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.828915][ T5201] udevd[5201]: worker [26980] /devices/virtual/block/nbd7 timeout; kill it [ 813.838435][ T5201] udevd[5201]: seq 32398 '/devices/virtual/block/nbd7' killed [ 813.883218][ T3202] netlink: 'syz.7.8177': attribute type 10 has an invalid length. [ 813.891370][ T3181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.042477][ T3213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8180'. [ 814.053162][ T3213] block nbd9: Unsupported socket: should be TCP or UNIX. [ 814.086851][ T3202] bridge0: port 2(.) entered disabled state [ 814.112006][ T3202] .: left allmulticast mode [ 814.130551][ T3202] .: left promiscuous mode [ 814.149356][ T3202] bridge0: port 2(.) entered disabled state [ 814.201327][ T3202] bond0: (slave .): Enslaving as an active interface with an up link [ 814.237616][ T3216] team0: Device ip6gre1 is of different type [ 814.327411][ T3211] syzkaller0: entered promiscuous mode [ 814.333456][ T3211] syzkaller0: entered allmulticast mode [ 815.134320][ T3263] lec:lec_atm_send: lec0: Unknown message type 13 [ 815.182551][ T3234] lec:lec_atm_close: lec0: Shut down! [ 815.434259][ T3279] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 815.773027][ T3289] syzkaller0: entered promiscuous mode [ 815.785388][ T3289] syzkaller0: entered allmulticast mode [ 816.061709][ T3307] xt_TCPMSS: Only works on TCP SYN packets [ 816.074339][ T3303] syzkaller0: entered promiscuous mode [ 816.080052][ T3303] syzkaller0: entered allmulticast mode [ 816.289277][ T3319] netlink: 'syz.8.8207': attribute type 8 has an invalid length. [ 816.465926][ T3331] __nla_validate_parse: 7 callbacks suppressed [ 816.465949][ T3331] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8211'. [ 816.672034][ T3341] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8212'. [ 816.704502][ T3337] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 816.946115][ T3349] lec:lec_atm_send: lec0: Unknown message type 13 [ 816.973910][ T3322] lec:lec_atm_close: lec0: Shut down! [ 819.732602][ T3377] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8219'. [ 819.749668][ T3374] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 819.920709][ T8047] IPVS: starting estimator thread 0... [ 820.062933][ T3391] IPVS: using max 26 ests per chain, 62400 per kthread [ 820.083148][ T3412] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8227'. [ 820.268106][ T3416] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8227'. [ 820.569441][ T3423] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8229'. [ 820.600102][ T3424] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8230'. [ 820.653640][ T3429] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 820.826280][ T3436] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8232'. [ 820.860096][ T3436] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 820.920298][ T3436] dvmrp6: entered allmulticast mode [ 821.075027][ T3450] netlink: 9 bytes leftover after parsing attributes in process `syz.9.8234'. [ 821.109598][ T3451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8236'. [ 821.127867][ T3452] x_tables: duplicate underflow at hook 1 [ 821.382584][ T3469] geneve2: entered promiscuous mode [ 821.463058][ T3477] netlink: 'syz.2.8244': attribute type 17 has an invalid length. [ 821.473580][ T3477] __nla_validate_parse: 1 callbacks suppressed [ 821.473605][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8244'. [ 821.489596][ T3477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8244'. [ 821.509030][ T3477] gretap0: entered promiscuous mode [ 821.538022][ T3477] gretap0: left promiscuous mode [ 821.554347][ T3482] netlink: 'syz.6.8245': attribute type 21 has an invalid length. [ 821.566901][ T3484] netlink: 'syz.6.8245': attribute type 21 has an invalid length. [ 821.578982][ T3482] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8245'. [ 821.591114][ T3484] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8245'. [ 821.636360][ T3487] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8247'. [ 