last executing test programs: 5m9.425946011s ago: executing program 0 (id=12459): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000280)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfffffffe) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x3d, 0x8, 0x70bd2b, 0x25dfdbfb, {0xd}, [@generic="cbe3c23677b5e8fead4a64cab3f6c5508b80ac986241608262c39d4fd72a50ddfc88456b661c7aeb5b1add59c424acb556d735c5c2f2e3d8a505f49338770197325412cc4038159a", @typed={0x8, 0x137, 0x0, 0x0, @pid=r2}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r3}, @nested={0x41, 0x52, 0x0, 0x1, [@typed={0x5, 0xec, 0x0, 0x0, @str='\x00'}, @generic="41a812f99e76c696fcd696ee4763aa0c765da25411e8bb6dad3fcd5727ccc8476e92bced30dd07f1210acaebb63ffc1fbb9588b732"]}, @nested={0x20, 0x8a, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x3c}, @nested={0x4, 0x111}, @nested={0x4, 0x4}, @nested={0x4, 0x119}, @nested={0x4, 0x121}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20041}, 0x48000) syz_emit_ethernet(0x84, &(0x7f00000001c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x0, [], "1f33"}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 5m8.966342281s ago: executing program 0 (id=12464): r0 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, 0x0, 0x40) pipe(&(0x7f0000000500)={0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xf}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x4000010) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) splice(r3, 0x0, r1, 0x0, 0x3ffff9, 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) close(0x3) 5m8.716365176s ago: executing program 0 (id=12467): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000140)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x2000, 0x21}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 5m8.543145526s ago: executing program 0 (id=12472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0xf4, 0x31, 0x24, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) 5m8.343538042s ago: executing program 0 (id=12476): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd2}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xe5, &(0x7f00000005c0)=""/229, 0x41000, 0x8}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000000)='\x00', 0x129000, &(0x7f0000000040)={@align=0xffffffffffff580e, {0x2, 0x7, 0x200, 0x81}}, 0x2, 0x0, &(0x7f0000000240)=0xfffff800}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x43faff3d, 0x10}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x4000004a}}, 0x9, 0x2, 0x800, 0xe6a3, 0xe9}, &(0x7f0000000180)=0x98) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000580)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000b5d01b0d354a48f6dc07aa2d4fc6914fd568e64c04f73ebd5a244fabeffab8a30f617457cc6f", @ANYRES16=r3, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180040003000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000740)='cgroup.events\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8983, &(0x7f0000000040)="000000006574683000000000000000000000000000000000000300"/52) ioctl(0xffffffffffffffff, 0x8983, &(0x7f0000000080)="01000000657468302e3000"/20) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xf, 0xffff}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xff}}]}, 0x2c}}, 0x20001045) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000006c0)={{r0, &(0x7f0000000440)='/\x00', 0x2000, &(0x7f0000000480)={@_ha_fsid={[0x3ff, 0x2]}, {0x3, 0x3, 0x9, 0xd0c}}, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0xfffffffe}, {[0x2, 0x1, 0xffff, 0x77]}, 0x8, 0x29, &(0x7f0000000540)=""/41}) 5m7.806493935s ago: executing program 0 (id=12479): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0xc5, 0x100, @void}, "1b5dda89"}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 4m52.687810931s ago: executing program 32 (id=12479): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0xc5, 0x100, @void}, "1b5dda89"}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 2m30.305857939s ago: executing program 2 (id=13611): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f00000002c0)=0x8) r2 = socket(0x200000000000011, 0x2, 0xd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x3e, 0x0, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0xfffd, 0x3}, 0xfffffffffffffe2d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r3, &(0x7f0000001a00)=[{&(0x7f00000003c0)="b92d53a437bb9db1a94b196f5e0cc947d07b82ffff5e22b0fc4569b697db8acee1a255b8889c6e956ac3e9f678a6fc17582d1442d2eafc09a9c6c08f1d2ded94c7dae5ba1016db5b59321640ee6ab320217ac16c75887fc6762d91fe487f18f61e0dde5f314eda69d4ba44c09bd79ff0e770ffa5a70511d96482877afc2d49310c6343ce7de12c362885b10b90f6b32edd3b489271670fd181aa32e88fb550414c48dd978c7b71b4b4b7c7c2202e5385205a62ffc98ada65a33e49d1b77040a5d931ebca79abe467d92e47712b9019f3f4", 0xd1}, {&(0x7f0000000500)="24b25743bf539b31a3660f0a2ad4fcc731723dd008d32d4c62d6", 0x1a}, {&(0x7f0000000540)="b63f710fe2f6da3142ca421e18ff201f4c6b8b08badc6f7157643e6dc698dcafb758e279211230", 0x27}, {&(0x7f00000005c0)="231509be4e19e8dc8e84a30b64e7252273956950e8697bacdd706ebe3a336721ded1e32b5dac414b6b0386efd3a2e027134a13b8f5b960ebc0ad989b334000d1b05e63f5fd4770f7e00dc8e43c8315a893eb99ea7d35fe847b664f9579043f1a70cca4155424aa5ad1cd84cd6ab2f9106644b52b13fbf1dfd32bba3d6cbe6cbcc2711ffbd89bf2d8", 0x88}, {&(0x7f0000001740)="614c3259cf188b532db89dec155603430228b8b4076c3bc94edc1162c10468f5ef726bd79d6d7da26ba2026b450776c13311ab5dc89973132125b9eae95ac46eb5c768af12b630c140f11f5ebf924bd86b3eb2ef7382edb523c5bed0c962268c3dfe1079d70c41f604d9516e0f2ec60a870df73ac5b1306978ccae47f622340e4de07cd86ee36eb9cc662b82592f88bd6368286af474a0ab4cd9f56c9f4cbaba05f42c8c8189cbf9ffe0139bdf21c1c20cca8514f01fcbffe471230d05227b4a4a457e596f30bc28aac679ca6ff73f2f79e081ec", 0xd4}, {&(0x7f0000001840)="7668cb1f8ab60c17d5e5ff3cee359217c9bc6e8238ed2cbbc98d773173882d94314af2eee0abefea0716979ed4acaa2c253f1d525d5f4ea4079bd779c4581798a4494cc57c4b47a4deacd6e2fc75a344daba354d110768097acf54f4f2529a9bc7d47805453ac2e9a2f85b975d68", 0x6e}, {&(0x7f00000018c0)="42fe61027d5ac2d44037729b98a26b81038c39fdf54b0ebd8c1ff57ab193b0413b431f20d093ec", 0x27}, {&(0x7f0000001900)="3c594b8f7c819bdd0a3d3988d9ab72613b3eabf141495c6cbccf621bd48b520c331709114a7ec4f73b274a8ba2c58d6b3c56b6564b7103738f35deae2eb0943636f7cfa0a1cb191f2d7f26e8dc9e317d22ea535ee663dc94287bef7f438e7b8e24077d84397a77c4af5658f39b4a946105a36060a9bf5ed147cc67267bd50f18675ecc0776422669afcea3f0b3aa9c30575887d3414c260353d9a15888863a57976f850b0d2222878d4a3d6c1688431eec215744b082227f4a49f7b2973957b115fd6d4248592edfe0a7e2d4edd7e5824d05599650c7dacf69e419667d270eb7", 0xe0}], 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000300)={@mcast1}, &(0x7f0000000280)=0x14) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfce) shutdown(r2, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xf, 0x4) unshare(0x2a060400) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x19b341, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f00000000c0)=0x5) 2m28.752656597s ago: executing program 2 (id=13626): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5202}, [@IFLA_MTU={0x8, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newnexthop={0x38, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}, @NHA_GROUP={0xc, 0x2, [{0x0, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x810) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0xc0040) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) r7 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbfb, {0x20}, [@typed={0x8, 0x117, 0x0, 0x0, @ipv4=@local}]}, 0x1c}}, 0x20000054) 2m28.090636493s ago: executing program 2 (id=13637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r6, r7, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r5}, 0x20) sendto(r5, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000001280), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x88, r12, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="558d", 0x2}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 2m27.689743176s ago: executing program 2 (id=13643): syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800452000600000000000019038ac1e0001ac1414bb0b009078033700004100000000000000008900000a010101ac1414aa862300000002060d5ee1fffffe000000f5870000050404a6000b00060200b71ef91964070b0764010101e00000010000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2m27.043044223s ago: executing program 2 (id=13648): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'gre0\x00', 0x8}) unshare(0x22020600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xdc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="b85681078e2242053639d6919752e41cf34c8a7d3a186e110cf6e438bcf322ed29e5b55fde3c076f25bb3c155aefebfdef4d53e5461e94e633ae5883a1d89acd415bd170dd"], 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="3300000008000601010000030001", 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000040c0)=0xb, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000000080)={0xd, 0x2}) 2m26.926499215s ago: executing program 2 (id=13652): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000c00)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000c40)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0xfffffffffffffff6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) unshare(0x20000400) r5 = epoll_create(0x3ff) epoll_pwait(r5, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0xd8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 2m11.862659135s ago: executing program 33 (id=13652): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000c00)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000c40)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0xfffffffffffffff6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) unshare(0x20000400) r5 = epoll_create(0x3ff) epoll_pwait(r5, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0xd8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 2m0.800417638s ago: executing program 4 (id=13863): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0xa, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) socket(0xa, 0x3, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) 1m59.750927782s ago: executing program 4 (id=13870): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xa, 0xe}, {0x10, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x3c}}, 0x20004015) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000001000000000000c500000000850000002f000000850000000e00000095000000000000003c701a762cd4a5230980cdac909961aa8718b58ad5ce37bdc1c181c891a699128d25f60729ed3d88105199b7378df0c960a4a1ba9ad8b6a92c62376c7e4e798fdb7857bebab479fa003a2eda2b3fe79fe52b23c4938fb411a37f3e634e13d15e2fb56c2783192d0a970d3d650d38fbeebb656198c8ef3bc4e85d4f47b4745fe3352894ed9c6ee6e222bdfc04c9b149"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002040), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x18090) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0xfffffffffffffe31, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x80}, 0x0, 0x4, 0x0, 0xed}]}]}, 0xfc}}, 0x0) connect$inet(r10, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1m58.897490911s ago: executing program 4 (id=13877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x13c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m58.530824309s ago: executing program 4 (id=13883): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x4, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp6={0xa, 0x0, 0xf, @loopback, 0x7fffffff, 0x4}, {&(0x7f0000000080)=""/150, 0x96}, &(0x7f0000000140), 0xb}, 0xa0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000), 0xcd, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x20) 1m58.321524587s ago: executing program 4 (id=13885): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40814}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000003000000040000000100000000000000", @ANYRES32, @ANYBLOB="d0b500a7c92e92382ae500"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x768, 0x0, 0x560, 0x0, 0x208, 0x208, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x5, 0x5], 0x9, 0x2, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @private1, @loopback], 0x10}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3a}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x1}, {0x1, 0x1, 0x3}, {0x4, 0x1, 0x4}, 0xffffffff, 0xa}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0x1ff000001, 0x0, 0xffffffff], 'ipvlan0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x32, 0x4, 0x1, 0x4a}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0xfffffff7, @ipv6=@private1, 0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38, 0x2b, 0x6}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'vlan1\x00', 'netdevsim0\x00', {}, {0xff}, 0x87, 0xff, 0x5, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x79a4, 0x4, 0x0, [0x0, 0x2, 0xfffe, 0x62ea, 0x26, 0x0, 0x0, 0x4, 0x3, 0x800, 0xb2, 0x2, 0xff, 0x94, 0xd, 0x18], 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast2, 0x3e, 0x2c, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2], 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r7, 0x6}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)="000000000000000002", 0x0}, 0x50) 1m58.112198869s ago: executing program 4 (id=13888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xf}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5becf369}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35ab4418}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1126c2b6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x5, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x12c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000027000100fdff0700001000000e00000056c6412416e1faa5827fc78abd35c42db3badfd05fde0b9b6bf54ea9b744a327959cd121304b81ea3e30ef44179ee05e7f4add1df0c513a899b9473f46fa8f8ea5b3492d270ccd556fe4830776c4e9e89e3987444a3ed2af498ad1ce0b55dc569451d43b98be37f3eff0383a2fef515234a2ef151b2b62395ba0d8eb88fbd93b3f40d10b3bd89b0bda57800de0c38c3b2a16855bc172834a967afaacc93d5c5952abcc92970d"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="140100002300010003000000fcdbdf250101f2800f0018007d3a2e9c5bc85c23277d0000140002000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0de2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0be816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3580400e900"/264], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="c4000000190001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000000000000100000000a00200011000000884dab4a928db2ed3b6e8f88fa7deffa1f01a6ce702af53730b991af3c8035fdc3500dad6e7eb9a42f70474c0851fc4b8df9a53952463912ef4e5fa2f3a78d0fbd14a3350fe9c7ba5115aeb5a821dee1fd15865b31169d035fed342b26e2e20e43b738e62825a802a2157a5e624c1334485eedd1308bb5f1c6374577b59bbd52ded292", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400000000000000000000000000004000000000000000000a0010000100000000000000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000f6d40000000000000000000000000fff00000a00200000000000000000004c1dfc87e416128f532d824c2caea96f3570026a27f28b7a2837550d8ba612", @ANYBLOB="050392dffa20871a032ae240eb9c8838fdc8e7724f68cea79a0014e651945347105d5c727d4f73b309ff72dacfa90407a5148b2ce5d199063dfe29e4453842e1906134362aaafeade2dad57812d1e117afd7c91b9b91a338f06fe2505703ab4810c21ec0f1e867337d79f95ee9c7c2d9f9a4fbbb30a686a477d22a2382f368735000fc86f3a772d5bf75fa1b4375254fc851d152e6bf315ae5a47a5b8c18e099c8a7ec1ea94d4d0d14a6bca9", @ANYRES64=r4, @ANYRES32=r7], 0xb8}, 0x1, 0x0, 0x0, 0x4825}, 0x987a3a9f32358acd) 1m43.010422367s ago: executing program 34 (id=13888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xf}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5becf369}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35ab4418}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1126c2b6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x5, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x12c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000027000100fdff0700001000000e00000056c6412416e1faa5827fc78abd35c42db3badfd05fde0b9b6bf54ea9b744a327959cd121304b81ea3e30ef44179ee05e7f4add1df0c513a899b9473f46fa8f8ea5b3492d270ccd556fe4830776c4e9e89e3987444a3ed2af498ad1ce0b55dc569451d43b98be37f3eff0383a2fef515234a2ef151b2b62395ba0d8eb88fbd93b3f40d10b3bd89b0bda57800de0c38c3b2a16855bc172834a967afaacc93d5c5952abcc92970d"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="140100002300010003000000fcdbdf250101f2800f0018007d3a2e9c5bc85c23277d0000140002000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0de2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0be816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3580400e900"/264], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="c4000000190001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000000000000100000000a00200011000000884dab4a928db2ed3b6e8f88fa7deffa1f01a6ce702af53730b991af3c8035fdc3500dad6e7eb9a42f70474c0851fc4b8df9a53952463912ef4e5fa2f3a78d0fbd14a3350fe9c7ba5115aeb5a821dee1fd15865b31169d035fed342b26e2e20e43b738e62825a802a2157a5e624c1334485eedd1308bb5f1c6374577b59bbd52ded292", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400000000000000000000000000004000000000000000000a0010000100000000000000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000f6d40000000000000000000000000fff00000a00200000000000000000004c1dfc87e416128f532d824c2caea96f3570026a27f28b7a2837550d8ba612", @ANYBLOB="050392dffa20871a032ae240eb9c8838fdc8e7724f68cea79a0014e651945347105d5c727d4f73b309ff72dacfa90407a5148b2ce5d199063dfe29e4453842e1906134362aaafeade2dad57812d1e117afd7c91b9b91a338f06fe2505703ab4810c21ec0f1e867337d79f95ee9c7c2d9f9a4fbbb30a686a477d22a2382f368735000fc86f3a772d5bf75fa1b4375254fc851d152e6bf315ae5a47a5b8c18e099c8a7ec1ea94d4d0d14a6bca9", @ANYRES64=r4, @ANYRES32=r7], 0xb8}, 0x1, 0x0, 0x0, 0x4825}, 0x987a3a9f32358acd) 28.590301135s ago: executing program 1 (id=14670): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000018010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 28.208036853s ago: executing program 1 (id=14672): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffcfc, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffff8}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x7ffffffd, 0x4) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x1, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706"}, {0x3, 0xb, "17dc3546805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084713475671545e65eb2e9ac946a3f0e2bc4619f91394c03bcfbbb7d71138537d68e2de66393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000040) write(r3, &(0x7f0000000000)="01", 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xc, 0x0, &(0x7f0000000280)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 27.350435893s ago: executing program 1 (id=14678): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180078de00000081000000000400000091104d00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9a000000d37e583c00010324bdc4f9ff30cfb66ae1ab20eaeb69df451f6ac2bd38393200000000000000a49110ade19518f2b85a63d14d1de1a296db2c7b4d7308f08bb88d20ee4bc9b06eeecca8d8fdc3a58226812b14e12f91827b201a0fce203ed2ea69834302bdbfa96fa21c1089ca47719802e035565ae7cbc588a7"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @remote}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000300060000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 26.642120349s ago: executing program 1 (id=14682): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001400)={{0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x109040, &(0x7f00000000c0)={@align=0x8, {0x9, 0x7f, 0x6, 0x1}}, 0x99c5, &(0x7f0000000100), &(0x7f0000000140)=0xffffff2b}, {[0x5, 0x9, 0x7fffffff, 0x417]}, 0x2, 0x1000, &(0x7f0000000400)=""/4096}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001400)={{0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x109040, &(0x7f00000000c0)={@align=0x8, {0x9, 0x7f, 0x6, 0x1}}, 0x99c5, &(0x7f0000000100), &(0x7f0000000140)=0xffffff2b}, {[0x5, 0x9, 0x7fffffff, 0x417]}, 0x2, 0x1000, &(0x7f0000000400)=""/4096}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001580)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001700)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x88, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8f}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24044811}, 0x8000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}}], 0x2, 0x68005) 26.338604413s ago: executing program 1 (id=14688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) openat$cgroup_int(r6, &(0x7f0000000140)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (rerun: 32) 25.378706158s ago: executing program 1 (id=14694): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000004100050101eafffffff2feff02010000000000001c0201000600060086dd0000100007007f000008000000013adb197331258a4abbdcf5673e1034a046585c0d17b438987427d0a3d19ca321faefd7774794f33ba66cb916"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) (async) shutdown(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) (async) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) (async, rerun: 32) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de"], 0x114}], 0x1}, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 10.159432705s ago: executing program 35 (id=14694): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000004100010029bd700004000000010000b1000047800c00018008001080040004800800020068baa70e2f80be52dd68ef01b0422aebb60e7d7b59a0d0eccdbc71791fdc212278151d627f0beda23fd3d7429b2988db8ce22b6287891f9cf3e72f818fc53a6c4eea6e4685c1fa47d3c7b9670ada5d6a24d03640083411f8e873ee505e4b31cf72df31cc41573a63a8e92e3a9dfa4ad61f063a334da970033eded178f8ed3968f65af8cd2a449c3e42ac36cfdaa81a37c8c12e4d564d9e95dea3bd75ef44267e1847b7bf1cfd0b1799d8869edcfaf6c0788ac7fafffffffffffffff964ca466a466a235722c3c939d551f202885cfb7dab3fde4ab81f04df0795ea67b06d", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000004100050101eafffffff2feff02010000000000001c0201000600060086dd0000100007007f000008000000013adb197331258a4abbdcf5673e1034a046585c0d17b438987427d0a3d19ca321faefd7774794f33ba66cb916"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) (async) shutdown(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) (async) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) (async, rerun: 32) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de"], 0x114}], 0x1}, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 3.646077468s ago: executing program 6 (id=14833): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x3, 0xff) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x10, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async, rerun: 64) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 32) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nicvf0\x00', 0xca00}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x8, 0x4, 0x1, 0x16, 0x28, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0x9, "f00c8e76d0966f"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x36) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x800}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.424147176s ago: executing program 5 (id=14839): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) write(0xca, &(0x7f0000000040)="0404e70000000004de92050000", 0xd) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, 0x0}, 0x296) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000030200030401"], 0x30}, 0x40) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20004044) (rerun: 32) 2.422293186s ago: executing program 6 (id=14840): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x30}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x6c00, 0x0, 0x24000001}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000100700)={0x3f4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x554c613a}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ID={0x43, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "71e77eae59485ee66f732baa52a1e863fcc9820be3284b012f5972e205747c35d79e8149dd725838191cc5e7cbeb47ed0d1b55e94e086b7024e3142c6ec4c493a09ed4c9af8ef331bb44921794a8abfc84b6f42c0f0579c9e1780b51a7f817c62ecf85b8f047ef6fce2c2ef6d7ab04807b9656ef220fd03f83"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1d4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @mcast1, 0xcfe0}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x545}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x59b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x35ee, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaa}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd83b}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}}, 0x4040) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x19) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r8, &(0x7f0000000180)="4a1463f781405c96eaf31cf612f4d4f33d6960a38cdebc2d500d591bdd5b1f3c", 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xb, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.421304922s ago: executing program 7 (id=14841): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}, @generic={0x3, 0x2}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48851}, 0x2404c8c0) mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r6, 0x7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r2, &(0x7f0000000800)="4c08ba0993477a44420e02649eb33cc47adce2558bb95a1d8dd6875ef9472e8164b3238e227a07067aed71bb344e9ea9c139da0b6f468cfd165966d7906a3d88f42f910caf046b89efb90e8a2b7c744239cab96ea8c982304d013fc5a449cf5b6b02432ea888c3be5926c4ae5f2d71", &(0x7f0000000880)=""/65}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003400)={@map, 0xffffffffffffffff, 0x3c, 0x20}, 0x20) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) unshare(0x20000400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r7, &(0x7f0000004000)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="3c7b862bd198ae2b993fc3d84282363bd83cc34c1d81f2a6384b2b12e25e37eb9b5d9e08793b19bbd57c8a1c9c549df9f63453f01ecedcc114afed7e5fdf4c2eb55c8a9f3a3af933813805709f811345fda5274cdae988c790", 0x59}, {&(0x7f0000000640)="5aabe2c4ea66fc14e887045ff19853f1af80e7ae787f6a2b8da4ea05ecc37eb9bb5603d6ee252ad267b6cb7536216dc20bbe2f044637e1f6fffb0f2e6f79d6f01d92c471dc2b7e80c45d71bed417b948d1ee302f489c5ece64c84ed07ef6f864a961795b62a18899d6cd40b7f7477d2f5c4f53b7a7c7a9ee99d6d366473e22e2fcbc0c10030ee41d0d752a5363096b6d09976cc62151a508bbb99043829a32c9bf86f955431f9effec55801da7507ae6ebc510d9b6cebf", 0xb7}, {&(0x7f0000000700)="44fecec83442a04bc0dac6eb32487aaa5084e27a6539", 0x16}], 0x3, &(0x7f0000004040)=[{0x1010, 0x0, 0x4, "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"}, {0x98, 0x102, 0xffffffff, "698b7c017dd531221ecd87e2981cfc2d44b0ab49406d40f21b2b45648a18f39b037c04d243200af448096ae9d2a26b5a6fcd330186299288df04d523c0a5425861d9532930e6d34617b5a453542ba63f8a26bdc51adcf2679f028afe12a5f20f634ef0ad49e1304cf5752dd29f56e44117a1556dd0083e46cddc0f6d8d3b3bb73ad192b33a"}, {0x60, 0x109, 0x4, "bf0f869027cb84046e3a2a76cc8744b3c257aa5c3272c0c1c7c08d8ee386ef4cd2759bed2b8896f046e4ebb7371db86568f0cc5420b958d82f0ef66bdf959336d9fb9011d4a82b4e93d458"}, {0x30, 0x115, 0xe, "dfbfacd875d52f358323bfc1c244954757f9a75235e8f61daa3296e8cef933"}, {0x90, 0x102, 0x3, "51bee31f026eb77a3c1bbe4c73f1333807fb58285565082755845399c2dbfaa6f620322cc1750aa31d279b879a1f879a74ae37b598d13ff4ea17d4a1beccb72b27d375f3bde1a2f661ad3a5647dc0b74ab171820d99bfdf939a2660a1b17e02b0c2eabc65eded6d692dcbe595c2da6bace703c8d1515a6e375f6"}, {0x58, 0x118, 0x7, "d22fa43758c1635270689b5d3ebcc00503ba1491f4896392f73ba7b1746c492996fa6b5a646b4c5c06465b18b73443fc9788e36928c32ce165f4617673eb8fb9349808534fceae9e"}, {0x1010, 0x104, 0x5, "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"}, {0xd0, 0x6, 0x40, "6a3ef18dbb77a9cca4de48fa333e1a33a1199dbf447fc326d75408d7605d91e43584eeaeacfa12ae81451f854b5780fe8fa3f13d7613e90492db025fff049885a033e69c7055ede00a6e3238a5cf21c8dcc34a3454e3d6e88456ca5946d5bffda5a9c6afc509a9c3a9dd09cc9c6ed02026d82473b33f4e40e2df0b8c5dd9ee4639f50625681f0dc45b5e340c24a0cc6c79f83ebc7a7b1e1c3a84e93a3f32621b8d2dc781dbcaae865e307680f6f332466f5b8220701ae65e8804f2a8"}, {0xa8, 0xff, 0x56d, "1b9e690180a1dd018206f947e4e4cb2e255f2d1a789827b22b418ddec2ea4ef5b31bc2c090dcb87b450efb073d7879be6b559e8ed3be44c3ef8902888d74dced6f0177a00d1ad95e94ac8f9a6c31d6a35166ba70e07dfed7c10dc021583346ad0db04f36a05b27fe6bc0c467cb10221bbb9d9ef56057e116ce163c25186c03d728a56a64b2e2c9c97cd8cfd1779e2fba6a6b"}], 0x23a8}}], 0x1, 0x8048848) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r10}}, 0x1c) r11 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r11, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}, 0x30008b08) 2.109258468s ago: executing program 5 (id=14844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd30, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5, 0xc}, {0x1, 0xfff1}, {0xfff8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, r3, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x84) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, r3, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x84) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf68a75ccfdaeaba2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}}, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000340)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r12, {}, 0xa}}, 0x26) (async) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r12, {}, 0xa}}, 0x26) 1.774080835s ago: executing program 3 (id=14846): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@tracing={0x0, 0x3ff}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0xd0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x9c, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_ct={0x40, 0x18, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x48, 0x2, [@m_bpf={0x44, 0x1f, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x9, 0x6, "eb8d4e3027"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0xd0}}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r4, 0x0) write(0xca, &(0x7f0000000040)="0404e70000000004de92050000", 0xd) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x800) (async) accept4$alg(r7, 0x0, 0x0, 0x800) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="300100001f00010000000000000000001d0100800c0001"], 0x130}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.441300851s ago: executing program 6 (id=14847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40015}, 0x800) 1.388788713s ago: executing program 3 (id=14848): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x14, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) (async) unshare(0x6020400) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x2, 0x1, 0x4, 0x5}}, 0x26) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x48815, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000500)={r5, r5, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x70c9, 0x4) 1.321857219s ago: executing program 5 (id=14849): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xca, 0x0, 0x1000}}}}}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) 1.221739706s ago: executing program 6 (id=14850): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='GPL\x00', 0x240300, &(0x7f0000000180)={@_ha_fsid={[0x8000, 0x9]}, {0x81, 0x0, 0x3, 0x647}}, 0x270a, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x50) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x162, 0x0) (async, rerun: 32) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r4) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0)=0x1, 0x4) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000015080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) 1.142998342s ago: executing program 7 (id=14851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xbc, 0xa, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x94, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x820}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c70800034000000081080002"], 0x168}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) bind$l2tp(r3, &(0x7f0000000ac0)={0x2, 0x0, @local, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000280), 0x10) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000240)=0xffffffff, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000ffdbdf25700000000c00990000000000460000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="3c5a5c51dd28e2bbc512b6186fd5ca290ed626673a11d6aa1fdf1cdb551d6bc5a7249d1313a1baa754948ed93184bf8ed1ba8551e7318ccbceaa58a4ec3053d3945676f55019bcdddfafed8a0ea9e9b781347ed4a8a57b267d765fd10eca5ddf9196078ec93fa2e8adf005fd8bfbeb9b18b389f93d25367ec3c854d63bbfd419d109547a23393b8c081e250b4480aae6b5", 0x91}, {&(0x7f00000004c0)="e1a6603f207d3568f87dce201ec7b82254b3294b7ad6f6b061cccdb719c316bd6687032a3fdf46207d8a844f5b8ae9700942091457671a0b09743051c0f874a886e2608cd1cc935c58881a69f5ab306848e0b951817b04415b9bf6af58b286f79bbe59c489b95585f64943c049411f5dab39071b6d4d734b87fba22cffb448fe23a4175696dfec93b878617bd85afb24df914e32cb6382429594d8275d29f7f27eb6d978", 0xa4}, {&(0x7f0000000580)="48851895e36bcd76b3a0b01dd88b510a6128ca42b06aca28c2e146ed182ae7a80756876de680b71d336ad582b57eac667ad30421178fe2d1d7ae0e9c8c28816bd4844195cb77e266d4413e3eaa74bf93abcd8080a5b98cc5c313ca0cf5704cee530e", 0x62}, {&(0x7f0000000600)="cd7d04bbc47a1179af28e0bbfb404b6c0d43faac2e94d97bf89f08365053e238f658e1d2826735150745148391d7a92885a1a85fe6137297a2a73c29e54e99e9a361708af35dc9b17fc8e1cbea3b67c707137ad74b7f5e4c31671e87d1c0f291178331c9d888bd8564de16dff568f757239a909c336575b552bee6619cbf82e8aa0555dcc0bec972e5a008cc89add84edd3b3f1a0aac5dd8e4dacd49fa0f6a31e848da820a636117cde1ba94b188625c5f6c117ea2383e0ff171070b96565c7e0bc71c06ebc402b32ae00018dd20b17bbca71e5844407f", 0xd7}, {&(0x7f0000000700)="87bc973ecac93c2df6e57969b6f120b75b9c5943cf6785fd334d05ce0a0c54cd6380db205414fb2f8115ddcfa7eca45dd7fdfcf7f25c0b4b52ac613fa18fef0ff9ee85591fdc0214d2c3ecd07c866bfe9d94323beefaec7f511ff7b9e5f9dd5c1b4f4265f17a32da1ccb9821a07ab6c8b381aa8f354f4a95055231539cea2eb430d949b95c868fbf36cf8a74cad82327187f539f770c542e4098", 0x9a}, {&(0x7f00000007c0)="fd65abff946a7ab853e20c0a99de3d79cd1c6dcaf0d5cc1142e11eaedcbe214b9a3f79fd6055a416cdfa0ea387fac3fddf54e81b28e4f1bec3e36f3f75406327ebd12366b0def449ac9d7ec9bcb7aa54ab5d64bc8f0638835b3253c63fab021b98931673b8903f9c89d6b7ccfee993734b0617dc1d51706527f2331f749c53e1162882ffe0b5ee273a34fcb0d3fd23a6955e5f2e8b4b1ed0bede24f1635bcbe8d2d34d652d8469de7313297ebc81e3f51f3b", 0xb2}, {&(0x7f0000000880)="f3a770afbfd3ec80d2895ca508d6d321d5c80765dc5254925d36635ab87007e9cfc20aaa06f79e3096a51711c7a41cc1bd846602cd4f51cacc43cc4c120f702b1a942569c9896c646464efc3782c5e68d236d86e643601c2ff86f0ba43792e906b13a23ef48a6cf1ad50d41c745897af3e6fb6b4a451a9a23988d2ca622144e89cbd6c1de174e5ef0659102e467270ede8d782d647153817fefee98ccae7035c19d54b6c462d1bfc212d5fa76a43c5584e89212d61882f87fe747500399be3fd66688e7ac415d1d7aa476c58", 0xcc}], 0x7, 0x0, 0x0, 0x8054}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x6, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000340), &(0x7f00000003c0)=0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000bc0)) 1.089664131s ago: executing program 5 (id=14852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303fdff00000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001600)={'syztnl0\x00', &(0x7f0000001580)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x9b, 0xb47, 0x12, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x278}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', r4, 0x4, 0x8, 0x3, 0x4, 0x1, @loopback, @remote, 0x40, 0x7800, 0xfff, 0x8}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5800000002060102000800124000060065742c6e6574000000000500056c02000000050004000000f7ffffffffffffff7a31000000000500010007000000009c1b6b8200000000000000000000d754f3febabf7affcda630d31abd35a0c247c1487d8e99f17241a28c3c0da90b4597c4b7b11406cd3e459c365c614571ed2a03c644f12cff1ce44a55e8532558928bb3cc7ac3f7cce9cb82c81c7e82862ce834d1d0b6ca6cb51257d7f7edba12b247abe4c4a900000000"], 0x58}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)={@val={0x0, 0x888e}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x0, 0x11, 0x0, 0x21, 0x0, @broadcast, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd387d1b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3150d9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES8=r1, @ANYRESDEC], 0x50) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$unix(0x1, 0x5, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1256}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) getsockname$packet(r9, &(0x7f00000002c0), &(0x7f0000000300)=0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.013438701s ago: executing program 3 (id=14853): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/943], 0x264) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x45c, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xa4, 0x2fc, 0x0, 0x1, [@nested={0x9f, 0x1, 0x0, 0x1, [@generic="fb7939fee06119ab99969b0a026e51fc89987ad2828f01eb1fb4d479dbce2ec77c8ffd2aa6af64d97640f53f90a14194965d4cfd841faf78c8ae36e64213f90aa0434cf9551b6e1e85770f82e26cbeceaeace8e6a2fde92eb8f711c379f8b6ff3e5c1d84c55018f2906a24837698f7ebb8599959da70defe1d3f1145049aec69f1015da26557953b983d2eb866d27bed7b554b3dd7af823099f219"]}]}, @nested={0x38c, 0x3, 0x0, 0x1, [@nested={0x385, 0xf3, 0x0, 0x1, [@generic="d41ec40712761102f9b9f9bb4abb960fe2e6dc8b323117f89f40d64e457d9d7d1bde95ce83a8e505209dbaa69a979fd7b76af31f81e7ffea12126e61dee6d3283e25b4aabfac8200dc12609d9dc025cb604bcb76e2fd77fe17e3e99c9ce75c418b503943e7abd785f0d86e633d29a2c0370e4e4df6126213c266d3b24f270ca8e05951ddf32dd62ea8ac3d1bc552b90b07271e46d0a25f3a38008994940e92ecc2", @nested={0x26b, 0x4a, 0x0, 0x1, [@generic="ac738bbf732a8c60e2e34ab2cd22e3b849eed34787a34bac9672bf56013b2d09b57bdb2b3ff9fffe6d6be248689d98e2b3a18e65d957ed59de5e9af4435995d07fadb05b23f33c8d6dacd075e4106cc2b187fc1b00b2f07ada9b67aef8d00033e0cf0b7829cbfe6f5af43105108d44d6a72ad7b931f090f9d78ec0ab119e6d092d8ee29a6447e7b7c69e180a3a9595d2329bc7504839c144", @generic="313b94a1cb043d4428f1382e6e810a77c437907676929b690d382d5855d2b93ccdf05e6af4f10f25bac24a6a8996c4da4a6ec010a15c625de5d21bb6bd99daa17a5bca180bff994234798941ccfba0c012241e534d446a4443533e649d5d68324e0bb282a8d6640a27f0f4642d26f4d16a377a06b044460926c97598de5d6b7bc5844fb1e5a468a3a7c1627279731302bd81a8ea92e22bbcd16acf9b419204c92e45edbd475b7c50c44c1b6ae6647fa1e7ed997503ee0424c0de065ffa5b1b59b95c870e55f06a7f0dde7aaba67a19f88532be21182570392ffba064f65a124dcb5eeafe23d4c469e9ff", @generic="62c9901e4e77f60345c5cc1052cb1a63a442f3634711441703cc8de1d31758e2a02c78c3e83133856cedde1846b64040e4920d707d304bc03128aa4cf415b88b86eab1db0ec7acb0718e8d41985819ee327bc9fae82866ab38fb39144fc63b37a598c5b48cca2cf7f1d3c181592e3300797ea09d2585bbf00d6a36a58f", @nested={0x4, 0x76}, @generic="a596772a374cd9fd79c243a6dd44dae606413418c28ff0c07e3d2b5802000cb0118300134065a64a41ab69bfc3afe49c36c3", @nested={0x4, 0x110}, @nested={0x4, 0x23}, @generic="77ba03af80b5330cf94d8b76776f496a6641dea6ce26db3f3f5843c3b106b129e88353472641193a6ffa"]}, @nested={0x67, 0x8d, 0x0, 0x1, [@generic="2a4340ec8f69dbfdbdd377e34775b0f621ef048e58870f75b8d874b3d3f69effe78d94c392327e08db7094e8651355786608e445259b3516971efdc207f2eb09e1db3d850e90194696c3797bd0d93e5328f289800fe08c4a85048f7dfb9947004c814d"]}, @typed={0xc, 0xdc, 0x0, 0x0, @str='nl80211\x00'}]}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x2e}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r5}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r8, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r9, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) 907.843373ms ago: executing program 6 (id=14854): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd1064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xbf94, "84d5ea42481ec28080804e1bd5e855a0"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) unshare(0x20000400) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 737.942297ms ago: executing program 6 (id=14855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x88e}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @challenge={0x10, 0x1, 0xed}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000005000000000001"], 0xfdef) 729.312551ms ago: executing program 7 (id=14856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000340)={{@align=0x4, {0x690, 0x2, 0x5, 0x9}}, {{[0x6, 0x8, 0x1000000, 0x3ff]}, 0x0, 0x1, 0x401, 0x0, &(0x7f0000000500)=[{{@_ha_fsid={[0x7ecd8d6d, 0x5]}, {0x9, 0x3, 0x6, 0x8}}, 0xfffffff8, 0x0, '\x00'}, {{@_ha_fsid={[0x7, 0x80000000]}, {0x2, 0x8, 0x7f, 0x80}}, 0x8, 0x0, 'GPL\x00'}, {{@_ha_fsid={[0x6138, 0x952]}, {0x4, 0x5, 0x2, 0xbff}}, 0xb157, 0x0, '%+9llu \x00'}, {{@_ha_fsid={[0xff, 0xab]}, {0xce, 0x81, 0xfffffffd, 0x1}}, 0x4, 0x0, '%+9llu \x00'}, {{@align=0x101, {0x6, 0x3, 0x4, 0x1}}, 0x80000000, 0x0, 'GPL\x00'}, {{@align=0x1, {0x101, 0x6, 0x9, 0x1}}, 0x3d72, 0x0, '$*}%Y-.\\\x00'}, {{@align=0x4, {0xda, 0x5, 0xfffffff2, 0x72002b7e}}, 0x80000001, 0x0, 'GPL\x00'}, {{@_ha_fsid={[0x8000, 0x5]}, {0x1, 0xc, 0x5, 0x4}}, 0x942, 0x0, 'GPL\x00'}, {{@_ha_fsid={[0x2d, 0x95]}, {0x40, 0x3ff, 0xa5, 0x4}}, 0x7eca, 0x0, '%+9llu \x00'}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000800050005000000000005000900060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) 671.336058ms ago: executing program 5 (id=14857): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0xfff5, 0x20000000, &(0x7f0000000a00)={0x2, 0x4e21, @remote}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x1e, 0x4, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e000000000000000000000000000000804ed2221497f0ec29d30d0bb733611bed7c03309bd0a1aee48f3b423c67b3d26c43ab80e947efd3063f87954c638d77f348d45e051fd82d616370a2b1e5ba7fd87796b85fd9cd4b67c53d2081124d0e1422871066b08a95f7d1", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd632}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000100400000029010000", @ANYRES8=r4], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$pppl2tp(r6, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x3, 0x2, 0x4, 0x2}}, 0x2e) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{0x1, {0x3a, 0x0, 0x4, 0x0, 0x7, 0x38, 0x61}}, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private2, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @local, @loopback, @empty, @private1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote, @local, @empty, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x40}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}}}]}, 0x42c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/468], 0x1d4}}, 0x4000840) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {0x3, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 582.800003ms ago: executing program 7 (id=14858): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0xc, 0x9, @remote, @remote, 0x10, 0x7, 0x2e, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x80000001, 0x5, 0x410, 0x1, 0x101, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x3}, 0x50) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) 461.935012ms ago: executing program 7 (id=14859): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) close(0x4) (async) close(0x4) socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) (async) r5 = socket(0x10, 0x3, 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000440)=@ethtool_rx_ntuple={0x35, {0x0, @sctp_ip4_spec={@remote, @private=0xa010100, 0x4e23, 0x4e24, 0xb3}, @udp_ip4_spec={@multicast1, @empty, 0x4e24, 0x4e22, 0x1}, 0x80, 0x4, 0xff, 0x7fffffff, 0xfffffffffffffffe}}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000440)=@ethtool_rx_ntuple={0x35, {0x0, @sctp_ip4_spec={@remote, @private=0xa010100, 0x4e23, 0x4e24, 0xb3}, @udp_ip4_spec={@multicast1, @empty, 0x4e24, 0x4e22, 0x1}, 0x80, 0x4, 0xff, 0x7fffffff, 0xfffffffffffffffe}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x20000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xfff3}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x81, 0x8, 0x3, 0x3, 0x9, 0xc6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) socketpair(0x1d, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0xd, 0x8}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000003c0)={r8, 0x8}, 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) 386.272819ms ago: executing program 3 (id=14860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000070000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb000000003c0000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001000400080000000000000000000000e0000002000000000000000000000000000100003300000000000000ff020000000000000000000000000001043500000002040000000000bb0a00000000000000000000000000000000000000000000000004d43200000000000000ac1414aa00000000000000000000000004000000020108000700ffff00000000fe030000ac14141c0000000000000000000000000000000032"], 