last executing test programs: 3m10.194767173s ago: executing program 3 (id=3074): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000300)}, 0x20) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa500000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 3m10.015243345s ago: executing program 3 (id=3078): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r1, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xf, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(r0, &(0x7f0000002040)={&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0xb48, @empty, 0x7}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000340)="44bee5194df080bfd907568470ac29262aa5aa9b9ff6595f65c9c461b80f2aa8754de59c5779f57619101b07d17809f731b44afa9083eb2bd43c2fbcfb65b52c9e7bf58f612d1daf5d64d5d381813d5a0a76d3392c744e2131ea106b9c400cba24115c4766a0bc7fd2d640bbf03e53f28df9690a6636a6c9e8cbb7d606b428d5b25d0f15cb663e8091b9b582021a8feeb1b41d252b3f33e42c37cd095cb676b1b33f74aa24c83048751add1acd227f50f3ae1c22453333f331462aa1aaaa49015e7e9fedb2069a1f96425fbaa7401d8be5ddb2b6", 0xd4}, {&(0x7f0000000440)="91791de765f5537c2dc2db175ed2e3d94f16a60b782008a9a7324628ae94", 0x1e}, {&(0x7f0000000480)="a1b7c50ef926855a4b2afde501e8b5b9037ef88b291f2638c45d13b6eb8c0ba5fcff40b0eb16b89ee237e40807fb74a17a976ec2c9007aad657f6f8c98703cda88551f45baa80cf74edf12811c4822f54706bf0c53cf616faa01f6dfe3e6ff4bcf9b888a281a5f3cdd746a4591f0a3e9becea8c7c6b46dd858aaa6c1", 0x7c}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="44f58cb85abf00e29de4a9178a42de689b3b848c8fea565ecf988c83ae8281ee28bf3e1bc769d8acd539005b55285be03e9ea904c747b867d90511dd8e75bf3d16033095de0124c4b0ad8d2c5df804b45c90ada7545fe994f47946260bd37aafc73c8088a11a5226e782dd8e03fcb55923be9b1546ee81476e3e2df74774e210540440dd00987b6cd75d881b987b3d725c2444ae4a219fc1ea82aa92cefa5ef168a370acbf5d884c8ee6747e5e5b2c0295adc263cc5d8a", 0xb7}, {&(0x7f00000015c0)="80f9b01373154e7d3a5e75cc79092aa4e7ecaad0577a002d1a4f60c29647150e24f63b0aaf52e170abe8dd5816be934800a1aa0375d2db4f5176690f81e6bd7123cf13a300de9bda022981f98cdbc1bf3671b9d92abe36e6a6cfdc8a7f791d6b67e497e81f8d3f2c36544d5b7228b9b5c05606f08e09ab13e6b9e576de5569c6b0cf8e0802dac8cd61b581c9753fb5c758c1e54963c6a98ad273fc339ea277f8", 0xa0}, {&(0x7f0000001680)="4443ce7cce5865aa36e7f5b3bd1c3659d96d7c0ee0ce24a2c3d61e20d752bffaee122c8041dcc5b3d56c8da58f07e25380ad64500ec8c66b99e400b3f3c7678c1a2b13e99ec0c3b569c8ac4cf64af2bd967997d6b28bea15f31408c9d130f789288515a7b4bc9854599fa89619725af47f8399f1c867c9f3bc91c3cfa72a87d48f3beb4906a44855d6cb21351ad414ac7926e113160383b6e3c0599cbd9b007f898eb789c367291d03578984464dad2fda3616aac61c0744ddbd73016df0fd454c809b1610e35da7285748dd7006aa486d6fc65d8b", 0xd5}, {&(0x7f0000001780)="73784a4c4bb5320f41b03a526c4b61d5efaf619936222e98e2312e188a03ceb1ea191ee7bd8f11525e01a8bb36432d32fd153c862110add7b3addf09005ae84f0095b68d4041cbb9dbc7963c4dfb968e7a6fac582133a7e756ce51ca2a46a40c6b3d4592b66c965812bdc46881a4a6c7905e95ad411f255f91ce87a3974615229ffebd2592", 0x85}, {&(0x7f0000001840)="384641d3563b2c046819fb8ba66034f43f81a8d342c90386d6a10ee6c310bacfd790d89d31a567626f29682058c2c2031101970f8db4ee69f497b5a4dfada30e0a6b8e8484c3c2e13f2f4e40103bfa5cab8c24654b263387a75d4f2a043ffdc1a2f08494e52491d3bde7e717e9599acd9cc780c9316043203e706d56016741b4f8c0503609732d979b310c924ced5f3584148b8aa3e2b47057d56cd2bc0636d299c1cd091ab385c73ec5dbdd1d2e48ea7d1c378e62051fb7b17633a8ee05a795f640ec0b40", 0xc5}, {&(0x7f0000001940)="c1284f6b4d9647bc48e472a92206e10c6cd0d97208f1c1b0ea30971f2bdfc76e82aaf20cea7852dfbcd8664f3af4a0d96632d58ed0d5f569a35f4b56fcfcf14c0995b27b", 0x44}], 0xa, &(0x7f0000001a80)=[{0x38, 0x11a, 0x5, "076b02eab0077dd8f363469eeea6643a7d3ce1e665f81100466fdd5be8bf4edc2e25"}, {0xb8, 0x10b, 0xd3a, "4140106ed9b6f547f8207007c522e1c033d821e47b8d274ff3689c5f337d443be24cfbae184e6481b78e42712d29098711876d79b51aeb5fa5882b1513badad9d4663a8c2a1158f5cdca2e4d6ce9c43c9d4ef1ccffb8c7e059b31f6a351008b06b932522f76385b2c748cd1a74956b19334871bfac470ff953a4ae984e1505bc9e775c7fdb1bbc0b759b2080a6896c8336def584dcd0bcce6a10943789a4e1184921"}, {0x110, 0x107, 0x8, "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"}, {0x18, 0x108, 0xffffffe8, "8ea9a1"}, {0xb8, 0x19d, 0x2, "fd45762839f9e74cc83538e28978610cf8c297930945e1765d63bb4e5e92df562be426d3346aeef47077c23ff60cc57d6e327e9e096b0a3f3e75cb58d4ea1813592d4dc80ac4af06dbc70471a573437e1ffd5db575d4245edd91ac47ef033d0c036357f855288bcf9fe1a26415d768f0a5b4154c964df357a109acc167a96fc603b363b039c7a6e5cc4a8bd7a9c1c2cdf0b17bf7097fa8be269a7114e3da3fffd1065b3602fa0c21"}, {0xe0, 0x84, 0x4, "cc4a5e057b6a1eab2620a9bc2d34159b6f6d1a93cc0ff4697a663b45fea7c062bc14ffdcc0924cdb12d3d1424786cc0c46823eab4bca537a5261016165b64ff92ed168c6f93f4a5b1960887bea297d74e6188fcd4cf1308d364e6c48699884cd014493498e1fd66c16502bab9b5a9daa4a3725b9e2dd400e451fe2fb24477dc9d3c98d2c096ca1198e45a942bdabc85f143ec1fc2718c28f6c95497607511db18dd4a766ca35548db95da7d2a49893081396ab72dfa85d5489eeeb518e49cca5c2331674a499ef7f8c582e97554e64"}, {0x110, 0x102, 0xfffffff9, "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"}, {0xd0, 0x10f, 0x6, "9c5e6050137ed9850d8f1833df2413e6439489ae9d84e596f75585511ed790997897922a03d1066652d45164e2eaf33773d26a98fd5460d85418bb433adc533afe3838edc7e9df052f16de49de663f45e38824caf2aad4765f8153c71bf4782f39c07a5721cc06d8b75aad58101c46a4fc45b1934667ea638510b19c28f194b3b1da2b81637c10b062dc4383604b3621c166735aeeca7549cc7206a54cac353bcca408ba164c5062ef6058009fec4116eaddbe788fedd0942646bd"}], 0x590}, 0x40081) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20c616}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002140)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) 3m9.606530859s ago: executing program 3 (id=3083): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='$\x00', 0x0, &(0x7f0000000300)={@align=0x7ff, {0x2, 0x5, 0x8, 0x40}}, 0x10001, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x1ff}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='$\x00', 0x0, &(0x7f0000000300)={@align=0x7ff, {0x2, 0x5, 0x8, 0x40}}, 0x10001, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x1ff}) r2 = socket(0xa, 0x3, 0x87) r3 = socket(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a05f25599b9bfc7bdf90003000003080002400000001a0900010073797a300000000028000000000a010400000000000000000300000a0900010073797a300000000008000240000000000000000000000100006e3aef9e00000000f30000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a05f25599b9bfc7bdf90003000003080002400000001a0900010073797a300000000028000000000a010400000000000000000300000a0900010073797a300000000008000240000000000000000000000100006e3aef9e00000000f30000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000640)={r7, 0x8, 0x10}, &(0x7f0000000680)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000640)={r7, 0x8, 0x10}, &(0x7f0000000680)=0xc) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r8, 0x2000000) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, 0x0, 0x4000045) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, 0x0, 0x4000045) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x40019, r10}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f00000000c0)) 3m9.575135518s ago: executing program 3 (id=3085): socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0xffffffffffffff2d, &(0x7f0000000480)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001940)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e40)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250b0000001400018008000700", @ANYRES32=r2, @ANYBLOB="060001000a0000003c000180080006000000000008000700", @ANYRES32=r2, @ANYBLOB="060001000a0000000500020005000000050002000900000008000700", @ANYRES32=r2, @ANYBLOB="05010000006723ea0500b1959decc6d441527f8502b0b0bbe36ec79de500ab2945fbea948b43511cdf94d77983bb6da42f74978821d999b5e1d73044aac88033048323a0bd51df371705a69140fb674389fd798bcf2d4cf590d9aa368fe9f0cf593858cd813fae879b52c156eabbac2d0a4f2ad260b681904ca8108c42b12ec2d941e38c2d82de78c09a1780cc4a4e422d36851482f1525bb9cac89f0f2644c4ffbe6b7d01ccbc3354f29c91a0b47e8307616f17d57917aeec73000000"], 0x64}, 0x1, 0x0, 0x0, 0x4054}, 0x4040) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001f00)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001f40), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) read$nci(r6, &(0x7f0000000540)=""/104, 0x68) write$nci(r6, &(0x7f0000000780)=ANY=[@ANYRES16], 0x6) read$nci(r6, &(0x7f00000004c0)=""/101, 0x65) write$nci(r6, &(0x7f0000002180)=ANY=[@ANYBLOB="400100"/20], 0x14) read$nci(r6, &(0x7f00000021c0)=""/100, 0x64) write$nci(r6, &(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x3f) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r6, &(0x7f0000002340)=""/100, 0x64) write$nci(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="4002000000b63da2d5fd2e8e053d9b25b9bd5929258a5a6a3312795a3d07bc00c4806b6e730a33cee50ea13c0b07b83f4d16aa2b811a9402e0d37987be5c"], 0x5) read$nci(r6, &(0x7f0000002400)=""/100, 0x64) write$nci(r5, &(0x7f0000000a00)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x1e, {{0x0, 0x4, 0x8f, "1365999e3423e35b58ebf8980352556b1f2168c7d9a0b6ef30698d5c309ad74ca3cd173cd26fdf340f0a87d86a2eb7872b9c257803d22603513cb4b9579da718a12d03bbf394b57bbfe5a4995f94deb1f3cbbf5b60f07d13dd245197e5a2510f75142b80500e4d3ca992bb2cf31fdeac36b3dc5780cd56c847f54d898a193c00"/143}, {0x9, 0x5d8, 0xb1}}}, 0xa3) 3m8.481716041s ago: executing program 3 (id=3091): r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000580)=0x80) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000001006e657464657673696d0000c6e577897900000000000000096e65746465767369759d000008008a00"/58, @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r4, &(0x7f0000000400), 0x492492492492627, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000160000002bbd7000ffdbdf25000000008177661c67b8776adb78eec09f7fe8ab02a063"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000180)=0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000640)=0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000980)={0x2, 0x4e20, @empty}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000a80)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="01051c001000140006004600002d0000000040119078ac140002ac1400010100000012344e20001590780000cd9300a497aaf51b06323a70e05191cac2fb7df485ee75244c2dc362e308219d75803b741be6485f8b623f00076ed6997d9383c043dae99c03d1d5bbaa1f8f0e9267174ddbe0a1e98d9b78ff416b7594f2d93fc2ef2ce361abd8b36f783c555a16d9a3931d104d3432d6cf7008155d267b656a5e42e60ffbb61cdc751319b55f2bb387a2a08136f9b4db87d7b77ee4f8c6a6a5082b134f56ff0503bfa89b28"], 0x37) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f00000004c0)=0x100000001) setsockopt$inet_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000900)=0x1, 0x4) connect$inet(r10, &(0x7f0000000940)={0x2, 0x4e20, @dev}, 0x10) close(r10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000680)={0x1, [0x0]}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000700)={r11, 0x2, 0x10}, &(0x7f0000000740)=0xc) 3m7.995544874s ago: executing program 3 (id=3095): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x1, 0x4ab, 0xc, 0xfd5c, 0x81, 0x3}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0xc54, @local}}, 0x2ad881a2, 0x400, 0x6, 0x3, 0x56, 0x9, 0xd}, &(0x7f0000000440)=0x9c) syz_emit_ethernet(0xa7, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4048001}, 0xc081) 2m52.932142373s ago: executing program 32 (id=3095): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x1, 0x4ab, 0xc, 0xfd5c, 0x81, 0x3}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0xc54, @local}}, 0x2ad881a2, 0x400, 0x6, 0x3, 0x56, 0x9, 0xd}, &(0x7f0000000440)=0x9c) syz_emit_ethernet(0xa7, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4048001}, 0xc081) 2m28.829822158s ago: executing program 2 (id=3665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000002b00)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0xff91, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002b80), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002c80), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="cd3e0000000000000000010000000800020000000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa6751758e89c5c21cdfd7175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000800ac1e0001"], 0xf4}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"ed819ad06bf7cd3cd05014ee9e5d27f6", 0x0, 0x0, {0x6, 0x2}, {0x8001, 0x5}, 0xfffffffffffffffe, [0x3, 0x1, 0xda8, 0x6, 0x1, 0x2, 0x42, 0x2, 0x7f, 0x1000, 0xc4, 0xb, 0x6, 0x0, 0x1, 0x3]}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100070000000001feffffff07000000", @ANYRES32=r9, @ANYBLOB="402000001040060014001a80100003"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000b00)={0x0, "9059b79a696c38aeadf52732d0f18035"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001b00)={{r1}, r6, 0xc, @inherit={0x50, &(0x7f0000000580)={0x1, 0x1, 0x7fff, 0x0, {0x4, 0x7, 0x5, 0x7, 0x7}, [0xf]}}, @devid=r10}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0x3, 0x4, 0xfffffffe}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r13, 0x0, 0x3, 0x0, 0x0) r14 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000040)={0x44043, 0xfffffffe, 0x0, 0x3}, 0x10) sendmsg$tipc(r14, &(0x7f0000000080)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r16, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.574987336s ago: executing program 2 (id=3669): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r0, 0xe, 0x0, 0x3, &(0x7f0000000680)=[0x0], 0x1, 0x0, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000019c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@cgroup=r2, r0, 0x2f, 0x10, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={r3, 0xa2, &(0x7f0000001b40)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001bc0)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={r4, 0x9, 0x10}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000084f0392eba5f66346c93d4727cbd5b47f9b3192a9cba52ae09e750835370e3ec11de732d9ac6beea6861ffb5466e4bf764191f7db7a2eaa72db90000000000000000000091d7c19252b67ecd5751c0ba7e5909829ddbb7ee86d49d2a606f17d70e53481d524a5677161389fde7092f4794175a57f6837b2e9b80f10950b3d77151ab3c5cfec2003b4f4af791c3b78f9e04fe01ea054aabb72d6f8dfdfb139f4c1aa4996096aa584fa4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e716000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xc8, &(0x7f0000000540)=0x1, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, 0x0, 0x0) r10 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0x10) connect$pppl2tp(r9, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x1, @empty, 0x5}}}, 0x32) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r15 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', r8, 0x80, 0x20, 0xffff, 0x1cbf2450, {{0x12, 0x4, 0x2, 0x2, 0x48, 0x66, 0x0, 0xce, 0x7d, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x3c, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x65e}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x57f9}, {@local, 0x6f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0xaf6}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtaction={0x738, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x678, 0x1, [@m_mirred={0x54, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x4, 0x2, 0xfff}, 0x4, r14}}]}, {0x5, 0x6, "c4"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x78, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x43, 0x6, "d256eacfb273aa8064f83c54afd7061ce6514ed3d53cd39dfe68accddf490ed3431190d3666205655ec927a5cc8c96a19d3b8e510e66154a97c5ac63fa9a9b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x154, 