821.717085][ T3492] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 821.863826][ T3498] netlink: 'syz.2.8249': attribute type 10 has an invalid length. [ 821.884966][ T3498] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 822.296035][ T3515] lec:lec_atm_send: lec0: Unknown message type 13 [ 822.339300][ T3480] lec:lec_atm_close: lec0: Shut down! [ 822.377622][ T3519] tipc: Started in network mode [ 822.386392][ T3519] tipc: Node identity f61889dbc1a3, cluster identity 4711 [ 822.395071][ T3519] tipc: Enabled bearer , priority 0 [ 822.423689][ T3519] syzkaller0: entered promiscuous mode [ 822.438071][ T3519] syzkaller0: entered allmulticast mode [ 822.484758][ T3525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8255'. [ 822.532300][ T3519] tipc: Resetting bearer [ 822.547166][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8255'. [ 822.583290][ T3519] tipc: Disabling bearer [ 822.923009][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8258'. [ 822.938014][ T3547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8261'. [ 822.964412][ T3549] netlink: 'syz.9.8262': attribute type 17 has an invalid length. [ 822.983370][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8262'. [ 823.095356][ T3555] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 823.134496][ T3560] netlink: 'syz.8.8264': attribute type 1 has an invalid length. [ 823.171252][ T3560] netlink: 'syz.8.8264': attribute type 2 has an invalid length. [ 823.183881][ T3560] netlink: 'syz.8.8264': attribute type 1 has an invalid length. [ 823.202764][ T3560] netlink: 'syz.8.8264': attribute type 3 has an invalid length. [ 823.279764][ T3561] wg1 speed is unknown, defaulting to 1000 [ 823.795144][ T3585] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 824.259695][ T3603] netlink: 'syz.9.8278': attribute type 1 has an invalid length. [ 824.693185][ T3632] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 824.793561][ T3632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 824.887247][ T3650] : renamed from bond0 (while UP) [ 825.080306][ T3653] syzkaller1: entered promiscuous mode [ 825.109839][ T3653] syzkaller1: entered allmulticast mode [ 825.409245][ T3659] netem: incorrect ge model size [ 825.419566][ T3659] netem: change failed [ 825.451586][ T3673] 1{X: renamed from 30{X (while UP) [ 825.492767][ T3673] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 826.490888][ T3741] __nla_validate_parse: 17 callbacks suppressed [ 826.490911][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8310'. [ 826.594283][ T3747] syzkaller0: entered promiscuous mode [ 826.599841][ T3747] syzkaller0: entered allmulticast mode [ 826.642174][ T3756] veth1_to_batadv: entered promiscuous mode [ 826.651967][ T3747] tipc: Started in network mode [ 826.657601][ T3747] tipc: Node identity f2a5a8242fa3, cluster identity 4711 [ 826.665664][ T3747] tipc: Enabled bearer , priority 0 [ 826.674221][ T3756] veth1_to_batadv: left promiscuous mode [ 826.691423][ T3746] tipc: Resetting bearer [ 826.703244][ T3750] x_tables: duplicate underflow at hook 1 [ 826.741871][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8315'. [ 826.752008][ T3746] tipc: Disabling bearer [ 826.752792][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8315'. [ 827.031109][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8320'. [ 827.044845][ T9690] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x1 [ 827.063337][ T3783] validate_nla: 5 callbacks suppressed [ 827.063360][ T3783] netlink: 'syz.9.8322': attribute type 33 has an invalid length. [ 827.079832][ T9690] hid-generic 0005:0C49:1012.0003: ignoring exceeding usage max [ 827.096041][ T3785] veth3: entered allmulticast mode [ 827.108577][ T9690] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x4 [ 827.117938][ T9690] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x5 [ 827.140594][ T9690] hid-generic 0005:0C49:1012.0003: reserved main item tag 0xd [ 827.146220][ T3790] netlink: 512 bytes leftover after parsing attributes in process `syz.8.8323'. [ 