last executing test programs: 23m6.974147401s ago: executing program 32 (id=3698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000002c0)={r3, 0x7, 0x1, 0xd}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xaf4, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x40, 0x68, 0x400, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffe}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005a80)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4000009}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'some', 0x20, 0x8, 0x20, 0x3}, 0x2f) connect$netlink(r3, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) 19m15.184737648s ago: executing program 4 (id=6032): r0 = socket$kcm(0x21, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x48d0}, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c042}, 0x20000800) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000001"], 0x10b8}, 0x106) 19m14.904212394s ago: executing program 4 (id=6036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x201}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m14.624830626s ago: executing program 4 (id=6037): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="233cf055", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="a96c2c58bb2ed35b85df6bfa2986feb2d434cc4970cef2e68424868b9451e389025227df0617398902b6fd5ddcfa", @ANYBLOB="0500"/12, @ANYRES32=r2, @ANYBLOB="db0672b9"], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x81) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e04, 0x4000009, @empty, 0x10000}, 0x1c) setsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 19m14.299026959s ago: executing program 4 (id=6040): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 19m14.250711214s ago: executing program 4 (id=6041): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000040420f00b7030000162e9e798500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000029000000080000000900000000282dd85e001000"], 0x18}, 0xc000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r5, @ANYBLOB="d58746f06b0a1874568519a8ebe66d826bc837c7d2e6398ce15af22786"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 19m14.047440593s ago: executing program 4 (id=6043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8901, &(0x7f0000000100)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r3, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/19, 0x13}, 0x1000}], 0x1, 0x40002002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000300), &(0x7f0000000280)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) listen(r0, 0x6) syz_emit_ethernet(0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a80700810012000806000222eb0602df09aaaaaaaaaa16121500000000000020870c8516998746fd"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0xfffffffffffffeb6, &(0x7f0000000180)="6ebe5ec3140551c29c5ccf5552fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r9, 0x29, 0x31, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 18m58.652252109s ago: executing program 33 (id=6043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8901, &(0x7f0000000100)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r3, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/19, 0x13}, 0x1000}], 0x1, 0x40002002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000300), &(0x7f0000000280)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) listen(r0, 0x6) syz_emit_ethernet(0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a80700810012000806000222eb0602df09aaaaaaaaaa16121500000000000020870c8516998746fd"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0xfffffffffffffeb6, &(0x7f0000000180)="6ebe5ec3140551c29c5ccf5552fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r9, 0x29, 0x31, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 17m56.618162515s ago: executing program 1 (id=6482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x3}, {0x3}, {}, {0x74}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff7d1d0660187530d3c83c0000000000000000000085106d60034be379b0fe66", @ANYRES32, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m55.570604217s ago: executing program 1 (id=6489): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="500000000261fbd2a56033dd8dd5ec2a9b6764cceb74aa78782add6a5f648421ffe6d696a7fa170eed011643d3896ead63bb55375a9f5b35a70171e2abe133d33cc274afae27ba9e2fd2e2f9", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="2000b9800a00bb000900ff00050000000600bb00030000000800bb00060000000800b700540000000800b700fb0000000400b800"], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRESDEC], 0x24}}, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r5 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRESOCT=r7, @ANYRESOCT, @ANYRES16=r3, @ANYRESDEC=r7], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000334000480300001800e000100627974656f726465720000001c00028008000140000000100800024000000000080004400000001f0900010073797a30000000050000000073797a3200000000140000001100010000000000000000000700000a"], 0x88}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r8, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40040, 0x0) socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x2ce}, {r9, 0x402}, {r2, 0x4104}, {r10, 0x41}], 0x4, &(0x7f0000000f80)={0x77359400}, &(0x7f0000000fc0)={[0x6]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x18, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x2, 0x80805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0xc, @broadcast, 0x4e23, 0x3, 'rr\x00', 0x1, 0x5, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'nq\x00', 0x0, 0x7, 0x63}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x40}}, 0x44) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) 17m54.895237453s ago: executing program 1 (id=6493): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94d9cfa4358428b8}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="24613400e8fb16bfbfd575140dc4e3377126ab08543672d929a7b3bc1b35cf02eee0cd875bd17ad9b8b881faa164effbc7ee2b06ce1a2a0582fab32465fa3f810cc0d5ec67c00a90390a55abdb6b79e647b11b59a4df6fbc23ee9f85bab0e8a85c70b363ea56270d0ecd8b268409173e390c09000000000000003503a43869e93e1a18e71c965d7e4d0c092bf6f51505dcb4c4eb9f784d7717787ce8d0cf9060a3fbf314", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250100000006000a00ffff000006000800a1aa000006000800a1aa000005001d0006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x200040c4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket(0x18, 0x803, 0x10000) connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_macvtap\x00'}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x40) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/444], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffbfff000000000900000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 17m53.565021505s ago: executing program 1 (id=6504): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7f, 0x25}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001100)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x7}}, @tdls_setup_req={0xc, 0x0, "", 0x9, @void, @void, @void, @void}}}, @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17m53.246360049s ago: executing program 1 (id=6505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x5}, 0x8, 0x5, 0x0, 0x8, 0x8, 'syz1\x00', "bb419f54ec3a1657f102f528f3a9bd340bb4aadb7aefa68954f5a7d736e9f894", "8aef8890aa31934f32ec03ab39f3d12388ec726ae5b33fc81f253f71d92da331", [{0xffff, 0xb, {0x1, 0xffffffff}}, {0x5400, 0x6, {0x0, 0x8}}, {0x200, 0x9, {0x0, 0x8}}, {0x2, 0x3, {0x3, 0xb}}, {0x6, 0x7, {0x3, 0x4}}, {0x8, 0x3, {0x2, 0x25d7a53a}}, {0x101, 0x4, {0x2, 0x80000001}}, {0x1, 0x80, {0x2, 0x5}}, {0xd0e5, 0x7ff, {0x3, 0xe}}, {0x0, 0x8000, {0x1, 0x9}}, {0x1, 0x255a, {0x2, 0xef}}, {0x8, 0x8fcc, {0x1, 0x48000}}, {0x6, 0x6, {0x0, 0x8}}, {0x0, 0x65c, {0x1, 0xffff}}, {0x0, 0xffff, {0x1, 0x4}}, {0xaff, 0x1}, {0x7f, 0x1, {0x1, 0x2}}, {0x2, 0x7, {0x6, 0x9}}, {0x6, 0x7, {0x2, 0x6}}, {0x8, 0x7, {0x1, 0x938c}}, {0x3, 0x7, {0x3, 0x4}}, {0x2, 0x8, {0x0, 0x1}}, {0x4, 0xcf7, {0x1, 0x3}}, {0x5, 0x4, {0x2, 0xbef}}, {0x3, 0x101, {0x1}}, {0x0, 0x8001, {0x0, 0x57}}, {0x1, 0x80, {0x3, 0x52ec}}, {0x4, 0xb9e9, {0x1, 0x3}}, {0x8, 0x3, {0x2, 0x3}}, {0xf1ff, 0x43a7, {0x0, 0x5}}, {0x4, 0x9, {0x3, 0x60000}}, {0x5, 0xe2, {0x0, 0xe5}}, {0x3, 0x3, {0x1, 0x6}}, {0x800, 0x9c1, {0x0, 0x91}}, {0x40, 0x0, {0x2, 0x5}}, {0x0, 0x4, {0x3, 0x40}}, {0x66d6, 0x94a, {0x2, 0xfffffffd}}, {0x76d, 0x5, {0x0, 0x4}}, {0x6, 0x7fff, {0x1, 0x2}}, {0x1, 0x7, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x894}, 0x80) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x5}, 0x8, 0x5, 0x0, 0x8, 0x8, 'syz1\x00', "bb419f54ec3a1657f102f528f3a9bd340bb4aadb7aefa68954f5a7d736e9f894", "8aef8890aa31934f32ec03ab39f3d12388ec726ae5b33fc81f253f71d92da331", [{0xffff, 0xb, {0x1, 0xffffffff}}, {0x5400, 0x6, {0x0, 0x8}}, {0x200, 0x9, {0x0, 0x8}}, {0x2, 0x3, {0x3, 0xb}}, {0x6, 0x7, {0x3, 0x4}}, {0x8, 0x3, {0x2, 0x25d7a53a}}, {0x101, 0x4, {0x2, 0x80000001}}, {0x1, 0x80, {0x2, 0x5}}, {0xd0e5, 0x7ff, {0x3, 0xe}}, {0x0, 0x8000, {0x1, 0x9}}, {0x1, 0x255a, {0x2, 0xef}}, {0x8, 0x8fcc, {0x1, 0x48000}}, {0x6, 0x6, {0x0, 0x8}}, {0x0, 0x65c, {0x1, 0xffff}}, {0x0, 0xffff, {0x1, 0x4}}, {0xaff, 0x1}, {0x7f, 0x1, {0x1, 0x2}}, {0x2, 0x7, {0x6, 0x9}}, {0x6, 0x7, {0x2, 0x6}}, {0x8, 0x7, {0x1, 0x938c}}, {0x3, 0x7, {0x3, 0x4}}, {0x2, 0x8, {0x0, 0x1}}, {0x4, 0xcf7, {0x1, 0x3}}, {0x5, 0x4, {0x2, 0xbef}}, {0x3, 0x101, {0x1}}, {0x0, 0x8001, {0x0, 0x57}}, {0x1, 0x80, {0x3, 0x52ec}}, {0x4, 0xb9e9, {0x1, 0x3}}, {0x8, 0x3, {0x2, 0x3}}, {0xf1ff, 0x43a7, {0x0, 0x5}}, {0x4, 0x9, {0x3, 0x60000}}, {0x5, 0xe2, {0x0, 0xe5}}, {0x3, 0x3, {0x1, 0x6}}, {0x800, 0x9c1, {0x0, 0x91}}, {0x40, 0x0, {0x2, 0x5}}, {0x0, 0x4, {0x3, 0x40}}, {0x66d6, 0x94a, {0x2, 0xfffffffd}}, {0x76d, 0x5, {0x0, 0x4}}, {0x6, 0x7fff, {0x1, 0x2}}, {0x1, 0x7, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x894}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x78, r2, 0x4, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/25, 0x19}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x48) listen(r9, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r9}, 0x20) socket$igmp6(0xa, 0x3, 0x2) (async) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) (async) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) recvfrom$inet(r9, 0x0, 0x0, 0x40000020, 0x0, 0x64) 17m52.852604052s ago: executing program 1 (id=6507): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x20, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xfd, 0x9}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xc, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0xfff2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0x2}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x40000000, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a}, 0x28) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x80, &(0x7f0000000400)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x4a, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "4187c79611ee"}}}}}}}, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000200)=0xc7f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) 17m37.644448736s ago: executing program 34 (id=6507): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x20, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xfd, 0x9}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xc, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0xfff2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0x2}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x40000000, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a}, 0x28) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x80, &(0x7f0000000400)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x4a, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "4187c79611ee"}}}}}}}, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000200)=0xc7f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) 12m47.877296501s ago: executing program 7 (id=7674): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) syz_emit_ethernet(0x2e6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) unshare(0x20000400) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5], 0xb0}}, 0x400e8c4) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 12m46.765590695s ago: executing program 7 (id=7682): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40243, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) socketpair(0x15, 0xa, 0x40, &(0x7f0000000200)) r2 = socket(0x28, 0x1, 0x0) unshare(0x2c020400) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000561c62a260f8c9b648e1f87672f7b2dac4e81fc79b56b970b0ac1c8d53712e6b55b3955ce8ab3a4bc4ee7e95ff28310d9d0e769122f05628ddfc4e7f449c29a04c0a36d02c0d871c4f278b34746ba897ca1a7eecc589ba58cfa498c8c705fe08c08cf8f34191642ab5b763ee19818dfbf89c487d119f2244ab32fbb701a98e24340a1ff81bd8f4d58927c9d7e9869d54f263b0ed52658c9c5a8c007170346c90394a7582948fa65a6b8ec84f32f8e2cdc0ffbde99fabb98ef79dcfaffdb913a3f8ce96f0772b29b0dec4e0125890bee7073d03b20c379ba882edba852ee5a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) read$alg(r7, &(0x7f0000000940)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r9, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 12m46.363324471s ago: executing program 7 (id=7686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102450000000000000000000a000005300002802c000180140003"], 0x44}}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000600000000000000fd07000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000081000000850000002d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x56, 0x700, 0x0, 0x138c, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0x2, [{@broadcast, 0x8}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x15, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_fd, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x869c}, @generic={0x3, 0x8, 0x7, 0x5, 0x6}, @alu={0x7, 0x0, 0x3, 0x5, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xb, 0x5, 0x3fa}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x4, 0x10, 0x1}, {0x4, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0xb}, {0x3, 0x1, 0x4, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @generic={0x3, 0x8, 0x8, 0x1, 0x6c36}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000380)=""/185, 0x40f00, 0x21, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x569a, 0x5}, 0x10, 0x14d9f, r5, 0xa, 0x0, &(0x7f0000000980)=[{0x1, 0x1, 0x4, 0x2}, {0x4, 0x4, 0x9, 0x4}, {0x0, 0x1, 0xf}, {0x5, 0x4, 0xb, 0x5}, {0x5, 0x4, 0x5, 0x6}, {0x0, 0x5, 0x4, 0xa}, {0x1, 0x3, 0x4, 0x4}, {0x1, 0x4, 0x5, 0xc}, {0x4, 0x2, 0x0, 0x5}, {0x0, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xe, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x4, 0x7f, 0x3, 0x3e}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r10, 0x25, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r13, @ANYBLOB="280012800900010076657468000000001800028014"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0) close(0x3) 12m45.014681607s ago: executing program 7 (id=7698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bind$packet(r6, &(0x7f0000000700)={0x11, 0x15, r8, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12m43.93698906s ago: executing program 7 (id=7704): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) (async) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 12m43.5143026s ago: executing program 7 (id=7708): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x73, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_LIMIT={0x8, 0x5, 0xfffffff9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x3, 0x41, 0x9, 0x4, 0x80]}, &(0x7f00000000c0)=0x54) 12m28.444976057s ago: executing program 35 (id=7708): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x73, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_LIMIT={0x8, 0x5, 0xfffffff9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x3, 0x41, 0x9, 0x4, 0x80]}, &(0x7f00000000c0)=0x54) 4m34.336428177s ago: executing program 6 (id=9836): unshare(0x22020400) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x81, 0x4, 0x28, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7800, 0x20, 0x5, 0x5}}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x7}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 4m33.782842932s ago: executing program 6 (id=9841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0xfffe, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(0x4) getsockname$l2tp6(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m25.577009012s ago: executing program 6 (id=9854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x100000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x10884}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x1}]}}]}]}, 0x48}}, 0x40100d0) 4m25.367290034s ago: executing program 6 (id=9858): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="cc", 0x1}], 0x1}}], 0x2, 0x6080) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000025c0)=""/4110, 0x100e, 0x0, 0x0}, &(0x7f0000000340)=0x40) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r0, 0x28) 4m24.37523326s ago: executing program 6 (id=9868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0800090005ac0f0008003700000000000400280004006e800a000600fffffffff7ff00001100070026682c929099aa04d4fc536da1000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 4m24.181179372s ago: executing program 6 (id=9869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 4m9.116383433s ago: executing program 36 (id=9869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 1m41.938193663s ago: executing program 5 (id=10743): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x80800) 1m41.785291758s ago: executing program 5 (id=10745): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m41.631550736s ago: executing program 5 (id=10747): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x14000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x3b4, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff7, 0x16}}}}, [@NL80211_ATTR_IE={0x1f1, 0x2a, [@prep={0x83, 0x1f, {{}, 0x1, 0x3, @broadcast, 0xc, @void, 0x5, 0x2, @broadcast, 0xfffffbff}}, @ssid={0x0, 0x1d, @random="2627bc53f5deaabf1b1f3ac8278a086e38643a83a016525390a507887f"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3a, 0x10}}, @random_vendor={0xdd, 0x74, "6a8fd784c872ab4b8bcc5933d25e68c531510f67e9357128066823239d5490b4e13387a4ee40719efff9e8d3050f1a255e77e8c1fb29b0b5f5205975ca91da55c8b2a3315329768b7861e4f960893939415c917c7f0ed2e5f33229f48240864eeb5977a697f9ee80406b84989df373a4a0b405af"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0x97, {0x20, 0xd0, 0x0, "f4e83b02aa61bcc4fedf54b145478fa3996705b8646509f5f87a6965d8c9bf4908f9ecf05d5592ee9222d6d073c90ea907f2c1fbc47e9dcfa620104d50d77ebe494911978bf6d22fe90ebb2dcca77d960e10b75933ae055e5aecb09b853d25a8ae746c913e5243115e9730cc182492e994453636b967c683052e5420cba86a123e8ab15724fea5aa3390a7daad1e579a20b59534"}}, @cf={0x4, 0x6, {0x8, 0x9c, 0x1, 0xf6bd}}, @chsw_timing={0x68, 0x4, {0x3}}, @random={0xa, 0x7d, "cd68f6ef76395ee00cdda5176f0198882d643f27c1d46c922fdb2cf560bc9427aefc34967b5dc4f160449c6db4080efe0597496b205168b450baefaf7402ff00ca1226973137261eec38808326cc2a5545058387a3c143ddd06478a4c155b1d54794cc2819792ed406ff23c0139b51f1a9797e5541e577a37bf14bb649"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x190, 0x2a, [@fast_bss_trans={0x37, 0x13c, {0xc, 0xa, "e6dcaea08fc8f1047206a0687ebbbfc7", "e58b04dccceecda8119fcae26ba18cda3e4c4f3c8a24e0f6d486004c2cb95d8f", "95dfa004aab4a4ac33b338b09040cded0b143f4a5335fc52fd27b271c0791b90", [{0x3, 0xd, "5879fdfd14986b6fd157939386"}, {0x4, 0x25, "115130699bc1c42a3940af04803533e997944d7499e9dbd5b552798086149ec7af52ea7507"}, {0x4, 0x1a, "85e6c692721bd546890dc6858089cacab2a4fc66500ebdb08703"}, {0x1, 