0x20, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xff, 0x6, 0x2, 0x6}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x4, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x1, 0x6, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x19d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x7, 0x6, 0xfff, 0x1}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7ff, 0x4, 0x10000000, 0xfffffffb, 0x7f}, 0x1}}]}, {0x72, 0x6, "16eee4dc4024e4c3dfd63380d27b130d6f7d3705b8b1444a39799b07873e04b88155c3fe2afcbe4be593517fef95b66aaf2d35131f5cc7cb0b1c5de2d70035e0cb45384e885ea8ad6d4a04f1a980358abbfd916f1ea3a3235b35fa0a919b831cd0a3c88d86e30f2369673048c5b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x150, 0xb, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x101, 0x5, 0x80, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0xcf, 0x6, "fc05919cf3df4e7eda5074889fb679034ba114d146bcf5d5aae5cb3c3e07f1c1f44dc3c5c5ebf826763297b512061ed0e4c0da4ec746d8fcc3d51e9fdba16de6072b5d4ee25a9fc7384d9df3fa67ca865b62cea9c7d1ad0a4205d701160ac60962df7df842c736742dec5cddbba71ee510c22629adda94e9c51e76b2b28b00aa1cef227cda20ea5af860f182e6c0881ba837806e2805890b434a65b0743e3c3a001788b20bedc23b543d163fe33b5362cba8ea527b1ae0144e44c63b6fa249b790e39ab1d234892705a84f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xf4, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xf6c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff96, 0x6, 0x6, 0x3, 0x7}}]}, {0x88, 0x6, "ab23520f7a8c497a3a3806cc9cf2834018fbd206cc01079a18c1328309a2402b5843e313456e7e6d20b0115252694d546de25d34095fca25a906ccd134727307d77878cd62d482ec1b380cc38f5e8d2332f27f3f5e2f668bd833fe9712b939ca04639e44e67b041da9a6ddf44202d6553f865765b581486250d74f67c3934b3e711bcb5d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x3, 0x8, 0x8a8}, 0x3, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x2, 0x7ff, 0x2}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xaa, 0x4, 0x7}, 0x3, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x78, 0x20000000, 0x6, 0x200}, 0x3, r14}}]}, {0x48, 0x6, "998f93dc382b30632a4b5a69b130d934401da623c91b51854bc7cc33998c1dc47a6e9b7a8865bd2c81af1adfe97b9e6ec10e584e34b5cadcc807e06a1a6cb459d69459da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_sample={0x11c, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0xe8, 0x6, "81654c8b72e0b9e12eb7823ac01566174b0ff901de5965a1d35aeded7ff3cc95be0b7ed128bc3850681a7b9484feee9e7dd9b2576d4b97d959ef5b16943796febf7d17a47965a99af7d331e09319296608611ce954cc680a0823fcc94a4bcf65649ae76231b4f67e65a7438e9e5e21803c902c20e5b545788e8f2e20222c8789d2899bb2f607ce35053db820431b916e17e67018f612e1ec3cc7002cca145aa7dfdc8bda071081c0d245d8c751a65e9f4237a150876059b42dced79d88d2a3562775a2e642460e80b75a3c0adb506dfabf4fb288b520a29578c6b12960272bc006de3734"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xac, 0x1, [@m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x77, 0x6, "31f7ca9dbddc29c02a45605f7ffeb0eb8af4bfcacb125258433fcf7276f7f5829f52b135fa59568608cb0a91c8f7cfbb2d1e99818e0de05fd5c0c558fa4ad8f51c1a0160eec08aca548dd10c22521ecb39aa9268ae31fe69df67363c772472a34c111c09352965631819d1863ec2d27b6abc6c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x738}}, 0x0) 2m28.345135129s ago: executing program 2 (id=3674): accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x800) (async) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1411, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x37, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x37, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xe, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x47, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x5, [{@broadcast, 0x5000000}, {@private=0xa010100, 0x800}]}, @timestamp={0x44, 0x18, 0xba, 0x0, 0x2, [0xffffff81, 0x8, 0x7f, 0x2, 0x7fff]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xe, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x47, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x5, [{@broadcast, 0x5000000}, {@private=0xa010100, 0x800}]}, @timestamp={0x44, 0x18, 0xba, 0x0, 0x2, [0xffffff81, 0x8, 0x7f, 0x2, 0x7fff]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) getpeername$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xf8, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xf8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1b0b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x8, 0xf, 0x2, 0x9, 0x1ff, 0x7f3a76cd, 0x5, 0xe7]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}, @CTA_STATUS={0x8}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x6, 0x6, 0x3, 0x3]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000dc0)={'sit0\x00', r3, 0x80, 0xff2e, 0x3ff, 0x7, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x65, 0x0, 0x8, 0x2f, 0x0, @broadcast, @loopback, {[@noop, @noop, @rr={0x7, 0x3, 0xd8}, @timestamp_addr={0x44, 0x24, 0xa4, 0x1, 0xc, [{@multicast2, 0x11f}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x92}, {@remote, 0x7}]}, @noop, @generic={0x86, 0xc, "be4bd30140c9f00a3c9c"}]}}}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'lo\x00', 0x1000}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001180)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1f8, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x128, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xaf14f5fd17052e03}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000016c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001200)={0x458, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x3d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'a(?+%,:#)&-#-^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\!][\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "e696dcf08ce68a61634d0927b408b04252a5c577a9cd455907d68b54a67093c0b664e588efcb8f9b5ce4b9d698b130c45c915afa47ae7ba6f3417a4743941724895efce3b00166ba2e2308b827c409761505ea407ddb3973afccf55d3c15ad27c2f774545066d63535dc14faff7c539a3ce160ada3114b61dd15850cb7be2106f12184278b522841d330528a466d4a4a3af7682ede028689af59d8467b85a96768640606ae72aeba70668ee8bbca590559722d728c5a0173ec9e86d152104b8002a9d1616024b0dca8eda4906e35"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "a7472f1d5ad99830b77149fc1a4d5e707eb9afe70f79a466057e5efcfea6351b0dcc320d50fb3fd6b93d60c1e778583e5f470c1046ebb94542629f2ec9947316e2dde349c0880591d18c0c2343fe04a7bd256ec6f6054fb301f128455e27e58bccc24022e21dcad90292ce996b3d0c8e659bbe51be805b985ff8bc30dd95411bfc813b27c6f188b785f5b4590ebf"}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "9aa2685479cf50ddc6c4e4a6eb04b1abd5a3fcff47a98ec5cf7becb8042dcb96e198623ddf257c67d4c63ce996636be2f0112ae6b2dddfae8e26d344008abe6661a11644c5196244370d0523b58771490b3e7929862d7d3b50771ed58bcdb5f905a9d4a5c0e3e39d709b8055c436f34c09ac7678e6e4060df0418f342c9b47eaf6678e8dadbdf52218f7b46ae5e0fa4cc0700a278f6ca89d4e5843977dadbde8ae014752f4cf3ede37"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-&/\x96!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "26f60ec50c900641ab4dd4727ba00d908e7994b1786deb572a7634667fd3bed75ce0a5d1f74905c6d0aaecebfd1e9906f8ca51aabc54f4b47967512039fd6e3257fe525a7241253bab6256898bbca6251f3979a6d9c8b91db125c1e7d72e930f8ab68c63e2ead5bef5c30ba8ec78c77d5b37bde5302f4005596f6d36b224f744"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\?\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#*!@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x10}, 0x6) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000016c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001200)={0x458, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x3d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'a(?+%,:#)&-#-^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\!][\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "e696dcf08ce68a61634d0927b408b04252a5c577a9cd455907d68b54a67093c0b664e588efcb8f9b5ce4b9d698b130c45c915afa47ae7ba6f3417a4743941724895efce3b00166ba2e2308b827c409761505ea407ddb3973afccf55d3c15ad27c2f774545066d63535dc14faff7c539a3ce160ada3114b61dd15850cb7be2106f12184278b522841d330528a466d4a4a3af7682ede028689af59d8467b85a96768640606ae72aeba70668ee8bbca590559722d728c5a0173ec9e86d152104b8002a9d1616024b0dca8eda4906e35"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "a7472f1d5ad99830b77149fc1a4d5e707eb9afe70f79a466057e5efcfea6351b0dcc320d50fb3fd6b93d60c1e778583e5f470c1046ebb94542629f2ec9947316e2dde349c0880591d18c0c2343fe04a7bd256ec6f6054fb301f128455e27e58bccc24022e21dcad90292ce996b3d0c8e659bbe51be805b985ff8bc30dd95411bfc813b27c6f188b785f5b4590ebf"}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "9aa2685479cf50ddc6c4e4a6eb04b1abd5a3fcff47a98ec5cf7becb8042dcb96e198623ddf257c67d4c63ce996636be2f0112ae6b2dddfae8e26d344008abe6661a11644c5196244370d0523b58771490b3e7929862d7d3b50771ed58bcdb5f905a9d4a5c0e3e39d709b8055c436f34c09ac7678e6e4060df0418f342c9b47eaf6678e8dadbdf52218f7b46ae5e0fa4cc0700a278f6ca89d4e5843977dadbde8ae014752f4cf3ede37"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-&/\x96!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "26f60ec50c900641ab4dd4727ba00d908e7994b1786deb572a7634667fd3bed75ce0a5d1f74905c6d0aaecebfd1e9906f8ca51aabc54f4b47967512039fd6e3257fe525a7241253bab6256898bbca6251f3979a6d9c8b91db125c1e7d72e930f8ab68c63e2ead5bef5c30ba8ec78c77d5b37bde5302f4005596f6d36b224f744"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\?\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#*!@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x10}, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001740)=@flushsa={0x148, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x32}, [@algo_auth={0x132, 0x1, {{'wp384\x00'}, 0x750, "9ac4debd67d89e6ff8f51885985a127323759b5c6b8c42b4e94fdca6a92c79e0f36e24c2792e51569da87826535bdb937d46dcc0dc085dc6fd184a484837812a92a52d08a8db5fc51d01c42bf0187890ecf0b940a90efb339a12a730da3e89623b9be61dfd3f783a828be8b6a8c44e1afe8dfa578efb5bd506deb2619e0623bc55f5381e9b12ab7b80d89623559e04ae1660d88a594162277d2e9af260c645c4caa643fc90f5290414ec3359d2a16b24da2f9d15236d078bc77401d014e1625b036430eee121d5ef2d50c499b4a4cc6f847e651537eb678ffef00863be06a97285b3b191b337f3c3c9fc"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001740)=@flushsa={0x148, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x32}, [@algo_auth={0x132, 0x1, {{'wp384\x00'}, 0x750, "9ac4debd67d89e6ff8f51885985a127323759b5c6b8c42b4e94fdca6a92c79e0f36e24c2792e51569da87826535bdb937d46dcc0dc085dc6fd184a484837812a92a52d08a8db5fc51d01c42bf0187890ecf0b940a90efb339a12a730da3e89623b9be61dfd3f783a828be8b6a8c44e1afe8dfa578efb5bd506deb2619e0623bc55f5381e9b12ab7b80d89623559e04ae1660d88a594162277d2e9af260c645c4caa643fc90f5290414ec3359d2a16b24da2f9d15236d078bc77401d014e1625b036430eee121d5ef2d50c499b4a4cc6f847e651537eb678ffef00863be06a97285b3b191b337f3c3c9fc"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r10, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000001a80)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000001a80)={0x80}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001c80)={{r11, &(0x7f0000001b40)='sane-20000\x00', 0x30842, &(0x7f0000001b80)={@_ha_fsid={[0x6, 0x1]}, {0x7c5a, 0x100, 0x75, 0xfff}}, 0x800, &(0x7f0000001bc0)={@_ha_fsid}, &(0x7f0000001c00)=0x80}, {[0x6, 0x8000, 0x80000001, 0xc]}, 0x5, 0x28, &(0x7f0000001c40)=""/40}) syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r0) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x158, r13, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0xd2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0xfff6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044013) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000001f80)={0x2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x4c1ae705, 0x3, 0xd, 0x4, 0x4}, &(0x7f0000002040)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000002080)={r14, 0xc1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000021c0)={'gre0\x00', &(0x7f00000020c0)={'sit0\x00', r2, 0x40, 0x7, 0x81f, 0x6, {{0x31, 0x4, 0x0, 0x3, 0xc4, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x7, [{@empty, 0xd}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x7, [{@empty, 0xf0}, {@local}, {@multicast2}, {@rand_addr=0x64010101, 0xfffffffc}, {@broadcast, 0x10000}]}, @end, @generic={0x86, 0x12, "c9547012e2c0d44659d11e450dc0ccb7"}, @rr={0x7, 0x1f, 0x95, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @empty, @broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x35, 0x3, [{0x0, 0xe, "a9908e9ba2eaf70e5bacbfc4"}, {0x7, 0x3, "d3"}, {0x7, 0x3, "a8"}, {0x6, 0x9, "548cbec662c22e"}, {0x1, 0x9, "d0a4f07713395d"}, {0x5, 0x9, "6dfdc17cf60fea"}]}, @generic={0x86, 0x4, "6acb"}, @end, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000021c0)={'gre0\x00', &(0x7f00000020c0)={'sit0\x00', r2, 0x40, 0x7, 0x81f, 0x6, {{0x31, 0x4, 0x0, 0x3, 0xc4, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x7, [{@empty, 0xd}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x7, [{@empty, 0xf0}, {@local}, {@multicast2}, {@rand_addr=0x64010101, 0xfffffffc}, {@broadcast, 0x10000}]}, @end, @generic={0x86, 0x12, "c9547012e2c0d44659d11e450dc0ccb7"}, @rr={0x7, 0x1f, 0x95, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @empty, @broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x35, 0x3, [{0x0, 0xe, "a9908e9ba2eaf70e5bacbfc4"}, {0x7, 0x3, "d3"}, {0x7, 0x3, "a8"}, {0x6, 0x9, "548cbec662c22e"}, {0x1, 0x9, "d0a4f07713395d"}, {0x5, 0x9, "6dfdc17cf60fea"}]}, @generic={0x86, 0x4, "6acb"}, @end, @end]}}}}}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x78, r16, 0x620, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5580448f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5541}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7c41db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1929}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc877}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe76cda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5968fcfb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x82}, 0x66004010) 2m28.186912712s ago: executing program 2 (id=3677): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x7, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f00000003c0)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) close(0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) 2m27.32848649s ago: executing program 2 (id=3695): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x180, 0xffffffff, 0x228, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@addrtype={{0x30}, {0x1, 0x1c, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0x7fff, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @multicast1, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @empty, @icmp_id=0x65, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x3fffffffffffce3, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$SIOCX25SFACILITIES(r0, 0x8917, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', r7}, 0x94) 2m26.434805676s ago: executing program 2 (id=3711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) r1 = socket$unix(0x1, 0x4, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000240)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) ppoll(&(0x7f0000000000)=[{r1, 0xb}, {0xffffffffffffffff, 0x8440}, {r1, 0x1188}, {r1, 0x2000}, {r1, 0x8200}, {r1, 0x400c}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x8]}, 0x8) 2m11.383508169s ago: executing program 33 (id=3711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) r1 = socket$unix(0x1, 0x4, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000240)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) ppoll(&(0x7f0000000000)=[{r1, 0xb}, {0xffffffffffffffff, 0x8440}, {r1, 0x1188}, {r1, 0x2000}, {r1, 0x8200}, {r1, 0x400c}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x8]}, 0x8) 1m56.202638647s ago: executing program 4 (id=4034): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001b140100fcffffff0000000008004a0001000000080003000000000108004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x24000845}, 0x0) 1m56.184935996s ago: executing program 4 (id=4036): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1200}, @NFULA_CFG_MODE={0xa, 0x2, {0x557c}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000280)) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m56.120928112s ago: executing program 4 (id=4037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m56.035062848s ago: executing program 4 (id=4038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x28}}}}}}, 0x0) 1m55.993384704s ago: executing program 4 (id=4041): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000400), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x3, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 1m55.855639837s ago: executing program 4 (id=4045): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x1, 0x200}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)={r5, 0x1}, 0x8) 1m40.802682166s ago: executing program 34 (id=4045): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x1, 0x200}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)={r5, 0x1}, 0x8) 1m16.910133838s ago: executing program 5 (id=4402): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6c, r1, 0x0, 0x6c}, 0x38) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.772918344s ago: executing program 5 (id=4405): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xd75c, &(0x7f00000003c0)=ANY=[@ANYBLOB="33840bbd9ab77d7092f2b5697e14d7a1a6c20fd8d32f3966a625ec375e035ed599"], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x20000000, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f00000002c0)=0x90) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt(r2, 0x1, 0x400, &(0x7f00000004c0)="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", 0x1000) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRESDEC=0x0, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1m15.827369286s ago: executing program 5 (id=4408): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x80000, 0x1ff, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@gettaction={0x6c, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54040081}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xe2, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r5, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000004c0), 0x40000000000009f, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x0) (async) pwrite64(r7, &(0x7f0000000100)="87", 0x1, 0xfffffffffffffff9) 1m15.697996919s ago: executing program 6 (id=4411): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x18, 0x1, 0x40000000, 0x25dfdbfc, "", [@nested={0x129, 0xf2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m15.632582189s ago: executing program 6 (id=4412): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) bind$can_raw(r2, &(0x7f0000000140), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18050000000001000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x4}, 0x90) (async) read(r2, &(0x7f0000001180)=""/4073, 0xfe9) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xa0}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000002180)={&(0x7f00000021c0)={0x1d, r3}, 0x10, &(0x7f0000002200)={&(0x7f0000002240)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x4540}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xe}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xee1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m15.593384298s ago: executing program 5 (id=4414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c40)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000001, 0x6, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="0e", 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 1m15.346249103s ago: executing program 5 (id=4419): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffe, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x493, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680), 0x0, 0x0, 0x0) 1m14.737110268s ago: executing program 5 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events.local\x00', 0x275a, 0x0) write$ppp(r1, &(0x7f0000000100)="c79ef2b937c1cf4303ef", 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0xa1ef3ee481ca440) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 1m14.68441195s ago: executing program 6 (id=4424): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) 1m14.552630025s ago: executing program 6 (id=4427): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.435192642s ago: executing program 6 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000000c0), 0x318, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m14.222392965s ago: executing program 6 (id=4432): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendto$inet6(r6, &(0x7f00000002c0)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 59.345071346s ago: executing program 35 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events.local\x00', 0x275a, 0x0) write$ppp(r1, &(0x7f0000000100)="c79ef2b937c1cf4303ef", 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0xa1ef3ee481ca440) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 59.061249302s ago: executing program 36 (id=4432): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendto$inet6(r6, &(0x7f00000002c0)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 25.082713876s ago: executing program 9 (id=4741): socket$inet6(0xa, 0x3, 0xff) (async) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000b0d83387f3472e00000008000300701c025e1681e6e553c43d86", @ANYRES32=r3, @ANYBLOB="0a0034000101010101010000140049000bac0f0006ac0f0008ac0f000cac0f00"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)='0', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 24.726008296s ago: executing program 9 (id=4744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca"], 0x4a) 23.691129249s ago: executing program 9 (id=4750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x122, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@private1, @in6=@private0, 0x4e22, 0x7, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x29}, {0x9, 0x4, 0x40, 0xb, 0x4, 0x0, 0x6, 0x9}, {0x1, 0x6, 0x1, 0x9e3}, 0x3, 0x0, 0x3, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3500, 0x2, 0x2, 0x81, 0xfff00000, 0x3, 0x3ff}}, 0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f"], 0x4a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000f08000140000000090900020073797a3200000000140000001100010000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x3, 0xfffffffd, 0xd1, 0x202, 0x1, 0xe, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xa}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r8, &(0x7f00000002c0), &(0x7f0000000300)=""/221}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='/.#[!&\x00', 0x2201, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x5]}, {0x8, 0x3ff, 0x7, 0x80000000}}, 0xab, &(0x7f0000000080), &(0x7f00000000c0)=0x10}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r9, 0x20, &(0x7f0000001880)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/114, 0x72}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x20044840) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20014020) 23.223821714s ago: executing program 9 (id=4758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x4004001) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) 22.913967223s ago: executing program 9 (id=4760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca"], 0x4a) 22.584839786s ago: executing program 9 (id=4765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000300000004000300", 0x2c) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 19.288265849s ago: executing program 7 (id=4797): bpf$MAP_CREATE(0x0, &(0x7f0000019500)=ANY=[@ANYBLOB="1e00000000000000008000000700f82800"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000019540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)={0x1c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x80}]}, 0x1c}, 0x1, 0x620b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000019680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)={0x28, r7, 0x5, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000194c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019780)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) 16.928300171s ago: executing program 7 (id=4810): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xc8000000, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x9, 0x80000001, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0x8, 0x80}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@arena={0x21, 0x0, 0x0, 0x15, 0x20400, 0x1, 0xffffff50, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1d, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@exit, @jmp={0x5, 0x0, 0x8, 0x0, 0x5, 0x2, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x122}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r2, r3, 0x1], &(0x7f0000000480)=[{0x0, 0x8, 0x3, 0x9}], 0x10, 0x7a}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000680)={r2, &(0x7f0000000580)='[\\\x98\x00', 0x400200, &(0x7f00000005c0)={@align=0x9, {0x5, 0x4, 0xd3, 0xffffffffffffffff}}, 0x6, &(0x7f0000000600), &(0x7f0000000640)=0x2}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000006c0)={0x60002028}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r5, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x0, 0x1, 0x1, r1, 0x3}, 0xc) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000780)=0x3ac5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000007c0)={0x2, 0xce, "cafbecf1b1a97cf57c794b647285f6060a032b85f348f09d701b6ca1e8c9eed2f90939979f3a1624b78e95741b98613cf3f79a63c01fcc288d446398ac7280b56f0ce6693f34c73eb8e8935abd1916bba654f3d36f0fc96845ee8ffa3dbefeaef7d86851c758324e3f9ee39da5dbed90347b2d4725fb418aa7b3a6b72ead815d87eb6a9fd5c8e91447e0a2f4d68b2d56d9599c347e36d96e69aaab5c4cb486728e44923ffb031fcf8487a1216e1ebcf6d8f12105360c81c9b69973474bd6809c1cf8fc88783ddcdcee8cbe60e39b"}, &(0x7f00000008c0)=0xd6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000900)={r6, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x3, 0x7, 0xff}, &(0x7f00000009c0)=0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000a40)={r7, 0x2}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000ac0)={0x1, 0xf, 0x2, 0xa, 0x4, 0x7, 0xff, 0x7f, r9}, 0x20) r10 = socket$kcm(0x29, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1a, 0x9, 0x2, 0x6, 0x2900, r2, 0x5, '\x00', r1, r5, 0x4, 0x4}, 0x50) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000b80)={0x9, 0x132, 0x4, 0xbc}) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000bc0)={r5}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000c00)={0x38, 0xbb, 0x5, 0x1, 0x9, 0x0, [{0xfff, 0x8001, 0xfffffffffffff8f0}, {0x4df800, 0xd3, 0xb944, '\x00', 0xa03}, {0x8, 0x1000000000, 0x6, '\x00', 0x2}, {0x3, 0x0, 0x1000}, {0x5, 0x81, 0xc, '\x00', 0x400}, {0x7522, 0x4, 0x8000, '\x00', 0x8}, {0x5, 0xce9, 0x6f5, '\x00', 0xc84}, {0x2, 0xc, 0x8000000000000000, '\x00', 0x2580}, {0xffffffffffffff42, 0x7fffffff, 0xed, '\x00', 0x2880}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@newtaction={0x14, 0x30, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000f40)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000f80)={0x40000012}) writev(r11, &(0x7f00000015c0)=[{&(0x7f0000000fc0)="b1ab537543c4b6d3e5428be470a23bc08769918fb76672050ea134c0ace4c9f66256dcaee9b1623bcb7e225b172f45248ba3877daa2ad0fd0ece2bb1a921e04e9ea4c882e9cda101e86c6072bd4d820a7d3a42b958dd503e12e02dbe0610b5a3ab222148b14770096f95966f205e412dd0aca24385b98d7c8dab98cfeab618b7d867df82e07d7cb770a9f653826f6169617d7634d97d86b833e73fe02982234cee406b78573f2d28eb61bf2ff595cdf5ef44c89498b3454e8a1c20302358689bbfdf932e", 0xc4}, {&(0x7f00000010c0)="65fc96f88728a8c4e973b967b101421a23b0c721566e4b0ff5511b6968c84b9008911cd2f81bf3985a35d3d3675e6ea87843eda53b897e5165e0f86e249d3da22fcf48a9f3f9ad56fc1c5026ec4a15e23c47d87570f65e6a7e302991f56139c6b6e27a3768bba1f6faf3699122a10f9a8fc7bf6ba164f71e8a5b11e3e8e941eb7e4eb18bb34e25fc784e2ea567f005bd609f93", 0x93}, {&(0x7f0000001180)="66651177d953e78e5d6eec7353c4477cfaae5ce0198da1ad0fa06035ad377546d54db89cc263ff3bbc53f5f8fb7413956f9f", 0x32}, {&(0x7f00000011c0)="df1ab2f640717967506b4122b1518bce74e558010a7aa42519b7279b40a4a46c08a1440af1bdfb7dc9b871f250a028c752499d345c206b80cfa280d232bf0097be39d2515aa7a63beaa972bb41e23e0e86b9eca346df287dc838d6f6f22c9773a782cf01a0ac5043e57690b441c60a2b1e5b398de0496edbe226fd2727111b46256ba5179dd948e2c295a4dffca3556813cff652725e26", 0x97}, {&(0x7f0000001280)="1e2ae0504340178036c0f654a4d342af1d05a70368df79b4ce818ac59ef3f7add4fbbdae45adafd8bdd86865cc1cd4c63963eaad23a2a4e82ca6d8a2a22b77c6306e26ec7b09680a4e00627d8da713702c45f111b3bcc777530f4a6cdf58094fa48bf9d95c243f0d2a0cb962c423ad1d3576be3ecf121ac8e854f728ddd9da0eb8c32c2e8bce88cdc3a9401c5bd2e31fc8dc3fecc7c5b4", 0x97}, {&(0x7f0000001340)="14615391ede917b220214dcb0ad8032bb0eacb0450b958998a0b27e01a9fb64e08cb509d8f6d18d325a260b4436036735c79c6685ef1bafa43e16d02ecfec2fd298b0e0f73da0c5da9300bd3bfb60f7edb6b658f0b067e66c2e7f1ae758ffd397d9a704069eb3e69c96f5cbc1a151110752326488774e32d1f316caca8e0cbc6c9887177cb5da2b65fddd63b46d72376faceb3432e812b25609da7b4d24c165f0737ad750fce74906006fe4a8feefe0ee2207b189b", 0xb5}, {&(0x7f0000001400)="ed57160cffc94314b744f7c510ce122240e57a44df6987ed9f122b4afa6d46c21655eb3f0c294f168a07134fd7fc4231ee0c6c75790acea5b497bc33670c741dd5a407dfb5162a3295b4701f195f1a76391f05556662c98915490e8b0733bf646bbce3b0ca46955721a8e63f18e629f8c4d4a306facc95f7bf8233a108d190c925b171d49a9b6241ed009fe020858dfb9fe74d75a33109b4bb24", 0x9a}, {&(0x7f00000014c0)="e4cc5cfed2f75e1c5cea6c9e47ec34318cd8b126c37fb0e848e058e024d65be9dca77f4c077de27507b957f09ea1ee815e6bd65ab6a5132f78e16c7319cb56ed5b11e47d6908f5977f6504bf68aa96692ca953377be4cc207864b43950196f0ab4ae7033b56f11198540716d095181b0ba9805eb30972e8c358a3a695c1839742dd3ba26a8c4f3f9adea11b33e0623f7ce6804715c039a17c901b77b5624e816115f2ddf12ae105da6b1a64857c233fa977b9a0a50ae70e903178caf225c839045a50b87ecdbcd", 0xc7}], 0x8) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001640)={0xffffffffffffffff}) write$tun(r12, &(0x7f00000016c0)={@void, @val={0x1, 0x80, 0x5c6, 0x401, 0x6, 0x10}, @ipv4=@tipc={{0x12, 0x4, 0x1, 0x35, 0x6d, 0x65, 0x0, 0x4, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, {[@cipso={0x86, 0x31, 0x2, [{0x0, 0x4, "43ac"}, {0x1, 0x4, ';Y'}, {0x1, 0x5, "760af7"}, {0x6, 0x11, "15883cc8aba6fe406f25f8b59ce893"}, {0x0, 0xd, "b1e14ea991835a491e78e0"}]}]}}, @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x13d, 0x0, 0x3, 0x2, 0x1, 0x3, 0x0, 0xd, 0x0, 0x4e20, 0x4e23}, 0x4, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x77) close(r10) 7.302963033s ago: executing program 37 (id=4765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000300000004000300", 0x2c) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.670856533s ago: executing program 0 (id=4859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000439cab7ca8f7cee098088c95ba444b10d96133216210f17d576e3c7192f8ede67beaf8d9f7b94cc97e2367d4741f5ff34ba13aa04a77d6765afcf99ecad2d52ac2b141338380fd585443057eae9e240b1d07c9eb86674413a895fb1c2a919bf9165b9f1ffbe3bf5ffb4ed5fee894dbdcdbeaf8f811c900"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffff7fbbbbbbbbbbbbbbbb08060001080006040002aaaaaaaaaa44ac1414bb8b238e1c57a4aa"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffff7fbbbbbbbbbbbbbbbb08060001080006040002aaaaaaaaaa44ac1414bb8b238e1c57a4aa"], 0x0) sendto$packet(r2, &(0x7f00000004c0)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f00000009c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r2, &(0x7f00000004c0)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f00000009c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x0, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x0, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000940)={{0x2, 0x3, 0x1, 0x8, 0x7}, &(0x7f0000000700)=[{}, {}, {}]}) recvfrom(r6, &(0x7f0000000340)=""/112, 0x70, 0x2000, &(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.867386626s ago: executing program 0 (id=4862): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x58, r3, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffc42}, {0x5, 0x82}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x0, 0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x108, 0xffffffff, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0x0) 3.638163502s ago: executing program 8 (id=4864): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000580)=@generic={0x0, r5}, 0x18) close(0x3) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x100000000, 0x8001, 0x3, 0x8}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) 3.444549985s ago: executing program 1 (id=4865): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000001c0)=0xfffffffe, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x54, 0x2, 0xb8, 0x80, 0x85, 0x9, 0x21, 0x80, 0x8, 0x82, 0x4e, 0xff, 0x3}, 0xe) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 3.218583359s ago: executing program 7 (id=4866): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000040a010400000000000000000200000708000a400000000208000540fffffffc08000a4001000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4040844) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000040a010400000000000000000200000708000a400000000208000540fffffffc08000a4001000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4040844) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffeee, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 3.162911682s ago: executing program 0 (id=4867): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0xe, 0x80800) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) syz_emit_ethernet(0x4a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000008000000000000000000000000000aa"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff0100000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.158292994s ago: executing program 8 (id=4868): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000002000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b4000000000000000000000000000000001004e0000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.85075878s ago: executing program 0 (id=4869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) 2.850017255s ago: executing program 8 (id=4870): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4000) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@ipv4_newaddr={0x64, 0x14, 0x4, 0x70bd25, 0x25dfdbfe, {0x2, 0x38, 0x1, 0xff, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0xba, 0x5, 0x3}}, @IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x30, r9, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x14, r11, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r10) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(0x4) recvmsg$unix(r6, &(0x7f00000008c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/51, 0x33}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x7, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x10020) 2.200531947s ago: executing program 1 (id=4871): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff, 0xffffffff, 'vlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x1, 0x14}, 0x6, 0x70, 0x115}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="73dee6893200", 0x493, 0x4, [0x1, 0x30, 0x28, 0x0, 0x7, 0x2c, 0x29, 0x35, 0xb, 0x25, 0x13, 0xa, 0x30, 0x11, 0x26, 0x29], 0x1, 0xfffffff7, 0xfffffffffffffffa}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0xff], 0x4e20, 0x4e20, 0x4e24, 0x4e26, 0x8, 0x5, 0x1, 0xd, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0x2, 0x14, 0xf, 0x12, 0x4}}]}}]}, 0x148}}, 0x10000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', @broadcast}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x22d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001e80)="06ff03076844babeb89eacf008e9", 0x0, 0x6fe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfdef) (async) close(0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc53be674611f62b9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6a1dc3c40d635382}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000804) 1.717467167s ago: executing program 0 (id=4872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, 0x0, 0xc004) r4 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000380)="075fdaf9"}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 1.587420039s ago: executing program 1 (id=4873): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x20, &(0x7f0000001ac0)={&(0x7f0000000280)=""/88, 0x58, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x437b, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto$inet(r3, &(0x7f0000000240)='<', 0x381, 0x805, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000a80)=@id, 0x10) 1.582874736s ago: executing program 8 (id=4874): syz_emit_ethernet(0x7e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x15, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x89, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @rr={0x7, 0x3, 0x43}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_emit_ethernet(0x3a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@getpolicy={0x13c, 0x15, 0x10, 0x70bd26, 0x25dfdbff, {{@in=@broadcast, @in=@remote, 0x4e22, 0x6, 0x4e21, 0x4, 0x2, 0x80, 0xc0, 0x67, 0x0, r5}}, [@algo_crypt={0xc5, 0x2, {{'ecb(cast6)\x00'}, 0x3e8, "2a7d7461674c9bfea39e19bee1e362f7576ee5e34cee9cbd4a7b38c8c27cf378aaf7df32bde551ed04570133004872b395fc371ea4dbf48260c9132ac4b38856d2f05736e170384f1f5f6d4a80fb53211b10edc9b9e1db9d615bb5d0bd0e4036ef4dc5ea14a222db1fb0e438968982f3ed18b71ed547bd4f68fe5b6382"}}, @lifetime_val={0x24, 0x9, {0x7, 0x6, 0x1, 0x2f}}]}, 0x13c}}, 0x4000000) 1.582309139s ago: executing program 7 (id=4875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="08f88ee2fb8412dd07457eaf52be", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 1.310216318s ago: executing program 1 (id=4876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r1) 1.015690511s ago: executing program 7 (id=4877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x1000, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\"\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="4400308040000180080001000100000008000400050000000800010000000000240003800c0004000200aaaaaaaaaaaa08000200030000000c0004000201aaaaaaaaaaaa"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20040080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x814) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r6, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xba, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40d0) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/time\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='devices.list\x00', 0x26e1, 0x0) close(r10) r11 = getpid() sendmsg$unix(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)='CJ]', 0x3}], 0x1, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) r12 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, r6, 0x4, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0) 907.024856ms ago: executing program 8 (id=4878): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x78b4e39d, 0x10}, &(0x7f0000000080)=0xc) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000400)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000300)="7b36a38d76ecc90e99", 0x9}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0x1e, &(0x7f0000000380)={@local, @random="ffcafd5c2102", @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'F', "a0fc1b", 0xf7}}}}}, &(0x7f00000003c0)={0x0, 0x3, [0x70a, 0x1aa, 0xd04, 0x248]}) syz_emit_ethernet(0xe, &(0x7f0000000440)={@random="aaaaaaaaaaaa", @random="aaaaaaaaaabb", @void, {@generic={0x800}}}, 0x0) listen(r0, 0x8001) 750.458434ms ago: executing program 1 (id=4879): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="030b00000000000000001300000004000980"], 0x18}}, 0x80000) 721.845377ms ago: executing program 7 (id=4880): r0 = socket$inet6(0xa, 0x6, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) socket$inet6(0xa, 0x6, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) 375.088654ms ago: executing program 0 (id=4881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) 121.625056ms ago: executing program 8 (id=4882): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="180000006a007f00b1c465d0d8c535f55c0102cf57fa9e7f", 0x18}], 0x1}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x28, r2, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000300)=0xfffffffc, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) (async) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async) socket(0x18, 0x80000, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x5, 0x7d, 0x8, @private2, @mcast1, 0x8000, 0x20, 0x7, 0xe}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="04032dbd7000fbdbdf250e0000007000018008000100", @ANYRES8=r3, @ANYRES64=r5, @ANYRES32=r8, @ANYBLOB="1400020062617461647630000000000000000000080003000300000008000300000000001400020064766d727030000000000000000000001400020067656e6576653000000000000000000008000300010000000800030082203d93"], 0x84}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r12}, 0x70) (async, rerun: 64) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) (rerun: 64) 0s ago: executing program 1 (id=4883): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000d0480300000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) socket$unix(0x1, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x19b9823cce0b4c4a) kernel console output (not intermixed with test programs): th. [ 376.393667][T18436] netlink: 'syz.0.3235': attribute type 22 has an invalid length. [ 376.393680][T18436] netlink: 'syz.0.3235': attribute type 23 has an invalid length. [ 376.867558][T18458] wlan1 speed is unknown, defaulting to 1000 [ 376.893096][T18463] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 377.228384][T18461] __nla_validate_parse: 4 callbacks suppressed [ 377.228404][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 377.480238][T18458] lo speed is unknown, defaulting to 1000 [ 377.757439][T10729] Bluetooth: hci3: command tx timeout [ 377.757529][ T52] Bluetooth: hci0: command tx timeout [ 378.257580][T18515] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 378.438785][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 378.460296][T18528] netlink: ct_mark mask cannot be 0 [ 378.460328][T18528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.486223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.528463][T18522] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 378.553110][T18535] validate_nla: 2 callbacks suppressed [ 378.553127][T18535] netlink: 'syz.1.3264': attribute type 49 has an invalid length. [ 378.560037][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'. [ 378.930539][T18552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3270'. [ 379.014437][T18556] netlink: 'syz.4.3272': attribute type 1 has an invalid length. [ 379.040515][T18556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.059658][T18554] bond2: option lp_interval: invalid value (0) [ 379.059681][T18554] bond2: option lp_interval: allowed values 1 - 2147483647 [ 379.060681][T18554] bond2 (unregistering): Released all slaves [ 379.100832][T18559] netlink: 'syz.4.3272': attribute type 10 has an invalid length. [ 379.100853][T18559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3272'. [ 379.139488][T18556] bond0: (slave dummy0): making interface the new active one [ 379.140281][T18556] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.141241][T18559] dummy0: entered promiscuous mode [ 379.146659][T18559] bond0: (slave dummy0): Releasing active interface [ 379.208808][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 379.209851][T18561] xt_cgroup: path and classid specified [ 379.506757][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 379.665808][ T9719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.665850][ T9719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.665880][ T9719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.665910][ T9719] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.751890][T18598] syzkaller1: entered promiscuous mode [ 379.751912][T18598] syzkaller1: entered allmulticast mode [ 379.816775][T18602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.835636][ T52] Bluetooth: hci3: command tx timeout [ 379.840103][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 379.909699][T18607] bond1: entered promiscuous mode [ 379.909733][T18607] bond1: entered allmulticast mode [ 379.914198][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 380.016193][T18616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.024066][T18616] sctp: [Deprecated]: syz.0.3289 (pid 18616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.024066][T18616] Use struct sctp_sack_info instead [ 380.091754][T18622] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3290'. [ 380.597530][T18668] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 380.598768][T18668] bond2 (unregistering): Released all slaves [ 380.977702][T18682] netlink: 'syz.4.3307': attribute type 2 has an invalid length. [ 381.095788][T10729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.100591][T10729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.101376][T10729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.102535][T10729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.104210][T10729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.350418][T18700] netlink: 'syz.0.3314': attribute type 1 has an invalid length. [ 381.427629][T18707] netlink: 'syz.2.3315': attribute type 83 has an invalid length. [ 381.681010][T18700] bridge4: entered promiscuous mode [ 381.684966][T18700] bond2: (slave bridge4): making interface the new active one [ 381.690894][T18700] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 382.009223][T18745] xt_l2tp: invalid flags combination: 8 [ 382.056790][T18734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.056827][T18734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.092399][T18685] wlan1 speed is unknown, defaulting to 1000 [ 382.109431][T18747] team0 (unregistering): Port device team_slave_0 removed [ 382.122135][T18747] team0 (unregistering): Port device team_slave_1 removed [ 