827.157384][ T9690] hid-generic 0005:0C49:1012.0003: item fetching failed at offset 31/106 [ 827.158110][ T9690] hid-generic 0005:0C49:1012.0003: probe with driver hid-generic failed with error -22 [ 827.254490][ T3779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8320'. [ 827.293949][ T3787] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 827.308337][T22347] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.344745][T22347] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.377131][ T3796] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 827.406856][T22347] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.493509][T22347] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.677189][ T3823] netlink: 'syz.8.8334': attribute type 4 has an invalid length. [ 827.688888][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8332'. [ 827.752350][ T3823] netlink: 'syz.8.8334': attribute type 4 has an invalid length. [ 827.799581][ T3832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.924976][ T3840] netlink: 'syz.9.8335': attribute type 12 has an invalid length. [ 827.947290][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8338'. [ 828.438058][ T3855] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 828.697637][ T3861] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8345'. [ 828.758682][ T3860] delete_channel: no stack [ 829.008132][ T3876] netlink: 'syz.9.8349': attribute type 21 has an invalid length. [ 829.036535][ T3876] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8349'. [ 829.304415][ T3878] hsr_slave_0 (unregistering): left promiscuous mode [ 829.809326][ T3923] netlink: 'syz.2.8358': attribute type 1 has an invalid length. [ 829.838122][ T3923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.237834][ T3933] bond3: entered promiscuous mode [ 830.243403][ T3933] bond3: entered allmulticast mode [ 830.249147][ T3933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 830.892615][ T3973] netlink: 'syz.7.8373': attribute type 3 has an invalid length. [ 831.223368][ T3988] xt_hashlimit: size too large, truncated to 1048576 [ 831.469234][ T5152] Bluetooth: hci5: command 0x0406 tx timeout [ 831.768387][ T4006] veth1_macvtap: left promiscuous mode [ 832.056255][ T4024] __nla_validate_parse: 18 callbacks suppressed [ 832.056279][ T4024] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.8388'. [ 832.082788][ T4027] netlink: 'syz.7.8390': attribute type 1 has an invalid length. [ 832.100704][ T4026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8390'. [ 832.131237][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8389'. [ 832.163483][ T4033] netlink: 'syz.9.8389': attribute type 12 has an invalid length. [ 832.186888][ T4033] netlink: 'syz.9.8389': attribute type 29 has an invalid length. [ 832.192958][ T4026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8390'. [ 832.226061][ T4033] netlink: 148 bytes leftover after parsing attributes in process `syz.9.8389'. [ 832.241695][ T4033] netlink: 51 bytes leftover after parsing attributes in process `syz.9.8389'. [ 832.264192][ T4035] netlink: 'syz.9.8389': attribute type 12 has an invalid length. [ 832.300519][ T4035] netlink: 'syz.9.8389': attribute type 29 has an invalid length. [ 832.349311][ T4035] netlink: 148 bytes leftover after parsing attributes in process `syz.9.8389'. [ 832.399368][ T4035] netlink: 51 bytes leftover after parsing attributes in process `syz.9.8389'. [ 832.688240][ T4061] tipc: Enabled bearer , priority 0 [ 832.711985][ T4061] syzkaller0: entered promiscuous mode [ 832.717609][ T4061] syzkaller0: entered allmulticast mode [ 832.870708][ T4061] tipc: Resetting bearer [ 832.926035][ T4059] tipc: Resetting bearer [ 833.004845][ T4059] tipc: Disabling bearer [ 833.436235][ T4082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 833.794384][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8407'. [ 833.851363][ T4111] netlink: 'syz.2.8407': attribute type 11 has an invalid length. [ 833.864998][ T4111] netlink: 'syz.2.8407': attribute type 11 has