0x7, "925a88b57507c5"}, {0x2, 0x1d, "c61799b99a589f9d1734b83b05f7583e1fa56da3016c3cacb6c835877f"}, {0x2, 0xe, "af3e77d9edaefecfd1883d67b5f9"}, {0x3, 0x15, "5d7636282d66b3602e93fec8bd4c233b0031edb83b"}, {0x4, 0x1e, "5f93a32c215d7909340dc355eea7762bfa7de38dbbeee004580dd7dcfec3"}, {0x2, 0x23, "38aee621c90508ec14643820478d1d3f709e90e6a9dea2a68abe59168c4a3325e90217"}, {0x3, 0x2, "ce52"}]}}, @ssid={0x0, 0x1e, @random="9ea0ebc91eeec02629cb01f2e44ed44c6de3f0844f3784e010ef33e50877"}, @chsw_timing={0x68, 0x4, {0xff, 0x1}}, @cf={0x4, 0x6, {0xc5, 0x45, 0x5, 0x593}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}}, @rann={0x7e, 0x15, {{0x1}, 0x83, 0x7, @broadcast, 0x81, 0xffff, 0x3}}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x15}, 0x8000) writev(r3, &(0x7f0000001740)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="7f74d0e5d2ecbf99354ff2d3d3287ad89a710e1f89b3be13813feea1aed72f7a6611169e25b333bac2", 0x29}, {&(0x7f0000001700)="3554478f752fce685598898bac84", 0xe}], 0x3) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r3) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001780), 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xd8, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}}, 0x4000) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000001ac0)={0x0, 0x6}, 0x8) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f00000020c0)={&(0x7f0000001b00)=0x10001, 0x100, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002080)}) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0xd0, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002300), r7) sendmsg$NLBL_UNLABEL_C_STATICLIST(r7, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xa0, r9, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000024c0)="81d664caea3125054c620c76d1a9b9c2101fd064f3e234dd4b61b6344752fae5bca5c3fc6899f285bda53c5fbb118bab305176d574657970d81c3ab24a62ef5fe8e21c418a33a9372d6725868d6ba54fbe498f0f9d271531336fa3e2a9ea7cff66857968b51255a11fb44df991761d313efee3441a1b622b2cf2d967dbfad9481609b05885ab49bdd3b67b3a6ff63bbc35da0dcfb784aa2a50027deeb49b99735e2c34fa42b6c60dfe0dfb20612bbd041edba2ddeb994516d454304cfbe0e05e90df05348e7752fff154861b3920b7", 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000025c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000811) socket(0x25, 0x3, 0x3) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x80, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), r7) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000028c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r13, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, r14, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40040d5) 1m41.169133911s ago: executing program 5 (id=10753): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10, 0x3801}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0xc040854) 1m40.861188764s ago: executing program 5 (id=10755): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xfffd, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) 1m40.792046571s ago: executing program 5 (id=10756): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) 1m25.637378971s ago: executing program 37 (id=10756): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) 1m23.561484513s ago: executing program 2 (id=10843): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) unshare(0x68040200) listen(0xffffffffffffffff, 0x100101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0xd01, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56a78a69}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65c43832}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) 35.239627667s ago: executing program 2 (id=10861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x891d, &(0x7f0000000200)="943a") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@dev}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006f00000095000000fbbb61c7ba81649fc5a2a47d938eef1d8d1f5bf9fa6fa1d694901adae9a90fe231da6ad61224aaa3f6bd8646226506000000000000000e6330c255345d27951903deef9188da2d00c9f90e00dd4c68782291c61e464189e63a8a593fb35224f3feed0a52c4c344cb24128d41b2ce60920edc9d33c2ece9d22b4112f8b6db2c2f768f06fee60f265379ed093f1b7f64d97d31e3272bb6a40dcf56990cf55b446421eb3e01b342f63f07f64d44d2aaf3f9b9f9d31b41320d39f4dec8a576272fe6821c377e7de9dafaf84f510bd949b619df2d524d94"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 34.572039177s ago: executing program 2 (id=10865): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x46, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r5], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x60, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x26912}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40ee1e4a, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x58, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 32.62557398s ago: executing program 2 (id=10877): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000011000000180100002020732500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x18, 0xff, 0x1, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x6, [0xe, 0xfd]}}) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000380)="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") sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB="050029bd7000000076a2a686000008000300", @ANYRES16=0x0, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x40895}, 0x200480c0) 29.760166039s ago: executing program 2 (id=10886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x50) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000002c0)={'dvmrp0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000df05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f", 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 28.61322494s ago: executing program 2 (id=10894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="0300060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x300}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 13.999864697s ago: executing program 9 (id=10987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r1, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x228, 0x228, 0xffffffff, 0x228, 0x3d0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f0000000080), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, [0x0, 0xff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], 'team_slave_0\x00', 'wg2\x00', {0xff}, {}, 0x2c, 0xc1, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0x5], 0x8, 0xb, 0x1, [@local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1, @empty, @mcast1, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @private1]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x1, 0x7, 0x8, 0x401, @private1, @mcast1, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff], [0x0, 0xff, 0xfb27ac29089fa1f8, 0xff000000], 0x1000, 0x1088}}, @common=@mh={{0x28}, {"a5e2"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x17, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @icmp_id=0x68}}}, {{@ipv6={@private1, @private1, [0xffffff00, 0x0, 0xffffff00], [0xffffff00, 0xff, 0x0, 0xffffff00], 'ipvlan1\x00', 'netdevsim0\x00', {0xff}, {}, 0x5c, 0xe, 0x4, 0x13}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9438"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@rand_addr=0x64010101, @ipv6=@private1, @gre_key=0xf8, @gre_key=0xd}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xff000000, 0xff, 0xffffff, 0xff], 'team_slave_1\x00', 'pim6reg1\x00', {}, {}, 0x2c, 0x4, 0x0, 0x1c}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x1, 0x1, [0x3ff, 0x8, 0x10, 0x9, 0x1, 0x8001, 0x6, 0x3ff, 0x9, 0xfffb, 0x3, 0x8, 0x7, 0x2, 0x7ff, 0x4], 0x10}}, @common=@ipv6header={{0x28}, {0x2, 0x20}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x65, @gre_key=0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 13.74815821s ago: executing program 9 (id=10989): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000001540)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.655139153s ago: executing program 9 (id=10991): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f00000002c0)="4cf7", 0x2) splice(r4, &(0x7f0000000040), r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c34449"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1ff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 12.722183986s ago: executing program 38 (id=10894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="0300060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x300}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.146699532s ago: executing program 9 (id=10997): socket$packet(0x11, 0x3, 0x300) socket(0x848000000015, 0x805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x4, 0x0) r0 = socket$inet6(0xa, 0x802, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r4, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@sndinfo={0x20, 0x84, 0x2, {0x100, 0x8401, 0x5, 0x800}}], 0x20, 0x4800}], 0x1, 0x4014) socket(0x29, 0xa, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$packet(0x11, 0xa, 0x300) 8.101514184s ago: executing program 0 (id=10998): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}, @common=@unspec=@time={{0x38}, {0xa, 0xa, 0x800a18f, 0xfd25, 0x81, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac0f978f5442ed9419a86be9817675d67f40000000", 0x29}, {&(0x7f0000000140)="7c0004062f0000f9000000b661", 0xd}], 0x2) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r4, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8850}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) r11 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r11, 0x0, 0x0, 0x12002, 0x0, 0x0) 3.575508439s ago: executing program 9 (id=10999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000) 3.328292091s ago: executing program 8 (id=11002): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414"], 0x20000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2d, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb, 0x0, @opaque="6046bc"}}}}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f0061104f0000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 3.327414942s ago: executing program 0 (id=11003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8f}, @CTA_ZONE={0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x14, 0x17, [0xf, 0x9, 0xf1de, 0x2]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfffff000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xd0}}, 0x4800) 2.516175186s ago: executing program 9 (id=11007): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/260, 0x104}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/260, 0x104}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) write$cgroup_devices(r1, 0x0, 0x9) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) 2.409645225s ago: executing program 0 (id=11008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, r2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r4, 0x2}, &(0x7f0000000100)=0x8) 2.360295904s ago: executing program 8 (id=11009): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x82, 0x0, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x1000, 0x0, 0x0, 0x0, 0x80000000008}, {0x0, 0x0, 0x7ffffffffffffffd}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004) 2.17167962s ago: executing program 8 (id=11011): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000005c0)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000340)='./file0/file0\x00'}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f00000000c0)='\x00', 0x101080, &(0x7f00000002c0)={@align=0x1000008, {0x3, 0x4, 0x530711f2, 0x3}}, 0x91, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000004c0)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, 0x0, 0x25, 0x13}, 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000001c0)=']:-\x00', 0x260902, &(0x7f00000003c0)={@_ha_fsid={[0x1000009, 0xf8]}, {0x40, 0x2, 0x8f58, 0xd}}, 0x21c1, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000009000000090000000300000001800000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000018000000200000004000000000000002babe08d3914c6ac90d9f43102fc83f35216aa2fdccdc193f2bbbc4afd3ee6fd42ac8f273ed82cb37b5d36900f19b4c9e659686913bf84b9aeeb893514ff0e0a5151a4cbf62aad0cfa3afad9cc8ba1b329352862eb8ba86a6c873921e73e304cbf9488aa66ae3ebb1ddb20c19028f2906523c3fed5af7f0cd34401050e610e9e", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x10000, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x1, 0xfff, 0x0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x6c, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @loopback}}}}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000280)={0x2e, @loopback, 0x4e21, 0x0, 'sh\x00', 0x1, 0x9, 0x3f}, 0x2c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r7, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)) 1.9019277s ago: executing program 3 (id=11012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x40001036, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1.620032466s ago: executing program 3 (id=11013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xda48f9992b8fa0c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffffffffffd83, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x8855}, 0x10044804) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000006000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) r4 = socket(0x9, 0x80000, 0x4) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x368, 0x2a8, 0x0, 0x0, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newqdisc={0x14c, 0x24, 0x0, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x9, 0x5, 0x5, 0x2, 0x100, 0x6dcd9259, 0x4}}, {0xc, 0x2, [0x7, 0x7ecb, 0x5d2d, 0xe]}}, {{0x1c, 0x1, {0x4, 0x3, 0x7, 0x5, 0x2, 0x10001, 0xfffffff8, 0x2}}, {0x8, 0x2, [0x5, 0x541]}}, {{0x1c, 0x1, {0x1, 0xf0, 0x44, 0xf5, 0x0, 0x4, 0x84d3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x2, 0x3ff, 0x200, 0x2, 0x8, 0x9, 0x8}}, {0x14, 0x2, [0x5, 0x1, 0x2, 0x5, 0x1, 0xd, 0x7, 0x4]}}, {{0x1c, 0x1, {0x5, 0x1, 0x4b0, 0x5, 0x0, 0xfffff908, 0x7fff, 0x6}}, {0x10, 0x2, [0xd, 0x101, 0x3ff, 0x1, 0x4ada, 0xdc]}}, {{0x1c, 0x1, {0x0, 0x5, 0x0, 0x2, 0x2, 0x6, 0xfffffffa, 0x3}}, {0xa, 0x2, [0x5c, 0xfffe, 0x2]}}, {{0x1c, 0x1, {0x78, 0x81, 0xc, 0x4, 0x1, 0x6, 0x400, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x14c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) 1.462604898s ago: executing program 0 (id=11014): r0 = socket(0x39, 0x80000, 0x92c9) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) (async) sendfile(r2, r3, 0x0, 0xffffffff000) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x200, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048004}, 0x8000000) 1.341914334s ago: executing program 3 (id=11015): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@dev}]}]}}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000004e00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000004e00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 1.201634518s ago: executing program 8 (id=11016): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e", 0x241}], 0x1}}], 0x1, 0x4000001) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004cc51) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a32000000007800048064000180090001006861736800000000540002800800074000000001080005400000000708000240001284000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c080004"], 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000840) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8, 0x2000}, {r8, 0x8104}], 0x2, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) 1.109007306s ago: executing program 3 (id=11017): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x40080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x844) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@local, @dev={0xac, 0x14, 0x14, 0x2a}, 0x0, "35351901684a92fb88f1b6852cca996d0f9b0560d5738d7ad164b1f1b06d2c26", 0x54, 0x5, 0x5, 0x548}, 0x3c) (async) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x704) 927.715276ms ago: executing program 8 (id=11018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004ec0)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x1d}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@ecn={{0x28}, {0x21, 0x10, 0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'erspan0\x00', 'tunl0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x348) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002f00090027bd7000000000000400000008000e00", @ANYRES32, @ANYBLOB="6d001497ff84e3e46f6f4430be26c10c00098008d1d981a82f1c29d635d5d95ecb50933fbf00000021f70000", @ANYRES32=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 812.748537ms ago: executing program 0 (id=11019): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88caffff4000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab085013f288a81a3986dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) 673.254369ms ago: executing program 3 (id=11020): socket$inet(0x2, 0x1, 0x0) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000002c0)=[{0xffffffffffffffff, 0x0, {0x0, 0xd, 0x4}, {0x0, 0xf0, 0x3}, 0xff, 0x2}], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x0, {0x2, 0x0, 0x4}}, 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) (async, rerun: 32) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 672.470103ms ago: executing program 8 (id=11021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133", @ANYRESOCT=0x0], 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x2}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_emit_ethernet(0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="990900600402000031c53e3c3feb6bca00000000009fcba22c7900000000"], 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r5, 0x0, 0x9) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 386.259765ms ago: executing program 3 (id=11022): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000020104020000000000000006000000240002801400018008000100e000000203000900000014000c0002800100010000008000000000802c00018014000300fe800000000000004393deffffff00aa14000400fe88000000000000000000000000070104000180"], 0x6c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x1) shutdown(r4, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0x15, 0xe, @l2={'ib', 0x3a, 'nr0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x4008000) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000580)}, {&(0x7f00000001c0)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3) close(r0) 0s ago: executing program 0 (id=11023): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) unshare(0x2c020400) unshare(0x2c020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r2, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)=ANY=[@ANYBLOB="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"], 0x2008}, 0x44041) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYRES16=r1, @ANYRES8=r6], 0x1fc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0000000001010200000000141a0000020000002400000108000200e00000010c00028005000100000000003c0018800800024000000002080002400000d7d608000340ffff8001080003408000000008000240000000000800034000000003050003407fffffff00000c40000000000000000000000000000000005544442114cae54bc713f64b705d6b022b15ba5df5a8899bc103c5dcba46d92b91dc75e1c3dc54fe856fccbfd2862452439cb25bede1ef27b255e5308ebde2d535aa23ab18cdef1404d2649e6116d61d7c921ee608f661c2e26f50e0453ebcd20706c8715d7c0f29b0b3aad6b14c0a77df0d76a0c4bbd34a609d5cdca94bad6a88dce1b7c163c029b837d3338dc8b9dee38a9f6ec1eef9c299ed38e34db6a2497feb4d0d52c519216e4c5314a6a1c7232c37"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x6, 0x800}, &(0x7f00000001c0)=0x14) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000027c0)=""/4088, 0xff8}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000480)=""/141, 0x8d}], 0x7}, 