0x23c}, 0x1, 0x0, 0x0, 0x40015}, 0x800) 305.954196ms ago: executing program 3 (id=14861): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) 113.853767ms ago: executing program 7 (id=14862): r0 = socket(0x1, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) r2 = epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000100)={0x3, 0x4, 0x7, 0x0, 0x0, 0xdda, 0x9, 0x1}, &(0x7f0000000180)={0x7, 0x8, 0x1, 0x1, 0x7, 0xd, 0xfffffffffffff800, 0x7}, &(0x7f00000001c0)={0xfffffffffffffff7, 0x5e3, 0x4, 0x124d, 0x0, 0x1, 0x8, 0x5}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x80002017}) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000540)={0x3, 0xf, @status={[0x2, 0x2, 0x8, 0x3a9f, 0x5, 0x6]}, [0x1, 0x5, 0x9, 0x100000001, 0x10f, 0x2, 0x4, 0x4, 0x9e19, 0x0, 0x9, 0x2, 0x9, 0x2, 0x5, 0x8000, 0x4, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x7, 0x8, 0x5, 0x5, 0x6, 0x7, 0x5, 0xff, 0x100, 0x8, 0xffffffff, 0x37, 0xe2d8, 0x0, 0x2e1f5804, 0x0, 0x8000, 0x59, 0x9, 0x1, 0x8, 0x100, 0x0, 0xffffffffffff23be, 0x9, 0x2, 0x4f, 0x6, 0x5, 0x5, 0x4, 0x101, 0x10000, 0x8000000000000000, 0xe86, 0x17, 0xe, 0x81, 0xf8bf, 0xffff, 0x3, 0x559d3797, 0x57b7, 0x1, 0x15d7]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 113.291624ms ago: executing program 3 (id=14863): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={0x0, 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$tipc(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002dc0)="3336f70cd0e0e42718329330f8b1453fa54879ffb9a0e2383e3b54cdcabe57e9253ff776cab55ce561139eba62ea", 0x2e}], 0x3, 0x0, 0x0, 0x4000}, 0x8000) close(0x3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x8776, 0x401, 0x0, 0x21e000, 0x80080000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x20000000002) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0xfffffffc, 0x30000, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) 0s ago: executing program 5 (id=14864): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) getsockopt$sock_int(r4, 0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x4001) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000000040110000ac141414e000000104d204d200080000"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/16, 0x10}, 0xd}], 0x1, 0x40000103, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000003e6ff07000000180001801400020073797a5f74751c000280130004003c4f85076a3659c1d34a461e34777a000400050050728fdb6ec1be53d66909ebb7d6a21e119eb7208780b0cf561a23f5268f5162c8c45f63785a553d25cbbebb67c07946dbb110ff130ee71dbbe08a6e1f82e15a4aca8be71838679d13386b3618fdc466c88bffe7c420f7698e0a"], 0x48}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a0480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.683242][T25199] sock_sendmsg_nosec+0x14e/0x190 [ 1710.683278][T25199] ____sys_sendmsg+0x54e/0x850 [ 1710.683308][T25199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.683345][T25199] ? import_iovec+0x73/0xa0 [ 1710.683385][T25199] ___sys_sendmsg+0x2a5/0x360 [ 1710.683410][T25199] ? __lock_acquire+0x747/0x2de0 [ 1710.683437][T25199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.683506][T25199] ? __fget_files+0x2a/0x420 [ 1710.683532][T25199] ? __fget_files+0x3a2/0x420 [ 1710.683572][T25199] __x64_sys_sendmsg+0x1b1/0x290 [ 1710.683603][T25199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.683656][T25199] do_syscall_64+0x166/0x520 [ 1710.683682][T25199] ? trace_irq_disable+0x3b/0x140 [ 1710.683701][T25199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.683724][T25199] ? clear_bhb_loop+0x70/0xc0 [ 1710.683751][T25199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.683771][T25199] RIP: 0033:0x7effe739e159 [ 1710.683793][T25199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.683809][T25199] RSP: 002b:00007effe55f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.683833][T25199] RAX: ffffffffffffffda RBX: 00007effe7625fa0 RCX: 00007effe739e159 [ 1710.683848][T25199] RDX: 0000000020000050 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 1710.683862][T25199] RBP: 00007effe55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.683875][T25199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.683887][T25199] R13: 00007effe7626038 R14: 00007effe7625fa0 R15: 00007ffca12473d8 [ 1710.683924][T25199] [ 1710.906814][T25203] netlink: 'syz.4.13665': attribute type 1 has an invalid length. [ 1710.934900][T25203] bond3: entered promiscuous mode [ 1710.935329][T25203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1710.957249][T25203] bond3: (slave bridge3): making interface the new active one [ 1710.957281][T25203] bridge3: entered promiscuous mode [ 1710.977545][T25203] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1711.332568][T25216] netlink: 'syz.1.13666': attribute type 6 has an invalid length. [ 1711.389420][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13666'. [ 1711.458598][T25216] bond8: option lacp_active: invalid value (5) [ 1711.460509][T25216] bond8 (unregistering): Released all slaves [ 1711.519298][T25221] batadv_slave_1: entered promiscuous mode [ 1711.650065][T25221] batadv_slave_1: left promiscuous mode [ 1711.654562][T25224] wg2 speed is unknown, defaulting to 1000 [ 1711.656405][T25224] wg2 speed is unknown, defaulting to 1000 [ 1711.711536][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13670'. [ 1712.283672][T20694] net_ratelimit: 60 callbacks suppressed [ 1712.283697][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1712.285470][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1712.399061][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1712.413993][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1712.503535][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1712.525752][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1712.653485][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1712.653534][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1712.660892][T25260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1712.769342][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1712.812744][T25267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13675'. [ 1713.150385][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13680'. [ 1713.168122][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13680'. [ 1713.416939][T25303] netlink: 'syz.3.13684': attribute type 16 has an invalid length. [ 1713.416963][T25303] netlink: 'syz.3.13684': attribute type 17 has an invalid length. [ 1713.525168][T25106] Bluetooth: hci2: command 0x0406 tx timeout [ 1713.527166][ T7438] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1713.589995][T25303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1713.632478][T25303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.651602][T25303] vlan3: left promiscuous mode [ 1713.651630][T25303] bridge0: left promiscuous mode [ 1713.670983][T15972] wg2 speed is unknown, defaulting to 1000 [ 1713.671014][T15972] syz0: Port: 1 Link ACTIVE [ 1713.961644][T25326] netlink: 'syz.3.13687': attribute type 1 has an invalid length. [ 1714.267518][T25335] netlink: 'syz.5.13689': attribute type 30 has an invalid length. [ 1714.319582][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13690'. [ 1714.319612][T25337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13690'. [ 1714.637476][T25346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13692'. [ 1714.709724][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13693'. [ 1714.720523][T25346] netlink: 'syz.5.13692': attribute type 4 has an invalid length. [ 1714.720545][T25346] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13692'. [ 1714.855345][T25346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.872692][T25355] bridge_slave_0: left allmulticast mode [ 1714.872722][T25355] bridge_slave_0: left promiscuous mode [ 1714.872996][T25355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.099981][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13697'. [ 1715.837245][T25385] netlink: 'syz.5.13701': attribute type 83 has an invalid length. [ 1716.030056][T25397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13705'. [ 1716.066224][T25397] ip6gre1: entered promiscuous mode [ 1716.066250][T25397] ip6gre1: entered allmulticast mode [ 1716.293443][T25408] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13706'. [ 1716.382028][T25409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13706'. [ 1716.392775][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13706'. [ 1716.911831][T25431] tipc: Started in network mode [ 1716.911867][T25431] tipc: Node identity ac14140f, cluster identity 4711 [ 1716.912178][T25431] tipc: New replicast peer: 255.255.255.255 [ 1716.924479][T25431] tipc: Enabled bearer , priority 10 [ 1717.487192][T20690] net_ratelimit: 73 callbacks suppressed [ 1717.487219][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1717.492906][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1717.592662][T25456] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1717.595198][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1717.596118][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1717.724690][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1717.724765][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1717.820321][T25466] netlink: 'syz.1.13720': attribute type 25 has an invalid length. [ 1717.820372][T25466] netlink: 'syz.1.13720': attribute type 3 has an invalid length. [ 1717.874412][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1717.874462][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1717.984420][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1717.984470][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1718.003339][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1718.025393][T13642] tipc: Node number set to 2886997007 [ 1718.927156][T25508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.180474][T25508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.196071][T25508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.427529][T25508] batman_adv: batadv0: Interface deactivated: vlan2 [ 1719.553552][T13563] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1719.553600][T13563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.553722][T13563] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1719.553749][T13563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.554405][T13563] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1719.554431][T13563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.554500][T13563] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1719.554526][T13563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.676039][T25522] bridge_slave_0: left allmulticast mode [ 1719.676072][T25522] bridge_slave_0: left promiscuous mode [ 1719.686503][T25522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.792328][T25522] bridge_slave_1: left allmulticast mode [ 1719.792361][T25522] bridge_slave_1: left promiscuous mode [ 1719.792589][T25522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.838765][T25522] bond0: (slave bond_slave_0): Releasing backup interface [ 1719.867071][T25522] bond0: (slave bond_slave_1): Releasing backup interface [ 1719.883683][T25522] bond_slave_1: left promiscuous mode [ 1719.903349][T25522] team0: Port device team_slave_0 removed [ 1719.920799][T25522] team0: Port device team_slave_1 removed [ 1719.921897][T25522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.921920][T25522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.949255][T25522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.949282][T25522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.967855][T11993] wg2 speed is unknown, defaulting to 1000 [ 1719.967903][T11993] syz0: Port: 1 Link DOWN [ 1720.020809][T25540] __nla_validate_parse: 5 callbacks suppressed [ 1720.020830][T25540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13742'. [ 1720.150990][T20690] bond1: (slave macvlan2): link status definitely down, disabling slave [ 1720.219575][T20690] bond1: now running without any active interface! [ 1720.271168][T25549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13745'. [ 1720.273030][T25548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13745'. [ 1720.676997][T25567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13751'. [ 1721.270372][T25595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13759'. [ 1721.319615][T25593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13759'. [ 1721.834673][T25617] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13766'. [ 1721.877719][T25621] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13766'. [ 1722.483344][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1722.591727][T20694] net_ratelimit: 53 callbacks suppressed [ 1722.591753][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1722.591792][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1722.701454][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1722.701499][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1722.810300][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1722.810597][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1722.828987][T25648] veth1: entered promiscuous mode [ 1723.137417][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13775'. [ 1723.186655][T25657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13774'. [ 1723.193683][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1723.194695][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1723.306626][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1723.306920][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1723.500782][T25670] netlink: 'syz.4.13780': attribute type 1 has an invalid length. [ 1723.573983][T25670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1723.575108][T25675] tipc: New replicast peer: 255.255.255.255 [ 1723.575486][T25675] tipc: Enabled bearer , priority 10 [ 1723.692179][T25681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.738042][T25647] veth1: left promiscuous mode [ 1723.754014][T25681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.827246][T25680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.684916][T25721] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 1724.693625][T16354] tipc: Node number set to 518170613 [ 1724.729143][T25106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1724.742195][T25106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1724.764626][T25106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1724.765766][T25106] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1724.770111][T25106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1725.043420][ C1] openvswitch: cpu_id mismatch with handler threads [ 1725.241825][T25749] __nla_validate_parse: 6 callbacks suppressed [ 1725.241849][T25749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13795'. [ 1725.251003][T25743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13794'. [ 1725.312126][T25739] wg2 speed is unknown, defaulting to 1000 [ 1725.318022][T25739] wg2 speed is unknown, defaulting to 1000 [ 1725.675994][T25725] wg2 speed is unknown, defaulting to 1000 [ 1725.679151][T25768] syzkaller1: entered promiscuous mode [ 1725.679176][T25768] syzkaller1: entered allmulticast mode [ 1725.682316][T25725] wg2 speed is unknown, defaulting to 1000 [ 1726.884319][T25106] Bluetooth: hci6: command tx timeout [ 1727.132414][T25725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.132625][T25725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.132769][T25725] bridge_slave_0: entered allmulticast mode [ 1727.134906][T25725] bridge_slave_0: entered promiscuous mode [ 1727.138690][T25725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.138856][T25725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.140719][T25725] bridge_slave_1: entered allmulticast mode [ 1727.145624][T25725] bridge_slave_1: entered promiscuous mode [ 1727.202784][T25725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.216377][T25725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.317242][T25725] team0: Port device team_slave_0 added [ 1727.317516][T25820] hsr_slave_0: left promiscuous mode [ 1727.318578][T25820] hsr_slave_1: left promiscuous mode [ 1727.350988][T25813] netlink: 'syz.5.13807': attribute type 1 has an invalid length. [ 1727.376270][T25725] team0: Port device team_slave_1 added [ 1727.396254][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13807'. [ 1727.441998][T25813] bond6: entered promiscuous mode [ 1727.442113][T25813] bond6: entered allmulticast mode [ 1727.458911][T25813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1727.489355][T25817] erspan1: entered allmulticast mode [ 1727.545788][T25725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.545808][T25725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.545833][T25725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.548837][T25725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.548852][T25725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.548877][T25725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.731433][T25725] hsr_slave_0: entered promiscuous mode [ 1727.755434][T25725] hsr_slave_1: entered promiscuous mode [ 1727.756414][T25725] debugfs: 'hsr0' already exists in 'hsr' [ 1727.756436][T25725] Cannot create hsr debugfs directory [ 1727.853604][T20691] net_ratelimit: 45 callbacks suppressed [ 1727.853629][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1728.043665][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1728.043718][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1728.269917][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.269955][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.270166][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.270187][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.270345][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.270363][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.270535][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.270553][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.270750][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.270770][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.271199][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.271220][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1728.271377][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13811'. [ 1728.271396][T25836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1730.671647][T25827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1730.704165][T25725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1730.784170][T25725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1730.785524][T25725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1730.835254][T25725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1730.850371][T25725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1730.922919][T25725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1730.928157][T25725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1730.952494][T25725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1731.262380][T25872] __nla_validate_parse: 26 callbacks suppressed [ 1731.262402][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13820'. [ 1731.297200][T25873] atomic_op ffff888031fd71e0 conn xmit_atomic 0000000000000000 [ 1731.350299][T25725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1731.351583][T25876] netlink: 'syz.3.13822': attribute type 8 has an invalid length. [ 1731.420638][T25725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.456917][T20700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.457036][T20700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.482470][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1731.482507][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1731.517762][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1731.517787][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1731.560694][T20698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.560812][T20698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.620840][T25887] netlink: 'syz.3.13827': attribute type 2 has an invalid length. [ 1731.724611][T25887] : entered promiscuous mode [ 1731.951514][T20691] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1731.951590][T20691] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1731.951623][T20691] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1731.951656][T20691] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1732.176278][T25910] bridge0: port 1(vlan4) entered blocking state [ 1732.178042][T25910] bridge0: port 1(vlan4) entered disabled state [ 1732.178232][T25910] vlan4: entered allmulticast mode [ 1732.178252][T25910] geneve0: entered allmulticast mode [ 1732.214377][T25910] vlan4: entered promiscuous mode [ 1732.214400][T25910] geneve0: entered promiscuous mode [ 1732.297107][T25913] syzkaller0: entered promiscuous mode [ 1732.297133][T25913] syzkaller0: entered allmulticast mode [ 1732.582877][T25930] netlink: 'syz.5.13838': attribute type 1 has an invalid length. [ 1732.624039][T25930] bond7: entered promiscuous mode [ 1732.624606][T25930] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1732.705806][T25930] bond7: (slave bridge2): making interface the new active one [ 1732.705836][T25930] bridge2: entered promiscuous mode [ 1732.731634][T25930] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1732.741820][T25932] netlink: 'syz.1.13839': attribute type 2 has an invalid length. [ 1732.741842][T25932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13839'. [ 1733.080709][T20700] net_ratelimit: 96 callbacks suppressed [ 1733.080734][T20700] bond2: (slave bridge2): failed to get link speed/duplex [ 1733.080778][T20700] bond5: (slave dummy0): failed to get link speed/duplex [ 