an invalid length. [ 833.890998][ T4111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8407'. [ 833.893588][ T4114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.963803][ T4121] netlink: 'syz.7.8414': attribute type 1 has an invalid length. [ 834.076935][ T4124] 1{X: entered promiscuous mode [ 834.094137][ T4124] 1{X: left allmulticast mode [ 834.344530][ T4144] netlink: 'syz.2.8420': attribute type 1 has an invalid length. [ 834.393261][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.401228][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.502411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.663741][ T4158] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.669588][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.694259][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.878548][T22334] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.942036][T22334] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.970746][ T4133] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 835.011431][T22334] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.032618][T22334] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.211043][ T4184] openvswitch: netlink: IP tunnel dst address not specified [ 835.542466][ T4199] netlink: 'syz.9.8432': attribute type 1 has an invalid length. [ 835.657551][ T4199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.704805][ T4200] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 836.197468][ T4211] bond2: entered promiscuous mode [ 836.205343][ T4211] bond2: entered allmulticast mode [ 836.214854][ T4228] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 836.260743][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 836.658858][ T4261] macsec1: entered promiscuous mode [ 836.668531][ T4261] bridge0: entered promiscuous mode [ 836.681614][ T4261] macsec1: entered allmulticast mode [ 836.689954][ T4261] bridge0: entered allmulticast mode [ 836.732274][ T4261] bridge0: port 3(macsec1) entered blocking state [ 836.739040][ T4261] bridge0: port 3(macsec1) entered disabled state [ 836.768070][ T4261] bridge0: left allmulticast mode [ 836.774601][ T4261] bridge0: left promiscuous mode [ 836.806654][ T4266] netlink: 'syz.7.8449': attribute type 5 has an invalid length. [ 836.820225][ T4270] nbd: must specify a size in bytes for the device [ 836.828269][ T4270] nbd: must specify a size in bytes for the device [ 836.837795][ T4270] nbd: must specify a size in bytes for the device [ 836.871363][ T4266] netlink: 'syz.7.8449': attribute type 5 has an invalid length. [ 836.982505][ T4270] nbd: must specify a size in bytes for the device [ 836.989384][ T4270] nbd: must specify a size in bytes for the device [ 837.000072][ T4270] nbd: must specify a size in bytes for the device [ 837.050944][ T4270] nbd: must specify a size in bytes for the device [ 837.110241][ T4270] nbd: must specify a size in bytes for the device [ 837.118023][ T4270] nbd: must specify a size in bytes for the device [ 837.138146][ T4270] nbd: must specify a size in bytes for the device [ 837.155861][ T4270] nbd: must specify a size in bytes for the device [ 837.176055][ T4270] nbd: must specify a size in bytes for the device [ 837.182060][ T4282] validate_nla: 31 callbacks suppressed [ 837.182081][ T4282] netlink: 'syz.9.8452': attribute type 1 has an invalid length. [ 837.193802][ T4270] nbd: must specify a size in bytes for the device [ 837.211222][ T4270] nbd: must specify a size in bytes for the device [ 837.222058][ T4284] __nla_validate_parse: 11 callbacks suppressed [ 837.222074][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8453'. [ 837.253867][ T4270] nbd: must specify a size in bytes for the device [ 837.261939][ T4282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 837.282330][ T4270] nbd: must specify a size in bytes for the device [ 837.289382][ T4270] nbd: must specify a size in bytes for the device [ 837.303595][ T4280] bond3: (slave geneve2): making interface the new active one [ 837.362429][ T4270] nbd: must specify a