0x22) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) kernel console output (not intermixed with test programs): entered allmulticast mode [ 1611.829702][T14225] vti0: entered allmulticast mode [ 1611.834966][T14225] geneve5: entered allmulticast mode [ 1611.851600][T14206] lo speed is unknown, defaulting to 1000 [ 1612.189848][ T6323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.203230][ T6323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.219572][T14241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.286389][T14215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1612.296620][T14215] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1612.379523][T14215] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1612.397899][T14215] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1612.477561][T14215] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1612.496998][T14215] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1612.839826][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9533'. [ 1612.876543][T14253] netlink: 'syz.6.9533': attribute type 10 has an invalid length. [ 1612.903501][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9533'. [ 1613.440294][T14266] netlink: 244 bytes leftover after parsing attributes in process `syz.6.9538'. [ 1613.904622][T14286] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1613.919538][T14286] netlink: 'syz.6.9541': attribute type 1 has an invalid length. [ 1613.931108][T14286] netlink: 'syz.6.9541': attribute type 4 has an invalid length. [ 1613.940188][T14286] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.9541'. [ 1613.953217][T14286] netlink: 'syz.6.9541': attribute type 1 has an invalid length. [ 1613.963317][T14286] netlink: 'syz.6.9541': attribute type 4 has an invalid length. [ 1613.972922][T14286] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.9541'. [ 1614.488650][T14292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1614.663392][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9544'. [ 1615.127365][T14257] lo speed is unknown, defaulting to 1000 [ 1615.870388][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9551'. [ 1615.971174][T14323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.004665][T14323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.023339][T14323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.076008][T14323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.053986][T14362] netlink: 'syz.8.9558': attribute type 13 has an invalid length. [ 1617.067029][T14362] netlink: 'syz.8.9558': attribute type 17 has an invalid length. [ 1617.190409][T14362] lo: left allmulticast mode [ 1617.239157][T14362] tunl0: left allmulticast mode [ 1617.297662][T14362] gre0: left allmulticast mode [ 1617.342894][T14362] gretap0: left allmulticast mode [ 1617.380245][T14362] erspan0: left allmulticast mode [ 1617.415825][T14362] ip_vti0: left allmulticast mode [ 1617.442337][T14362] ip6_vti0: left allmulticast mode [ 1617.463039][T14362] sit0: left allmulticast mode [ 1617.508038][T14362] ip6tnl0: left allmulticast mode [ 1617.524384][T14362] ip6gre0: left allmulticast mode [ 1617.531358][T14362] syz_tun: left allmulticast mode [ 1617.565855][T14362] ip6gretap0: left promiscuous mode [ 1617.598670][T14362] ip6gretap0: left allmulticast mode [ 1617.661921][T14362] vcan0: left allmulticast mode [ 1617.674955][T14362] bond0: left allmulticast mode [ 1617.686422][T14362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.697901][T14362] team0: left allmulticast mode [ 1617.705083][T14362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.720121][T14362] dummy0: left allmulticast mode [ 1617.733613][T14362] nlmon0: left allmulticast mode [ 1617.747317][T14362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.761243][T14362] vxcan0: left allmulticast mode [ 1617.776177][T14362] vxcan1: left allmulticast mode [ 1617.787481][T14362] veth0: left allmulticast mode [ 1617.805052][T14362] veth1: left allmulticast mode [ 1617.840969][T14362] wg0: left allmulticast mode [ 1617.860957][T14362] wg1: left allmulticast mode [ 1617.882365][T14362] wg2: left allmulticast mode [ 1617.903721][T14362] veth0_to_bridge: left allmulticast mode [ 1617.922399][T14362] bridge_slave_0: left allmulticast mode [ 1617.936841][T14362] veth1_to_bridge: left allmulticast mode [ 1617.944693][T14370] No such timeout policy "syz1" [ 1617.952825][T14362] bridge_slave_1: left allmulticast mode [ 1617.966955][T14362] bond_slave_0: left allmulticast mode [ 1617.982921][T14362] veth1_to_bond: left allmulticast mode [ 1617.999862][T14362] bond_slave_1: left allmulticast mode [ 1618.007289][T14362] veth1_to_team: left allmulticast mode [ 1618.019568][T14362] team_slave_1: left allmulticast mode [ 1618.025951][T14362] veth0_to_batadv: left allmulticast mode [ 1618.035291][T14362] batadv_slave_0: left allmulticast mode [ 1618.051369][T14362] veth1_to_batadv: left allmulticast mode [ 1618.069688][T14362] batadv_slave_1: left allmulticast mode [ 1618.079524][T14362] xfrm0: left allmulticast mode [ 1618.101032][T14362] veth0_to_hsr: left allmulticast mode [ 1618.111319][T14362] hsr_slave_0: left allmulticast mode [ 1618.129217][T14362] veth1_to_hsr: left allmulticast mode [ 1618.148285][T14362] hsr_slave_1: left allmulticast mode [ 1618.154726][T14362] veth1_virt_wifi: left allmulticast mode [ 1618.172518][T14362] veth0_virt_wifi: left allmulticast mode [ 1618.189620][T14362] virt_wifi0: left allmulticast mode [ 1618.194976][T14362] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1618.267520][T14330] lo speed is unknown, defaulting to 1000 [ 1618.612183][T14395] netlink: 'syz.6.9564': attribute type 4 has an invalid length. [ 1618.656679][T14395] netlink: 240 bytes leftover after parsing attributes in process `syz.6.9564'. [ 1619.244225][T14410] netlink: 'syz.8.9568': attribute type 1 has an invalid length. [ 1619.305674][T14410] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1619.445382][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9569'. [ 1619.487614][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1619.507286][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9569'. [ 1619.541160][T14419] sock: sock_set_timeout: `syz.2.9570' (pid 14419) tries to set negative timeout [ 1619.744774][T14426] xt_hashlimit: size too large, truncated to 1048576 [ 1619.810972][T14431] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1619.840846][T14431] gretap0: entered promiscuous mode [ 1619.898998][T14429] xt_hashlimit: size too large, truncated to 1048576 [ 1619.946573][T14431] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1619.966522][T14429] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1619.994166][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1620.036498][T14431] 0ªî{X¹¦: renamed from gretap0 [ 1620.072234][T14437] netlink: 'syz.5.9575': attribute type 1 has an invalid length. [ 1620.099971][T14431] 0ªî{X¹¦: left promiscuous mode [ 1620.112290][T14431] 0ªî{X¹¦: entered allmulticast mode [ 1620.138992][T14431] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1620.231667][T14440] gretap2: entered allmulticast mode [ 1620.559609][T14444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1621.758115][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9574'. [ 1622.711686][T14497] netlink: 'syz.3.9592': attribute type 1 has an invalid length. [ 1622.893999][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9592'. [ 1622.986056][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9593'. [ 1623.052517][T14497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1623.439942][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9596'. [ 1623.470584][T14521] xt_hashlimit: size too large, truncated to 1048576 [ 1623.662435][T14529] netlink: 'syz.8.9598': attribute type 11 has an invalid length. [ 1623.751215][T14529] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9598'. [ 1624.187160][T14544] sch_fq: defrate 0 ignored. [ 1624.263290][T14546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9602'. [ 1624.724925][T14557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.431223][T14568] syzkaller1: entered promiscuous mode [ 1625.471971][T14568] syzkaller1: entered allmulticast mode [ 1625.766371][T14603] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1626.063367][T14605] syzkaller0: entered promiscuous mode [ 1626.080035][T14605] syzkaller0: entered allmulticast mode [ 1626.281309][T14636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9615'. [ 1626.452329][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9619'. [ 1626.906115][T14665] netlink: 176 bytes leftover after parsing attributes in process `syz.6.9623'. [ 1627.413020][T14680] tipc: Started in network mode [ 1627.443606][T14680] tipc: Node identity f2377930b0b5, cluster identity 4711 [ 1627.486845][T14680] tipc: Enabled bearer , priority 0 [ 1627.754976][T14682] syzkaller0: entered promiscuous mode [ 1627.781311][T14682] syzkaller0: entered allmulticast mode [ 1627.794697][T14682] tipc: Resetting bearer [ 1627.907599][T14682] tipc: Resetting bearer [ 1628.310659][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1632.863471][T14682] tipc: Disabling bearer [ 1632.876270][T14709] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1632.978016][T10132] tipc: Node number set to 1115846960 [ 1633.006468][T14726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1633.069379][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9635'. [ 1633.166178][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9636'. [ 1633.223595][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9636'. [ 1633.343414][T14745] batman_adv: batadv0: Adding interface: dummy0 [ 1633.352391][T14745] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.388899][T14745] batman_adv: batadv0: Interface activated: dummy0 [ 1633.673512][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9642'. [ 1633.691817][T14755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9644'. [ 1633.706221][T14754] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9642'. [ 1633.727308][T14754] tipc: Invalid UDP bearer configuration [ 1633.727371][T14754] tipc: Enabling of bearer rejected, failed to enable media [ 1633.765580][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9642'. [ 1633.796934][T14758] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9646'. [ 1633.840178][T14762] bond0: (slave ip6tnl0): refused to change device type [ 1633.863253][T14755] openvswitch: netlink: Flow actions attr not present in new flow. [ 1634.215089][T14776] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9648'. [ 1634.762382][T14794] netdevsim netdevsim3: Direct firmware load for á failed with error -2 [ 1634.796560][T14794] netdevsim netdevsim3: Falling back to sysfs fallback for: á [ 1635.345379][T14817] netlink: 'syz.3.9659': attribute type 1 has an invalid length. [ 1635.404545][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9659'. [ 1636.237149][ T5628] block nbd18: Receive control failed (result -32) [ 1656.477041][T14841] dvmrp8: entered allmulticast mode [ 1656.639556][T14850] netlink: 'syz.6.9667': attribute type 5 has an invalid length. [ 1656.835503][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9669'. [ 1657.025939][T14861] syzkaller1: entered allmulticast mode [ 1657.453539][T14878] openvswitch: netlink: Message has 8 unknown bytes. [ 1657.950626][T14844] lo speed is unknown, defaulting to 1000 [ 1658.080199][T14902] netlink: 3 bytes leftover after parsing attributes in process `syz.8.9680'. [ 1658.099271][T14902] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1658.154233][T14902] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1658.414831][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9682'. [ 1659.030360][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9687'. [ 1659.098422][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9687'. [ 1659.133534][T14926] ip6erspan0: entered promiscuous mode [ 1659.151896][T14927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9687'. [ 1659.933640][T14946] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9694'. [ 1660.275946][T14955] sctp: [Deprecated]: syz.6.9697 (pid 14955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1660.275946][T14955] Use struct sctp_sack_info instead [ 1660.318187][T14955] sctp: [Deprecated]: syz.6.9697 (pid 14955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1660.318187][T14955] Use struct sctp_sack_info instead [ 1661.584553][T14976] lo speed is unknown, defaulting to 1000 [ 1662.454595][T15005] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9710'. [ 1662.751329][T15004] can: request_module (can-proto-0) failed. [ 1662.984186][T15017] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9713'. [ 1662.996729][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9712'. [ 1664.170631][T15040] IPVS: set_ctl: invalid protocol: 60 172.30.0.7:20000 [ 1665.182132][ T3405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1665.201694][ T3405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1665.215944][ T3405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1665.245003][ T3405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1665.263560][ T3405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1665.337194][T15067] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1665.426513][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1665.438402][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1665.470231][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1665.492555][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1665.512261][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1665.719068][T15064] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1666.323209][T15084] geneve2: entered allmulticast mode [ 1666.569459][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9732'. [ 1667.530912][T15115] x_tables: unsorted underflow at hook 2 [ 1667.581728][T15115] netlink: 'syz.2.9737': attribute type 16 has an invalid length. [ 1667.608402][ T5628] Bluetooth: hci1: command tx timeout [ 1668.098471][T15065] lo speed is unknown, defaulting to 1000 [ 1668.610881][T15141] bridge0: entered promiscuous mode [ 1669.696091][ T5628] Bluetooth: hci1: command tx timeout [ 1670.230966][T15065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.269381][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.306383][T15065] bridge_slave_0: entered allmulticast mode [ 1670.351089][T15065] bridge_slave_0: entered promiscuous mode [ 1670.384983][T15065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.415877][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.452879][T15065] bridge_slave_1: entered allmulticast mode [ 1670.482963][T15065] bridge_slave_1: entered promiscuous mode [ 1670.526202][T11769] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.554960][T11769] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.630033][T11769] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.684157][T11769] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.900399][T11769] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.949450][T11769] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 20002 - 0 [ 1670.991725][T11769] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.044513][T15065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.115837][T15065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.159818][T11769] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.192952][T11769] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.307426][T15199] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1671.383065][T15065] team0: Port device team_slave_0 added [ 1671.409158][T11769] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.431537][T11769] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.452004][T15065] team0: Port device team_slave_1 added [ 1671.468502][T11769] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 20002 - 0 [ 1671.633604][T15065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.668920][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.765756][T15065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.778884][ T5628] Bluetooth: hci1: command tx timeout [ 1671.829442][T15065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.841914][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.884273][T15230] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9758'. [ 1671.919548][T15065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.206301][T15065] hsr_slave_0: entered promiscuous mode [ 1672.242762][T15065] hsr_slave_1: entered promiscuous mode [ 1672.273253][T15065] debugfs: 'hsr0' already exists in 'hsr' [ 1672.283716][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9761'. [ 1672.301399][T15065] Cannot create hsr debugfs directory [ 1672.337463][T15245] xt_TCPMSS: Only works on TCP SYN packets [ 1672.474978][T15239] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1672.499351][T15239] syzkaller1: linktype set to 805 [ 1672.752419][T15256] syzkaller0: entered promiscuous mode [ 1672.787222][T15256] syzkaller0: entered allmulticast mode [ 1672.849067][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9766'. [ 1672.895166][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1673.335503][T15275] netlink: 'syz.6.9770': attribute type 1 has an invalid length. [ 1673.360665][T15277] netlink: 'syz.8.9771': attribute type 4 has an invalid length. [ 1673.442408][T15275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1673.472776][T15285] IPv6: Can't replace route, no match found [ 1673.682235][T15288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1673.850763][ T5628] Bluetooth: hci1: command tx timeout [ 1673.953585][T15304] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9777'. [ 1674.197978][T15305] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1674.523447][T15320] netlink: 428 bytes leftover after parsing attributes in process `syz.3.9779'. [ 1674.711373][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9779'. [ 1674.914582][T15332] netlink: 'syz.8.9782': attribute type 5 has an invalid length. [ 1675.272319][T15339] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9784'. [ 1675.311838][T15288] lo speed is unknown, defaulting to 1000 [ 1675.411451][T15341] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1675.419555][T15341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1675.551447][T15338] netlink: 'syz.6.9784': attribute type 4 has an invalid length. [ 1675.715861][T15065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1675.742911][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1675.758942][T15065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1675.766087][T15350] netlink: 'syz.3.9787': attribute type 15 has an invalid length. [ 1675.781876][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1676.601909][T15065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1676.815357][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.844002][T15065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1676.902710][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1677.040472][T15378] __nla_validate_parse: 1 callbacks suppressed [ 1677.040492][T15378] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9788'. [ 1677.532943][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9789'. [ 1677.655059][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9789'. [ 1677.757416][T15065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.882341][T15065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.944439][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.952729][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1678.021531][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.028860][T11769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.783248][T11769] tipc: Subscription rejected, illegal request [ 1678.843972][T15409] netlink: 'syz.6.9795': attribute type 10 has an invalid length. [ 1680.423991][T15481] netlink: 'syz.3.9808': attribute type 1 has an invalid length. [ 1680.431797][T15481] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9808'. [ 1685.174285][T15065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.389420][T15536] openvswitch: netlink: Flow actions attr not present in new flow. [ 1686.839052][T15543] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9822'. [ 1686.849530][T15065] veth0_vlan: entered promiscuous mode [ 1686.896106][T15065] veth1_vlan: entered promiscuous mode [ 1686.949359][T15547] netlink: 'syz.6.9823': attribute type 1 has an invalid length. [ 1686.993649][T15547] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9823'. [ 1687.061623][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9823'. [ 1687.085515][T15065] veth0_macvtap: entered promiscuous mode [ 1687.155176][T15065] veth1_macvtap: entered promiscuous mode [ 1687.239456][T15065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.280906][T15065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.370667][T12361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.395785][T12361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.412094][T12361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.478579][T12361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.654625][T15522] netlink: 'syz.3.9815': attribute type 3 has an invalid length. [ 1687.931542][T15519] lo speed is unknown, defaulting to 1000 [ 1687.981108][T15560] x_tables: duplicate underflow at hook 1 [ 1687.997080][T14625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.033747][T14625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.438155][T14632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.456055][T14632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.916116][T15594] netlink: 'syz.2.9835': attribute type 1 has an invalid length. [ 1689.954160][T15594] netlink: 'syz.2.9835': attribute type 2 has an invalid length. [ 1691.189039][T15614] syzkaller0: entered promiscuous mode [ 1691.194625][T15614] syzkaller0: entered allmulticast mode [ 1691.591279][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1692.878993][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9847'. [ 1693.296643][T15650] netlink: 'syz.3.9848': attribute type 4 has an invalid length. [ 1693.418271][T15652] netlink: 'syz.3.9848': attribute type 4 has an invalid length. [ 1695.002890][T15551] Set syz1 is full, maxelem 65536 reached [ 1699.027549][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9857'. [ 1699.101659][T15705] netlink: 'syz.5.9859': attribute type 1 has an invalid length. [ 1699.111727][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9859'. [ 1699.122755][T15705] netlink: 'syz.5.9859': attribute type 1 has an invalid length. [ 1699.138854][T15705] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9859'. [ 1699.636230][T15724] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9863'. [ 1699.666890][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1699.754752][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9866'. [ 1700.297024][T15748] netlink: 'syz.3.9872': attribute type 2 has an invalid length. [ 1700.325974][T15748] netlink: 'syz.3.9872': attribute type 2 has an invalid length. [ 1700.815375][T15763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9875'. [ 1701.617401][T15784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9881'. [ 1702.130953][T15796] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9885'. [ 1702.473085][T15803] netlink: 'syz.3.9888': attribute type 2 has an invalid length. [ 1702.527088][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9890'. [ 1702.604738][T15812] batman_adv: batadv0: Interface deactivated: dummy0 [ 1702.699798][T15812] batman_adv: batadv0: Removing interface: dummy0 [ 1702.929163][T15824] tipc: Started in network mode [ 1702.934269][T15824] tipc: Node identity d68750813a7c, cluster identity 4711 [ 1702.943456][T15824] tipc: Enabled bearer , priority 0 [ 1702.955217][T15824] syzkaller0: entered promiscuous mode [ 1702.966544][T15824] syzkaller0: entered allmulticast mode [ 1703.230179][T15837] batman_adv: batadv0: Adding interface: vlan2 [ 1703.245004][T15837] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.278134][T15837] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1703.319790][T15830] ip6t_REJECT: ECHOREPLY is not supported [ 1703.771043][T15823] tipc: Resetting bearer [ 1703.986167][T15823] tipc: Disabling bearer [ 1704.048073][ T187] tipc: Node number set to 3975893121 [ 1704.095890][T15849] bridge0: port 3(syz_tun) entered blocking state [ 1704.113259][T15849] bridge0: port 3(syz_tun) entered disabled state [ 1704.133661][T15849] syz_tun: entered allmulticast mode [ 1704.156631][T15849] syz_tun: entered promiscuous mode [ 1704.196596][T15849] bridge0: port 3(syz_tun) entered blocking state [ 1704.203247][T15849] bridge0: port 3(syz_tun) entered forwarding state [ 1704.477201][T15868] Bluetooth: MGMT ver 1.23 [ 1705.651136][T15891] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1705.665730][T15889] syzkaller0: entered promiscuous mode [ 1705.672126][T15889] syzkaller0: entered allmulticast mode [ 1705.755180][T15890] netlink: 'syz.8.9909': attribute type 1 has an invalid length. [ 1706.017595][T15892] veth1_vlan: left promiscuous mode [ 1706.033089][T15892] veth0_vlan: left promiscuous mode [ 1706.045483][T15892] veth0_vlan: entered promiscuous mode [ 1706.071587][T15892] veth1_vlan: entered promiscuous mode [ 1706.090690][T15892] veth1_macvtap: left promiscuous mode [ 1706.107581][T15906] netlink: 'syz.5.9913': attribute type 1 has an invalid length. [ 1706.110656][T15892] veth0_macvtap: left promiscuous mode [ 1706.125600][T15892] veth0_macvtap: entered promiscuous mode [ 1706.134020][T15892] veth1_macvtap: entered promiscuous mode [ 1706.150775][T15892] 8021q: adding VLAN 0 to HW filter on device €Â [ 1706.158488][T15892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1706.166774][T15892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1706.177176][T15892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1706.227391][T15892] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1706.265089][T15898] bridge_slave_0: left allmulticast mode [ 1706.272521][T15898] bridge_slave_0: left promiscuous mode [ 1706.278976][T15898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.296150][T15898] bridge_slave_1: left allmulticast mode [ 1706.302365][T15898] bridge_slave_1: left promiscuous mode [ 1706.308503][T15898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.329834][T15898] bond0: (slave bond_slave_0): Releasing backup interface [ 1706.346997][T15898] bond0: (slave bond_slave_1): Releasing backup interface [ 1706.376441][T15898] team0: Port device team_slave_0 removed [ 1706.405534][T15898] team0: Port device team_slave_1 removed [ 1706.430894][T15898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1706.482776][T14607] netdevsim netdevsim8 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.497203][T14607] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.553249][T14607] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.562646][T14607] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.753272][T15911] netlink: 'syz.5.9914': attribute type 1 has an invalid length. [ 1706.803294][T15911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1707.113603][T15926] wireguard: wg2: Could not create IPv4 socket [ 1707.173415][T15926] __nla_validate_parse: 9 callbacks suppressed [ 1707.173434][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9918'. [ 1707.284209][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9918'. [ 1707.401261][T12361] netdevsim netdevsim8 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.426006][T12361] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.476297][T12361] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.514669][T12361] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1710.085404][T15972] netlink: 'syz.3.9924': attribute type 5 has an invalid length. [ 1710.265566][T15975] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1710.291452][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.392589][T15982] tipc: Enabled bearer , priority 0 [ 1710.423849][T15982] syzkaller0: entered promiscuous mode [ 1710.455499][T15982] syzkaller0: entered allmulticast mode [ 1710.491190][T15987] netlink: 'syz.5.9928': attribute type 3 has an invalid length. [ 1710.536090][T15982] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9926'. [ 1710.622918][T15982] tipc: Resetting bearer [ 1710.646189][T15980] tipc: Resetting bearer [ 1710.676466][T15980] tipc: Disabling bearer [ 1712.016376][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9934'. [ 1712.416414][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9942'. [ 1713.360142][T16048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1713.880939][T16041] lo speed is unknown, defaulting to 1000 [ 1713.893688][T10132] hid-generic 0005:0007:0009.003A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1714.126498][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9942'. [ 1714.293940][T16067] fido_id[16067]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 1715.459505][T16073] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.9950'. [ 1715.529982][T16090] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1715.552382][ T3405] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1715.565357][ T3405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1715.594076][ T3405] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1715.623333][ T3405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1715.632588][ T3405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1716.290863][T16077] lo speed is unknown, defaulting to 1000 [ 1716.343887][T16109] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9957'. [ 1717.668439][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9965'. [ 1717.688281][ T3405] Bluetooth: hci3: command tx timeout [ 1718.158842][T16150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9969'. [ 1718.717440][T16089] lo speed is unknown, defaulting to 1000 [ 1718.863328][T16151] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.9967'. [ 1719.394650][T16173] netlink: 'syz.3.9974': attribute type 1 has an invalid length. [ 1719.610548][T16173] bond3: entered promiscuous mode [ 1719.644683][T16173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1719.768033][ T3405] Bluetooth: hci3: command tx timeout [ 1720.157035][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.166275][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.183613][T16089] bridge_slave_0: entered allmulticast mode [ 1720.199321][T16089] bridge_slave_0: entered promiscuous mode [ 1720.426101][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.447303][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.497498][T16089] bridge_slave_1: entered allmulticast mode [ 1720.524276][T16089] bridge_slave_1: entered promiscuous mode [ 1720.533586][T16192] syzkaller0: entered promiscuous mode [ 1720.543492][T16192] syzkaller0: entered allmulticast mode [ 1720.601576][T16203] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1720.614471][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9979'. [ 1721.848048][ T3405] Bluetooth: hci3: command tx timeout [ 1722.406414][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9981'. [ 1722.541636][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.613303][T16226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1722.652524][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.682761][T16223] team0: Device xfrm0 is of different type [ 1722.849139][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9985'. [ 1722.862493][T16089] team0: Port device team_slave_0 added [ 1722.870249][T16228] tipc: Invalid UDP bearer configuration [ 1722.870298][T16228] tipc: Enabling of bearer rejected, failed to enable media [ 1722.904101][T16089] team0: Port device team_slave_1 added [ 1723.075589][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.094350][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.164354][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.184767][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.193718][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.246448][T16238] netlink: 'syz.2.9987': attribute type 2 has an invalid length. [ 1723.261841][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.321182][T16238] : entered promiscuous mode [ 1723.516821][T16243] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1723.631540][T16252] sctp: [Deprecated]: syz.5.9991 (pid 16252) Use of int in maxseg socket option. [ 1723.631540][T16252] Use struct sctp_assoc_value instead [ 1723.685156][T16089] hsr_slave_0: entered promiscuous mode [ 1723.719042][T16089] hsr_slave_1: entered promiscuous mode [ 1723.725701][T16089] debugfs: 'hsr0' already exists in 'hsr' [ 1723.738142][T16089] Cannot create hsr debugfs directory [ 1723.928956][ T3405] Bluetooth: hci3: command tx timeout [ 1723.987448][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9992'. [ 1724.558904][T16264] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 1724.860927][T16267] tipc: Enabled bearer , priority 0 [ 1724.878961][T16089] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1724.929711][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1724.984633][T16089] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1725.042663][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1725.098247][T16276] netlink: 39 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1725.494439][T16267] syzkaller0: entered promiscuous mode [ 1725.505897][T16267] syzkaller0: entered allmulticast mode [ 1725.513107][T16267] tipc: Resetting bearer [ 1725.567469][T16089] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1725.647280][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1725.663296][T16089] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1725.686294][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1725.724038][T16293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1725.775939][T16296] netlink: 'syz.2.10000': attribute type 29 has an invalid length. [ 1725.914399][T14626] tipc: Resetting bearer [ 1726.024916][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.032762][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.167037][T16289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.187346][T16289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.406456][T16295] batadv0: entered promiscuous mode [ 1726.427489][T16295] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1726.444237][T16295] batadv0: left promiscuous mode [ 1726.492333][T16265] tipc: Resetting bearer [ 1730.813029][T16265] tipc: Disabling bearer [ 1730.826178][T12356] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.836853][T12356] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.847075][T12356] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.864407][T12356] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.205713][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1731.320739][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.386618][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.394809][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.477227][T16340] syzkaller1: entered promiscuous mode [ 1731.495899][T16340] syzkaller1: entered allmulticast mode [ 1731.524152][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.532413][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.352092][T16378] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1732.382306][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1732.443935][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1732.973812][T16400] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10022'. [ 1733.303335][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10025'. [ 1733.337427][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10025'. [ 1733.586470][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.250370][T16445] netlink: 'syz.3.10031': attribute type 1 has an invalid length. [ 1734.262550][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1734.296510][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1734.330003][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.370521][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1734.413639][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.478918][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1734.523461][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.576051][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.661905][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.702849][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.745931][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.840225][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.872154][T16447] netlink: 'syz.2.10032': attribute type 4 has an invalid length. [ 1734.912171][T16089] veth0_vlan: entered promiscuous mode [ 1734.971385][T16089] veth1_vlan: entered promiscuous mode [ 1735.095908][T16089] veth0_macvtap: entered promiscuous mode [ 1735.159204][T16089] veth1_macvtap: entered promiscuous mode [ 1735.309685][T16089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.407794][T16089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.525445][T14629] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.551398][T14629] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.620962][T14629] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.655900][T14629] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.171391][T12343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.202101][T12343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.510572][T16480] lo speed is unknown, defaulting to 1000 [ 1736.623002][T14625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.665405][T14625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.934657][T16506] syzkaller1: entered promiscuous mode [ 1736.964925][T16506] syzkaller1: entered allmulticast mode [ 1737.032174][T16513] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1737.736472][T16519] __nla_validate_parse: 37 callbacks suppressed [ 1737.736494][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9953'. [ 1738.009136][T16536] block nbd19: server does not support multiple connections per device. [ 1738.130482][T16536] block nbd19: shutting down sockets [ 1738.550696][T16551] syzkaller1: entered promiscuous mode [ 1738.566141][T16551] syzkaller1: entered allmulticast mode [ 1738.932724][T16558] gre0: entered promiscuous mode [ 1738.959498][T16558] gre0: entered allmulticast mode [ 1738.975201][T16558] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1739.023257][T16562] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1739.362909][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10066'. [ 1739.519747][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10068'. [ 1739.703530][T16581] batman_adv: batadv0: Interface activated: vlan2 [ 1739.755089][T16581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1739.972771][T16590] bond3: entered allmulticast mode [ 1739.981002][T16590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1740.320306][T16618] validate_nla: 29 callbacks suppressed [ 1740.320356][T16618] netlink: 'syz.9.10073': attribute type 5 has an invalid length. [ 