1733.184758][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1733.184807][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1733.343520][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1733.343570][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1733.352319][T25725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.453771][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1733.453817][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1733.563451][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1733.563500][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1733.676046][T25977] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13848'. [ 1734.004506][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1734.059868][T25725] veth0_vlan: entered promiscuous mode [ 1734.100436][T25725] veth1_vlan: entered promiscuous mode [ 1734.193665][T25725] veth0_macvtap: entered promiscuous mode [ 1734.210437][T25725] veth1_macvtap: entered promiscuous mode [ 1734.258274][T25725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.291819][T25725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.367329][T20694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.367727][T20694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.367799][T20694] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.400514][T15222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.685457][T26003] netlink: 'syz.5.13856': attribute type 27 has an invalid length. [ 1734.685493][T26003] netlink: 'syz.5.13856': attribute type 3 has an invalid length. [ 1734.722221][T20691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.722244][T20691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.835482][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13857'. [ 1735.041917][T26008] bond8: entered allmulticast mode [ 1735.045946][T20694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.045965][T20694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.079341][T26008] macvlan2: entered promiscuous mode [ 1735.079376][T26008] macvlan2: entered allmulticast mode [ 1735.082592][T26008] bond8: entered promiscuous mode [ 1735.089893][T26008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1735.112937][T26008] bond8: left promiscuous mode [ 1735.198234][T26006] syzkaller0: entered promiscuous mode [ 1735.198258][T26006] syzkaller0: entered allmulticast mode [ 1735.283977][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1735.639383][T26033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13863'. [ 1735.835517][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835564][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835591][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835617][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835643][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835667][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835692][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835717][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835742][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.835767][T11993] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 1735.952601][T20614] svc: failed to register nfsdv3 RPC service (errno 512). [ 1735.966600][T20614] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1736.531479][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13868'. [ 1736.531507][T26055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13868'. [ 1736.860402][T26067] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13874'. [ 1737.004121][T26080] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13870'. [ 1737.108527][T26067] hsr_slave_0 (unregistering): left promiscuous mode [ 1737.584126][T26093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13879'. [ 1737.781287][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13881'. [ 1737.809212][T26107] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1737.937747][T11993] hid-generic 0005:4C4A:4155.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1738.062203][T26117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13885'. [ 1738.079828][T26117] IPv6: NLM_F_CREATE should be specified when creating new route [ 1738.079951][T26117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13885'. [ 1738.153608][T20687] net_ratelimit: 61 callbacks suppressed [ 1738.153633][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1738.176336][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1738.263377][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1738.297716][T26113] fido_id[26113]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 1738.325896][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1738.373420][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1738.450347][T26125] bond_slave_0: left promiscuous mode [ 1738.504337][T26970] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1738.506795][T26137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13890'. [ 1738.506822][T26137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13890'. [ 1738.723940][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1738.723993][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1738.728804][T26145] openvswitch: netlink: Multiple metadata blocks provided [ 1738.839921][T26135] netlink: 'syz.4.13888': attribute type 3 has an invalid length. [ 1738.840185][T26135] netlink: 'syz.4.13888': attribute type 3 has an invalid length. [ 1738.862388][T26151] bond0: Error: Cannot enslave bond to itself. [ 1738.868960][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1738.869004][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1738.987584][T26151] syzkaller0: entered promiscuous mode [ 1738.987602][T26151] syzkaller0: entered allmulticast mode [ 1739.103595][T11993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1739.653433][T26170] netlink: 'syz.5.13897': attribute type 1 has an invalid length. [ 1744.144155][T20691] net_ratelimit: 4 callbacks suppressed [ 1744.144179][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1744.144217][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1744.260449][T15222] bond2: (slave bridge2): failed to get link speed/duplex [ 1744.260513][T15222] bond5: (slave dummy0): failed to get link speed/duplex [ 1744.364052][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1744.366544][T15222] bond5: (slave dummy0): failed to get link speed/duplex [ 1744.386591][T26190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 1744.481630][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1744.481677][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1744.585488][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1744.585539][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1744.674821][T26207] netlink: 'syz.6.13906': attribute type 1 has an invalid length. [ 1744.674847][T26207] __nla_validate_parse: 131 callbacks suppressed [ 1744.674861][T26207] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13906'. [ 1744.822322][T26212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13907'. [ 1744.840849][ T31] audit: type=1804 audit(1790912843.972:56): pid=26212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13907" name="/newroot/442/cgroup.controllers" dev="tmpfs" ino=2279 res=1 errno=0 [ 1744.850102][ T31] audit: type=1800 audit(1790912843.972:57): pid=26212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13907" name="cgroup.controllers" dev="tmpfs" ino=2279 res=0 errno=0 [ 1745.013844][T26225] bridge: RTM_NEWNEIGH with invalid ether address [ 1745.014133][T26224] bridge: RTM_NEWNEIGH with invalid ether address [ 1745.188291][T26224] syzkaller0: entered promiscuous mode [ 1745.188321][T26224] syzkaller0: entered allmulticast mode [ 1745.428197][T26239] netlink: 'syz.3.13912': attribute type 2 has an invalid length. [ 1745.428223][T26239] netlink: 'syz.3.13912': attribute type 5 has an invalid length. [ 1745.695206][T26250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13915'. [ 1750.598767][T26257] syzkaller0: left promiscuous mode [ 1750.598797][T26257] syzkaller0: left allmulticast mode [ 1750.617519][T20694] net_ratelimit: 10 callbacks suppressed [ 1750.618527][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1750.618649][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1750.644192][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1750.736445][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1750.756192][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1750.800547][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13917'. [ 1750.844497][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1750.867877][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1750.927869][T26280] erspan0: entered promiscuous mode [ 1750.933149][T26280] erspan0: left promiscuous mode [ 1751.013324][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1751.013809][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1751.058113][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13921'. [ 1751.120297][T26289] tap0: tun_chr_ioctl cmd 1074025677 [ 1751.120382][T26289] tap0: linktype set to 804 [ 1751.170738][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1751.172534][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1751.233950][T26293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13924'. [ 1751.819649][T26317] netlink: 'syz.3.13932': attribute type 6 has an invalid length. [ 1751.970997][T26330] syzkaller0: entered promiscuous mode [ 1751.971017][T26330] syzkaller0: entered allmulticast mode [ 1752.271906][T26342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.339313][T26342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.342078][T26342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.367364][T26342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1752.367394][T26342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1752.368841][T26342] veth1_vlan: left promiscuous mode [ 1752.370157][T26342] veth0_vlan: left promiscuous mode [ 1752.407235][T26342] veth0_vlan: entered promiscuous mode [ 1752.409843][T26342] veth1_vlan: entered promiscuous mode [ 1752.427991][T26342] veth1_macvtap: left promiscuous mode [ 1752.429817][T26342] veth0_macvtap: left promiscuous mode [ 1752.431085][T26342] veth0_macvtap: entered promiscuous mode [ 1752.432381][T26342] veth1_macvtap: entered promiscuous mode [ 1752.465182][T26342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1752.466296][T26342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1752.467130][T26342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1752.470219][T26342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1752.504212][T26342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1752.510059][T26342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1752.543379][T20698] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1752.543417][T20698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.544682][T20694] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1752.544712][T20694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.544759][T20694] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1752.544801][T20694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.544838][T20694] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1752.544862][T20694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.563799][T20697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.563907][T20697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.566016][T20697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.566139][T20697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1752.635384][T20690] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1752.636660][T20690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1752.638207][T20690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1752.664893][T15972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1753.243506][T15972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1753.444553][T15972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1753.564636][T26368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13949'. [ 1753.671767][T25106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1753.687250][T25106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1753.688342][T25106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1753.692379][T25106] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1753.715580][T25106] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1753.924345][T26379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13952'. [ 1754.069185][T26388] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1754.069213][T26388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1754.069228][T26388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1754.069484][T26389] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1754.069503][T26389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1754.512137][T26403] netlink: 'syz.1.13955': attribute type 10 has an invalid length. [ 1754.512564][T26403] netlink: 'syz.1.13955': attribute type 10 has an invalid length. [ 1754.777217][T26369] wg2 speed is unknown, defaulting to 1000 [ 1754.779478][T26369] wg2 speed is unknown, defaulting to 1000 [ 1755.519433][T26369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.519561][T26369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.519779][T26369] bridge_slave_0: entered allmulticast mode [ 1755.550065][T26450] Bluetooth: hci0: unsupported parameter 5135 [ 1755.550123][T26450] Bluetooth: hci0: unsupported parameter 8192 [ 1755.550137][T26450] Bluetooth: hci0: unsupported parameter 5135 [ 1755.550150][T26450] Bluetooth: hci0: unsupported parameter 8192 [ 1755.556620][T26450] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20001 [ 1755.594378][T26369] bridge_slave_0: entered promiscuous mode [ 1755.606079][T26369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.606284][T26369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.607518][T26369] bridge_slave_1: entered allmulticast mode [ 1755.611279][T26369] bridge_slave_1: entered promiscuous mode [ 1755.684499][T20694] net_ratelimit: 179 callbacks suppressed [ 1755.684523][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1755.684559][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1755.688016][T26369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.692299][T26369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.844675][ T7438] Bluetooth: hci7: command tx timeout [ 1755.918222][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1755.918312][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1755.952988][T26459] __nla_validate_parse: 4 callbacks suppressed [ 1755.953013][T26459] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13969'. [ 1755.988205][T26369] team0: Port device team_slave_0 added [ 1756.015742][T26369] team0: Port device team_slave_1 added [ 1756.075264][T26470] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1756.123513][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1756.123555][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1756.207405][T26478] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13974'. [ 1756.266231][T26475] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1756.402763][T26369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.402784][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.402811][T26369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.411586][T26369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.411602][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.411625][T26369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.602097][T26492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13978'. [ 1756.731177][T26492] bond8: Unable to set down delay as MII monitoring is disabled [ 1756.749758][T26492] bond8 (unregistering): Released all slaves [ 1756.803507][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1756.839597][T26369] hsr_slave_0: entered promiscuous mode [ 1756.847629][T26369] hsr_slave_1: entered promiscuous mode [ 1756.851444][T26369] debugfs: 'hsr0' already exists in 'hsr' [ 1756.851467][T26369] Cannot create hsr debugfs directory [ 1756.870881][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1756.870930][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1756.964443][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1757.343464][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1757.343530][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1757.540137][T26517] netlink: 160 bytes leftover after parsing attributes in process `syz.5.13985'. [ 1757.555448][T26517] netlink: 67 bytes leftover after parsing attributes in process `syz.5.13985'. [ 1757.556962][T26520] netlink: 'syz.6.13986': attribute type 1 has an invalid length. [ 1757.645061][T26520] bond3: entered promiscuous mode [ 1757.645655][T26520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1757.928942][ T7438] Bluetooth: hci7: command tx timeout [ 1758.028730][T26540] netlink: 'syz.1.13990': attribute type 1 has an invalid length. [ 1758.049241][T26520] bond3: (slave bridge1): making interface the new active one [ 1758.049269][T26520] bridge1: entered promiscuous mode [ 1758.067763][T26520] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1758.200826][T26369] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1758.218633][T26369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1758.221524][T26369] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1758.246547][T26369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1758.247638][T26369] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1758.275165][T26369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1758.276249][T26369] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1758.299473][T26369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1758.615075][T26369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.681149][T26369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.719244][T20687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.719378][T20687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1758.806653][T20691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.806780][T20691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.968635][T26567] syzkaller0: entered promiscuous mode [ 1758.968662][T26567] syzkaller0: entered allmulticast mode [ 1759.202694][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13999'. [ 1759.258769][T26581] tc_dump_action: action bad kind [ 1759.508500][T26590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14001'. [ 1759.586844][T26590] bond4: option all_slaves_active: invalid value (255) [ 1759.589596][T26590] bond4 (unregistering): Released all slaves [ 1760.003991][ T7438] Bluetooth: hci7: command tx timeout [ 1760.028162][T26617] xt_hl: Unknown TTL match mode: 237 [ 1760.322651][T26629] netlink: 'syz.1.14007': attribute type 10 has an invalid length. [ 1760.358413][T26629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.380170][T26629] bond0: (slave team0): Enslaving as an active interface with an up link [ 1760.489532][T26369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.322953][T26647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14012'. [ 1761.407400][T26648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14012'. [ 1762.116465][ T7438] Bluetooth: hci7: command tx timeout [ 1765.381039][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1766.019478][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1766.134082][T13575] net_ratelimit: 36 callbacks suppressed [ 1766.134108][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1766.145259][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1766.247726][T13564] bond5: (slave dummy0): failed to get link speed/duplex [ 1766.314534][T13564] bond2: (slave bridge2): failed to get link speed/duplex [ 1766.362100][T26369] veth0_vlan: entered promiscuous mode [ 1766.379295][T26661] ip_tables: iptables: counters copy to user failed while replacing table [ 1766.411814][T26369] veth1_vlan: entered promiscuous mode [ 1766.487454][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1766.488090][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1766.577394][T26369] veth0_macvtap: entered promiscuous mode [ 1766.615459][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14018'. [ 1766.620372][T26369] veth1_macvtap: entered promiscuous mode [ 1766.633536][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1766.633581][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1766.643571][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1766.695495][T26369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.758567][T26369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.785818][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1766.841950][T20691] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.863711][T20697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.977372][T26682] netlink: 'syz.5.14021': attribute type 4 has an invalid length. [ 1766.977394][T26682] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.14021'. [ 1767.025494][T20698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.045677][T20698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.325176][T13575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.325202][T13575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.495920][T20698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.495945][T20698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.386525][T26726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14031'. [ 1768.548288][T26733] netlink: 'syz.3.14034': attribute type 28 has an invalid length. [ 1768.548318][T26733] netlink: 'syz.3.14034': attribute type 3 has an invalid length. [ 1768.548332][T26733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14034'. [ 1768.552293][T26733] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14034'. [ 1768.663012][T26736] netlink: 212 bytes leftover after parsing attributes in process `syz.1.14035'. [ 1768.988168][T26758] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14041'. [ 1769.172734][T26768] netlink: 59 bytes leftover after parsing attributes in process `syz.1.14043'. [ 1769.451820][T26776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14047'. [ 1769.530768][T26782] netlink: 'syz.1.14047': attribute type 13 has an invalid length. [ 1769.530795][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14047'. [ 1769.708795][T26782] bond9: up delay (1) is not a multiple of miimon (3), value rounded to 0 ms [ 1769.708828][T26782] bond9: option all_slaves_active: invalid value (10) [ 1769.739248][T26782] bond9 (unregistering): Released all slaves [ 1770.173637][T26796] xt_limit: Overflow, try lower: 6/2147483648 [ 1770.220921][T26796] xt_recent: Unsupported userspace flags (000000c5) [ 1770.381351][T26796] wg2 speed is unknown, defaulting to 1000 [ 1770.390189][T26796] wg2 speed is unknown, defaulting to 1000 [ 1771.183568][T13575] net_ratelimit: 62 callbacks suppressed [ 1771.183591][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1771.183627][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1771.294179][T13564] bond2: (slave bridge2): failed to get link speed/duplex [ 1771.294256][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1771.403707][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1771.403756][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1771.513689][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1771.513739][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1771.625730][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1771.625779][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1771.838797][T26849] __nla_validate_parse: 3 callbacks suppressed [ 1771.838820][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14069'. [ 1771.940114][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14074'. [ 1771.971004][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14071'. [ 1771.971328][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14071'. [ 1772.058303][T26864] veth2: entered allmulticast mode [ 1772.460400][T26886] syzkaller1: entered promiscuous mode [ 1772.460426][T26886] syzkaller1: entered allmulticast mode [ 1772.822748][T26905] netlink: 'syz.3.14085': attribute type 1 has an invalid length. [ 1772.869171][T26905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1772.956123][T26906] bond4 (unregistering): Released all slaves [ 1773.036467][T26913] netlink: 'syz.7.14087': attribute type 1 has an invalid length. [ 1773.037416][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14087'. [ 1773.037437][T26913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14087'. [ 1773.038466][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14087'. [ 1773.038486][T26913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14087'. [ 1773.201715][T26920] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14090'. [ 1773.459715][T26933] x_tables: duplicate underflow at hook 3 [ 1773.731559][T26940] syzkaller0: entered promiscuous mode [ 1773.731589][T26940] syzkaller0: entered allmulticast mode [ 1773.747326][T26943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14099'. [ 1773.918308][T26946] veth0_to_bridge: entered promiscuous mode [ 1773.918963][T26946] macvtap3: entered allmulticast mode [ 1773.918984][T26946] veth0_to_bridge: entered allmulticast mode [ 1773.949252][T26946] veth0_to_bridge: left allmulticast mode [ 1773.949287][T26946] veth0_to_bridge: left promiscuous mode [ 1774.439038][T26967] netlink: 'syz.5.14108': attribute type 21 has an invalid length. [ 1775.122164][T26997] syzkaller0: entered promiscuous mode [ 1775.122190][T26997] syzkaller0: entered allmulticast mode [ 1775.130264][T27003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1776.464538][T13564] net_ratelimit: 74 callbacks suppressed [ 1776.464563][T13564] bond5: (slave dummy0): failed to get link speed/duplex [ 1776.464602][T13564] bond2: (slave bridge2): failed to get link speed/duplex [ 1776.499626][T27037] syzkaller1: entered promiscuous mode [ 1776.499653][T27037] syzkaller1: entered allmulticast mode [ 1776.598999][T13564] bond5: (slave dummy0): failed to get link speed/duplex [ 1776.599050][T13564] bond2: (slave bridge2): failed to get link speed/duplex [ 1776.721999][T27057] vlan4: left allmulticast mode [ 1776.722044][T27057] geneve0: left allmulticast mode [ 1776.722093][T27057] vlan4: left promiscuous mode [ 1776.722107][T27057] geneve0: left promiscuous mode [ 1776.722557][T27057] bridge0: port 1(vlan4) entered disabled state [ 1776.767727][T27057] bond3: left allmulticast mode [ 1776.767760][T27057] bond3: left promiscuous mode [ 1776.769782][T27057] bridge0: port 3(bond3) entered disabled state [ 1776.797111][T27057] bridge_slave_1: left allmulticast mode [ 1776.797141][T27057] bridge_slave_1: left promiscuous mode [ 1776.797380][T27057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.898197][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1776.898249][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1777.007021][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1777.007071][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1777.007442][T27062] netlink: 'syz.6.14132': attribute type 1 has an invalid length. [ 1777.123011][T27066] __nla_validate_parse: 8 callbacks suppressed [ 1777.123035][T27066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14133'. [ 1777.159878][T27069] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14132'. [ 1777.169005][T27062] bond4: entered promiscuous mode [ 1777.172708][T27062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1777.194667][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1777.194720][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1777.227675][T27062] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14132'. [ 1777.227775][T27062] bond4: entered allmulticast mode [ 1777.952355][T27097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14143'. [ 1778.249966][ T7438] Bluetooth: hci7: connection err: -111 [ 1779.176862][T27124] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14148'. [ 1779.465618][T27134] netlink: 'syz.1.14150': attribute type 1 has an invalid length. [ 1779.465643][T27134] netlink: 756 bytes leftover after parsing attributes in process `syz.1.14150'. [ 1779.964851][T20697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.964877][T20697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.420846][T27170] sctp: [Deprecated]: syz.6.14156 (pid 27170) Use of int in max_burst socket option. [ 1780.420846][T27170] Use struct sctp_assoc_value instead [ 1780.740335][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14160'. [ 1780.759267][T27184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14160'. [ 1780.822795][T27186] netlink: 'syz.1.14160': attribute type 11 has an invalid length. [ 1781.069987][T27187] ovs-dp0: entered promiscuous mode [ 1781.487336][T20691] net_ratelimit: 55 callbacks suppressed [ 1781.487363][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1781.487414][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1781.593489][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1781.593537][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1781.637713][T27204] syzkaller0: entered promiscuous mode [ 1781.637741][T27204] syzkaller0: entered allmulticast mode [ 1781.712087][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1781.712136][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1781.819025][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1781.819058][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1781.924774][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1781.924823][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1782.003394][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1782.005087][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1782.913722][T27227] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14171'. [ 1782.936484][T27227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14171'. [ 1782.942157][T27236] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14173'. [ 1783.088281][T27239] netlink: 'syz.7.14174': attribute type 3 has an invalid length. [ 1783.088300][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14174'. [ 1783.283647][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1783.633471][T27260] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14182'. [ 1784.031370][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031466][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031557][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031652][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031732][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031817][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031903][T27276] x_tables: duplicate underflow at hook 1 [ 1784.031984][T27276] x_tables: duplicate underflow at hook 1 [ 1784.032065][T27276] x_tables: duplicate underflow at hook 1 [ 1784.032158][T27276] x_tables: duplicate underflow at hook 1 [ 1784.222869][T27283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14191'. [ 1784.467621][T27284] 8021q: adding VLAN 0 to HW filter on device .` [ 1784.529315][T27284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.549964][T27284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.644568][T27284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1784.650167][T27284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.678718][T27284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1784.680135][T27284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.720710][T27284] veth1_vlan: left promiscuous mode [ 1784.721522][T27284] veth0_vlan: left promiscuous mode [ 1784.738544][T27284] veth0_vlan: entered promiscuous mode [ 1784.760258][T27284] veth1_vlan: entered promiscuous mode [ 1784.778959][T27284] veth1_macvtap: left promiscuous mode [ 1784.785951][T27284] veth0_macvtap: left promiscuous mode [ 1784.788997][T27284] veth0_macvtap: entered promiscuous mode [ 1784.795421][T27284] veth1_macvtap: entered promiscuous mode [ 1784.819059][T27284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1784.821989][T27284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1784.826684][T27284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1784.829978][T27284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1784.850261][T27284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1784.856274][T27284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1784.860542][T27284] batman_adv: batadv0: Interface activated: vlan2 [ 1784.903587][T27304] netlink: 'syz.6.14196': attribute type 1 has an invalid length. [ 1784.903605][T27304] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14196'. [ 1784.905643][T27284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.915358][T27284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1785.006291][T15971] wg2 speed is unknown, defaulting to 1000 [ 1785.006361][T15971] syz0: Port: 1 Link ACTIVE [ 1785.015055][T20690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.046451][T13575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.046501][T13575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.046535][T13575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.307844][T27317] netlink: 404 bytes leftover after parsing attributes in process `syz.1.14201'. [ 1785.307873][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14201'. [ 1785.307891][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14201'. [ 1785.308812][T27317] netlink: 'syz.1.14201': attribute type 1 has an invalid length. [ 1785.325438][T27321] netlink: 'syz.5.14202': attribute type 1 has an invalid length. [ 1785.642522][T27324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1785.817647][T27320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1785.869841][T27320] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1785.870816][T27320] ip6gre1: left promiscuous mode [ 1785.870837][T27320] ip6gre1: left allmulticast mode [ 1785.898673][T27320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1786.268753][T27356] netlink: 'syz.7.14208': attribute type 1 has an invalid length. [ 1786.428276][T27356] bond2: entered promiscuous mode [ 1786.429139][T27356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1786.521157][T27362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1786.521591][T27362] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1786.521614][T27362] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1786.591183][T27362] bond2: (slave wireguard0): making interface the new active one [ 1786.599387][T27362] wireguard0: entered promiscuous mode [ 1786.618202][T27362] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1786.693973][T20690] net_ratelimit: 53 callbacks suppressed [ 1786.694000][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1786.694149][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1786.736095][T27371] ip_tables: iptables: counters copy to user failed while replacing table [ 1786.803550][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1786.803598][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1786.919581][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1786.919640][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1787.023674][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1787.023721][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1787.122928][T27377] v: renamed from veth0_vlan (while UP) [ 1787.123469][ C1] openvswitch: cpu_id mismatch with handler threads [ 1787.320403][T27404] netlink: 'syz.6.14223': attribute type 11 has an invalid length. [ 1787.320433][T27404] netlink: 'syz.6.14223': attribute type 4 has an invalid length. [ 1787.386649][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1787.478500][T27404] netlink: 'syz.6.14223': attribute type 1 has an invalid length. [ 1787.707258][T27420] nbd: must specify a size in bytes for the device [ 1788.039367][T27434] __nla_validate_parse: 16 callbacks suppressed [ 1788.039392][T27434] netlink: 72 bytes leftover after parsing attributes in process `syz.7.14228'. [ 1788.045185][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14230'. [ 1788.045205][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14230'. [ 1788.058982][T27434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14228'. [ 1788.078727][T27430] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1789.187331][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14246'. [ 1789.865540][T27519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14249'. [ 1790.145813][T27531] netlink: 'syz.5.14253': attribute type 2 has an invalid length. [ 1790.145839][T27531] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14253'. [ 1790.272526][T27531] netlink: 'syz.5.14253': attribute type 10 has an invalid length. [ 1790.322352][T27531] team0: Port device v added [ 1790.551398][T27552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14256'. [ 1790.633830][T27559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14262'. [ 1790.633861][T27559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14262'. [ 1790.679018][T27562] netlink: 'syz.6.14261': attribute type 1 has an invalid length. [ 1791.280308][T27592] xt_connbytes: Forcing CT accounting to be enabled [ 1791.723430][T20697] net_ratelimit: 72 callbacks suppressed [ 1791.723455][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1791.758190][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1791.834480][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1791.863985][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1791.943341][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1791.978126][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1792.054463][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1792.092824][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1792.138303][ T31] audit: type=1804 audit(1790912891.272:58): pid=27629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14280" name="/newroot/521/cgroup.controllers" dev="tmpfs" ino=2683 res=1 errno=0 [ 1792.138483][ T31] audit: type=1800 audit(1790912891.272:59): pid=27629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14280" name="cgroup.controllers" dev="tmpfs" ino=2683 res=0 errno=0 [ 1792.141676][T27628] lo: entered promiscuous mode [ 1792.141698][T27628] lo: entered allmulticast mode [ 1792.197881][T27628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1792.224038][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1792.776484][T27667] ªªªªªª: renamed from vlan0 (while UP) [ 1793.143695][T27684] FAULT_INJECTION: forcing a failure. [ 1793.143695][T27684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.143719][T27684] CPU: 1 UID: 0 PID: 27684 Comm: syz.1.14295 Not tainted syzkaller #0 PREEMPT(full) [ 1793.143734][T27684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.143742][T27684] Call Trace: [ 1793.143747][T27684] [ 1793.143753][T27684] dump_stack_lvl+0xe8/0x150 [ 1793.143779][T27684] should_fail_ex+0x410/0x560 [ 1793.143801][T27684] _copy_from_iter+0x1d3/0x1660 [ 1793.143827][T27684] ? __lock_acquire+0x747/0x2de0 [ 1793.143851][T27684] ? __pfx__copy_from_iter+0x10/0x10 [ 1793.143890][T27684] tun_get_user+0x26b/0x44d0 [ 1793.143940][T27684] ? aa_file_perm+0x18b/0x15f0 [ 1793.143973][T27684] ? aa_file_perm+0x4ed/0x15f0 [ 1793.143995][T27684] ? __pfx_tun_get_user+0x10/0x10 [ 1793.144011][T27684] ? __lock_acquire+0x747/0x2de0 [ 1793.144033][T27684] ? kstrtoull+0x137/0x1d0 [ 1793.144075][T27684] ? ref_tracker_alloc+0x341/0x4b0 [ 1793.144097][T27684] ? lock_acquire+0x115/0x350 [ 1793.144117][T27684] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1793.144142][T27684] ? lock_acquire+0x115/0x350 [ 1793.144154][T27684] ? tun_get+0x1c/0x2f0 [ 1793.144174][T27684] ? tun_get+0x1c/0x2f0 [ 1793.144193][T27684] ? tun_get+0x1c/0x2f0 [ 1793.144218][T27684] tun_chr_write_iter+0x113/0x200 [ 1793.144241][T27684] vfs_write+0x612/0xba0 [ 1793.144275][T27684] ? __pfx_vfs_write+0x10/0x10 [ 1793.144297][T27684] ? __fget_files+0x2a/0x420 [ 1793.144318][T27684] ksys_write+0x150/0x270 [ 1793.144336][T27684] ? __pfx_ksys_write+0x10/0x10 [ 1793.144359][T27684] do_syscall_64+0x166/0x520 [ 1793.144378][T27684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.144392][T27684] ? clear_bhb_loop+0x70/0xc0 [ 1793.144406][T27684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.144418][T27684] RIP: 0033:0x7f7b6459e159 [ 1793.144434][T27684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.144444][T27684] RSP: 002b:00007f7b6547b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1793.144460][T27684] RAX: ffffffffffffffda RBX: 00007f7b64825fa0 RCX: 00007f7b6459e159 [ 1793.144469][T27684] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000003 [ 1793.144477][T27684] RBP: 00007f7b6547b090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.144485][T27684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.144492][T27684] R13: 00007f7b64826038 R14: 00007f7b64825fa0 R15: 00007ffc69d6b9d8 [ 1793.144512][T27684] [ 1793.449269][T27686] __nla_validate_parse: 8 callbacks suppressed [ 1793.449293][T27686] netlink: 844 bytes leftover after parsing attributes in process `syz.3.14296'. [ 1793.449353][T27686] netlink: 844 bytes leftover after parsing attributes in process `syz.3.14296'. [ 1793.724109][T27690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1793.728701][T27691] žÿ: renamed from team_slave_1 (while UP) [ 1794.018049][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14304'. [ 1794.018111][T27713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14304'. [ 1794.031711][T27713] IPv6: NLM_F_CREATE should be specified when creating new route [ 1794.526032][T27727] ip6tnl3: entered allmulticast mode [ 1794.699270][T27720] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1794.731008][T27720] bond10 (unregistering): Released all slaves [ 1794.973522][T27739] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1795.162011][T27760] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1795.232702][T27762] syzkaller1: entered promiscuous mode [ 1795.232727][T27762] syzkaller1: entered allmulticast mode [ 1795.300989][T27772] netlink: 104 bytes leftover after parsing attributes in process `syz.6.14321'. [ 1795.336330][T27770] rdma_rxe: rxe_newlink: failed to add lo [ 1795.420550][T27779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14324'. [ 1795.420574][T27779] netlink: 14 bytes leftover after parsing attributes in process `syz.6.14324'. [ 1795.571328][T27783] netlink: 64587 bytes leftover after parsing attributes in process `syz.1.14326'. [ 1795.695819][T27791] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14327'. [ 1795.695850][T27791] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14327'. [ 1795.695864][T27791] netlink: 'syz.6.14327': attribute type 4 has an invalid length. [ 1795.878163][T27798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1795.939801][T27798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1796.029871][T27796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1796.177292][T27817] block nbd8: server does not support multiple connections per device. [ 1796.181449][T27817] block nbd8: shutting down sockets [ 1796.335442][T27821] netlink: 'syz.7.14336': attribute type 11 has an invalid length. [ 1796.335462][T27821] netlink: 'syz.7.14336': attribute type 4 has an invalid length. [ 1796.358436][T27821] netlink: 'syz.7.14336': attribute type 1 has an invalid length. [ 1796.734560][T20698] net_ratelimit: 55 callbacks suppressed [ 1796.734585][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1796.734629][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1796.778721][T27832] gre1: entered promiscuous mode [ 1796.993912][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1796.993962][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1797.113979][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1797.114028][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1797.283736][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1797.283789][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1797.360884][T27851] netlink: 'syz.3.14348': attribute type 11 has an invalid length. [ 1797.360912][T27851] netlink: 'syz.3.14348': attribute type 4 has an invalid length. [ 