size in bytes for the device [ 837.371310][ T4280] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 837.394354][ T4270] nbd: must specify a size in bytes for the device [ 837.405271][ T4270] nbd: must specify a size in bytes for the device [ 837.415235][T22355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.424967][ T4270] nbd: must specify a size in bytes for the device [ 837.432134][ T4270] nbd: must specify a size in bytes for the device [ 837.452206][T22355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.465608][T22346] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.474993][T22346] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.497574][ T4270] nbd: must specify a size in bytes for the device [ 837.527408][ T4270] nbd: must specify a size in bytes for the device [ 837.551823][ T4270] nbd: must specify a size in bytes for the device [ 837.566955][ T4270] nbd: must specify a size in bytes for the device [ 838.007162][ T4314] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 838.071061][ T4314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.351323][ T4338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8462'. [ 838.466302][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8465'. [ 838.669206][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8468'. [ 838.750274][ T4365] vlan2: entered promiscuous mode [ 838.771133][ T4365] bridge0: entered promiscuous mode [ 839.000612][ T25] block nbd5: Possible stuck request ffff888025608000: control (read@0,1024B). Runtime 240 seconds [ 839.013417][ T25] block nbd5: Possible stuck request ffff888025608200: control (read@1024,1024B). Runtime 240 seconds [ 839.024913][ T25] block nbd5: Possible stuck request ffff888025608400: control (read@2048,1024B). Runtime 240 seconds [ 839.036187][ T25] block nbd5: Possible stuck request ffff888025608600: control (read@3072,1024B). Runtime 240 seconds [ 839.252120][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8476'. [ 839.317872][ T4346] lec:lec_atm_close: lec0: Shut down! [ 839.432156][ T4407] sock: sock_timestamping_bind_phc: sock not bind to device [ 839.614300][ T4416] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 839.803118][ T4433] syzkaller0: entered promiscuous mode [ 839.829801][ T4433] syzkaller0: entered allmulticast mode [ 840.513165][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8497'. [ 840.549699][ T4481] netlink: 'syz.7.8498': attribute type 2 has an invalid length. [ 840.573934][ T4481] 9: entered promiscuous mode [ 840.584124][ T4481] netlink: 'syz.7.8498': attribute type 1 has an invalid length. [ 840.624021][ T4485] lec:lec_atm_send: lec0: Unknown message type 13 [ 840.638638][ T4450] lec:lec_atm_close: lec0: Shut down! [ 840.716653][ T4481] netlink: 'syz.7.8498': attribute type 1 has an invalid length. [ 840.727200][ T4486] bond0: (slave geneve2): making interface the new active one [ 840.729799][ T4481] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8498'. [ 840.752620][ T4486] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 840.768775][T22352] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 840.801219][T22352] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 840.838317][ T4490] syzkaller0: entered promiscuous mode [ 840.844986][ T4490] syzkaller0: entered allmulticast mode [ 840.859423][T22352] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 840.873600][T22352] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.007234][ T4497] netlink: 'syz.6.8502': attribute type 2 has an invalid length. [ 841.231645][ T4509] netlink: 'syz.6.8505': attribute type 10 has an invalid length. [ 841.292002][ T4509] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.324588][ T4509] bond0: (slave team0): Enslaving as an active interface with a down link [ 841.543750][ T25] block nbd7: Possible stuck request ffff888025698000: control (read@0,1024B). Runtime 210 seconds [ 841.556427][ T25] block nbd7: Possible stuck request ffff888025698200: control (read@1024,1024B). Runtime 210 seconds [ 841.568877][ T25] block nbd7: Possible stuck request ffff888025698400: control (read@2048,1024B). Runtime 210 seconds [ 841.580217][ T25] block nbd7: Possible stuck request ffff888025698600: control (read@3072,1024B). Runtime 210 seconds [ 841.752029][ T4532] netlink: 'syz.6.8512': attribute type 1 has an invalid length. [ 841.999218][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8514'. [ 842.033841][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8516'. [ 842.085687][ T4552] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 842.350206][ T4566] lec:lec_atm_send: lec0: Unknown message type 13 [ 842.368516][ T4522] lec:lec_atm_close: lec0: Shut down! [ 842.865228][ T4593] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.8529'. [ 842.893178][ T4594] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.8529'. [ 842.895268][ T4595] veth0_to_bond: entered allmulticast mode [ 843.153083][ T4564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.283730][ T4613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.546035][ T4621] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8538'. [ 843.927553][ T4638] lec:lec_atm_send: lec0: Unknown message type 13 [ 843.966593][ T4640] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8543'. [ 843.986552][ T4616] lec:lec_atm_close: lec0: Shut down! [ 844.037608][ T4643] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 844.066809][ T4643] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 844.082925][ T4643] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 844.238819][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8546'. [ 844.370928][ T4662] openvswitch: netlink: IP tunnel dst address not specified [ 844.431251][ T4664] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8547'. [ 844.459742][ T4664] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8547'. [ 844.610229][ T4671] netlink: 'syz.2.8552': attribute type 1 has an invalid length. [ 844.705888][ T4671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.714607][ T4677] veth0_to_bond: left allmulticast mode [ 844.726742][ T4677] bond4: (slave veth0_to_bond): making interface the new active one [ 844.737178][ T4677] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 845.115149][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8562'. [ 845.138355][ T4705] netlink: 'syz.9.8562': attribute type 26 has an invalid length. [ 845.152958][ T4706] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 845.161381][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8562'. [ 845.177073][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8562'. [ 845.203380][ T4705] netlink: 'syz.9.8562': attribute type 26 has an invalid length. [ 845.588590][ T4731] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 845.891981][ T4751] netlink: 'syz.9.8572': attribute type 15 has an invalid length. [ 846.430688][ T4775] netlink: 'syz.7.8586': attribute type 13 has an invalid length. [ 846.444113][ T4777] bridge_slave_1: left allmulticast mode [ 846.451965][ T4777] bridge_slave_1: left promiscuous mode [ 846.460803][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.473636][ T4777] bridge_slave_0: left allmulticast mode [ 846.480000][ T4777] bridge_slave_0: left promiscuous mode [ 846.486275][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.823029][ T5152] Bluetooth: hci0: command 0x080f tx timeout [ 846.908141][ T4798] netlink: 'syz.6.8592': attribute type 4 has an invalid length. [ 847.109552][ T4807] netlink: 'syz.8.8596': attribute type 1 has an invalid length. [ 847.133405][ T4814] netlink: 'syz.2.8598': attribute type 2 has an invalid length. [ 847.218631][ T4818] netlink: 'syz.6.8599': attribute type 5 has an invalid length. [ 847.227254][ T4818] netlink: 'syz.6.8599': attribute type 6 has an invalid length. [ 847.559383][ T4837] ip6tnl1: entered promiscuous mode [ 847.584404][ T4840] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 847.796860][ T4854] syzkaller0: entered promiscuous mode [ 847.803070][ T4854] syzkaller0: entered allmulticast mode [ 847.838435][ T4855] gre1: entered