1740.512325][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10074'. [ 1740.540114][T16623] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10075'. [ 1740.581955][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10075'. [ 1740.583034][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10075'. [ 1740.726898][T16627] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1740.774688][T16628] netlink: 'syz.5.10075': attribute type 4 has an invalid length. [ 1740.795653][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10077'. [ 1740.852657][T16635] netlink: get zone limit has 4 unknown bytes [ 1740.862468][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10077'. [ 1740.958772][T16631] team1: entered promiscuous mode [ 1740.973392][T16631] team1: entered allmulticast mode [ 1740.987407][T16631] 8021q: adding VLAN 0 to HW filter on device team1 [ 1741.178609][T16635] team2: entered promiscuous mode [ 1741.194780][T16635] team2: entered allmulticast mode [ 1741.214585][T16635] 8021q: adding VLAN 0 to HW filter on device team2 [ 1741.658779][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10083'. [ 1741.689849][T16659] netlink: 'syz.9.10083': attribute type 18 has an invalid length. [ 1741.706196][T16662] netlink: 'syz.2.10084': attribute type 4 has an invalid length. [ 1742.145811][T16682] x_tables: duplicate underflow at hook 3 [ 1742.153393][T16681] netlink: 'syz.3.10090': attribute type 3 has an invalid length. [ 1742.184955][T16683] netlink: 'syz.3.10090': attribute type 3 has an invalid length. [ 1742.515422][T16692] netlink: 'syz.3.10092': attribute type 16 has an invalid length. [ 1742.853630][T16703] __nla_validate_parse: 2 callbacks suppressed [ 1742.853667][T16703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1742.929139][T16703] x_tables: unsorted underflow at hook 3 [ 1742.943843][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1743.284835][T16713] x_tables: unsorted entry at hook 3 [ 1743.296295][T16714] IPv6: Can't replace route, no match found [ 1743.323426][T16715] IPv6: Can't replace route, no match found [ 1743.604266][T16726] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10103'. [ 1743.704801][T16728] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10103'. [ 1743.818564][T16676] lo speed is unknown, defaulting to 1000 [ 1745.120292][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10111'. [ 1746.144765][T16785] syzkaller0: entered promiscuous mode [ 1746.164741][T16785] syzkaller0: entered allmulticast mode [ 1746.392623][T16794] vlan2: entered promiscuous mode [ 1746.424670][T16794] erspan0: entered promiscuous mode [ 1747.287507][T16823] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10130'. [ 1747.337510][T16823] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10130'. [ 1748.179511][T16847] netlink: 'syz.9.10134': attribute type 9 has an invalid length. [ 1748.255804][T16845] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10135'. [ 1748.356915][T16851] netlink: 120 bytes leftover after parsing attributes in process `syz.9.10134'. [ 1748.595872][T16861] netdevsim netdevsim5 €Â: renamed from netdevsim0 [ 1748.652884][T16862] netlink: 'syz.5.10139': attribute type 2 has an invalid length. [ 1748.815091][T16862] : entered promiscuous mode [ 1750.083459][T16913] tun0: tun_chr_ioctl cmd 1074812117 [ 1750.562566][T16924] netlink: 'syz.9.10155': attribute type 1 has an invalid length. [ 1750.635999][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10157'. [ 1750.980822][T16948] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10161'. [ 1751.009390][T16947] nbd: socks must be embedded in a SOCK_ITEM attr [ 1751.073444][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10160'. [ 1751.337176][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10165'. [ 1751.633595][T16967] netlink: 'syz.8.10167': attribute type 4 has an invalid length. [ 1751.896776][T16975] netlink: 'syz.9.10169': attribute type 2 has an invalid length. [ 1751.993469][T16975] : entered promiscuous mode [ 1752.036218][T16982] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10172'. [ 1752.180472][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10173'. [ 1752.192538][T16982] IPv6: NLM_F_CREATE should be specified when creating new route [ 1752.265632][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10174'. [ 1752.345491][T16995] vlan2: entered promiscuous mode [ 1752.351684][T16995] bond0: entered promiscuous mode [ 1752.356838][T16995] bond_slave_0: entered promiscuous mode [ 1752.363446][T16995] bond_slave_1: entered promiscuous mode [ 1752.824583][T17007] netlink: 'syz.3.10178': attribute type 30 has an invalid length. [ 1752.964547][T17015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.982364][T17007] bond4: option arp_missed_max: invalid value (0) [ 1752.994826][T17007] bond4: option arp_missed_max: allowed values 1 - 255 [ 1753.006936][T17020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10178'. [ 1753.011358][T17007] bond4 (unregistering): Released all slaves [ 1753.191002][T17018] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1754.133885][T17054] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10189'. [ 1754.150069][T17060] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.10191'. [ 1754.160375][T17058] tipc: Started in network mode [ 1754.171059][T17058] tipc: Node identity 8212922ef926, cluster identity 4711 [ 1754.198095][T17058] tipc: Enabled bearer , priority 0 [ 1754.232666][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10192'. [ 1754.316122][T17062] syzkaller0: entered promiscuous mode [ 1754.357119][T17062] syzkaller0: entered allmulticast mode [ 1754.443249][T17067] tipc: Resetting bearer [ 1754.513270][T17055] tipc: Resetting bearer [ 1754.641338][T17055] tipc: Disabling bearer [ 1755.876809][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1755.920538][T17112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1756.072614][T17124] netlink: 'syz.3.10204': attribute type 39 has an invalid length. [ 1756.421350][T17133] netlink: 'syz.9.10208': attribute type 6 has an invalid length. [ 1756.462104][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10209'. [ 1757.785136][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10213'. [ 1757.894717][T17167] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1757.908348][T17180] netlink: 'syz.8.10213': attribute type 19 has an invalid length. [ 1757.990191][T17167] bond12 (unregistering): Released all slaves [ 1758.317146][T17192] netlink: 'syz.3.10218': attribute type 3 has an invalid length. [ 1758.811176][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10223'. [ 1759.535055][T17231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10229'. [ 1759.571809][T17230] netlink: 'syz.2.10229': attribute type 61 has an invalid length. [ 1759.836297][T17240] netlink: 'syz.2.10232': attribute type 11 has an invalid length. [ 1759.892525][T17242] netlink: 'syz.5.10233': attribute type 1 has an invalid length. [ 1760.025727][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10233'. [ 1760.102798][T17249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10234'. [ 1760.126861][T17245] bond2: (slave geneve2): making interface the new active one [ 1760.137031][T17245] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1760.202033][T17246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1760.268323][T12343] netdevsim netdevsim5 €Â: set [1, 0] type 2 family 0 port 20000 - 0 [ 1760.276682][T17214] lo speed is unknown, defaulting to 1000 [ 1760.342179][T12343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1760.403315][T12343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1760.474265][T12343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1760.653207][T17259] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1762.324272][T17281] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10240'. [ 1762.566642][T17296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10246'. [ 1762.779878][T17300] 0ªî{X¹¦: left allmulticast mode [ 1762.856122][T17306] netlink: 'syz.3.10247': attribute type 1 has an invalid length. [ 1762.899275][T17306] netlink: 248 bytes leftover after parsing attributes in process `syz.3.10247'. [ 1763.094264][T17300] bridge8: port 1(erspan0) entered disabled state [ 1763.283128][T17322] netlink: 'syz.8.10251': attribute type 1 has an invalid length. [ 1763.345059][T17324] netlink: 48 bytes leftover after parsing attributes in process `syz.8.10251'. [ 1763.444161][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10251'. [ 1763.512723][T17300] bridge0: port 3(syz_tun) entered disabled state [ 1763.538900][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.546801][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.618227][T17341] netlink: 'syz.8.10251': attribute type 10 has an invalid length. [ 1763.627394][T17341] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10251'. [ 1764.403394][T17300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.474919][T17300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.600482][T17300] veth1_to_hsr: left promiscuous mode [ 1764.985543][T17300] geneve1: left promiscuous mode [ 1765.050578][T17300] mac80211_hwsim hwsim78 wlan0: left promiscuous mode [ 1765.057493][T17300] mac80211_hwsim hwsim78 wlan0: left allmulticast mode [ 1765.229405][T17300] bond1: left promiscuous mode [ 1765.246512][T17300] geneve2: left allmulticast mode [ 1765.275161][T17300] batman_adv: batadv0: Interface deactivated: vlan2 [ 1765.301967][T17300] bond3: left allmulticast mode [ 1765.314128][T17314] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10249'. [ 1765.345417][T17322] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1765.402578][T17341] dummy0: entered promiscuous mode [ 1765.568934][T14632] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.595153][T14632] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.640404][T14632] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.679103][T14632] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.950353][T17377] netlink: 'syz.5.10260': attribute type 2 has an invalid length. [ 1765.996862][T17369] syzkaller1: entered promiscuous mode [ 1766.046976][T17369] syzkaller1: entered allmulticast mode [ 1766.543205][T10132] hid-generic 0005:0007:0009.003B: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1766.693434][T17400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10264'. [ 1766.964622][T17409] netlink: 'syz.3.10267': attribute type 322 has an invalid length. [ 1766.989854][T17398] fido_id[17398]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1768.127304][T17422] netlink: 'syz.9.10270': attribute type 13 has an invalid length. [ 1768.142777][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10275'. [ 1768.327213][T17422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.335156][T17422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.353079][T17444] netlink: 'syz.3.10275': attribute type 1 has an invalid length. [ 1768.383128][T17444] netlink: 'syz.3.10275': attribute type 1 has an invalid length. [ 1768.599973][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.623134][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.022690][T17439] lo: entered allmulticast mode [ 1769.046537][T17439] lo: left allmulticast mode [ 1769.069651][T17441] veth1_vlan: left promiscuous mode [ 1769.108829][T17441] veth1_vlan: entered promiscuous mode [ 1769.117143][T17441] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 1769.145366][T17443] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 1769.154692][T17443] veth1_vlan: left promiscuous mode [ 1769.168804][T17443] bond4 (unregistering): Released all slaves [ 1769.197211][T14632] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.210024][T14632] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.222221][T12356] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.233123][T12356] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.616543][T17458] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10277'. [ 1794.682310][T10132] hid-generic 0005:0007:0009.003C: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1794.772872][T17456] netlink: 'syz.3.10279': attribute type 1 has an invalid length. [ 1794.818111][T17456] netlink: 'syz.3.10279': attribute type 2 has an invalid length. [ 1796.099628][T17501] syzkaller0: entered promiscuous mode [ 1796.121620][T17501] syzkaller0: entered allmulticast mode [ 1796.173163][T17501] tipc: Started in network mode [ 1796.197296][T17501] tipc: Node identity a21f824925ef, cluster identity 4711 [ 1796.215383][T17501] tipc: Enabled bearer , priority 0 [ 1796.271111][T17501] tipc: Resetting bearer [ 1796.286808][T17511] syzkaller0: entered promiscuous mode [ 1796.296068][T17511] syzkaller0: entered allmulticast mode [ 1796.318422][T17513] netlink: 48 bytes leftover after parsing attributes in process `syz.8.10293'. [ 1797.314051][T17500] tipc: Resetting bearer [ 1797.565067][T17535] netlink: 'syz.3.10299': attribute type 2 has an invalid length. [ 1797.617586][T17535] netlink: 'syz.3.10299': attribute type 1 has an invalid length. [ 1797.672215][T17535] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1797.701133][T17500] tipc: Disabling bearer [ 1797.763381][T17352] tipc: Node number set to 2280686153 [ 1797.835724][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1798.171696][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10302'. [ 1799.292933][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1799.394878][T17591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1799.532383][T10132] hid-generic 0005:0007:0007.003D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1799.581412][T17595] netlink: 'syz.5.10316': attribute type 11 has an invalid length. [ 1799.592927][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1799.768451][T17602] fido_id[17602]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1799.797122][T17604] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10318'. [ 1799.939824][T17614] SET target dimension over the limit! [ 1800.362713][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10324'. [ 1800.629345][T17352] hid-generic 0005:0007:0009.003E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1800.856966][T17646] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1800.913395][T17646] syzkaller0: entered promiscuous mode [ 1800.956948][T17646] syzkaller0: entered allmulticast mode [ 1801.521948][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10333'. [ 1801.551434][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10334'. [ 1801.580430][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10333'. [ 1801.612937][T17657] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1802.313471][T17688] netlink: 'syz.9.10341': attribute type 4 has an invalid length. [ 1802.494288][ T8412] IPVS: starting estimator thread 0... [ 1802.599689][T17699] IPVS: using max 30 ests per chain, 72000 per kthread [ 1802.687030][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10347'. [ 1802.867424][ T8412] hid-generic 0005:0007:0009.003F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1803.736615][T17724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1803.747204][T17724] bridge0: port 3(bond3) entered blocking state [ 1803.755069][T17724] bridge0: port 3(bond3) entered disabled state [ 1803.762042][T17724] bond3: entered allmulticast mode [ 1803.771694][T17724] bond3: entered promiscuous mode [ 1803.963165][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10356'. [ 1804.153900][T17751] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10359'. [ 1804.202145][T17751] netlink: 92 bytes leftover after parsing attributes in process `syz.8.10359'. [ 1804.592310][T17761] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode [ 1804.645296][T17761] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode [ 1804.704180][T17765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10363'. [ 1805.115155][T10132] hid-generic 0005:0007:0009.0040: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1805.898402][T17792] netlink: 'syz.9.10371': attribute type 23 has an invalid length. [ 1805.970200][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10370'. [ 1806.004332][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10370'. [ 1806.132834][T17757] lo speed is unknown, defaulting to 1000 [ 1806.524884][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1806.580650][T17805] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.10374'. [ 1806.622717][T17805] openvswitch: netlink: Message has 16 unknown bytes. [ 1806.739661][T17804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1806.902058][T17814] macvlan2: entered promiscuous mode [ 1806.932808][T17814] macvlan2: entered allmulticast mode [ 1806.967119][T17814] bond4: entered promiscuous mode [ 1807.019696][T17814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1807.143832][T17814] bond4: left promiscuous mode [ 1807.940770][T10132] hid-generic 0005:0007:0009.0041: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1808.569702][T17851] syzkaller0: entered promiscuous mode [ 1808.592177][T17851] syzkaller0: entered allmulticast mode [ 1808.633768][T17854] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10385'. [ 1808.678774][T17851] tipc: Enabled bearer , priority 0 [ 1808.716458][T17851] tipc: Resetting bearer [ 1808.956416][T17849] tipc: Resetting bearer [ 1809.116142][T17849] tipc: Disabling bearer [ 1809.873480][T17872] bond12 (unregistering): Released all slaves [ 1810.194932][T17892] Cannot find del_set index 0 as target [ 1810.229302][T17894] netlink: 'syz.2.10395': attribute type 1 has an invalid length. [ 1811.324215][T17932] netlink: 'syz.8.10404': attribute type 1 has an invalid length. [ 1811.445204][T17932] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1811.459985][T17934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1811.549492][T17937] vlan4: entered allmulticast mode [ 1811.566173][T17937] bond12: entered allmulticast mode [ 1811.601028][T17934] vlan2: entered promiscuous mode [ 1811.606993][T17934] veth1: entered promiscuous mode [ 1811.724907][T17951] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1811.902568][T17957] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10411'. [ 1812.044715][T17962] dvmrp0: entered allmulticast mode [ 1812.081764][T17969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1812.476231][T17990] SET target dimension over the limit! [ 1812.500474][T17991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10417'. [ 1812.744564][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10419'. [ 1812.813226][T12343] wlan0: Trigger new scan to find an IBSS to join [ 1813.065819][T17998] netlink: 280 bytes leftover after parsing attributes in process `syz.9.10422'. [ 1813.346240][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10424'. [ 1813.382680][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10425'. [ 1813.391086][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10424'. [ 1813.481491][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10425'. [ 1813.540668][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10425'. [ 1813.631045][T18010] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1813.761010][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10429'. [ 1813.788162][T18025] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1815.431134][T18085] netlink: 'syz.8.10442': attribute type 3 has an invalid length. [ 1815.477522][T18085] netlink: 'syz.8.10442': attribute type 1 has an invalid length. [ 1815.510434][T18085] netlink: 'syz.8.10442': attribute type 2 has an invalid length. [ 1815.794655][T18094] syzkaller0: entered promiscuous mode [ 1815.831017][T18094] syzkaller0: entered allmulticast mode [ 1816.027113][T18103] IPVS: set_ctl: invalid protocol: 47 100.1.1.5:20002 [ 1816.450516][T18121] tap0: tun_chr_ioctl cmd 2147767507 [ 1816.866368][T18137] netlink: 'syz.2.10459': attribute type 1 has an invalid length. [ 1816.884906][T18137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1816.984384][T18131] __nla_validate_parse: 4 callbacks suppressed [ 1816.984404][T18131] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10457'. [ 1817.437219][T18156] netlink: 'syz.5.10463': attribute type 12 has an invalid length. [ 1817.493707][T18159] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1818.284774][T18133] syzkaller0: entered promiscuous mode [ 1818.341811][T18133] syzkaller0: entered allmulticast mode [ 1822.723359][T18186] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1822.758504][T18186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1822.786190][T18186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1823.337329][T18217] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000 [ 1823.490824][T18219] batman_adv: batadv0: Adding interface: gretap1 [ 1823.511719][T18219] batman_adv: batadv0: The MTU of interface gretap1 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.580521][T18219] batman_adv: batadv0: Interface activated: gretap1 [ 1823.605196][T18232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10480'. [ 1823.805281][T18238] netlink: 'syz.9.10483': attribute type 2 has an invalid length. [ 1824.341041][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10487'. [ 1825.110153][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10499'. [ 1825.902700][T18255] bond0: (slave wlan0): Opening slave failed [ 1825.924281][T18306] netlink: 'syz.3.10502': attribute type 1 has an invalid length. [ 1825.939886][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10501'. [ 1825.949492][T18306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10502'. [ 1826.050532][T18311] syzkaller0: entered promiscuous mode [ 1826.066449][T18311] syzkaller0: entered allmulticast mode [ 1826.798965][T18337] syzkaller0: entered promiscuous mode [ 1826.812389][T18337] syzkaller0: entered allmulticast mode [ 1827.472113][T18355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10514'. [ 1827.639462][T18361] netlink: 'syz.3.10516': attribute type 13 has an invalid length. [ 1827.662354][T18361] netlink: 'syz.3.10516': attribute type 17 has an invalid length. [ 1827.682869][T18361] gre0: left promiscuous mode [ 1827.703933][T18361] gre0: left allmulticast mode [ 1827.761418][T18371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10516'. [ 1827.871447][T18358] block nbd19: server does not support multiple connections per device. [ 1827.912210][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10519'. [ 1827.923663][T18358] block nbd19: shutting down sockets [ 1827.931153][T18361] syz_tun: left promiscuous mode [ 1827.957561][T18361] syz_tun: left allmulticast mode [ 1828.244361][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10516'. [ 1828.463664][T18361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1828.520264][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10523'. [ 1828.620476][T18378] team3: entered promiscuous mode [ 1828.639244][T18378] team3: entered allmulticast mode [ 1828.646780][T18378] 8021q: adding VLAN 0 to HW filter on device team3 [ 1828.858479][T10132] hid-generic 0005:0007:0009.0042: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1829.773736][T18429] __nla_validate_parse: 2 callbacks suppressed [ 1829.773756][T18429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10530'. [ 1829.802311][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10530'. [ 1829.935754][T18433] netlink: 'syz.3.10531': attribute type 2 has an invalid length. [ 1829.950417][T18433] netlink: 'syz.3.10531': attribute type 10 has an invalid length. [ 1830.123312][T18433] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1830.522635][T18462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1830.626645][T18462] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1831.245803][T17352] hid-generic 0005:0007:0009.0043: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1831.656309][T18486] netlink: 'syz.5.10546': attribute type 1 has an invalid length. [ 1831.711720][T18486] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10546'. [ 1832.549551][T18468] lo speed is unknown, defaulting to 1000 [ 1833.332808][T18536] syzkaller0: entered promiscuous mode [ 1833.346207][T18536] syzkaller0: entered allmulticast mode [ 1833.956556][T18547] vlan3: entered allmulticast mode [ 1833.997249][T18547] bond0: entered allmulticast mode [ 1834.033896][T18547] bridge0: entered allmulticast mode [ 1834.688441][T18571] netlink: 'syz.9.10559': attribute type 9 has an invalid length. [ 1835.074400][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10561'. [ 1835.206066][T14625] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.251161][T14625] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.278814][T14625] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.304881][T14625] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.536639][T17352] hid-generic 0005:0007:0009.0044: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1835.883510][T18596] fido_id[18596]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1836.123013][T18607] syzkaller0: entered promiscuous mode [ 1836.141721][T18607] syzkaller0: entered allmulticast mode [ 1837.332422][T18642] netlink: 'syz.2.10577': attribute type 6 has an invalid length. [ 1837.603512][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1837.614225][T18650] netlink: 'syz.5.10579': attribute type 1 has an invalid length. [ 1837.681153][T18653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10579'. [ 1837.881142][T18650] bond4: entered promiscuous mode [ 1837.888778][T18650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1837.899516][T18653] bond4: entered allmulticast mode [ 1837.980799][T18660] bond4: (slave bridge3): making interface the new active one [ 1837.990424][T18660] bridge3: entered promiscuous mode [ 1837.996858][T18660] bridge3: entered allmulticast mode [ 1838.013576][T18660] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1838.092667][T10132] hid-generic 0005:0007:0009.0045: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1838.304900][T18667] fido_id[18667]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1838.324038][T18669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1838.352905][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10583'. [ 1838.928088][T18690] bond0: (slave ip6tnl0): refused to change device type [ 1838.990144][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10589'. [ 1839.122170][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10590'. [ 1839.591341][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1839.849628][T18656] Bluetooth: hci1: command 0x0406 tx timeout [ 1839.883577][T18720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1840.181155][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10600'. [ 1840.392640][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10602'. [ 1840.409590][T25088] hid-generic 0005:0007:0009.0046: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1840.675053][T18741] fido_id[18741]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1840.962417][T18754] Bluetooth: MGMT ver 1.23 [ 1841.062220][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10607'. [ 1841.482454][T18773] netlink: 80 bytes leftover after parsing attributes in process `syz.9.10610'. [ 1841.498997][T18774] bridge_slave_1: left allmulticast mode [ 1841.512175][T18774] bridge_slave_1: left promiscuous mode [ 1841.521780][T18774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.538845][T18774] bridge_slave_0: left allmulticast mode [ 1841.545491][T18774] bridge_slave_0: left promiscuous mode [ 1841.553387][T18774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.854150][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1841.912630][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1841.924432][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1841.958912][T18781] netlink: 'syz.8.10612': attribute type 18 has an invalid length. [ 1842.057319][T18789] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1842.096796][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1842.172372][T18785] netlink: 'syz.8.10612': attribute type 18 has an invalid length. [ 1842.297544][T18802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1842.320491][T18781] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10612'. [ 1842.421103][T14629] netdevsim netdevsim8 €Â: set [0, 1] type 1 family 0 port 4352 - 0 [ 1842.442844][T14629] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1842.466449][T14629] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1842.504490][T14629] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1842.817934][T11930] hid-generic 0005:0007:0009.0047: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1843.316526][T18836] netlink: 'syz.5.10626': attribute type 1 has an invalid length. [ 1845.040224][T11930] hid-generic 0005:0007:0009.0048: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1845.986778][T18917] __nla_validate_parse: 2 callbacks suppressed [ 1845.986798][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10644'. [ 1846.278939][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10644'. [ 1846.498169][T18915] syzkaller0: entered promiscuous mode [ 1846.533366][T18915] syzkaller0: entered allmulticast mode [ 1846.575348][T18918] tipc: Enabled bearer , priority 0 [ 1847.994374][T18968] netlink: 'syz.8.10654': attribute type 1 has an invalid length. [ 1848.026310][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1852.840911][T18907] tipc: Resetting bearer [ 1852.876664][T18907] tipc: Disabling bearer [ 1853.308156][T11930] hid-generic 0005:0007:0009.0049: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1853.349946][T19004] netlink: 'syz.5.10662': attribute type 32 has an invalid length. [ 1853.358349][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10662'. [ 1853.571185][T19004] bond6: Setting coupled_control to off (0) [ 1853.749855][T19020] netlink: 'syz.9.10664': attribute type 1 has an invalid length. [ 1853.835225][T19015] fido_id[19015]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1853.966045][T19020] bond1: entered promiscuous mode [ 1853.986542][T19020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1854.026627][T19031] 8021q: VLANs not supported on vcan0 [ 1854.059238][T19031] netlink: 'syz.3.10666': attribute type 30 has an invalid length. [ 1854.108500][T19029] bond1: (slave veth5): making interface the new active one [ 1854.123001][T19029] veth5: entered promiscuous mode [ 1854.131579][T19029] bond1: (slave veth5): Enslaving as an active interface with an up link [ 1854.245854][T19031] bond5: option arp_missed_max: invalid value (0) [ 1854.255238][T19031] bond5: option arp_missed_max: allowed values 1 - 255 [ 1854.301078][T19031] bond5 (unregistering): Released all slaves [ 1854.380212][T19040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10668'. [ 1854.464918][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10667'. [ 1854.850550][T19056] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10673'. [ 1854.861089][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10673'. [ 1854.871500][T19057] netlink: 160 bytes leftover after parsing attributes in process `syz.8.10673'. [ 1854.874262][T19058] netlink: 'syz.8.10673': attribute type 11 has an invalid length. [ 1854.894670][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10673'. [ 1855.147874][ T29] audit: type=1804 audit(1784085738.566:32): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10676" name="/newroot/331/memory.events" dev="tmpfs" ino=1706 res=1 errno=0 [ 1855.238733][ T29] audit: type=1800 audit(1784085738.606:33): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10676" name="memory.events" dev="tmpfs" ino=1706 res=0 errno=0 [ 1855.351164][ T29] audit: type=1804 audit(1784085738.616:34): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10676" name="/newroot/331/memory.events" dev="tmpfs" ino=1706 res=1 errno=0 [ 1855.376116][T10132] hid-generic 0005:0007:0009.004A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1855.484405][T19076] netlink: 10 bytes leftover after parsing attributes in process `syz.9.10678'. [ 1856.435066][T19111] FAULT_INJECTION: forcing a failure. [ 1856.435066][T19111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.490824][T19111] CPU: 0 UID: 0 PID: 19111 Comm: syz.5.10682 Not tainted syzkaller #0 PREEMPT(full) [ 1856.490855][T19111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1856.490869][T19111] Call Trace: [ 1856.490878][T19111] [ 1856.490888][T19111] dump_stack_lvl+0xe8/0x150 [ 1856.490929][T19111] should_fail_ex+0x40c/0x560 [ 1856.490961][T19111] _copy_from_user+0x2d/0xb0 [ 1856.490996][T19111] do_sock_getsockopt+0x200/0x7e0 [ 1856.491034][T19111] ? __pfx_vfs_write+0x10/0x10 [ 1856.491066][T19111] ? kvm_sched_clock_read+0x11/0x20 [ 1856.491098][T19111] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1856.491129][T19111] ? sched_clock_cpu+0x74/0x440 [ 1856.491191][T19111] __x64_sys_getsockopt+0x1a4/0x240 [ 1856.491233][T19111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.491259][T19111] do_syscall_64+0x174/0x580 [ 1856.491293][T19111] ? clear_bhb_loop+0x40/0x90 [ 1856.491323][T19111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.491346][T19111] RIP: 0033:0x7f6ebb39de59 [ 1856.491366][T19111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.491386][T19111] RSP: 002b:00007f6ebc2d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1856.491410][T19111] RAX: ffffffffffffffda RBX: 00007f6ebb625fa0 RCX: 00007f6ebb39de59 [ 1856.491426][T19111] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1856.491439][T19111] RBP: 00007f6ebc2d0090 R08: 0000200000000240 R09: 0000000000000000 [ 1856.491454][T19111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.491467][T19111] R13: 00007f6ebb626038 R14: 00007f6ebb625fa0 R15: 00007ffe5cd4bc48 [ 1856.491503][T19111] [ 1856.971182][T19130] syzkaller0: entered promiscuous mode [ 1857.386345][T19168] netlink: 'syz.5.10694': attribute type 1 has an invalid length. [ 1857.488102][T19168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1857.506199][T19174] netlink: 'syz.9.10695': attribute type 4 has an invalid length. [ 1857.953213][T11930] hid-generic 0005:0007:0009.004B: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1858.328425][T19209] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10703'. [ 1858.445166][T19210] netlink: 164 bytes leftover after parsing attributes in process `syz.8.10704'. [ 1858.505920][T19210] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10704'. [ 1858.732334][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10707'. [ 1858.863931][T19230] sctp: [Deprecated]: syz.8.10710 (pid 19230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1858.863931][T19230] Use struct sctp_sack_info instead [ 1858.992844][T19235] netlink: 'syz.2.10712': attribute type 16 has an invalid length. [ 1859.000833][T19235] netlink: 'syz.2.10712': attribute type 17 has an invalid length. [ 1859.073004][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10713'. [ 1859.100987][T19235] bridge0: port 3(syz_tun) entered blocking state [ 1859.107581][T19235] bridge0: port 3(syz_tun) entered forwarding state [ 1859.122779][T19235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1859.133365][T19235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1859.175294][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10712'. [ 1859.210789][T19235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1859.302900][T19252] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10718'. [ 1859.463180][T19235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.493870][T19235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.507495][T19235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1859.517890][T19235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1859.532333][T19235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1859.550095][T19239] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1859.556048][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.571734][T14629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1859.584744][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.592062][T14629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1859.625164][T19246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.632613][T19246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.640808][T19246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1859.648237][T19246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.656845][T19246] batman_adv: batadv0: Removing interface: vlan2 [ 1859.778728][ T187] hid-generic 0005:0007:0009.004C: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1859.897411][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10720'. [ 1860.055267][T19273] fido_id[19273]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1860.239806][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1860.331107][T19276] openvswitch: netlink: Message has 4 unknown bytes. [ 1860.337905][T19276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1860.553026][T19295] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.10724'. [ 1861.041124][T11930] hid-generic 0005:0007:0009.004D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1861.146046][T19327] netlink: 'syz.3.10734': attribute type 4 has an invalid length. [ 1861.216231][T19327] netlink: 'syz.3.10734': attribute type 4 has an invalid length. [ 1861.463834][T19334] syzkaller1: entered promiscuous mode [ 1861.487996][T19334] syzkaller1: entered allmulticast mode [ 1862.180396][T19332] lo speed is unknown, defaulting to 1000 [ 1862.323160][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10744'. [ 1862.919652][T25088] hid-generic 0005:0007:0009.004E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1863.201964][T19389] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1863.469937][T19399] __nla_validate_parse: 2 callbacks suppressed [ 1863.469957][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10757'. [ 1863.485663][T19399] netlink: 'syz.3.10757': attribute type 21 has an invalid length. [ 1863.679683][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1863.690132][T19402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1863.875928][T19412] gtp1: entered promiscuous mode [ 1863.880920][T19412] gtp1: entered allmulticast mode [ 1863.887919][T19412] team0: Device gtp1 is of different type [ 1863.998584][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10762'. [ 1864.261342][T19426] sctp: [Deprecated]: syz.2.10763 (pid 19426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1864.261342][T19426] Use struct sctp_sack_info instead [ 1864.327397][T19432] netlink: 'syz.9.10766': attribute type 4 has an invalid length. [ 1864.382107][T19434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.390760][T19434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1864.456347][T19434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.505084][T19434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.515028][T19434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1864.528115][T19434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1864.555949][T19434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1864.585306][T19434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1864.687386][T19446] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10767'. [ 