1797.365902][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1797.395718][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1797.395799][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1797.410566][T27867] netlink: 'syz.5.14352': attribute type 46 has an invalid length. [ 1797.431943][T27866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.510563][T27867] syzkaller1: entered promiscuous mode [ 1797.510590][T27867] syzkaller1: entered allmulticast mode [ 1798.477829][T27887] netlink: 'syz.3.14353': attribute type 1 has an invalid length. [ 1798.838366][T27900] __nla_validate_parse: 5 callbacks suppressed [ 1798.838393][T27900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14358'. [ 1798.840291][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14358'. [ 1798.895414][T27899] wg2 speed is unknown, defaulting to 1000 [ 1798.900917][T27899] wg2 speed is unknown, defaulting to 1000 [ 1799.550627][T27894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1799.739310][T27940] netlink: 'syz.3.14369': attribute type 16 has an invalid length. [ 1799.739339][T27940] netlink: 'syz.3.14369': attribute type 17 has an invalid length. [ 1800.060561][T27940] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1800.168331][T27940] ip6tnl3: left allmulticast mode [ 1800.172629][T27940] gre1: left promiscuous mode [ 1800.525686][T27974] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14376'. [ 1800.925953][T27945] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14371'. [ 1801.112230][T27945] netlink: 5272 bytes leftover after parsing attributes in process `syz.7.14371'. [ 1801.117008][T27945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14371'. [ 1801.384226][T27997] syzkaller0: entered promiscuous mode [ 1801.384253][T27997] syzkaller0: entered allmulticast mode [ 1801.532344][T28005] syzkaller1: entered allmulticast mode [ 1801.621455][T28011] block nbd8: server does not support multiple connections per device. [ 1801.644103][T28011] block nbd8: shutting down sockets [ 1801.744434][T13575] net_ratelimit: 51 callbacks suppressed [ 1801.744459][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1801.753556][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1801.855503][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1801.871262][T13563] bond5: (slave dummy0): failed to get link speed/duplex [ 1801.957588][T28022] batman_adv: batadv0: Adding interface: dummy0 [ 1801.957608][T28022] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.957638][T28022] batman_adv: batadv0: Interface activated: dummy0 [ 1801.965365][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1802.006089][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1802.184044][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1802.184120][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1802.315344][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1802.315394][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1802.372460][T28035] xt_socket: unknown flags 0x8 [ 1802.866049][T28049] bridge8: entered promiscuous mode [ 1802.866152][T28049] bridge8: entered allmulticast mode [ 1803.099424][T28059] netlink: 'syz.5.14405': attribute type 20 has an invalid length. [ 1803.099452][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14405'. [ 1803.178746][T28059] netlink: 'syz.5.14405': attribute type 20 has an invalid length. [ 1803.178784][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14405'. [ 1803.303976][T28066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14407'. [ 1803.409707][T28066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14407'. [ 1803.496657][T28073] syzkaller1: entered promiscuous mode [ 1803.496682][T28073] syzkaller1: entered allmulticast mode [ 1803.913676][T28105] __nla_validate_parse: 1 callbacks suppressed [ 1803.913700][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14417'. [ 1803.917360][T28101] batman_adv: batadv0: Interface deactivated: dummy0 [ 1803.918012][T28106] netlink: 284 bytes leftover after parsing attributes in process `syz.3.14417'. [ 1803.919626][T28101] batman_adv: batadv0: Removing interface: dummy0 [ 1803.977678][T28101] bridge_slave_0: left allmulticast mode [ 1803.977709][T28101] bridge_slave_0: left promiscuous mode [ 1803.977953][T28101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.011962][T28101] bridge_slave_1: left allmulticast mode [ 1804.011992][T28101] bridge_slave_1: left promiscuous mode [ 1804.012239][T28101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.052479][T28101] bond0: (slave bond_slave_0): Releasing backup interface [ 1804.080648][T28101] bond0: (slave bond_slave_1): Releasing backup interface [ 1804.125017][T28101] team0: Port device team_slave_0 removed [ 1804.145001][T28101] team0: Port device team_slave_1 removed [ 1804.146028][T28101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.146051][T28101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.152184][T28101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.152209][T28101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.517948][T28122] netlink: 'syz.6.14422': attribute type 4 has an invalid length. [ 1804.881337][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14426'. [ 1805.496250][T28175] netlink: 'syz.7.14433': attribute type 2 has an invalid length. [ 1805.526009][T28175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14433'. [ 1805.957752][T28204] netlink: 'syz.6.14443': attribute type 23 has an invalid length. [ 1805.960963][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14442'. [ 1805.960987][T28202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14442'. [ 1805.984530][T28200] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1806.012359][T28200] bond5 (unregistering): Released all slaves [ 1806.016651][T28205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14442'. [ 1806.458693][T28228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14451'. [ 1806.649319][T28237] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1806.734967][T28242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14452'. [ 1806.734994][T28242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14452'. [ 1806.735037][T28242] netlink: 'syz.6.14452': attribute type 13 has an invalid length. [ 1806.799582][T20700] net_ratelimit: 60 callbacks suppressed [ 1806.799608][T20700] bond2: (slave bridge2): failed to get link speed/duplex [ 1806.799677][T20700] bond5: (slave dummy0): failed to get link speed/duplex [ 1806.887674][T28245] netlink: 'syz.5.14455': attribute type 8 has an invalid length. [ 1806.887702][T28245] netlink: 'syz.5.14455': attribute type 3 has an invalid length. [ 1806.887718][T28245] netlink: 'syz.5.14455': attribute type 4 has an invalid length. [ 1806.917824][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1806.917869][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1807.045009][T15222] bond5: (slave dummy0): failed to get link speed/duplex [ 1807.045078][T15222] bond2: (slave bridge2): failed to get link speed/duplex [ 1807.049038][T28250] ip_tables: iptables: counters copy to user failed while replacing table [ 1807.160863][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1807.160911][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1807.263682][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1807.605909][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1807.840704][T28297] netlink: 'syz.1.14470': attribute type 1 has an invalid length. [ 1808.541464][T20691] nci: nci_ntf_packet: unknown ntf opcode 0x123 [ 1808.774946][T28346] validate_nla: 1 callbacks suppressed [ 1808.774970][T28346] netlink: 'syz.6.14483': attribute type 4 has an invalid length. [ 1809.031407][T28354] syzkaller0: entered promiscuous mode [ 1809.031434][T28354] syzkaller0: entered allmulticast mode [ 1809.094967][T28317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1809.275476][T28361] netlink: 'syz.1.14487': attribute type 1 has an invalid length. [ 1809.302864][T28362] syzkaller0: entered promiscuous mode [ 1809.302881][T28362] syzkaller0: entered allmulticast mode [ 1809.343914][T28361] bond10: (slave veth0_to_bond): making interface the new active one [ 1809.345306][T28361] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1809.387740][T28361] macvlan2: entered promiscuous mode [ 1809.387767][T28361] macvlan2: entered allmulticast mode [ 1809.388452][T28361] bond10: entered promiscuous mode [ 1809.388470][T28361] veth0_to_bond: entered promiscuous mode [ 1809.389074][T28361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1809.392213][T28361] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1809.392743][T28361] bond10: left promiscuous mode [ 1809.392756][T28361] veth0_to_bond: left promiscuous mode [ 1809.506428][T28361] nbd: couldn't find a device at index 0 [ 1809.803385][T28383] __nla_validate_parse: 8 callbacks suppressed [ 1809.803408][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14491'. [ 1810.105491][T28377] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14493'. [ 1810.105982][T28387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14491'. [ 1810.131006][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14496'. [ 1810.212020][T28398] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 1810.230540][T28398] bond5 (unregistering): Released all slaves [ 1810.255721][T28404] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14497'. [ 1810.470625][T28406] Bluetooth: hci0: unsupported parameter 5134 [ 1810.470652][T28406] Bluetooth: hci0: unsupported parameter 8192 [ 1810.470666][T28406] Bluetooth: hci0: unsupported parameter 5134 [ 1810.470679][T28406] Bluetooth: hci0: unsupported parameter 8192 [ 1810.682780][T28418] netlink: 'syz.1.14503': attribute type 4 has an invalid length. [ 1810.701359][T28418] netlink: 'syz.1.14503': attribute type 4 has an invalid length. [ 1811.209630][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.250282][T28447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1811.251836][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.294494][T28448] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1811.294917][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.295227][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.295481][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.295720][T28447] netlink: 'syz.7.14510': attribute type 1 has an invalid length. [ 1811.335363][T28455] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14510'. [ 1811.379235][T28448] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1811.412041][T28452] bond3: (slave dummy0): making interface the new active one [ 1811.418049][T28452] dummy0: entered promiscuous mode [ 1811.420823][T28452] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1811.460144][T28455] bond3: (slave dummy0): Releasing active interface [ 1811.665210][T28448] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1811.761439][T28448] bond3: (slave veth9): Enslaving as an active interface with a down link [ 1811.901370][T28448] bond3: (slave veth11): Enslaving as an active interface with a down link [ 1811.992129][T28448] bond3: (slave veth13): Enslaving as an active interface with a down link [ 1812.073432][T28448] bond3: (slave veth15): Enslaving as an active interface with a down link [ 1812.164486][T20687] net_ratelimit: 55 callbacks suppressed [ 1812.164511][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1812.164553][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1812.165955][T28462] syzkaller0: entered promiscuous mode [ 1812.165976][T28462] syzkaller0: entered allmulticast mode [ 1812.278926][T20690] bond5: (slave dummy0): failed to get link speed/duplex [ 1812.278974][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1812.289480][T28476] Cannot find add_set index 0 as target [ 1812.386961][T15222] bond2: (slave bridge2): failed to get link speed/duplex [ 1812.389786][T28492] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14519'. [ 1812.482263][T28490] bond5: option primary_reselect: invalid value (6) [ 1812.501035][T28490] bond5 (unregistering): Released all slaves [ 1812.543822][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1812.553774][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1812.706084][T20690] bond2: (slave bridge2): failed to get link speed/duplex [ 1812.716437][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1812.729554][ T7438] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1812.768806][T28507] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14522'. [ 1812.934552][T13563] bond2: (slave bridge2): failed to get link speed/duplex [ 1813.298536][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14533'. [ 1813.479093][T28545] wg2 speed is unknown, defaulting to 1000 [ 1813.496309][T28545] wg2 speed is unknown, defaulting to 1000 [ 1813.819026][T25106] Bluetooth: hci4: unexpected event 0x04 length: 19 > 10 [ 1813.819089][T25106] Bluetooth: unknown link type 128 [ 1813.888571][T28568] lo: left allmulticast mode [ 1813.945478][T28570] syzkaller0: entered promiscuous mode [ 1813.945505][T28570] syzkaller0: entered allmulticast mode [ 1814.259409][T28580] xt_hashlimit: size too large, truncated to 1048576 [ 1814.415384][ T31] audit: type=1800 audit(1790912913.552:60): pid=28586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14546" name="memory.events" dev="tmpfs" ino=2051 res=0 errno=0 [ 1814.487767][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14549'. [ 1814.721621][T28604] IPVS: stopping master sync thread 23499 ... [ 1815.007824][T28609] validate_nla: 3 callbacks suppressed [ 1815.007850][T28609] netlink: 'syz.7.14551': attribute type 4 has an invalid length. [ 1815.074905][T28610] netlink: 'syz.7.14551': attribute type 4 has an invalid length. [ 1815.183641][T28612] __nla_validate_parse: 1 callbacks suppressed [ 1815.183664][T28612] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14552'. [ 1815.183681][T28612] nbd: illegal input index 65508 [ 1815.200344][T28612] netlink: 'syz.5.14552': attribute type 1 has an invalid length. [ 1815.441177][T28622] netlink: 'syz.6.14554': attribute type 3 has an invalid length. [ 1815.500512][T25106] Bluetooth: hci2: SCO packet too small [ 1815.843533][T25106] Bluetooth: hci4: command 0x0406 tx timeout [ 1815.926089][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1816.261514][T28666] netlink: 'syz.1.14568': attribute type 10 has an invalid length. [ 1816.303708][T28666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1816.309417][T28666] team0: Port device netdevsim1 added [ 1816.478544][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.487947][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.488538][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.494479][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.494774][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.495095][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.496634][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1816.613974][T13575] tipc: Subscription rejected, illegal request [ 1816.943033][T28696] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14576'. [ 1816.968337][T28693] syzkaller1: entered promiscuous mode [ 1816.968366][T28693] syzkaller1: entered allmulticast mode [ 1817.203887][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1817.293369][T15222] net_ratelimit: 50 callbacks suppressed [ 1817.293394][T15222] bond2: (slave bridge2): failed to get link speed/duplex [ 1817.294541][T15222] bond5: (slave dummy0): failed to get link speed/duplex [ 1817.404492][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1817.404536][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1817.513636][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1817.513686][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1817.624171][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1817.624217][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1817.733625][T20691] bond2: (slave bridge2): failed to get link speed/duplex [ 1817.733679][T20691] bond5: (slave dummy0): failed to get link speed/duplex [ 1817.843834][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1818.506397][ T7438] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1818.511211][ T7438] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1818.525753][ T7438] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1818.549630][ T7438] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1818.550386][ T7438] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1818.941556][T28750] wg2 speed is unknown, defaulting to 1000 [ 1818.942627][T28750] wg2 speed is unknown, defaulting to 1000 [ 1819.186545][T28750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.186720][T28750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.189147][T28750] bridge_slave_0: entered allmulticast mode [ 1819.190327][T28750] bridge_slave_0: entered promiscuous mode [ 1819.193426][T28750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.193606][T28750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.193747][T28750] bridge_slave_1: entered allmulticast mode [ 1819.195648][T28750] bridge_slave_1: entered promiscuous mode [ 1819.233348][T28750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.237197][T28750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.278250][T28750] team0: Port device team_slave_0 added [ 1819.284971][T28750] team0: Port device team_slave_1 added [ 1819.312151][T28750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.312170][T28750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1819.312195][T28750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.314273][T28750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.314287][T28750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1819.314405][T28750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.413923][T28750] hsr_slave_0: entered promiscuous mode [ 1819.414976][T28750] hsr_slave_1: entered promiscuous mode [ 1819.415524][T28750] debugfs: 'hsr0' already exists in 'hsr' [ 1819.415546][T28750] Cannot create hsr debugfs directory [ 1819.595856][T28750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.595884][T28750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.595900][T28750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1819.691207][T28750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.691234][T28750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.691249][T28750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1819.778709][T28687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1819.906627][T28750] team0: Port device netdevsim1 removed [ 1819.911772][T28750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.911810][T28750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.911836][T28750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1820.057455][T28773] netlink: 'syz.5.14594': attribute type 2 has an invalid length. [ 1820.057481][T28773] netlink: 'syz.5.14594': attribute type 1 has an invalid length. [ 1820.057496][T28773] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14594'. [ 1820.060870][T28773] No such timeout policy "syz0" [ 1820.196347][T28750] netdevsim netdevsim1 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1820.196389][T28750] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.196417][T28750] netdevsim netdevsim1 €Â (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1820.290458][T28783] vcan0: tx address claim with dlc 0 [ 1820.646862][T25106] Bluetooth: hci8: command tx timeout [ 1820.820012][T28750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1820.827348][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1820.828582][T28750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1820.869774][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1820.874135][T28750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1820.928256][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1820.929816][T28750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1820.947240][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1821.133775][T28810] xt_limit: Overflow, try lower: 6/2147483648 [ 1821.134670][T28810] __nla_validate_parse: 2 callbacks suppressed [ 1821.134687][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14608'. [ 1821.188252][T28750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.226871][T28750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.256966][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.257115][T15222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.292654][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.292779][T15222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.674985][T28836] gre0: entered promiscuous mode [ 1821.675011][T28836] gre0: entered allmulticast mode [ 1821.873918][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14607'. [ 1821.873957][T28815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14607'. [ 1821.918304][T28815] bridge3: entered promiscuous mode [ 1821.918330][T28815] bridge3: entered allmulticast mode [ 1822.303551][T20687] net_ratelimit: 52 callbacks suppressed [ 1822.303576][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1822.303614][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1822.433883][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1822.433929][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1822.615319][T28861] netlink: 'syz.6.14617': attribute type 1 has an invalid length. [ 1822.639377][T28852] bridge3: entered promiscuous mode [ 1822.639443][T28852] bridge3: entered allmulticast mode [ 1822.691181][T28856] ipvlan2: entered promiscuous mode [ 1822.697452][T28856] team0: Device ipvlan2 failed to register rx_handler [ 1822.725988][T25106] Bluetooth: hci8: command tx timeout [ 1822.863670][T28750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1822.988177][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14618'. [ 1823.054969][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1823.055018][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1823.163035][T28750] veth0_vlan: entered promiscuous mode [ 1823.185247][T20687] bond2: (slave bridge2): failed to get link