promiscuous mode [ 847.844120][ T4855] gre1: entered allmulticast mode [ 848.014921][ T4870] __nla_validate_parse: 19 callbacks suppressed [ 848.014947][ T4870] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.088804][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.130674][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.139815][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.170636][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.184668][ T4870] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8617'. [ 848.198249][ T4876] netlink: 576 bytes leftover after parsing attributes in process `syz.2.8618'. [ 848.223401][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8622'. [ 848.305987][ T4887] syzkaller0: entered promiscuous mode [ 848.344329][ T4887] syzkaller0: entered allmulticast mode [ 848.368726][T22324] syzkaller0: tun_net_xmit 70 [ 848.431611][ T4887] syzkaller1: entered promiscuous mode [ 848.437353][ T4887] syzkaller1: entered allmulticast mode [ 848.491685][ T4887] syzkaller0: tun_net_xmit 14 [ 848.498176][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8621'. [ 848.552079][ T4903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.922327][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8633'. [ 849.161546][ T4933] netlink: 'syz.6.8635': attribute type 11 has an invalid length. [ 849.347515][ T4944] [ 849.350076][ T4944] ====================================================== [ 849.357114][ T4944] WARNING: possible circular locking dependency detected [ 849.364252][ T4944] syzkaller #0 Not tainted [ 849.368812][ T4944] ------------------------------------------------------ [ 849.376199][ T4944] syz.6.8641/4944 is trying to acquire lock: [ 849.382662][ T4948] nbd: must specify a device to reconfigure [ 849.382821][ T4944] ffffffff8f9245f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 849.398145][ T4944] [ 849.398145][ T4944] but task is already holding lock: [ 849.405652][ T4944] ffff888073abd870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 849.415450][ T4944] [ 849.415450][ T4944] which lock already depends on the new lock. [ 849.415450][ T4944] [ 849.425874][ T4944] [ 849.425874][ T4944] the existing dependency chain (in reverse order) is: [ 849.435001][ T4944] [ 849.435001][ T4944] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 849.443036][ T4944] _raw_spin_lock_bh+0x36/0x50 [ 849.448448][ T4944] nr_rt_device_down+0x12a/0x720 [ 849.454029][ T4944] nr_device_event+0x137/0x150 [ 849.459357][ T4944] notifier_call_chain+0x19d/0x3a0 [ 849.465123][ T4944] __dev_notify_flags+0x16d/0x310 [ 849.470885][ T4944] netif_change_flags+0xe8/0x1a0 [ 849.476384][ T4944] dev_change_flags+0x130/0x260 [ 849.481787][ T4944] dev_ioctl+0x7b4/0x1150 [ 849.486832][ T4944] sock_do_ioctl+0x23e/0x320 [ 849.491955][ T4944] sock_ioctl+0x5c6/0x7f0 [ 849.496812][ T4944] __se_sys_ioctl+0xfc/0x170 [ 849.502022][ T4944] do_syscall_64+0xe2/0xf80 [ 849.507230][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.513991][ T4944] [ 849.513991][ T4944] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 849.522172][ T4944] _raw_spin_lock_bh+0x36/0x50 [ 849.527988][ T4944] nr_rt_device_down+0xa9/0x720 [ 849.533371][ T4944] nr_device_event+0x137/0x150 [ 849.538746][ T4944] notifier_call_chain+0x19d/0x3a0 [ 849.544537][ T4944] __dev_notify_flags+0x16d/0x310 [ 849.550318][ T4944] netif_change_flags+0xe8/0x1a0 [ 849.556052][ T4944] dev_change_flags+0x130/0x260 [ 849.561438][ T4944] dev_ioctl+0x7b4/0x1150 [ 849.566384][ T4944] sock_do_ioctl+0x23e/0x320 [ 849.571651][ T4944] sock_ioctl+0x5c6/0x7f0 [ 849.576765][ T4944] __se_sys_ioctl+0xfc/0x170 [ 849.581888][ T4944] do_syscall_64+0xe2/0xf80 [ 849.586939][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.593544][ T4944] [ 849.593544][ T4944] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 849.601817][ T4944] __lock_acquire+0x15a5/0x2cf0 [ 849.607295][ T4944] lock_acquire+0x106/0x330 [ 849.612499][ T4944] _raw_spin_lock_bh+0x36/0x50 [ 849.617816][ T4944] nr_remove_neigh+0x25/0xe0 [ 849.623130][ T4944] nr_add_node+0x1d9f/0x2570 [ 849.628252][ T4944] nr_rt_ioctl+0xcb0/0xdf0 [ 849.633291][ T4944] sock_do_ioctl+0x101/0x320 [ 849.638514][ T4944] sock_ioctl+0x5c6/0x7f0 [ 849.643365][ T4944] __se_sys_ioctl+0xfc/0x170 [ 849.648606][ T4944] do_syscall_64+0xe2/0xf80 [ 849.653989][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.660503][ T4944] [ 849.660503][ T4944] other info that might help us debug this: [ 849.660503][ T4944] [ 849.671077][ T4944] Chain exists of: [ 849.671077][ T4944] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 849.671077][ T4944] [ 849.685090][ T4944] Possible unsafe locking scenario: [ 849.685090][ T4944] [ 849.692671][ T4944] CPU0 CPU1 [ 849.698043][ T4944] ---- ---- [ 849.703492][ T4944] lock(&nr_node->node_lock); [ 849.708282][ T4944] lock(nr_node_list_lock); [ 849.716101][ T4944] lock(&nr_node->node_lock); [ 849.723412][ T4944] lock(nr_neigh_list_lock); [ 849.728109][ T4944] [ 849.728109][ T4944] *** DEADLOCK *** [ 849.728109][ T4944] [ 849.736262][ T4944] 1 lock held by syz.6.8641/4944: [ 849.741303][ T4944] #0: ffff888073abd870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 849.751633][ T4944] [ 849.751633][ T4944] stack backtrace: [ 849.757709][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: syz.6.8641 Not tainted syzkaller #0 PREEMPT(full) [ 849.757730][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.757741][ T4944] Call Trace: [ 849.757751][ T4944] [ 849.757759][ T4944] dump_stack_lvl+0xe8/0x150 [ 849.757785][ T4944] print_circular_bug+0x2e1/0x300 [ 849.757809][ T4944] check_noncircular+0x12e/0x150 [ 849.757831][ T4944] __lock_acquire+0x15a5/0x2cf0 [ 849.757861][ T4944] ? nr_remove_neigh+0x25/0xe0 [ 849.757875][ T4944] lock_acquire+0x106/0x330 [ 849.757891][ T4944] ? nr_remove_neigh+0x25/0xe0 [ 849.757905][ T4944] ? nr_add_node+0xcce/0x2570 [ 849.757928][ T4944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 849.757950][ T4944] ? nr_remove_neigh+0x25/0xe0 [ 849.757963][ T4944] _raw_spin_lock_bh+0x36/0x50 [ 849.757983][ T4944] ? nr_remove_neigh+0x25/0xe0 [ 849.757996][ T4944] nr_remove_neigh+0x25/0xe0 [ 849.758010][ T4944] nr_add_node+0x1d9f/0x2570 [ 849.758034][ T4944] ? dev_get_by_name+0x21/0x200 [ 849.758051][ T4944] ? dev_get_by_name+0x21/0x200 [ 849.758067][ T4944] ? dev_get_by_name+0x21/0x200 [ 849.758082][ T4944] ? nr_call_to_digi+0x136/0x1b0 [ 849.758105][ T4944] nr_rt_ioctl+0xcb0/0xdf0 [ 849.758131][ T4944] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 849.758156][ T4944] ? apparmor_capable+0x137/0x1a0 [ 849.758175][ T4944] ? capable+0x88/0xe0 [ 849.758191][ T4944] ? nr_ioctl+0x1b1/0x3b0 [ 849.758210][ T4944] sock_do_ioctl+0x101/0x320 [ 849.758229][ T4944] ? __pfx_sock_do_ioctl+0x10/0x10 [ 849.758245][ T4944] ? do_futex+0x395/0x420 [ 849.758266][ T4944] sock_ioctl+0x5c6/0x7f0 [ 849.758283][ T4944] ? __pfx_sock_ioctl+0x10/0x10 [ 849.758300][ T4944] ? __fget_files+0x2a/0x420 [ 849.758319][ T4944] ? __fget_files+0x3a0/0x420 [ 849.758336][ T4944] ? __fget_files+0x2a/0x420 [ 849.758356][ T4944] ? bpf_lsm_file_ioctl+0x9/0x20 [ 849.758372][ T4944] ? __pfx_sock_ioctl+0x10/0x10 [ 849.758389][ T4944] __se_sys_ioctl+0xfc/0x170 [ 849.758413][ T4944] do_syscall_64+0xe2/0xf80 [ 849.758434][ T4944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.758450][ T4944] ? trace_irq_disable+0x37/0x100 [ 849.758471][ T4944] ? clear_bhb_loop+0x60/0xb0 [ 849.758488][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.758504][ T4944] RIP: 0033:0x7f09b899acb9 [ 849.758519][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.758533][ T4944] RSP: 002b:00007f09b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.758551][ T4944] RAX: ffffffffffffffda RBX: 00007f09b8c15fa0 RCX: 00007f09b899acb9 [ 849.758563][ T4944] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 849.758574][ T4944] RBP: 00007f09b8a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 849.758584][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.758594][ T4944] R13: 00007f09b8c16038 R14: 00007f09b8c15fa0 R15: 00007ffe983dbbd8 [ 849.758613][ T4944]