382.212541][T18734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.212577][T18734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.401261][T18734] bond0: (slave netdevsim1): Releasing backup interface [ 382.418338][T18734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.418374][T18734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.567595][T18734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.567633][T18734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.652771][T18685] lo speed is unknown, defaulting to 1000 [ 382.776008][ T9719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 382.776039][ T9719] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 382.967546][T18772] __nla_validate_parse: 8 callbacks suppressed [ 382.967566][T18772] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3328'. [ 383.055438][ T263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 383.055470][ T263] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 383.055503][ T263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 383.055526][ T263] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 383.055555][ T263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 383.055578][ T263] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 383.128733][T18780] netlink: 'syz.2.3331': attribute type 10 has an invalid length. [ 383.196614][ T52] Bluetooth: hci1: command tx timeout [ 383.236802][T18785] sctp: [Deprecated]: syz.1.3332 (pid 18785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.236802][T18785] Use struct sctp_sack_info instead [ 383.280207][T18780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.322114][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.393769][T18785] bridge_slave_0 (unregistering): left allmulticast mode [ 383.393794][T18785] bridge_slave_0 (unregistering): left promiscuous mode [ 383.393880][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.534453][T18798] pim6reg: entered allmulticast mode [ 383.579904][T18801] pim6reg: left allmulticast mode [ 383.783697][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.784848][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.784971][T18685] bridge_slave_0: entered allmulticast mode [ 383.789325][T18685] bridge_slave_0: entered promiscuous mode [ 383.794170][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.794278][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.794391][T18685] bridge_slave_1: entered allmulticast mode [ 383.796798][T18685] bridge_slave_1: entered promiscuous mode [ 383.850735][T18685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.861657][T18685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.919390][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 383.992538][T18685] team0: Port device team_slave_0 added [ 384.011484][T18685] team0: Port device team_slave_1 added [ 384.088098][T18685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.088116][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.088138][T18685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.092794][T18685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.092809][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.092830][T18685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.326518][T18685] hsr_slave_0: entered promiscuous mode [ 384.327623][T18685] hsr_slave_1: entered promiscuous mode [ 384.329847][T18685] debugfs: 'hsr0' already exists in 'hsr' [ 384.329866][T18685] Cannot create hsr debugfs directory [ 384.364175][T18836] ip_tables: iptables: counters copy to user failed while replacing table [ 384.505148][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 385.043332][T18853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3346'. [ 385.275101][ T52] Bluetooth: hci1: command tx timeout [ 385.292328][T18685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.319466][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.322022][T18685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.334616][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.336501][T18685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.372504][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.372969][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 385.376558][T18685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.413710][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.453517][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 385.492575][T18873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3350'. [ 385.497939][T18873] netlink: 'syz.4.3350': attribute type 3 has an invalid length. [ 385.497956][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 385.752005][T18685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.818903][T18685] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.843908][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.844013][ T7150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.884355][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.884454][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.123933][T18882] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 386.127081][T18884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3354'. [ 386.347990][T18897] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 386.529863][T18909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.564019][T18897] bond0: (slave bond_slave_1): Releasing backup interface [ 386.579632][ T9719] IPVS: starting estimator thread 0... [ 386.602044][T18897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.602376][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 386.666336][T18910] IPVS: using max 29 ests per chain, 69600 per kthread [ 386.867032][T18685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.887479][T18921] No such timeout policy "s" [ 386.887495][T18921] netlink: Failed to associated timeout policy 's' [ 387.365096][ T52] Bluetooth: hci1: command tx timeout [ 387.540912][T18958] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 387.565891][T18958] bond4 (unregistering): Released all slaves [ 387.693977][T18685] veth0_vlan: entered promiscuous mode [ 387.709022][T18969] smc: net device lo applied user defined pnetid SYZ0 [ 387.728935][T18685] veth1_vlan: entered promiscuous mode [ 387.800888][T18685] veth0_macvtap: entered promiscuous mode [ 387.817564][T18685] veth1_macvtap: entered promiscuous mode [ 387.863379][T18685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.890319][T18685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.937907][ T7145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.938307][ T7145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.938655][ T7145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.938790][ T7145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.049380][T18991] __nla_validate_parse: 3 callbacks suppressed [ 388.049399][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 388.069363][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 388.261919][T18988] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3383'. [ 388.322392][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 388.350738][T19001] syzkaller0: Caught tx_queue_len zero misconfig [ 388.381771][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 388.381831][T19001] openvswitch: netlink: Missing key (keys=40, expected=100) [ 388.433496][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 388.453084][ T9719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.453102][ T9719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.891872][ T9722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.891894][ T9722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.060954][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 389.436132][ T52] Bluetooth: hci1: command tx timeout [ 389.437809][T19064] IPv6: sit1: Disabled Multicast RS [ 389.521792][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3399'. [ 389.571132][T19072] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 389.679792][T19083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3403'. [ 389.798249][T19094] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3408'. [ 390.394290][T19140] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 390.714415][T19161] Cannot find del_set index 4 as target [ 390.923348][ T9719] IPVS: starting estimator thread 0... [ 390.947870][T19177] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 391.005491][T19178] IPVS: using max 32 ests per chain, 76800 per kthread [ 391.139650][T19177] bond1: entered promiscuous mode [ 391.139673][T19177] bond1: entered allmulticast mode [ 391.790348][T19239] x_tables: duplicate underflow at hook 1 [ 391.983925][T19245] netlink: 'syz.4.3447': attribute type 2 has an invalid length. [ 392.261655][T19227] netlink: 'syz.2.3444': attribute type 7 has an invalid length. [ 392.261676][T19227] netlink: 'syz.2.3444': attribute type 8 has an invalid length. [ 392.293593][T19227] netlink: 'syz.2.3444': attribute type 1 has an invalid length. [ 392.596182][T19288] netlink: 'syz.5.3459': attribute type 1 has an invalid length. [ 392.629724][T19288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.870152][T19299] bond2 (unregistering): Released all slaves [ 393.049840][T19293] netlink: 'syz.2.3462': attribute type 3 has an invalid length. [ 393.066936][ T52] block nbd0: Receive control failed (result -32) [ 393.198322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.287988][T19326] __nla_validate_parse: 8 callbacks suppressed [ 393.288007][T19326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3470'. [ 393.362493][T19320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.648792][T19342] tipc: Started in network mode [ 393.648820][T19342] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 393.648967][T19342] tipc: Enabled bearer , priority 10 [ 393.649791][T19344] tipc: Enabling of bearer rejected, already enabled [ 393.955460][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3476'. [ 394.159822][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 394.495935][T19397] x_tables: duplicate underflow at hook 1 [ 394.498770][T19395] x_tables: duplicate underflow at hook 1 [ 394.564369][T19398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3485'. [ 394.709164][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3486'. [ 394.747618][T19404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3486'. [ 394.767412][ T9] tipc: Node number set to 10136234 [ 394.849848][T19413] veth0_to_bond: entered allmulticast mode [ 394.883209][T19411] syzkaller0: entered promiscuous mode [ 394.883230][T19411] syzkaller0: entered allmulticast mode [ 394.926550][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3490'. [ 395.114102][T19435] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3495'. [ 395.123957][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3495'. [ 395.202954][T19440] ip_tables: iptables: counters copy to user failed while replacing table [ 395.216868][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'. [ 395.357210][T19445] bond4: entered promiscuous mode [ 395.357237][T19445] bond4: entered allmulticast mode [ 395.403974][T19447] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 395.953810][T19475] netlink: NAT attribute has 8 unknown bytes [ 395.953845][T19475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.239593][T19491] syzkaller0: entered promiscuous mode [ 396.239615][T19491] syzkaller0: entered allmulticast mode [ 396.403589][T19502] ip_tables: iptables: counters copy to user failed while replacing table [ 396.777315][T19518] netlink: 'syz.5.3523': attribute type 3 has an invalid length. [ 396.826905][T19520] netlink: 'syz.5.3523': attribute type 3 has an invalid length. [ 396.963690][T19540] IPVS: length: 173 != 8 [ 396.973327][T19544] IPVS: length: 173 != 8 [ 397.386633][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 397.386973][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 397.387232][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 397.387508][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 397.387894][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 397.432729][T19579] netlink: 'syz.5.3538': attribute type 49 has an invalid length. [ 398.307399][T19626] syz_tun: entered allmulticast mode [ 398.308662][T19626] __nla_validate_parse: 21 callbacks suppressed [ 398.308679][T19626] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3552'. [ 398.310827][T19625] syz_tun: left allmulticast mode [ 398.380720][T19629] syzkaller0: entered promiscuous mode [ 398.380742][T19629] syzkaller0: entered allmulticast mode [ 398.386079][T19630] tipc: Enabled bearer , priority 0 [ 398.388561][T19634] tipc: Resetting bearer [ 398.438151][T19636] netlink: 524 bytes leftover after parsing attributes in process `syz.0.3554'. [ 398.686768][T19656] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3560'. [ 398.764263][T19659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3563'. [ 398.927753][T19671] net_ratelimit: 29 callbacks suppressed [ 398.927772][T19671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.934934][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.934977][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.935009][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.935050][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.987171][T19671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.013372][T19671] netlink: 'syz.1.3565': attribute type 1 has an invalid length. [ 399.013991][T19671] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 399.014005][T19671] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3565'. [ 399.245780][T19688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 399.270692][T19688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3570'. [ 399.548537][T19702] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3574'. [ 399.663870][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3578'. [ 399.754269][T19714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.782378][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 400.251610][T19750] geneve3: entered promiscuous mode [ 400.251634][T19750] geneve3: entered allmulticast mode [ 400.326092][ T263] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 400.328338][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 400.328382][ T50] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 400.328408][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 400.537053][T19766] tipc: Started in network mode [ 400.537071][T19766] tipc: Node identity , cluster identity 4711 [ 400.537084][T19766] tipc: Failed to set node id, please configure manually [ 400.537137][T19766] tipc: Enabling of bearer rejected, failed to enable media [ 400.542954][T19766] netlink: 'syz.0.3595': attribute type 10 has an invalid length. [ 400.568007][T19766] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.604335][T19766] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.118956][T19807] netlink: 'syz.5.3604': attribute type 1 has an invalid length. [ 401.122333][T19811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.144187][T19805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.367603][T19824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.109931][T19871] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.500090][T19902] netlink: Unknown conntrack attr (0) [ 402.508892][T19905] netlink: Unknown conntrack attr (0) [ 402.530215][T19907] netlink: 