speed/duplex [ 1823.185296][T20687] bond5: (slave dummy0): failed to get link speed/duplex [ 1823.201941][T28750] veth1_vlan: entered promiscuous mode [ 1823.341812][T28750] veth0_macvtap: entered promiscuous mode [ 1823.375988][T28750] veth1_macvtap: entered promiscuous mode [ 1823.414412][T28750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.435534][T28750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1823.465304][T20697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.502126][T28885] sctp: [Deprecated]: syz.3.14626 (pid 28885) Use of int in max_burst socket option. [ 1823.502126][T28885] Use struct sctp_assoc_value instead [ 1823.588024][T20697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.588107][T20697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.628168][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1823.628218][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1823.628254][T20697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.881464][T13563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.881489][T13563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.038663][T13563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.038689][T13563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.177030][T28894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14628'. [ 1824.178635][T28894] netlink: 'syz.3.14628': attribute type 58 has an invalid length. [ 1824.178658][T28894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14628'. [ 1824.710914][T28917] netlink: 964 bytes leftover after parsing attributes in process `syz.5.14635'. [ 1824.804244][T25106] Bluetooth: hci8: command tx timeout [ 1825.132451][T28935] xt_IDLETIMER: timeout value is zero [ 1825.194974][T28936] netlink: 'syz.6.14640': attribute type 4 has an invalid length. [ 1825.918752][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14648'. [ 1826.258995][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14651'. [ 1826.885118][T25106] Bluetooth: hci8: command tx timeout [ 1826.960349][T29013] netlink: 'syz.3.14663': attribute type 4 has an invalid length. [ 1826.979336][T29013] netlink: 'syz.3.14663': attribute type 5 has an invalid length. [ 1826.979363][T29013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14663'. [ 1826.979964][T29013] netlink: 'syz.3.14663': attribute type 4 has an invalid length. [ 1827.394926][T20698] net_ratelimit: 62 callbacks suppressed [ 1827.394950][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1827.394987][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1827.568283][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1827.568332][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1827.631837][T29018] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1827.631880][T29018] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1827.631919][T29018] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1827.685544][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1827.685593][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1827.759741][T29032] syzkaller1: entered promiscuous mode [ 1827.759766][T29032] syzkaller1: entered allmulticast mode [ 1827.799271][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1827.799315][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1827.822157][T29018] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1827.905190][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1827.905240][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1829.026644][T29083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14678'. [ 1829.512503][T29083] vlan2: entered promiscuous mode [ 1829.512529][T29083] gretap0: entered promiscuous mode [ 1829.701818][T29096] nbd: must specify at least one socket [ 1830.001805][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14686'. [ 1830.013299][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14685'. [ 1830.625816][T29111] hsr_slave_1 (unregistering): left promiscuous mode [ 1830.778337][T29113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1831.012538][T29144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14694'. [ 1831.091126][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.091348][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.091518][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.091687][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.113523][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.113730][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.113884][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.114039][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.114207][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.114353][T29149] netlink: 'syz.1.14694': attribute type 1 has an invalid length. [ 1831.366766][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14699'. [ 1831.366795][T29157] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14699'. [ 1831.386352][ T31] audit: type=1804 audit(1790912930.522:61): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14700" name="/newroot/488/cgroup.controllers" dev="tmpfs" ino=2503 res=1 errno=0 [ 1831.386581][ T31] audit: type=1800 audit(1790912930.522:62): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14700" name="cgroup.controllers" dev="tmpfs" ino=2503 res=0 errno=0 [ 1831.465673][T29156] lo: entered promiscuous mode [ 1831.513622][T29156] tunl0: entered promiscuous mode [ 1831.521867][T29156] gre0: entered promiscuous mode [ 1831.560797][T29156] 0ªX¹¦Dö»: entered promiscuous mode [ 1831.570816][T29156] erspan0: entered promiscuous mode [ 1831.581785][T29156] ip6_vti0: entered promiscuous mode [ 1831.683807][T29156] sit0: entered promiscuous mode [ 1831.718014][T29156] ip6tnl0: entered promiscuous mode [ 1831.807488][T29156] ip6gre0: entered promiscuous mode [ 1831.833516][T29156] syz_tun: entered promiscuous mode [ 1831.839014][T29156] ip6gretap0: entered promiscuous mode [ 1831.860524][T29156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.860824][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.867943][T29156] bridge0: entered promiscuous mode [ 1831.875933][T29156] vcan0: entered promiscuous mode [ 1831.888757][T29156] bond0: entered promiscuous mode [ 1831.888782][T29156] bond_slave_0: entered promiscuous mode [ 1831.888946][T29156] bond_slave_1: entered promiscuous mode [ 1831.889074][T29156] team0: entered promiscuous mode [ 1831.889088][T29156] team_slave_1: entered promiscuous mode [ 1831.891003][T29156] v: entered promiscuous mode [ 1831.921739][T29156] nlmon0: entered promiscuous mode [ 1831.935282][T29156] batadv0: entered promiscuous mode [ 1831.962256][T29156] veth0: entered promiscuous mode [ 1832.002877][T29156] veth1: entered promiscuous mode [ 1832.019572][T29156] wg0: entered promiscuous mode [ 1832.038334][T29156] wg1: entered promiscuous mode [ 1832.041801][T29156] wg2: entered promiscuous mode [ 1832.054177][T29156] veth0_to_bridge: entered promiscuous mode [ 1832.068965][T29156] veth1_to_bridge: entered promiscuous mode [ 1832.122994][T29156] veth0_to_bond: entered promiscuous mode [ 1832.139539][T29156] veth1_to_bond: entered promiscuous mode [ 1832.159591][T29156] veth1_to_team: entered promiscuous mode [ 1832.179698][T29156] veth0_to_batadv: entered promiscuous mode [ 1832.190946][T29156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.190985][T29156] batadv_slave_0: entered promiscuous mode [ 1832.201570][T29156] veth1_to_batadv: entered promiscuous mode [ 1832.216870][T29156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1832.216936][T29156] batadv_slave_1: entered promiscuous mode [ 1832.229680][T29156] xfrm0: entered promiscuous mode [ 1832.240580][T29156] veth0_to_hsr: entered promiscuous mode [ 1832.266189][T29156] veth1_to_hsr: entered promiscuous mode [ 1832.291746][T29156] hsr0: entered promiscuous mode [ 1832.315530][T29156] vlan0: entered promiscuous mode [ 1832.315954][T29156] vlan1: entered promiscuous mode [ 1832.338321][T29156] macvlan0: entered promiscuous mode [ 1832.353494][T29156] macvlan1: entered promiscuous mode [ 1832.362683][T29156] ipvlan0: entered promiscuous mode [ 1832.384111][T29156] ipvlan1: entered promiscuous mode [ 1832.422341][T29156] macvtap0: entered promiscuous mode [ 1832.445670][T29156] macsec0: entered promiscuous mode [ 1832.459720][T29156] geneve1: entered promiscuous mode [ 1832.471102][T29156] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1832.487778][T29156] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1832.490676][T29156] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1832.509755][T29156] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1832.525183][T29156] mac80211_hwsim hwsim211 wlan0: entered promiscuous mode [ 1832.531541][T29156] mac80211_hwsim hwsim212 wlan1: entered promiscuous mode [ 1832.532911][T29156] pim6reg99999999: entered promiscuous mode [ 1832.561275][T29156] mac80211_hwsim hwsim213 wlan2: entered promiscuous mode [ 1832.561908][T29156] syztnl1: entered promiscuous mode [ 1832.576685][T29156] bond1: entered promiscuous mode [ 1832.589616][T29156] vxlan0: entered promiscuous mode [ 1832.597474][T29156] veth2: entered promiscuous mode [ 1832.610366][T29156] veth3: entered promiscuous mode [ 1832.633767][T29156] bond2: entered promiscuous mode [ 1832.639677][T29156] gretap1: entered promiscuous mode [ 1832.657532][T29156] bridge1: entered promiscuous mode [ 1832.680990][T29156] mac80211_hwsim hwsim219 wlan3: entered promiscuous mode [ 1832.710198][T29156] ipvlan2: entered promiscuous mode [ 1832.719960][T29156] ieee802154 phy2 wpan1: entered promiscuous mode [ 1832.721558][T29156] ieee802154 phy2 wpan0: entered promiscuous mode [ 1832.721729][T29156] mac80211_hwsim hwsim221 wlan4: entered promiscuous mode [ 1832.721899][T29156] mac80211_hwsim hwsim222 wlan5: entered promiscuous mode [ 1832.722093][T29156] bond4: entered promiscuous mode [ 1832.722250][T29156] veth4: entered promiscuous mode [ 1832.722407][T29156] veth5: entered promiscuous mode [ 1832.722572][T29156] bond5: entered promiscuous mode [ 1832.741882][T29156] erspan1: entered promiscuous mode [ 1832.759549][T29156] bond8: entered promiscuous mode [ 1832.759708][T29156] bond9: entered promiscuous mode [ 1832.764943][T29156] gre1: entered promiscuous mode [ 1832.778012][T29156] macvlan2: entered promiscuous mode [ 1832.779787][T29156] syztnl2: entered promiscuous mode [ 1832.780178][T29156] @: entered promiscuous mode [ 1832.792379][T29156] ip6erspan0: entered promiscuous mode [ 1832.792619][T29156] gtp0: entered promiscuous mode [ 1832.813559][T12256] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.813593][T12256] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.813637][T12256] net_ratelimit: 303 callbacks suppressed [ 1832.813650][T12256] bond2: (slave bridge2): failed to get link speed/duplex [ 1832.813688][T12256] bond5: (slave dummy0): failed to get link speed/duplex [ 1832.814195][T12256] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.814220][T12256] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.814255][T12256] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.814292][T12256] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.814325][T12256] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.814348][T12256] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.850676][T29167] batman_adv: batadv0: Adding interface: syzkaller0 [ 1832.850695][T29167] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.850989][T29167] batman_adv: batadv0: Interface activated: syzkaller0 [ 1832.951501][T13565] bond2: (slave bridge2): failed to get link speed/duplex [ 1832.951548][T13565] bond5: (slave dummy0): failed to get link speed/duplex [ 1832.979060][T29166] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1833.052418][ T7438] Bluetooth: hci8: command 0x0405 tx timeout [ 1833.392968][T29189] xt_check_table_hooks: 23 callbacks suppressed [ 1833.402029][T29189] x_tables: duplicate underflow at hook 2 [ 1833.886701][T29166] batman_adv: batadv0: Removing interface: syzkaller0 [ 1833.953858][T13568] bond5: (slave dummy0): failed to get link speed/duplex [ 1833.953907][T13568] bond2: (slave bridge2): failed to get link speed/duplex [ 1834.063983][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1834.064031][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1834.097364][T29199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14711'. [ 1834.213352][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1834.213399][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1834.307146][T29205] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1834.380663][T29214] syzkaller0: entered promiscuous mode [ 1834.380691][T29214] syzkaller0: entered allmulticast mode [ 1834.583565][T29221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14719'. [ 1834.792272][T29232] batadv_slave_0: entered promiscuous mode [ 1835.017488][T29231] batadv_slave_0: left promiscuous mode [ 1835.171705][T29256] syzkaller0: entered promiscuous mode [ 1835.171730][T29256] syzkaller0: entered allmulticast mode [ 1835.568727][T29281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14733'. [ 1835.575983][T29283] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14733'. [ 1835.578430][T29285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14733'. [ 1835.839031][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14738'. [ 1835.841716][T29301] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14738'. [ 1835.985175][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14740'. [ 1836.007302][T29313] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1836.397694][T29324] validate_nla: 25 callbacks suppressed [ 1836.397720][T29324] netlink: 'syz.3.14746': attribute type 1 has an invalid length. [ 1836.448932][T29324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1836.490560][T29324] bond5: (slave geneve4): making interface the new active one [ 1836.507890][T29324] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1836.808535][T29346] netlink: 'syz.6.14748': attribute type 1 has an invalid length. [ 1837.224162][T29364] netlink: 'syz.3.14753': attribute type 39 has an invalid length. [ 1837.802322][T29389] bond10 (unregistering): Released all slaves [ 1837.883532][T20698] net_ratelimit: 57 callbacks suppressed [ 1837.883557][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1837.883597][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1837.939202][T29396] __nla_validate_parse: 1 callbacks suppressed [ 1837.939225][T29396] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14760'. [ 1837.941315][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14760'. [ 1837.942083][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14760'. [ 1837.989029][T29383] ip_tables: iptables: counters copy to user failed while replacing table [ 1837.993405][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1837.993448][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1838.103904][T20694] bond5: (slave dummy0): failed to get link speed/duplex [ 1838.104264][T20694] bond2: (slave bridge2): failed to get link speed/duplex [ 1838.214089][T13565] bond2: (slave bridge2): failed to get link speed/duplex [ 1838.214137][T13565] bond5: (slave dummy0): failed to get link speed/duplex [ 1838.287629][T29401] sctp: [Deprecated]: syz.7.14762 (pid 29401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1838.287629][T29401] Use struct sctp_sack_info instead [ 1838.325657][T12256] bond5: (slave dummy0): failed to get link speed/duplex [ 1838.435764][T29408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14764'. [ 1838.561279][T29408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14764'. [ 1838.815790][T29423] macsec0: entered promiscuous mode [ 1838.821474][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14767'. [ 1838.828721][T29423] veth1_macvtap: left promiscuous mode [ 1838.868988][T29423] macsec0 (unregistering): left promiscuous mode [ 1839.257637][T29427] udevd[29427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1839.299682][T29426] udevd[29426]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1839.480169][T29451] netlink: 'syz.5.14776': attribute type 83 has an invalid length. [ 1839.519323][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14777'. [ 1839.614821][T25106] Bluetooth: hci7: connection err: -111 [ 1839.645050][T12256] IPVS: starting estimator thread 0... [ 1839.733344][T29464] IPVS: using max 23 ests per chain, 55200 per kthread [ 1840.063733][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14783'. [ 1840.167442][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14786'. [ 1840.238353][T29492] netlink: 'syz.3.14787': attribute type 10 has an invalid length. [ 1840.354612][T29495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14788'. [ 1840.515498][T29507] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1840.515615][T29507] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1840.515791][T29507] veth1_to_bridge: entered allmulticast mode [ 1841.023473][T29536] pim6reg1: entered promiscuous mode [ 1841.023498][T29536] pim6reg1: entered allmulticast mode [ 1841.861228][T29566] veth1_to_team: entered promiscuous mode [ 1841.878491][T29566] veth1_to_team: left promiscuous mode [ 1842.556840][T29602] syzkaller0: entered promiscuous mode [ 1842.556868][T29602] syzkaller0: entered allmulticast mode [ 1846.349059][T29627] net_ratelimit: 59 callbacks suppressed [ 1846.349085][T29627] ip_tables: iptables: counters copy to user failed while replacing table [ 1846.549665][ T7438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1846.576483][ T7438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1846.584394][ T7438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1846.588420][ T7438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1846.589309][ T7438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1848.733854][T25106] Bluetooth: hci2: command tx timeout [ 1850.627482][T29619] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1850.627529][T29619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1850.627549][T29619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1850.629231][T29620] __nla_validate_parse: 3 callbacks suppressed [ 1850.629251][T29620] netlink: 56 bytes leftover after parsing attributes in process `syz.7.14814'. [ 1850.670288][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1850.727260][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1850.774871][T29636] FAULT_INJECTION: forcing a failure. [ 1850.774871][T29636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.774906][T29636] CPU: 0 UID: 0 PID: 29636 Comm: syz.3.14818 Not tainted syzkaller #0 PREEMPT(full) [ 1850.774929][T29636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1850.774941][T29636] Call Trace: [ 1850.774951][T29636] [ 1850.774962][T29636] dump_stack_lvl+0xe8/0x150 [ 1850.775008][T29636] should_fail_ex+0x410/0x560 [ 1850.775038][T29636] _copy_to_user+0x31/0xb0 [ 1850.775068][T29636] simple_read_from_buffer+0xe1/0x170 [ 1850.775103][T29636] proc_fail_nth_read+0x1bb/0x230 [ 1850.775134][T29636] ? common_file_perm+0x20e/0x2b0 [ 1850.775166][T29636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1850.775201][T29636] ? rw_verify_area+0x24a/0x4c0 [ 1850.775232][T29636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1850.775261][T29636] vfs_read+0x213/0xa80 [ 1850.775294][T29636] ? __pfx___mutex_lock+0x10/0x10 [ 1850.775325][T29636] ? __pfx_vfs_read+0x10/0x10 [ 1850.775356][T29636] ? __fget_files+0x2a/0x420 [ 1850.775388][T29636] ? __fget_files+0x3a2/0x420 [ 1850.775413][T29636] ? __fget_files+0x2a/0x420 [ 1850.775451][T29636] ksys_read+0x150/0x270 [ 1850.775482][T29636] ? __pfx_ksys_read+0x10/0x10 [ 1850.775523][T29636] do_syscall_64+0x166/0x520 [ 1850.775550][T29636] ? trace_irq_disable+0x3b/0x140 [ 1850.775571][T29636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.775593][T29636] ? clear_bhb_loop+0x70/0xc0 [ 1850.775619][T29636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.775639][T29636] RIP: 0033:0x7f390d55e98e [ 1850.775660][T29636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1850.775677][T29636] RSP: 002b:00007f390e4aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1850.775701][T29636] RAX: ffffffffffffffda RBX: 00007f390e4ab6c0 RCX: 00007f390d55e98e [ 1850.775716][T29636] RDX: 000000000000000f RSI: 00007f390e4ab0a0 RDI: 0000000000000004 [ 1850.775729][T29636] RBP: 00007f390e4ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.775742][T29636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.775755][T29636] R13: 00007f390d826038 R14: 00007f390d825fa0 R15: 00007ffe25df7da8 [ 1850.775792][T29636] [ 1850.818185][T25106] Bluetooth: hci2: command tx timeout [ 1850.823323][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1850.847246][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1850.934557][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1850.981736][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1851.055328][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1851.084147][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1851.157202][T29649] ovs-s!: entered promiscuous mode [ 1851.157483][T29641] netlink: 279 bytes leftover after parsing attributes in process `syz.7.14820'. [ 1851.157507][T29641] veth0_to_bond: default FDB implementation only supports local addresses [ 1851.187635][T20688] bond2: (slave bridge2): failed to get link speed/duplex [ 1851.203692][T29649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14822'. [ 1851.340544][T29628] wg2 speed is unknown, defaulting to 1000 [ 1851.342586][T29628] wg2 speed is unknown, defaulting to 1000 [ 1851.465693][T29661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14825'. [ 1851.497364][T29662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14825'. [ 1851.603411][T20697] net_ratelimit: 3 callbacks suppressed [ 1851.603435][T20697] bond5: (slave dummy0): failed to get link speed/duplex [ 1851.603515][T20697] bond2: (slave bridge2): failed to get link speed/duplex [ 1851.795963][T20698] bond2: (slave bridge2): failed to get link speed/duplex [ 1851.796015][T20698] bond5: (slave dummy0): failed to get link speed/duplex [ 