1864.900573][T19424] lo speed is unknown, defaulting to 1000 [ 1865.034856][T25088] hid-generic 0005:0007:0009.004F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1865.211865][T18656] Bluetooth: hci3: command 0x0405 tx timeout [ 1865.382435][ T5628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1865.407007][ T5628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1865.426340][ T5628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1865.444129][ T5628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1865.454797][ T5628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1866.115386][T19505] netlink: 'syz.9.10775': attribute type 4 has an invalid length. [ 1867.379851][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10778'. [ 1867.528038][ T5628] Bluetooth: hci7: command tx timeout [ 1867.692212][T19551] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1867.706436][T19550] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1867.929008][T19562] netlink: 'syz.2.10782': attribute type 3 has an invalid length. [ 1867.942416][T19460] lo speed is unknown, defaulting to 1000 [ 1868.122322][T19568] veth0: entered promiscuous mode [ 1868.160989][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1868.241177][T19568] bond0: (slave bond_slave_1): Releasing backup interface [ 1868.422263][T19575] syzkaller1: entered allmulticast mode [ 1868.429199][T19575] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10785'. [ 1868.453561][T19575] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10785'. [ 1868.521688][T19580] tipc: Enabled bearer , priority 0 [ 1868.539359][T19580] syzkaller0: entered promiscuous mode [ 1868.544922][T19580] syzkaller0: entered allmulticast mode [ 1868.583529][T19566] veth0: left promiscuous mode [ 1868.589478][T19580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10787'. [ 1868.608331][T19580] tipc: Resetting bearer [ 1868.616050][T19460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.616379][T19580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1868.623197][T19460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.623362][T19460] bridge_slave_0: entered allmulticast mode [ 1868.627525][T19460] bridge_slave_0: entered promiscuous mode [ 1868.653635][T19460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.735059][T19460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.742498][T19460] bridge_slave_1: entered allmulticast mode [ 1868.750445][T19460] bridge_slave_1: entered promiscuous mode [ 1868.799052][T19578] tipc: Resetting bearer [ 1868.947106][T19578] tipc: Disabling bearer [ 1869.081767][T19460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.102291][T19460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.201493][T19460] team0: Port device team_slave_0 added [ 1869.223042][T19460] team0: Port device team_slave_1 added [ 1869.296876][T19460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.359301][T19460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.427454][T19460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.440151][T19460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.447131][T19460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.522754][T19460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.616813][ T5628] Bluetooth: hci7: command tx timeout [ 1869.656689][T19460] hsr_slave_0: entered promiscuous mode [ 1869.663390][T19460] hsr_slave_1: entered promiscuous mode [ 1869.669890][T19460] debugfs: 'hsr0' already exists in 'hsr' [ 1869.675658][T19460] Cannot create hsr debugfs directory [ 1869.900593][T19608] netlink: 'syz.9.10793': attribute type 1 has an invalid length. [ 1869.929754][T19608] bond2: entered promiscuous mode [ 1869.935319][T19608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1869.952778][T19608] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10793'. [ 1870.074394][T19611] netlink: 34 bytes leftover after parsing attributes in process `syz.9.10794'. [ 1870.183629][T19460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.196011][T19460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1870.207330][T19460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.413845][T19460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.424237][T19460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1870.434535][T19460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.465650][T19621] geneve2: entered promiscuous mode [ 1870.511447][T12357] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.521610][T12357] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.530377][T12357] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.539119][T12357] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.795652][T19460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.806069][T19460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1870.816396][T19460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.012348][T19460] netdevsim netdevsim8 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1871.023499][T19460] netdevsim netdevsim8 €Â (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1871.035464][T19460] netdevsim netdevsim8 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.712124][ T5628] Bluetooth: hci7: command tx timeout [ 1871.824428][T19656] syzkaller0: entered promiscuous mode [ 1871.831376][T19656] syzkaller0: entered allmulticast mode [ 1873.133548][T19622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1873.148363][T19460] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1873.202746][T19460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1873.285379][T19460] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1873.318107][T19460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1873.373666][T19659] geneve0: entered promiscuous mode [ 1873.380544][T19659] macvlan2: entered promiscuous mode [ 1873.390319][T19460] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1873.424471][T19460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1873.438655][T19460] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1873.468961][T19460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1873.510099][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10809'. [ 1873.595866][T19680] geneve2: entered promiscuous mode [ 1873.611322][T19492] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 47148 - 0 [ 1873.625728][T19492] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 47148 - 0 [ 1873.637185][T19492] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 47148 - 0 [ 1873.648010][T19492] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 47148 - 0 [ 1873.724017][T19460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.744328][T19460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.757922][T12357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.765127][T12357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.789461][ T5628] Bluetooth: hci7: command tx timeout [ 1873.819006][T19491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.826362][T19491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.829855][T19687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10813'. [ 1874.835820][T19726] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1874.972840][T19460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.268151][T19739] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10819'. [ 1875.286896][T19738] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10819'. [ 1875.320945][T19743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10818'. [ 1875.435088][T19743] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1875.664387][T19754] netlink: 'syz.3.10821': attribute type 2 has an invalid length. [ 1876.058766][T19460] veth0_vlan: entered promiscuous mode [ 1876.104103][T19460] veth1_vlan: entered promiscuous mode [ 1876.194490][T19743] lo speed is unknown, defaulting to 1000 [ 1876.230315][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10823'. [ 1876.307040][T19460] veth0_macvtap: entered promiscuous mode [ 1876.391661][T19460] veth1_macvtap: entered promiscuous mode [ 1876.423127][T19460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.441192][T19460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.483773][T19471] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.499130][T19471] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.535026][T19768] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1876.551446][T19471] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.635986][T19471] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.817884][T19781] syz_tun: entered allmulticast mode [ 1876.874561][T19781] syz_tun (unregistering): left allmulticast mode [ 1877.003659][T19472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.017040][T19472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.216982][T19491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.232938][T19491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.518973][T19808] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10771'. [ 1877.579363][T11930] hid-generic 0005:0007:0009.0050: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1877.647713][T19808] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10771'. [ 1877.946664][T19827] netlink: 'syz.8.10835': attribute type 4 has an invalid length. [ 1877.955050][T19827] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10835'. [ 1878.651606][T18656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1878.660970][T18656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1878.669054][T18656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1878.677043][T18656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1878.684702][T18656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1879.173420][T19847] lo speed is unknown, defaulting to 1000 [ 1879.421174][T19847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.428531][T19847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.435727][T19847] bridge_slave_0: entered allmulticast mode [ 1879.443325][T19847] bridge_slave_0: entered promiscuous mode [ 1879.451836][T19847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.458945][T19847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.486646][T19847] bridge_slave_1: entered allmulticast mode [ 1879.494740][T19847] bridge_slave_1: entered promiscuous mode [ 1879.524073][T19847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1879.536605][T19847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.568323][T19847] team0: Port device team_slave_0 added [ 1879.586062][T19847] team0: Port device team_slave_1 added [ 1879.615023][T19847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1879.622009][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.647898][T19847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1879.660202][T19847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1879.667165][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.711820][T19847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1879.758519][T19847] hsr_slave_0: entered promiscuous mode [ 1879.764933][T19847] hsr_slave_1: entered promiscuous mode [ 1879.771082][T19847] debugfs: 'hsr0' already exists in 'hsr' [ 1879.776846][T19847] Cannot create hsr debugfs directory [ 1880.474877][T19800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1880.837268][ T5628] Bluetooth: hci2: command tx timeout [ 1880.894673][T19870] SET target dimension over the limit! [ 1881.206852][T19883] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10848'. [ 1881.278345][T19881] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10849'. [ 1881.335754][T19883] netlink: 'syz.3.10848': attribute type 1 has an invalid length. [ 1881.532158][T19865] lo speed is unknown, defaulting to 1000 [ 1881.631104][T19847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1881.684318][T19847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1881.776311][T19847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1881.808308][T19847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1881.825736][T19847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1881.903101][T19847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1882.009826][T19847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1882.057184][T19847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1882.686475][T19919] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10856'. [ 1882.745190][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10856'. [ 1882.840543][T19847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.888764][ T5628] Bluetooth: hci2: command tx timeout [ 1882.904946][T19847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.179916][T19490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.187142][T19490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.206932][T19472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.214107][T19472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.673237][T19847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.746511][T19847] veth0_vlan: entered promiscuous mode [ 1883.759601][T19847] veth1_vlan: entered promiscuous mode [ 1883.794850][T19847] veth0_macvtap: entered promiscuous mode [ 1883.804832][T19847] veth1_macvtap: entered promiscuous mode [ 1883.842471][T19847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1883.856503][T19847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1883.870955][T12357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.880657][T12357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.892147][T12357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.901978][T12357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.017197][T12357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.034269][T12357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.080307][T19490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.094672][T19490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.326514][T19942] netlink: 'syz.0.10841': attribute type 1 has an invalid length. [ 1884.968396][ T5628] Bluetooth: hci2: command tx timeout [ 1887.048848][ T5628] Bluetooth: hci2: command tx timeout [ 1928.925616][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10860'. [ 1928.981796][T19960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1929.031009][T19953] bond1 (unregistering): Released all slaves [ 1929.043813][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10862'. [ 1929.160743][T19963] bridge_slave_0: left allmulticast mode [ 1929.167025][T19963] bridge_slave_0: left promiscuous mode [ 1929.173479][T19963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.246012][T19963] bridge_slave_1: left allmulticast mode [ 1929.251784][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10860'. [ 1929.265665][T19963] bridge_slave_1: left promiscuous mode [ 1929.272722][T19963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.298626][T19963] bond0: (slave bond_slave_0): Releasing backup interface [ 1929.331576][T19963] bond0: (slave bond_slave_1): Releasing backup interface [ 1929.356085][T19963] team0: Port device team_slave_0 removed [ 1929.369147][T19963] team0: Port device team_slave_1 removed [ 1929.375897][T19963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1929.383350][T19963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1929.392390][T19963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1929.399877][T19963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1929.409150][T19963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1929.526517][T19964] erspan0: entered promiscuous mode [ 1929.533213][T19964] macvtap1: entered promiscuous mode [ 1929.581579][T19964] macvtap1: entered allmulticast mode [ 1929.587048][T19964] erspan0: entered allmulticast mode [ 1929.619401][T19967] team0: Mode changed to "loadbalance" [ 1929.649219][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10863'. [ 1929.675968][T19971] erspan0: left allmulticast mode [ 1929.682561][T19971] erspan0: left promiscuous mode [ 1929.693919][T19971] macvtap1: left promiscuous mode [ 1929.699830][T19971] macvtap1: left allmulticast mode [ 1929.796473][T19982] netlink: 'syz.2.10865': attribute type 16 has an invalid length. [ 1929.825143][T19982] netlink: 'syz.2.10865': attribute type 17 has an invalid length. [ 1929.851029][T19987] netlink: 'syz.2.10865': attribute type 1 has an invalid length. [ 1929.968505][T19982] veth1_vlan: left promiscuous mode [ 1929.993066][T19982] veth0_vlan: left promiscuous mode [ 1930.002894][T19982] veth0_vlan: entered promiscuous mode [ 1930.029555][T19982] veth1_vlan: entered promiscuous mode [ 1930.042366][T19982] veth1_macvtap: left promiscuous mode [ 1930.050637][T19982] veth0_macvtap: left promiscuous mode [ 1930.057602][T19982] veth0_macvtap: entered promiscuous mode [ 1930.065907][T19982] veth1_macvtap: entered promiscuous mode [ 1930.089910][T19982] 8021q: adding VLAN 0 to HW filter on device €Â [ 1930.100951][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1930.112667][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1930.148182][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1930.220455][T19982] bridge8: port 1(erspan0) entered blocking state [ 1930.227124][T19982] bridge8: port 1(erspan0) entered forwarding state [ 1930.308782][T19982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1930.369954][T19982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1930.388868][T19982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1930.406426][T19982] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1930.439157][T20000] netlink: 'syz.9.10867': attribute type 4 has an invalid length. [ 1930.447036][T20000] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10867'. [ 1930.478123][T20000] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10867'. [ 1930.596415][T19987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1930.692552][T14614] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.745137][T19990] bond4: (slave geneve3): making interface the new active one [ 1930.784937][T19990] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1930.810175][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10867'. [ 1930.895255][T14619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.904062][T14619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.912814][T14619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.280763][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10873'. [ 1931.342632][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10874'. [ 1931.545231][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10876'. [ 1931.767001][T20051] syzkaller1: entered promiscuous mode [ 1931.772686][T20051] syzkaller1: entered allmulticast mode [ 1931.998248][T20057] syzkaller0: entered promiscuous mode [ 1932.003800][T20057] syzkaller0: entered allmulticast mode [ 1932.039044][T20058] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1932.842324][T20067] xt_hashlimit: size too large, truncated to 1048576 [ 1934.274805][T20028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1934.459771][T20088] xt_hashlimit: size too large, truncated to 1048576 [ 1934.581809][T20099] xt_hashlimit: size too large, truncated to 1048576 [ 1934.708182][T20105] openvswitch: netlink: Message has 8 unknown bytes. [ 1934.715046][T20105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1935.032925][T20103] __nla_validate_parse: 3 callbacks suppressed [ 1935.032948][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10888'. [ 1935.139074][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10888'. [ 1935.837087][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10897'. [ 1935.918257][T20124] syzkaller0: entered promiscuous mode [ 1935.923806][T20124] syzkaller0: entered allmulticast mode [ 1935.939370][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10898'. [ 1936.302780][T20124] bridge8: port 1(erspan0) entered disabled state [ 1936.650317][T20159] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10902'. [ 1936.809774][T20124] bridge0: port 3(syz_tun) entered disabled state [ 1936.832877][T20124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.840651][T20124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.964078][T14619] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.972945][T14619] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.981882][T14619] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.038661][T14619] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.309238][T20187] IPv6: NLM_F_CREATE should be specified when creating new route [ 1938.583563][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10914'. [ 1938.596350][T20198] IPv6: addrconf: prefix option has invalid lifetime [ 1938.606649][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10915'. [ 1938.615681][T20197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10915'. [ 1938.824616][T20200] bond4: entered promiscuous mode [ 1938.832717][T20200] bond4: entered allmulticast mode [ 1938.838387][T20200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1938.858193][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10918'. [ 1938.908850][T20210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10918'. [ 1939.142100][T20218] syzkaller0: entered promiscuous mode [ 1939.147654][T20218] syzkaller0: entered allmulticast mode [ 1939.363174][T20230] netlink: 'syz.9.10925': attribute type 11 has an invalid length. [ 1939.374411][T20230] netlink: 'syz.9.10925': attribute type 4 has an invalid length. [ 1939.858951][T20250] xt_ecn: cannot match TCP bits for non-tcp packets [ 1940.180539][T20260] __nla_validate_parse: 4 callbacks suppressed [ 1940.180560][T20260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10935'. [ 1941.144686][T20275] x_tables: duplicate underflow at hook 3 [ 1941.690006][T20282] bond0: (slave ip6tnl0): refused to change device type [ 1942.250719][T20289] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1942.820224][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10946'. [ 1942.987465][T20299] netlink: 'syz.9.10948': attribute type 4 has an invalid length. [ 1943.078702][T20310] netlink: 'syz.9.10951': attribute type 2 has an invalid length. [ 1943.162860][T20310] syzkaller0: entered promiscuous mode [ 1943.169596][T20310] syzkaller0: entered allmulticast mode [ 1943.226896][T20315] netlink: 'syz.0.10949': attribute type 9 has an invalid length. [ 1943.465649][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10954'. [ 1943.475777][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10954'. [ 1947.513532][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10964'. [ 1947.583845][T20369] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 1947.624618][T20373] syzkaller0: entered promiscuous mode [ 1947.630731][T20373] syzkaller0: entered allmulticast mode [ 1948.370002][ T3405] block nbd19: Receive control failed (result -32) [ 1948.388431][ T5628] block nbd19: Receive control failed (result -32) [ 1948.402845][T18656] block nbd19: Receive control failed (result -32) [ 1948.991041][T20409] netlink: 'syz.8.10976': attribute type 1 has an invalid length. [ 1949.062466][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10976'. [ 1949.071518][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10976'. [ 1949.481056][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10981'. [ 1950.310850][T20447] syzkaller0: entered promiscuous mode [ 1950.316403][T20447] syzkaller0: entered allmulticast mode [ 1951.578417][ T5628] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1951.589645][ T5628] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1951.634681][ T5628] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1951.642737][ T5628] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1951.669025][ T5628] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1953.778999][T18656] Bluetooth: hci8: command tx timeout [ 1955.848699][T18656] Bluetooth: hci8: command tx timeout [ 1956.121430][T20516] syzkaller0: entered promiscuous mode [ 1956.146297][T20516] syzkaller0: entered allmulticast mode [ 1956.153388][T20528] can: request_module (can-proto-0) failed. [ 1957.928462][T18656] Bluetooth: hci8: command tx timeout [ 1960.021880][T18656] Bluetooth: hci8: command tx timeout [ 1960.442317][T20537] kthread_run failed with err -4 [ 1960.551535][T20123] syz_tun (unregistering): left allmulticast mode [ 1960.558074][T20123] syz_tun (unregistering): left promiscuous mode [ 1960.564654][T20123] bridge0: port 3(syz_tun) entered disabled state [ 1961.050461][T20562] netlink: 'syz.8.11002': attribute type 4 has an invalid length. [ 1961.075898][T20562] netlink: 17 bytes leftover after parsing attributes in process `syz.8.11002'. [ 1961.335075][T20476] lo speed is unknown, defaulting to 1000 [ 1961.998873][T20593] sctp: [Deprecated]: syz.3.11010 (pid 20593) Use of int in max_burst socket option deprecated. [ 1961.998873][T20593] Use struct sctp_assoc_value instead [ 1962.022458][T20476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.029755][T20476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.037759][T20476] bridge_slave_0: entered allmulticast mode [ 1962.045868][T20476] bridge_slave_0: entered promiscuous mode [ 1962.055727][T20476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.107533][T20476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.114859][T20476] bridge_slave_1: entered allmulticast mode [ 1962.122822][T20476] bridge_slave_1: entered promiscuous mode [ 1962.166742][T20476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1962.212337][T20476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1962.271160][T20476] team0: Port device team_slave_0 added [ 1962.279664][T20476] team0: Port device team_slave_1 added [ 1962.320531][T20476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.327528][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.353960][T20476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.366751][T20476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.373735][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.406572][T20605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1962.406729][T20605] IPv6: NLM_F_CREATE should be set when creating new route [ 1962.410227][T20605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1962.442859][T20476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.498474][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11013'. [ 1962.508484][T20607] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1962.536173][T20476] hsr_slave_0: entered promiscuous mode [ 1962.545093][T20476] hsr_slave_1: entered promiscuous mode [ 1962.545410][T20607] ipt_ECN: cannot use operation on non-tcp rule [ 1962.554608][T20476] debugfs: 'hsr0' already exists in 'hsr' [ 1962.563350][T20476] Cannot create hsr debugfs directory [ 1962.954048][T20476] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1962.998637][T20476] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1963.603991][T20644] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11019'. [ 1963.811099][T20653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11022'. [ 1964.063606][T20476] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.073551][T20476] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1964.187166][T20656] syzkaller0: entered promiscuous mode [ 1964.193165][T20656] syzkaller0: entered allmulticast mode [ 1964.216838][T20655] tipc: Enabling of bearer rejected, failed to enable media [ 1964.239314][T20661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11023'. [ 1964.316225][T20662] netlink: 'syz.0.11023': attribute type 3 has an invalid length. [ 1964.583565][T20476] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.598596][T20476] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1964.634746][T20670] bridge0: port 1(syz_tun) entered blocking state [ 1964.641428][T20670] bridge0: port 1(syz_tun) entered disabled state [ 1964.696087][T20670] syz_tun: entered allmulticast mode [ 1964.738319][T20670] syz_tun: entered promiscuous mode [ 1964.938498][T20476] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.958805][T20476] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1965.293639][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11028'. [ 1965.533927][T20710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1965.597763][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1965.606815][T20710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1965.639500][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1965.874705][T20476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1965.925730][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1965.935903][T20476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1965.951781][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1965.960914][T20476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1965.972884][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1965.981176][T20476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1966.006370][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1966.140630][T20476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1966.163931][T20476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1966.180170][T14614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.187359][T14614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.207264][T14614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.214525][T14614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1966.765859][T20476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1967.086364][T20476] veth0_vlan: entered promiscuous mode [ 1967.100052][T20476] veth1_vlan: entered promiscuous mode [ 1967.184103][T20476] veth0_macvtap: entered promiscuous mode [ 1967.203388][T20476] veth1_macvtap: entered promiscuous mode [ 1967.269862][T20476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1967.306879][T20476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1967.325205][T19472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.346172][T19472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.375341][T19471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.391022][T14614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.505428][T19489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.513393][T19489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.588733][T19489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.596958][T19489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.658424][T20780] __nla_validate_parse: 3 callbacks suppressed [ 1967.658446][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10992'. [ 1988.422517][ T5628] Bluetooth: hci3: command 0x0405 tx timeout [ 2003.687747][T20376] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.691358][ T3405] Bluetooth: hci7: command 0x0406 tx timeout [ 2022.104411][ T30] INFO: task syz.5.10756:19397 blocked for more than 143 seconds. [ 2022.114571][ T30] Not tainted syzkaller #0 [ 2022.120496][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2022.130726][ T30] task:syz.5.10756 state:D stack:27528 pid:19397 tgid:19396 ppid:15065 task_flags:0x400140 flags:0x00080002 [ 2022.143129][ T30] Call Trace: [ 2022.146500][ T30] [ 2022.149933][ T30] __schedule+0x17d9/0x56c0 [ 2022.154510][ T30] ? __lock_acquire+0x683/0x2cf0 [ 2022.159789][ T30] ? __lock_acquire+0x683/0x2cf0 [ 2022.164788][ T30] ? __pfx___schedule+0x10/0x10 [ 2022.169667][ T30] ? schedule+0x90/0x2b0 [ 2022.173954][ T30] schedule+0x164/0x2b0 [ 2022.178132][ T30] schedule_preempt_disabled+0x13/0x30 [ 2022.183631][ T30] __mutex_lock+0x7bf/0x1550 [ 2022.188276][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2022.193087][ T30] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 2022.198868][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2022.203940][ T30] ? __nlmsg_put+0xef/0x1b0 [ 2022.208561][ T30] ? genlmsg_put+0x137/0x2e0 [ 2022.213280][ T30] nfsd_nl_version_get_doit+0x17c/0xd20 [ 2022.218939][ T30] ? __nla_parse+0x40/0x60 [ 2022.223429][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 2022.229557][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2022.248631][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2022.255109][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 2022.260675][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2022.266758][ T30] ? __lock_acquire+0x683/0x2cf0 [ 2022.271752][ T30] genl_rcv_msg+0x614/0x7a0 [ 2022.276273][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2022.281319][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 2022.287430][ T30] netlink_rcv_skb+0x226/0x4a0 [ 2022.292210][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2022.297251][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2022.302575][ T30] ? down_read+0x2be/0x330 [ 2022.307024][ T30] genl_rcv+0x28/0x40 [ 2022.311029][ T30] netlink_unicast+0x7bb/0x940 [ 2022.315843][ T30] netlink_sendmsg+0x813/0xb40 [ 2022.320640][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.325976][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2022.331005][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.336340][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 2022.341392][ T30] ____sys_sendmsg+0x54e/0x850 [ 2022.357990][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2022.363353][ T30] ? import_iovec+0x73/0xa0 [ 2022.367988][ T30] ___sys_sendmsg+0x2a5/0x360 [ 2022.372731][ T30] ? __lock_acquire+0x683/0x2cf0 [ 2022.377695][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 2022.382933][ T30] ? futex_wait+0x2a2/0x390 [ 2022.387487][ T30] ? __fget_files+0x2a/0x420 [ 2022.392131][ T30] ? __fget_files+0x3a2/0x420 [ 2022.396846][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 2022.401841][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2022.407366][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.413466][ T30] do_syscall_64+0x174/0x580 [ 2022.418111][ T30] ? trace_irq_disable+0x3b/0x140 [ 2022.423170][ T30] ? clear_bhb_loop+0x40/0x90 [ 2022.427883][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.433815][ T30] RIP: 0033:0x7f6ebb39de59 [ 2022.438257][ T30] RSP: 002b:00007f6ebc2d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2022.446708][ T30] RAX: ffffffffffffffda RBX: 00007f6ebb625fa0 RCX: 00007f6ebb39de59 [ 2022.454703][ T30] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 2022.474372][ T30] RBP: 00007f6ebb433e6f R08: 0000000000000000 R09: 0000000000000000 [ 2022.482778][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2022.491071][ T30] R13: 00007f6ebb626038 R14: 00007f6ebb625fa0 R15: 00007ffe5cd4bc48 [ 2022.499103][ T30] [ 2022.502228][ T30] [ 2022.502228][ T30] Showing all locks held in the system: [ 2022.509956][ T30] 1 lock held by khungtaskd/30: [ 2022.514808][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2022.524725][ T30] 2 locks held by getty/5375: [ 2022.530233][ T30] #0: ffff8880364110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2022.540328][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2022.551869][ T30] 2 locks held by syz.6.9869/15741: [ 2022.557082][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2022.565690][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 2022.587040][ T30] 2 locks held by syz.5.10756/19397: [ 2022.592512][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2022.601447][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 2022.612235][ T30] [ 2022.614571][ T30] ============================================= [ 2022.614571][ T30] [ 2022.622989][ T30] NMI backtrace for cpu 0 [ 2022.623002][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2022.623021][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2022.623031][ T30] Call Trace: [ 2022.623039][ T30] [ 2022.623047][ T30] dump_stack_lvl+0xe8/0x150 [ 2022.623078][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2022.623161][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2022.623184][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2022.623204][ T30] sys_info+0x135/0x170 [ 2022.623220][ T30] watchdog+0xfd7/0x1030 [ 2022.623243][ T30] ? watchdog+0x1c7/0x1030 [ 2022.623265][ T30] kthread+0x388/0x470 [ 2022.623286][ T30] ? __pfx_watchdog+0x10/0x10 [ 2022.623301][ T30] ? __pfx_kthread+0x10/0x10 [ 2022.623322][ T30] ret_from_fork+0x514/0xb70 [ 2022.623345][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2022.623365][ T30] ? __switch_to+0xc89/0x1420 [ 2022.623385][ T30] ? __pfx_kthread+0x10/0x10 [ 2022.623405][ T30] ret_from_fork_asm+0x1a/0x30 [ 2022.623431][ T30] [ 2022.623436][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2022.743535][ C1] NMI backtrace for cpu 1 [ 2022.743551][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2022.743570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2022.743582][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2022.743612][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2022.743628][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 2022.743644][ C1] RAX: 00000000007ae3f1 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 2022.743656][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba3a RDI: ffffffff8c4bd380 [ 2022.743669][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 2022.743688][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 2022.743701][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 2022.743715][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 2022.743729][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2022.743742][ C1] CR2: 000055f9555f5168 CR3: 0000000026816000 CR4: 00000000003526f0 [ 2022.743757][ C1] Call Trace: [ 2022.743764][ C1] [ 2022.743771][ C1] default_idle+0x9/0x20 [ 2022.743788][ C1] default_idle_call+0x72/0xb0 [ 2022.743806][ C1] do_idle+0x2e0/0x540 [ 2022.743831][ C1] ? __pfx_do_idle+0x10/0x10 [ 2022.743853][ C1] ? do_idle+0x4cb/0x540 [ 2022.743878][ C1] cpu_startup_entry+0x43/0x60 [ 2022.743900][ C1] start_secondary+0x101/0x110 [ 2022.743923][ C1] common_startup_64+0x13e/0x157 [ 2022.743952][ C1] [ 2022.938900][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2022.945821][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2022.954966][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2022.965069][ T30] Call Trace: [ 2022.968377][ T30] [ 2022.971336][ T30] vpanic+0x56c/0xa60 [ 2022.975361][ T30] ? __pfx___schedule+0x10/0x10 [ 2022.980256][ T30] ? __pfx_vpanic+0x10/0x10 [ 2022.984801][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2022.991008][ T30] panic+0xc5/0xd0 [ 2022.994780][ T30] ? __pfx_panic+0x10/0x10 [ 2022.999251][ T30] ? preempt_schedule_common+0x82/0xd0 [ 2023.004748][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 2023.010165][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2023.016372][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2023.022564][ T30] watchdog+0x1030/0x1030 [ 2023.026944][ T30] ? watchdog+0x1c7/0x1030 [ 2023.031410][ T30] kthread+0x388/0x470 [ 2023.035525][ T30] ? __pfx_watchdog+0x10/0x10 [ 2023.040238][ T30] ? __pfx_kthread+0x10/0x10 [ 2023.044874][ T30] ret_from_fork+0x514/0xb70 [ 2023.049501][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2023.054652][ T30] ? __switch_to+0xc89/0x1420 [ 2023.059349][ T30] ? __pfx_kthread+0x10/0x10 [ 2023.063975][ T30] ret_from_fork_asm+0x1a/0x30 [ 2023.068779][ T30] [ 2023.072436][ T30] Kernel Offset: disabled [ 2023.076801][ T30] Rebooting in 86400 seconds..