'syz.5.3626': attribute type 2 has an invalid length. [ 402.530234][T19907] netlink: 'syz.5.3626': attribute type 11 has an invalid length. [ 402.533349][T19910] netlink: 'syz.5.3626': attribute type 2 has an invalid length. [ 402.533365][T19910] netlink: 'syz.5.3626': attribute type 11 has an invalid length. [ 402.736432][T19913] openvswitch: netlink: Flow key attr not present in new flow. [ 403.090947][T19930] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 403.167100][T19930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.200068][ T13] IPVS: starting estimator thread 0... [ 403.305646][T19947] IPVS: using max 29 ests per chain, 69600 per kthread [ 403.342435][T19930] veth0_virt_wifi: entered promiscuous mode [ 403.577174][T19955] x_tables: duplicate underflow at hook 1 [ 403.613652][T19960] netlink: 'syz.5.3642': attribute type 26 has an invalid length. [ 403.633449][T19960] netlink: 'syz.5.3642': attribute type 26 has an invalid length. [ 403.832951][T19976] netlink: NAT attribute has 8 unknown bytes [ 403.864241][T19978] __nla_validate_parse: 19 callbacks suppressed [ 403.864260][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'. [ 403.971089][T19986] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 404.012476][T19986] block nbd296: server does not support multiple connections per device. [ 404.023672][T19986] block nbd296: shutting down sockets [ 404.052472][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3650'. [ 404.378462][T20011] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 404.378485][T20011] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3655'. [ 404.552408][T20018] netlink: 524 bytes leftover after parsing attributes in process `syz.1.3656'. [ 404.662384][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 404.751006][T20023] bond6: entered promiscuous mode [ 404.877082][ T9722] bond0: (slave team0): interface is now down [ 404.956448][T20042] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 404.956448][T20042] Please contact the netfilter-devel mailing list or update your nftables rules. [ 405.056443][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3666'. [ 405.100501][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'. [ 405.141065][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3666'. [ 405.225813][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 405.333438][T20056] vlan4: entered promiscuous mode [ 405.413157][T20070] syzkaller0: left promiscuous mode [ 405.413180][T20070] syzkaller0: left allmulticast mode [ 405.543214][T20086] Cannot find set identified by id 4 to match [ 405.554182][T20086] netlink: 'syz.5.3673': attribute type 64 has an invalid length. [ 405.554201][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3673'. [ 405.712504][T20092] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 405.883525][T20097] bond3: (slave bridge2): making interface the new active one [ 405.894397][T20097] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 406.113405][T20124] IPVS: Unknown mcast interface: caif0 [ 406.372264][T20143] erspan0: entered promiscuous mode [ 406.535946][ T31] audit: type=1107 audit(1791751845.778:7): pid=20145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÅåoÚ¼/‰+mœ* Ñ–””„Ä^ß5ÌØôþè|o{_Ëü¬A_¥]"¡dõt{èQwnS¥„lÔµW@ýf¬}"¬ìžbo0ç\ó¿3‰Ïá›æ…wÓyÏ~3ñƒ—ø¤i-ÆÔ}Çs ñ`ÈwH`¬½Hïq´¸¨1ˆ·[.V_>«+8EÂàì‹ð¢¥ûÖ¡&Ó€¶/œäÑ/ÕæÐøU—•Ý' [ 406.730197][T20153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.746469][T20153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.766305][T20163] sit0: entered promiscuous mode [ 406.835937][T20153] bond3: entered promiscuous mode [ 406.835963][T20153] bond3: entered allmulticast mode [ 406.841587][T20153] bond3: left allmulticast mode [ 406.845524][T20153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.274104][T20194] team0: Cannot enslave team device to itself [ 407.435422][ T13] bond0: (slave team0): interface is now down [ 407.437492][ T13] bond0: now running without any active interface! [ 407.767670][T20221] validate_nla: 4 callbacks suppressed [ 407.767689][T20221] netlink: 'syz.0.3716': attribute type 15 has an invalid length. [ 407.768994][T20221] net_ratelimit: 1 callbacks suppressed [ 407.769010][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.430991][T20213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.587847][T20242] netlink: 'syz.4.3723': attribute type 32 has an invalid length. [ 410.616473][T20243] syzkaller1: entered promiscuous mode [ 410.616494][T20243] syzkaller1: entered allmulticast mode [ 410.867427][T20259] __nla_validate_parse: 8 callbacks suppressed [ 410.867447][T20259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3729'. [ 411.076959][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 411.078087][T20279] Bluetooth: MGMT ver 1.23 [ 411.282166][T20285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3738'. [ 411.812613][T20310] Cannot find add_set index 2 as target [ 411.828497][T20312] netlink: 'syz.0.3746': attribute type 1 has an invalid length. [ 411.828920][T20310] netlink: 'syz.1.3745': attribute type 14 has an invalid length. [ 411.939500][T20317] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.939608][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 411.945999][T20317] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 412.299271][ T7152] IPVS: starting estimator thread 0... [ 412.352180][T20333] xt_CT: No such helper "snmp_trap" [ 412.385185][T20337] IPVS: using max 28 ests per chain, 67200 per kthread [ 412.500552][T20348] netlink: 'syz.0.3760': attribute type 64 has an invalid length. [ 412.509519][T20349] netlink: 'syz.0.3760': attribute type 64 has an invalid length. [ 412.600675][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3762'. [ 412.745870][T20371] tipc: Can't bind to reserved service type 2 [ 413.040924][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'. [ 413.077279][T20394] bond5: Invalid ad_actor_system MAC address. [ 413.077300][T20394] bond5: option ad_actor_system: invalid value (1) [ 413.079058][T20394] bond5 (unregistering): Released all slaves [ 413.202578][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3773'. [ 413.202615][T20399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3773'. [ 413.346854][T20408] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 413.346875][T20408] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3776'. [ 413.458000][T20411] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3776'. [ 413.719150][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.740325][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.741900][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.743407][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.776807][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.778351][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.779947][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.781443][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.782973][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.837927][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.839398][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.840694][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.842282][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.843768][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.859115][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.863361][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.865694][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.867203][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.869645][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.871154][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.872866][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.874376][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.876679][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.878219][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.879736][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.881174][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.882901][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.884371][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.896672][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.898893][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.901850][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.903920][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.909787][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.912004][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.914411][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.918813][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.930331][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.933664][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.937924][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.940579][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.943770][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.951042][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.952349][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.958599][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.961722][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.964236][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.967577][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.969090][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.254987][T20436] xt_hashlimit: size too large, truncated to 1048576 [ 414.255006][T20436] xt_hashlimit: max too large, truncated to 1048576 [ 414.255011][T20436] xt_hashlimit: invalid rate [ 414.308733][T20439] wlan1 speed is unknown, defaulting to 1000 [ 414.443392][T20442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.563138][T20446] netlink: 'syz.5.3784': attribute type 30 has an invalid length. [ 414.596527][T20442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.600625][T20439] lo speed is unknown, defaulting to 1000 [ 414.731974][T20442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.857681][T20456] netlink: 'syz.5.3787': attribute type 6 has an invalid length. [ 414.923763][T20442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.967492][T20456] netlink: 'syz.5.3787': attribute type 6 has an invalid length. [ 414.996321][ T9722] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.996373][ T9722] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.996404][ T9722] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.996433][ T9722] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.316068][ T263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.344964][ T7152] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.346922][ T9722] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.361799][ T263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.380563][T20443] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.424136][T20443] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.477436][T20443] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.512279][T20443] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.833459][T20373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.081577][T20489] __nla_validate_parse: 9 callbacks suppressed [ 416.081591][T20489] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3795'. [ 418.199412][T20465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.332858][T20497] openvswitch: netlink: Flow actions attr not present in new flow. [ 418.403042][T20510] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3799'. [ 418.548074][T20517] veth1_macvtap: left promiscuous mode [ 418.637247][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.706662][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.707090][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.716237][T16061] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.816623][ T52] Bluetooth: hci3: connection err: -111 [ 419.103664][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 419.103695][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 419.541700][ T5277] veth1_macvtap: entered promiscuous mode [ 420.280212][T20610] ipvlan2: entered promiscuous mode [ 420.286329][T20610] team0: Device ipvlan2 failed to register rx_handler [ 420.677404][T20619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3829'. [ 420.993290][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3833'. [ 420.993312][T20634] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3833'. [ 421.051202][T20633] syzkaller0: entered promiscuous mode [ 421.051224][T20633] syzkaller0: entered allmulticast mode [ 421.487830][T20652] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3842'. [ 421.552108][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3843'. [ 422.116991][T20678] ip_tables: iptables: counters copy to user failed while replacing table [ 422.119519][T20678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 422.730935][T10729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 422.753117][T10729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 422.762590][T10729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 422.774263][T10729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.783193][T10729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.878858][T20576] Set syz1 is full, maxelem 65536 reached [ 423.050730][T20716] netlink: 'syz.4.3870': attribute type 1 has an invalid length. [ 423.172948][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'. [ 423.172974][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'. [ 423.335250][T20732] IPVS: Scheduler module ip_vs_mh not found [ 423.343569][T20734] IPVS: length: 4096 != 24 [ 423.442212][T20739] syzkaller0: left promiscuous mode [ 423.442236][T20739] syzkaller0: left allmulticast mode [ 423.652367][T20697] wlan1 speed is unknown, defaulting to 1000 [ 423.660305][T20743] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3881'. [ 423.665095][T20746] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3881'. [ 423.665396][T20753] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3881'. [ 423.918529][T20697] lo speed is unknown, defaulting to 1000 [ 424.590850][T20697] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.591003][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.591124][T20697] bridge_slave_0: entered allmulticast mode [ 424.592764][T20697] bridge_slave_0: entered promiscuous mode [ 424.606162][T20697] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.606260][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.606393][T20697] bridge_slave_1: entered allmulticast mode [ 424.607993][T20697] bridge_slave_1: entered promiscuous mode [ 424.734393][ T7152] pim6reg: left allmulticast mode [ 424.875314][ T52] Bluetooth: hci6: command tx timeout [ 425.071835][T20812] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 425.840501][ T7152] bond0 (unregistering): Released all slaves [ 425.851990][ T7152] bond1 (unregistering): Released all slaves [ 425.869143][ T7152] bond2 (unregistering): Released all slaves [ 425.900241][ T7152] bond3 (unregistering): Released all slaves [ 425.936277][ T7152] bond4 (unregistering): Released all slaves [ 425.979185][ T7152] bond5 (unregistering): Released all slaves [ 425.993457][ T7152] bond6 (unregistering): Released all slaves [ 426.013742][ T7152] bond7 (unregistering): Released all slaves [ 426.040052][ T7152] bond8 (unregistering): Released all slaves [ 426.053473][ T7152] bond9 (unregistering): Released all slaves [ 426.072041][ T7152] bond10 (unregistering): Released all slaves [ 426.097562][ T7152] bond11 (unregistering): Released all slaves [ 426.133045][T20697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.143923][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'. [ 426.162446][T20697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.263790][T20697] team0: Port device team_slave_0 added [ 426.275275][T20697] team0: Port device team_slave_1 added [ 426.311453][T20697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.311468][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.311489][T20697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.313339][T20697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.313351][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.313371][T20697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.442234][ T7152] ovs-dp0: left promiscuous mode [ 426.697424][T20830] syzkaller0: entered promiscuous mode [ 426.697449][T20830] syzkaller0: entered allmulticast mode [ 426.715940][T20697] hsr_slave_0: entered promiscuous mode [ 426.718460][T20697] hsr_slave_1: entered promiscuous mode [ 426.719233][T20697] debugfs: 'hsr0' already exists in 'hsr' [ 426.719250][T20697] Cannot create hsr debugfs directory [ 426.938295][ T7152] IPVS: stopping master sync thread 6872 ... [ 426.942933][ T7152] IPVS: stopping backup sync thread 16334 ... [ 426.968788][ T52] Bluetooth: hci6: command tx timeout [ 427.571249][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3920'. [ 427.877588][T20697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.899446][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.900490][T20697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.928091][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.933061][T20876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.002183][T20874] syzkaller0: entered promiscuous mode [ 428.002204][T20874] syzkaller0: entered allmulticast mode [ 428.018180][T20697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.027918][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.029007][T20697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.037889][ T263] smbdirect: ib_dev[syz2] removed [ 428.078307][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.078910][ T9519] infiniband syz2: ib_query_port failed (-19) [ 428.347159][T20908] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 428.370232][T20894] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3930'. [ 428.528495][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3933'. [ 428.528524][T20911] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3933'. [ 428.723232][ T7152] veth1_macvtap: left promiscuous mode [ 428.723270][ T7152] veth0_macvtap: left promiscuous mode [ 428.867767][T20932] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 429.046163][ T52] Bluetooth: hci6: command tx timeout [ 429.046531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.299380][T20923] netlink: 'syz.4.3937': attribute type 5 has an invalid length. [ 429.360699][T20932] bond7: entered promiscuous mode [ 429.361186][T20932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.399463][T20953] netlink: 'syz.4.3946': attribute type 11 has an invalid length. [ 429.448873][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3946'. [ 429.449095][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3946'. [ 429.521323][T20697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.644427][T20697] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.685614][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.685739][ T7150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.711300][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.711428][ T7150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.808603][T20969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3951'. [ 429.828481][T20697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.828502][T20697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.964456][ T7152] IPVS: stop unused estimator thread 0... [ 429.983626][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 430.299776][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 430.331176][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 430.438672][T21004] netlink: 'syz.1.3959': attribute type 1 has an invalid length. [ 430.508576][T21008] netlink: 'syz.0.3960': attribute type 1 has an invalid length. [ 430.509472][T21008] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 430.618131][T21010] veth1_to_bridge: entered promiscuous mode [ 430.618155][T21010] veth1_to_bridge: entered allmulticast mode [ 430.681328][T20697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.115296][ T52] Bluetooth: hci6: command tx timeout [ 431.238278][T20697] veth0_vlan: entered promiscuous mode [ 431.271664][T20697] veth1_vlan: entered promiscuous mode [ 431.361355][T20697] veth0_macvtap: entered promiscuous mode [ 431.367699][T20697] veth1_macvtap: entered promiscuous mode [ 431.401767][T20697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.421347][T20697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.518755][ T263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.524329][ T9722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.524367][ T9722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.524398][ T9722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.778659][ T7150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.778680][ T7150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.897891][ T9721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.897912][ T9721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.970533][T21061] netlink: 'syz.5.3973': attribute type 1 has an invalid length. [ 432.092825][T21063] tipc: Started in network mode [ 432.092854][T21063] tipc: Node identity 524ecabcb82a, cluster identity 4711 [ 432.093068][T21063] tipc: Enabled bearer , priority 0 [ 432.202861][T21080] netlink: 'syz.6.3861': attribute type 1 has an invalid length. [ 432.217866][T21063] syzkaller0: entered promiscuous mode [ 432.217915][T21063] syzkaller0: entered allmulticast mode [ 432.218712][T21063] tipc: Resetting bearer [ 432.240326][T21075] macsec1: entered promiscuous mode [ 432.240349][T21075] batadv0: entered promiscuous mode [ 432.252033][T21075] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 432.260841][T21075] batadv0: left promiscuous mode [ 432.367743][T21062] tipc: Resetting bearer [ 434.528366][T21062] tipc: Disabling bearer [ 434.578027][ T5713] tipc: Node number set to 3932474044 [ 434.863135][T21126] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 434.903720][T21126] __nla_validate_parse: 4 callbacks suppressed [ 434.903739][T21126] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3988'. [ 435.351912][T21154] syzkaller1: entered promiscuous mode [ 435.351934][T21154] syzkaller1: entered allmulticast mode [ 435.456930][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3996'. [ 435.456963][T21164] netlink: 'syz.6.3996': attribute type 30 has an invalid length. [ 435.531222][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3996'. [ 435.531266][T21166] netlink: 'syz.6.3996': attribute type 30 has an invalid length. [ 435.614727][ T9722] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.621097][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3996'. [ 435.621128][T21173] netlink: 'syz.6.3996': attribute type 30 has an invalid length. [ 435.643179][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3996'. [ 435.643210][T21178] netlink: 'syz.6.3996': attribute type 30 has an invalid length. [ 435.717407][ T43] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.717456][ T43] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.717490][ T43] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.916039][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 435.916075][T21189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4002'. [ 435.972032][T21189] geneve3: entered promiscuous mode [ 435.972054][T21189] geneve3: entered allmulticast mode [ 435.980292][T21196] syzkaller0: entered promiscuous mode [ 435.980310][T21196] syzkaller0: entered allmulticast mode [ 435.984087][T21182] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20001 [ 436.095971][T21199] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4003'. [ 436.168442][T21201] netlink: 'syz.0.4004': attribute type 2 has an invalid length. [ 436.169356][T21201] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4004'. [ 436.345548][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4007'. [ 436.413923][T21211] ip_tables: iptables: counters copy to user failed while replacing table [ 436.416746][T21211] C: renamed from lo (while UP) [ 436.443753][T21211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 436.531672][T21216] openvswitch: netlink: Message has 8 unknown bytes. [ 436.548529][T21216] openvswitch: netlink: Message has 8 unknown bytes. [ 436.685170][T21231] erspan0: entered promiscuous mode [ 436.686388][T21231] gretap0: entered promiscuous mode [ 436.896977][T21237] bond0: entered promiscuous mode [ 436.897001][T21237] bond_slave_0: entered promiscuous mode [ 436.897373][T21237] bond_slave_1: entered promiscuous mode [ 436.899350][T21235] netlink: 'syz.0.4017': attribute type 2 has an invalid length. [ 437.040952][T21249] netlink: 'syz.0.4021': attribute type 2 has an invalid length. [ 437.502132][T21273] netlink: 'syz.4.4031': attribute type 2 has an invalid length. [ 437.667471][T21286] tipc: New replicast peer: 172.20.20.187 [ 437.669766][T21286] tipc: Enabled bearer , priority 10 [ 437.715760][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.937140][T21301] rdma_rxe: rxe_newlink: failed to add dummy0 [ 438.877491][T21366] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 439.020669][T21374] netlink: zone id is out of range [ 439.020685][T21374] netlink: zone id is out of range [ 439.020692][T21374] netlink: zone id is out of range [ 439.020803][T21374] netlink: zone id is out of range [ 439.276021][T10729] Bluetooth: hci6: command 0x0405 tx timeout [ 439.471673][T21398] gretap0: entered promiscuous mode [ 439.920050][ T1309] ieee802154 phy2 wpan0: encryption failed: -22 [ 440.817231][T21468] __nla_validate_parse: 15 callbacks suppressed [ 440.817256][T21468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4082'. [ 440.817278][T21468] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4082'. [ 440.850027][T21468] veth7: entered promiscuous mode [ 440.903687][T21473] netlink: 'syz.1.4084': attribute type 9 has an invalid length. [ 440.951779][T21474] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.997051][T10729] Bluetooth: hci5: command 0x0406 tx timeout [ 443.292417][T21458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.431362][T21484] rdma_op ffff88807d9baa38 conn xmit_rdma 0000000000000000 [ 443.461511][T21490] netlink: 'syz.0.4087': attribute type 1 has an invalid length. [ 443.487417][T21493] xt_hashlimit: size too large, truncated to 1048576 [ 443.551604][T21490] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4087'. [ 443.617715][T21490] veth3: entered promiscuous mode [ 443.623175][T21490] bond8: (slave veth3): Enslaving as a backup interface with a down link [ 443.783731][T21509] net_ratelimit: 6 callbacks suppressed [ 443.783750][T21509] ip_tables: iptables: counters copy to user failed while replacing table [ 443.983060][T21516] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4093'. [ 444.019222][T21516] syzkaller1: entered promiscuous mode [ 444.019245][T21516] syzkaller1: entered allmulticast mode [ 444.046604][T21521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4094'. [ 444.117690][T21521] veth4: entered promiscuous mode [ 444.117715][T21521] veth4: entered allmulticast mode [ 444.423363][T21547] Bluetooth: MGMT ver 1.23 [ 444.629461][T21563] syzkaller0: entered promiscuous mode [ 444.629484][T21563] syzkaller0: entered allmulticast mode [ 447.237954][T21532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.456835][T21578] syzkaller0: entered promiscuous mode [ 447.456858][T21578] syzkaller0: entered allmulticast mode [ 447.502969][T21586] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.521775][T21586] bridge_slave_0 (unregistering): left allmulticast mode [ 447.521800][T21586] bridge_slave_0 (unregistering): left promiscuous mode [ 447.521874][T21586] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.546849][T21588] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4115'. [ 447.651672][T21590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4116'. [ 447.679122][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4117'. [ 447.679154][T21595] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 447.679924][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4117'. [ 447.679945][T21596] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 447.750602][T21598] syzkaller0: entered promiscuous mode [ 447.750622][T21598] syzkaller0: entered allmulticast mode [ 448.021578][T21615] syzkaller1: entered promiscuous mode [ 448.021598][T21615] syzkaller1: entered allmulticast mode [ 448.109495][T21622] syzkaller0: entered promiscuous mode [ 448.109518][T21622] syzkaller0: entered allmulticast mode [ 448.263078][T21633] netlink: 'syz.0.4130': attribute type 1 has an invalid length. [ 448.263099][T21633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4130'. [ 448.750125][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4137'. [ 448.855490][T21660] batman_adv: batadv0: Adding interface: syzkaller0 [ 448.855508][T21660] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.855535][T21660] batman_adv: batadv0: Interface activated: syzkaller0 [ 448.979461][T21662] syzkaller0: entered promiscuous mode [ 448.979484][T21662] syzkaller0: entered allmulticast mode [ 449.164419][T21658] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 449.203834][T21658] batman_adv: batadv0: Removing interface: syzkaller0 [ 449.236035][T21642] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 449.236174][T21642] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 449.481385][T21686] netlink: 'syz.6.4146': attribute type 1 has an invalid length. [ 449.956948][T21715] syzkaller0: entered promiscuous mode [ 449.956972][T21715] syzkaller0: entered allmulticast mode [ 450.034191][T21717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4157'. [ 450.689154][T21737] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.946823][T21748] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 451.122616][T21750] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 451.126927][T21750] bond5 (unregistering): Released all slaves [ 451.159991][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4169'. [ 451.179780][T21759] netlink: 'syz.6.4169': attribute type 1 has an invalid length. [ 451.179797][T21759] netlink: 'syz.6.4169': attribute type 2 has an invalid length. [ 451.630513][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'. [ 451.635705][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'. [ 451.654038][T21779] netlink: 'syz.0.4173': attribute type 21 has an invalid length. [ 451.654099][T21779] netlink: 'syz.0.4173': attribute type 6 has an invalid length. [ 452.152342][T21803] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 452.152364][T21803] netlink: 'syz.1.4178': attribute