1851.903562][T13575] bond5: (slave dummy0): failed to get link speed/duplex [ 1851.903612][T13575] bond2: (slave bridge2): failed to get link speed/duplex [ 1852.055465][T20688] bond2: (slave bridge2): failed to get link speed/duplex [ 1852.055515][T20688] bond5: (slave dummy0): failed to get link speed/duplex [ 1852.222878][T29659] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1852.231920][T29660] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1852.274477][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14830'. [ 1852.283590][T20688] bond2: (slave bridge2): failed to get link speed/duplex [ 1852.283663][T20688] bond5: (slave dummy0): failed to get link speed/duplex [ 1852.363172][T29628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.363345][T29628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.363554][T29628] bridge_slave_0: entered allmulticast mode [ 1852.365783][T29628] bridge_slave_0: entered promiscuous mode [ 1852.400484][T29628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.400700][T29628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.400886][T29628] bridge_slave_1: entered allmulticast mode [ 1852.426359][T29628] bridge_slave_1: entered promiscuous mode [ 1852.471785][T29628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.488262][T29628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.553461][T29628] team0: Port device team_slave_0 added [ 1852.557422][T29628] team0: Port device team_slave_1 added [ 1852.898798][T25106] Bluetooth: hci2: command tx timeout [ 1853.048694][T29702] dvmrp16: entered allmulticast mode [ 1853.078899][T29708] syz_tun: entered allmulticast mode [ 1853.102075][T29628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.102096][T29628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.102123][T29628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.154353][T29628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.154372][T29628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.154396][T29628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.511707][T29628] hsr_slave_0: entered promiscuous mode [ 1853.512913][T29628] hsr_slave_1: entered promiscuous mode [ 1853.528658][T29628] debugfs: 'hsr0' already exists in 'hsr' [ 1853.528685][T29628] Cannot create hsr debugfs directory [ 1853.965838][T25106] Bluetooth: hci4: connection err: -111 [ 1854.504544][T29761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14844'. [ 1854.690500][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14844'. [ 1854.722243][T25106] Bluetooth: hci5: connection err: -111 [ 1854.750474][T29766] netlink: 'syz.3.14846': attribute type 1 has an invalid length. [ 1854.750497][T29766] netlink: 272 bytes leftover after parsing attributes in process `syz.3.14846'. [ 1854.785104][T29628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1854.804403][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1854.805359][T29628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1854.834580][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1854.844036][T29628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1854.872804][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1854.881701][T29628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1854.899115][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1854.963558][T25106] Bluetooth: hci2: command tx timeout [ 1855.112637][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14848'. [ 1855.257443][T29628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1855.262328][T29791] syzkaller0: entered promiscuous mode [ 1855.262353][T29791] syzkaller0: entered allmulticast mode [ 1855.296878][T29791] netlink: 'syz.5.14852': attribute type 3 has an invalid length. [ 1855.318373][T29628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1855.397661][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.397759][T13575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1855.421606][T29798] netlink: 'syz.3.14853': attribute type 1 has an invalid length. [ 1855.436184][T29796] batman_adv: batadv0: Adding interface: macvtap1 [ 1855.436203][T29796] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.436234][T29796] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1855.608851][T29796] batman_adv: batadv0: Removing interface: macvtap1 [ 1855.715721][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.718098][T13568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.863515][T29813] __nla_validate_parse: 8 callbacks suppressed [ 1855.863538][T29813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14857'. [ 1855.894468][T29818] netlink: 'syz.7.14859': attribute type 10 has an invalid length. [ 1855.894632][T29817] netlink: 'syz.7.14859': attribute type 10 has an invalid length. [ 1855.979223][T29818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1856.008266][T29818] team0: Port device netdevsim1 added [ 1856.022213][T29822] can: request_module (can-proto-0) failed. [ 1856.026390][T29818] netlink: 'syz.7.14859': attribute type 10 has an invalid length. [ 1856.027242][T29822] netlink: 'syz.7.14859': attribute type 10 has an invalid length. [ 1856.061364][T29818] team0: Port device netdevsim1 removed [ 1856.072291][T29818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1856.076091][T29818] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1856.244952][ T32] INFO: task syz.2.13652:25166 blocked for more than 143 seconds. [ 1856.244992][ ** replaying previous printk message ** [ 1856.244992][ T32] Not tainted syzkaller #0 [ 1856.245003][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1856.245013][ T32] task:syz.2.13652 state:D stack:27168 pid:25166 tgid:25145 ppid:18528 task_flags:0x400140 flags:0x00080002 [ 1856.245535][ T32] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1856.245545][ T32] [ 1856.245561][ T32] __schedule+0x17db/0x58f0 [ 1856.245631][ T32] ? __pfx___schedule+0x10/0x10 [ 1856.245668][ T32] ? schedule+0x90/0x2b0 [ 1856.245696][ T32] schedule+0x164/0x2b0 [ 1856.245725][ T32] schedule_preempt_disabled+0x13/0x30 [ 1856.245750][ T32] __mutex_lock+0x7c1/0x1550 [ 1856.245784][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1856.245814][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1856.245933][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1856.245957][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1856.246012][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1856.246064][ T32] ? __nla_parse+0x40/0x60 [ 1856.246092][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1856.246117][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1856.246145][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1856.246177][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1856.246208][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1856.246247][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1856.246277][ T32] ? security_capable+0x7e/0x2c0 [ 1856.246311][ T32] genl_rcv_msg+0x614/0x7a0 [ 1856.246343][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1856.246367][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1856.246440][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1856.246471][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1856.246494][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1856.246538][ T32] ? down_read+0x2be/0x330 [ 1856.246571][ T32] genl_rcv+0x28/0x40 [ 1856.246593][ T32] netlink_unicast+0x7bd/0x940 [ 1856.246632][ T32] netlink_sendmsg+0x813/0xb40 [ 1856.246661][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1856.246692][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1856.246718][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1856.246738][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1856.246774][ T32] ____sys_sendmsg+0x54e/0x850 [ 1856.246808][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1856.246843][ T32] ? import_iovec+0x73/0xa0 [ 1856.246874][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1856.246900][ T32] ? __lock_acquire+0x747/0x2de0 [ 1856.246927][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1856.246959][ T32] ? futex_wait+0x2a2/0x390 [ 1856.247061][ T32] ? __fget_files+0x2a/0x420 [ 1856.247092][ T32] ? __fget_files+0x3a2/0x420 [ 1856.247131][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1856.247162][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1856.247212][ T32] do_syscall_64+0x166/0x520 [ 1856.247239][ T32] ? trace_irq_disable+0x3b/0x140 [ 1856.247261][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.247285][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1856.247310][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.247332][ T32] RIP: 0033:0x7f365539e159 [ 1856.247354][ T32] RSP: 002b:00007f36535d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1856.247379][ T32] RAX: ffffffffffffffda RBX: 00007f3655626090 RCX: 00007f365539e159 [ 1856.247395][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000007 [ 1856.247410][ T32] RBP: 00007f365543506b R08: 0000000000000000 R09: 0000000000000000 [ 1856.247425][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.247439][ T32] R13: 00007f3655626128 R14: 00007f3655626090 R15: 00007ffeb4ae04a8 [ 1856.247476][ T32] [ 1856.247523][ T32] [ 1856.247523][ T32] Showing all locks held in the system: [ 1856.247552][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1856.247678][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1856.247831][ T32] locks held by getty/5374: 2, on CPU#0: [ 1856.247847][ T32] #0: ffff8880360c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1856.247960][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1856.248063][ T32] locks held by kworker/u8:18/13568: 2, on CPU#1: [ 1856.248080][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1856.248137][ T32] #1: ffffc90005e3fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1856.248942][ T32] locks held by syz-executor/19819: 4, last CPU#1: [ 1856.248962][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1856.249058][ T32] #1: ffff8880277d1d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1856.249117][ T32] #2: ffff88801b09d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1856.249176][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1856.249231][ T32] locks held by syz.0.12479/20614: 2, on CPU#0: [ 1856.249246][ T32] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1856.249297][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1856.249353][ T32] locks held by syz.2.13652/25166: 2, on CPU#1: [ 1856.249368][ T32] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1856.249416][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1856.249450][T29829] ip6_vti0: left promiscuous mode [ 1856.249471][ T32] locks held by syz.4.13888/26141: 2, on CPU#1: [ 1856.249485][ T32] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1856.249534][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1856.249624][ T32] locks held by syz-executor/26369: 4, last CPU#1: [ 1856.249639][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1856.249688][ T32] #1: ffff88805dba1078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1856.249745][ T32] #2: ffff88801b09c378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1856.249804][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1856.249862][ T32] locks held by syz.1.14694/29140: 2, on CPU#1: [ 1856.249877][ T32] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1856.249925][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1856.249990][ T32] locks held by modprobe/29827: 2, last CPU#1: [ 1856.250004][ T32] #0: ffff88801b09e9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1856.250082][ T32] #1: ffffffff8ed5c920 (rcu_read_lock [ 1856.250095][T29829] ip6tnl0: left promiscuous mode [ 1856.250106][ T32] ){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1856.250137][ T32] locks held by syz.5.14864/29829: 2, last CPU#0: [ 1856.250152][ T32] #0: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1856.250236][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: wext_netdev_notifier_call+0x28/0x110 [ 1856.250298][ T32] [ 1856.250305][ T32] ============================================= [ 1856.250305][ T32] [ 1856.250314][ T32] NMI backtrace for cpu 1 [ 1856.250329][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1856.250352][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.250365][ T32] Call Trace: [ 1856.250375][ T32] [ 1856.250385][ T32] dump_stack_lvl+0xe8/0x150 [ 1856.250416][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1856.250474][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1856.250506][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1856.250534][ T32] sys_info+0x135/0x170 [ 1856.250554][ T32] watchdog+0xfd7/0x1030 [ 1856.250590][ T32] ? watchdog+0x1c7/0x1030 [ 1856.250618][ T32] kthread+0x38b/0x480 [ 1856.250639][ T32] ? __pfx_watchdog+0x10/0x10 [ 1856.250658][ T32] ? __pfx_kthread+0x10/0x10 [ 1856.250679][ T32] ret_from_fork+0x514/0xb70 [ 1856.250723][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1856.250752][ T32] ? __switch_to+0xc89/0x1420 [ 1856.250797][ T32] ? __pfx_kthread+0x10/0x10 [ 1856.250820][ T32] ret_from_fork_asm+0x1a/0x30 [ 1856.250867][ T32] [ 1856.250907][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1856.250935][ C0] NMI backtrace for cpu 0 [ 1856.250950][ C0] CPU: 0 UID: 0 PID: 29829 Comm: syz.5.14864 Not tainted syzkaller #0 PREEMPT(full) [ 1856.250971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.250983][ C0] RIP: 0010:__lock_acquire+0x51a/0x2de0 [ 1856.251004][ C0] Code: 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe 78 41 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce d0 0b 00 00 <31> c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf eb 18 48 c7 c7 30 ac [ 1856.251021][ C0] RSP: 0018:ffffc90006566868 EFLAGS: 00000097 [ 1856.251039][ C0] RAX: d300000000020007 RBX: 0000000000000002 RCX: 0000000000040085 [ 1856.251055][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: d300000000000000 [ 1856.251068][ C0] RBP: ffff88801e3dca80 R08: ffffffff81d87b36 R09: 0000000000000000 [ 1856.251081][ C0] R10: ffffc90006566b38 R11: ffffffff81b293f0 R12: 0000000000000000 [ 1856.251094][ C0] R13: 0000000000000000 R14: ffff88801e3dbe80 R15: 0000000000000000 [ 1856.251107][ C0] FS: 00007f339dd866c0(0000) GS:ffff888124cde000(0000) knlGS:0000000000000000 [ 1856.251123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1856.251141][ C0] CR2: 000000110c320c58 CR3: 0000000078332000 CR4: 00000000003526f0 [ 1856.251159][ C0] Call Trace: [ 1856.251167][ C0] [ 1856.251182][ C0] ? lock_acquire+0x115/0x350 [ 1856.251204][ C0] lock_acquire+0x115/0x350 [ 1856.251220][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1856.251248][ C0] is_bpf_text_address+0x47/0x2b0 [ 1856.251267][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1856.251287][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1856.251309][ C0] kernel_text_address+0xa5/0xe0 [ 1856.251330][ C0] __kernel_text_address+0xd/0x30 [ 1856.251349][ C0] unwind_get_return_address+0x4d/0x90 [ 1856.251369][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1856.251396][ C0] arch_stack_walk+0xfb/0x150 [ 1856.251421][ C0] stack_trace_save+0xa9/0x100 [ 1856.251445][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1856.251470][ C0] ? lock_acquire+0x115/0x350 [ 1856.251499][ C0] kasan_save_track+0x3e/0x80 [ 1856.251518][ C0] ? kasan_save_track+0x3e/0x80 [ 1856.251535][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1856.251553][ C0] ? __kmalloc_cache_noprof+0x321/0x600 [ 1856.251570][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 1856.251591][ C0] ? fib_check_nh+0xcf1/0x1ac0 [ 1856.251646][ C0] ? fib_create_info+0x200e/0x3170 [ 1856.251665][ C0] ? fib_table_insert+0xcb/0x1b10 [ 1856.251686][ C0] ? fib_magic+0x43b/0x530 [ 1856.251702][ C0] ? fib_add_ifaddr+0x3e6/0x5d0 [ 1856.251718][ C0] ? fib_netdev_event+0x382/0x490 [ 1856.251736][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 1856.251760][ C0] ? __dev_notify_flags+0x31e/0x510 [ 1856.251782][ C0] ? netif_change_flags+0xde/0x1b0 [ 1856.251803][ C0] ? dev_change_flags+0x128/0x260 [ 1856.251846][ C0] ? devinet_ioctl+0x966/0x1c50 [ 1856.251868][ C0] ? inet_ioctl+0x42a/0x560 [ 1856.251885][ C0] ? sock_do_ioctl+0x101/0x320 [ 1856.251910][ C0] ? sock_ioctl+0x57a/0x7e0 [ 1856.251933][ C0] ? __se_sys_ioctl+0xfc/0x170 [ 1856.251951][ C0] ? do_syscall_64+0x166/0x520 [ 1856.251973][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.252007][ C0] ? rcu_is_watching+0x16/0xb0 [ 1856.252029][ C0] __kasan_kmalloc+0x93/0xb0 [ 1856.252052][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 1856.252070][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1856.252087][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 1856.252106][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 1856.252129][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 1856.252150][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1856.252171][ C0] ? lock_acquire+0x115/0x350 [ 1856.252188][ C0] ? inetdev_by_index+0x20/0x250 [ 1856.252213][ C0] ? inetdev_by_index+0x20/0x250 [ 1856.252236][ C0] ? inetdev_by_index+0x20/0x250 [ 1856.252259][ C0] ? fib_check_nh+0x4e8/0x1ac0 [ 1856.252280][ C0] fib_check_nh+0xcf1/0x1ac0 [ 1856.252300][ C0] ? fib_check_nh+0x4e8/0x1ac0 [ 1856.252318][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 1856.252343][ C0] ? pcpu_chunk_relocate+0x1d0/0x430 [ 1856.252369][ C0] ? __pfx_fib_check_nh+0x10/0x10 [ 1856.252388][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1856.252416][ C0] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 1856.252440][ C0] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1856.252466][ C0] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1856.252506][ C0] ? fib_nh_common_init+0x2a7/0x3d0 [ 1856.252528][ C0] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1856.252549][ C0] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 1856.252604][ C0] ? __kmalloc_noprof+0x38c/0x720 [ 1856.252631][ C0] ? fib_nh_init+0x25a/0x410 [ 1856.252652][ C0] fib_create_info+0x200e/0x3170 [ 1856.252680][ C0] ? nlmsg_notify+0xe3/0x1a0 [ 1856.252708][ C0] fib_table_insert+0xcb/0x1b10 [ 1856.252732][ C0] ? lock_acquire+0x115/0x350 [ 1856.252749][ C0] ? fib_magic+0x143/0x530 [ 1856.252767][ C0] ? fib_new_table+0x14b/0x3f0 [ 1856.252795][ C0] fib_magic+0x43b/0x530 [ 1856.252814][ C0] ? __pfx_fib_magic+0x10/0x10 [ 1856.252837][ C0] ? ip_mc_up+0x273/0x2e0 [ 1856.252858][ C0] ? inetdev_event+0xf8f/0x1610 [ 1856.252886][ C0] fib_add_ifaddr+0x3e6/0x5d0 [ 1856.252907][ C0] fib_netdev_event+0x382/0x490 [ 1856.252927][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1856.252956][ C0] __dev_notify_flags+0x31e/0x510 [ 1856.252981][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 1856.253002][ C0] ? __dev_change_flags+0x5f1/0x820 [ 1856.253026][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 1856.253049][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1856.253078][ C0] netif_change_flags+0xde/0x1b0 [ 1856.253105][ C0] dev_change_flags+0x128/0x260 [ 1856.253130][ C0] devinet_ioctl+0x966/0x1c50 [ 1856.253163][ C0] ? __pfx_devinet_ioctl+0x10/0x10 [ 1856.253189][ C0] ? get_user_ifreq+0x12b/0x180 [ 1856.253214][ C0] inet_ioctl+0x42a/0x560 [ 1856.253233][ C0] ? __pfx_inet_ioctl+0x10/0x10 [ 1856.253261][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1856.253282][ C0] sock_do_ioctl+0x101/0x320 [ 1856.253308][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1856.253332][ C0] ? hook_file_ioctl+0x1f2/0x600 [ 1856.253360][ C0] sock_ioctl+0x57a/0x7e0 [ 1856.253386][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1856.253410][ C0] ? __fget_files+0x2a/0x420 [ 1856.253433][ C0] ? __fget_files+0x3a2/0x420 [ 1856.253455][ C0] ? __fget_files+0x2a/0x420 [ 1856.253487][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1856.253511][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1856.253536][ C0] __se_sys_ioctl+0xfc/0x170 [ 1856.253554][ C0] do_syscall_64+0x166/0x520 [ 1856.253576][ C0] ? trace_irq_disable+0x3b/0x140 [ 1856.253593][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.253611][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1856.253631][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.253648][ C0] RIP: 0033:0x7f339cf9e159 [ 1856.253665][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.253680][ C0] RSP: 002b:00007f339dd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1856.253700][ C0] RAX: ffffffffffffffda RBX: 00007f339d225fa0 RCX: 00007f339cf9e159 [ 1856.253714][ C0] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 000000000000000b [ 1856.253726][ C0] RBP: 00007f339d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1856.253738][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.253750][ C0] R13: 00007f339d226038 R14: 00007f339d225fa0 R15: 00007ffc4d4e8348 [ 1856.253772][ C0] [ 1856.271248][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1857.797791][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1857.807080][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1857.817369][ T32] Call Trace: [ 1857.820678][ T32] [ 1857.823616][ T32] vpanic+0x56d/0xa60 [ 1857.827613][ T32] ? __pfx___schedule+0x10/0x10 [ 1857.832474][ T32] ? __pfx_vpanic+0x10/0x10 [ 1857.836990][ T32] panic+0xc5/0xd0 [ 1857.840721][ T32] ? __pfx_panic+0x10/0x10 [ 1857.845146][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1857.850631][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1857.856011][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1857.862345][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1857.868505][ T32] watchdog+0x1030/0x1030 [ 1857.872844][ T32] ? watchdog+0x1c7/0x1030 [ 1857.877269][ T32] kthread+0x38b/0x480 [ 1857.881340][ T32] ? __pfx_watchdog+0x10/0x10 [ 1857.886014][ T32] ? __pfx_kthread+0x10/0x10 [ 1857.890607][ T32] ret_from_fork+0x514/0xb70 [ 1857.895212][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1857.900336][ T32] ? __switch_to+0xc89/0x1420 [ 1857.905021][ T32] ? __pfx_kthread+0x10/0x10 [ 1857.909615][ T32] ret_from_fork_asm+0x1a/0x30 [ 1857.914403][ T32] [ 1857.917723][ T32] Kernel Offset: disabled [ 1857.922139][ T32] Rebooting in 86400 seconds..