type 2 has an invalid length. [ 452.579063][T21830] __nla_validate_parse: 35 callbacks suppressed [ 452.579083][T21830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'. [ 452.579750][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4183'. [ 452.892027][T21844] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4188'. [ 452.892049][T21844] netlink: 1643 bytes leftover after parsing attributes in process `syz.0.4188'. [ 452.892061][T21844] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4188'. [ 453.071307][T21852] netlink: 'syz.6.4191': attribute type 3 has an invalid length. [ 453.264953][T21861] bridge1: entered promiscuous mode [ 453.264999][T21861] bridge1: entered allmulticast mode [ 453.352965][T10729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 453.362294][T10729] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 453.366817][T10729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 453.387896][T10729] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 453.392142][T10729] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 453.609224][T21875] syzkaller0: entered promiscuous mode [ 453.609252][T21875] syzkaller0: entered allmulticast mode [ 455.443216][T10729] Bluetooth: hci7: command tx timeout [ 455.890841][T21901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4202'. [ 456.726782][T21901] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.729166][T21901] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.811021][T21905] syzkaller0: entered promiscuous mode [ 456.811044][T21905] syzkaller0: entered allmulticast mode [ 456.943429][T21908] openvswitch: netlink: IP tunnel TTL not specified. [ 456.963497][T21912] SET target dimension over the limit! [ 457.067844][T21908] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.069676][T21908] netlink: 'syz.0.4204': attribute type 12 has an invalid length. [ 457.170210][T21916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4208'. [ 457.273562][T21916] netlink: 'syz.5.4208': attribute type 1 has an invalid length. [ 457.273584][T21916] netlink: 'syz.5.4208': attribute type 2 has an invalid length. [ 457.293723][T21916] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4208'. [ 457.518043][T10729] Bluetooth: hci7: command tx timeout [ 457.538962][T21862] lo speed is unknown, defaulting to 1000 [ 457.861541][T21946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4211'. [ 457.861566][T21946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4211'. [ 457.950550][T21862] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.950726][T21862] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.950854][T21862] bridge_slave_0: entered allmulticast mode [ 457.962471][T21862] bridge_slave_0: entered promiscuous mode [ 457.970373][T21862] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.971159][T21862] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.971286][T21862] bridge_slave_1: entered allmulticast mode [ 457.977445][T21862] bridge_slave_1: entered promiscuous mode [ 458.105338][T21862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.114369][T21862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.208981][T21929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.277600][T21862] team0: Port device team_slave_0 added [ 458.291219][T21862] team0: Port device team_slave_1 added [ 458.446680][T21862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.446699][T21862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.446722][T21862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.453592][T21862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.453607][T21862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.453629][T21862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.552432][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4215'. [ 458.682812][T21963] hsr_slave_0: left promiscuous mode [ 458.683583][T21963] hsr_slave_1: left promiscuous mode [ 458.770676][T21862] hsr_slave_0: entered promiscuous mode [ 458.784221][T21862] hsr_slave_1: entered promiscuous mode [ 458.788983][T21862] debugfs: 'hsr0' already exists in 'hsr' [ 458.789004][T21862] Cannot create hsr debugfs directory [ 458.910496][T21965] syzkaller0: entered promiscuous mode [ 458.910588][T21965] syzkaller0: entered allmulticast mode [ 459.249443][T21994] xt_l2tp: missing protocol rule (udp|l2tpip) [ 459.306989][T21862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.312503][T21862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.324795][T21862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.340955][T21862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.344275][T21862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.373188][T21862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.377131][T21862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.389990][T21862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.488299][T22008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 459.511145][T22011] macvlan0: entered promiscuous mode [ 459.573462][T21862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.595181][T10729] Bluetooth: hci7: command tx timeout [ 459.602470][T21862] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.623523][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.623609][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.647601][T22015] netlink: 'syz.6.4228': attribute type 138 has an invalid length. [ 459.647619][T22015] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4228'. [ 459.650418][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.650532][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.924133][T22028] syzkaller0: entered promiscuous mode [ 459.924157][T22028] syzkaller0: entered allmulticast mode [ 459.969650][T22030] netlink: 'syz.1.4232': attribute type 2 has an invalid length. [ 459.972943][T22030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4232'. [ 460.162396][T22035] tipc: Started in network mode [ 460.162427][T22035] tipc: Node identity 7a49772d6abe, cluster identity 4711 [ 460.167904][T22035] tipc: Enabled bearer , priority 0 [ 460.194376][T22035] tipc: Resetting bearer [ 460.262356][T22033] tipc: Disabling bearer [ 460.485932][ T13] bridge_slave_1: left promiscuous mode [ 460.491460][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.611861][T22058] sctp: [Deprecated]: syz.6.4241 (pid 22058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.611861][T22058] Use struct sctp_sack_info instead [ 460.613436][ T13] pim6reg: left allmulticast mode [ 460.613611][T22059] netlink: 'syz.6.4241': attribute type 10 has an invalid length. [ 460.615308][T22063] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4241'. [ 460.641938][ T13] batman_adv: batadv0: Interface deactivated: gretap3 [ 461.152901][ T13] batman_adv: batadv0: Removing interface: gretap3 [ 461.182513][ T13] bond10 (unregistering): (slave gretap4): Releasing active interface [ 461.356738][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.357483][ T13] bond_slave_0: left allmulticast mode [ 461.360995][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.361563][ T13] bond_slave_1: left allmulticast mode [ 461.392764][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 461.393529][ T13] team0: left allmulticast mode [ 461.393546][ T13] team_slave_0: left allmulticast mode [ 461.393561][ T13] team_slave_1: left allmulticast mode [ 461.427855][ T13] bond0 (unregistering): Released all slaves [ 461.444455][ T13] bond1 (unregistering): Released all slaves [ 461.461831][ T13] bond2 (unregistering): Released all slaves [ 461.473837][ T13] bond3 (unregistering): (slave veth5): Releasing active interface [ 461.476641][ T13] bond3 (unregistering): Released all slaves [ 461.492403][ T13] bond4 (unregistering): Released all slaves [ 461.504173][ T13] bond5 (unregistering): Released all slaves [ 461.519009][ T13] bond6 (unregistering): Released all slaves [ 461.533417][ T13] bond7 (unregistering): Released all slaves [ 461.547358][ T13] bond8 (unregistering): Released all slaves [ 461.561451][ T13] bond9 (unregistering): Released all slaves [ 461.581573][ T13] bond10 (unregistering): Released all slaves [ 461.599075][T21862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.627688][T22059] team0: Port device dummy0 added [ 461.629399][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4244'. [ 461.636277][T22063] team0: Port device dummy0 removed [ 461.675211][T10729] Bluetooth: hci7: command tx timeout [ 461.806933][T22100] netlink: 'syz.6.4245': attribute type 1 has an invalid length. [ 461.808471][T22102] Bluetooth: hci0: unsupported parameter 5135 [ 461.808489][T22102] Bluetooth: hci0: unsupported parameter 8192 [ 461.808499][T22102] Bluetooth: hci0: unsupported parameter 5135 [ 461.808510][T22102] Bluetooth: hci0: unsupported parameter 8192 [ 461.941608][T22097] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 461.980292][ T13] tipc: Left network mode [ 462.481689][T22133] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4250'. [ 462.593525][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4249'. [ 462.822672][T21862] veth0_vlan: entered promiscuous mode [ 462.875771][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.875930][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.876024][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.883913][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884019][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884114][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884204][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884295][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884392][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.884484][T22154] ipt_ECN: cannot use operation on non-tcp rule [ 462.902816][T22151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4255'. [ 462.961168][T21862] veth1_vlan: entered promiscuous mode [ 463.012955][T21862] veth0_macvtap: entered promiscuous mode [ 463.060100][T21862] veth1_macvtap: entered promiscuous mode [ 463.115503][T21862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.268925][T21862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.338569][ T263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.338759][ T263] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.338818][ T263] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.338850][ T263] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.778914][ T13] team0: Port device wlan0 removed [ 463.923831][ T263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.923853][ T263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.984004][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 463.984028][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 464.054494][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 464.107892][ T9721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.107913][ T9721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.329966][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4265'. [ 464.421947][T22229] netlink: 'syz.6.4266': attribute type 62 has an invalid length. [ 464.467591][T22229] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4266'. [ 464.666723][ T13] hsr_slave_0: left promiscuous mode [ 464.668237][ T13] hsr_slave_1: left promiscuous mode [ 464.670227][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.670247][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.724003][T22241] netlink: 'syz.7.4268': attribute type 12 has an invalid length. [ 464.735494][ T13] veth0_macvtap: left promiscuous mode [ 464.735800][ T13] veth1_vlan: left promiscuous mode [ 464.736006][ T13] veth0_vlan: left promiscuous mode [ 465.345801][ T13] team0 (unregistering): Port device team_slave_1 removed [ 465.353151][ T13] team0 (unregistering): Port device team_slave_0 removed [ 465.563631][T22241] bond1: option primary_reselect: invalid value (255) [ 465.565276][T22241] bond1 (unregistering): Released all slaves [ 465.787868][T22274] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4275'. [ 465.787894][T22274] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4275'. [ 465.883132][ T13] IPVS: stop unused estimator thread 0... [ 465.888174][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 465.888214][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 466.023941][T22294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.138566][T22294] netlink: 'syz.1.4278': attribute type 29 has an invalid length. [ 466.140629][T22294] netlink: 'syz.1.4278': attribute type 29 has an invalid length. [ 467.000698][T22336] xt_l2tp: v2 doesn't support IP mode [ 467.038301][T22339] xt_l2tp: v2 doesn't support IP mode [ 467.931336][T22378] __nla_validate_parse: 3 callbacks suppressed [ 467.931356][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4297'. [ 468.017356][T22378] team0 (unregistering): Port device team_slave_0 removed [ 468.057393][T22378] team0 (unregistering): Port device team_slave_1 removed [ 468.826568][T22425] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4305'. [ 468.827058][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4305'. [ 469.271515][T22459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4310'. [ 469.336500][T22465] netlink: 'syz.7.4312': attribute type 2 has an invalid length. [ 469.336525][T22465] netlink: 'syz.7.4312': attribute type 2 has an invalid length. [ 469.518917][T22474] ieee802154 phy2 wpan0: encryption failed: -126 [ 469.519997][T22475] ieee802154 phy2 wpan0: encryption failed: -126 [ 469.521454][T22473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4314'. [ 469.873821][T22493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4317'. [ 469.873978][T22493] nbd: illegal input index -8454144 [ 470.109965][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'. [ 470.171620][T22510] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 470.508080][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4325'. [ 470.550759][T22531] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4326'. [ 470.861042][T22549] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4328'. [ 470.977256][T22557] ip6gre1: entered promiscuous mode [ 470.977278][T22557] ip6gre1: entered allmulticast mode [ 471.098244][T22562] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 471.978856][T22620] mac80211_hwsim hwsim54 ÿ: renamed from wlan1 (while UP) [ 472.162257][T22633] ip6t_frag: unknown flags 6 [ 472.223978][T22629] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.224060][T22629] gretap1: entered promiscuous mode [ 472.224075][T22629] gretap1: entered allmulticast mode [ 472.320314][T22639] netlink: 'syz.6.4352': attribute type 1 has an invalid length. [ 472.320336][T22639] nbd: error processing sock list [ 472.538617][ T263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.538639][ T263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.668680][T22663] netlink: 'syz.0.4360': attribute type 1 has an invalid length. [ 472.730438][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 472.791068][T22663] 8021q: adding VLAN 0 to HW filter on device bond10 [ 473.063145][T22682] IPVS: Unknown mcast interface: lo [ 473.130774][ T4933] Bluetooth: hci7: command 0x0405 tx timeout [ 473.947597][T22705] __nla_validate_parse: 7 callbacks suppressed [ 473.947616][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4365'. [ 473.959985][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4365'. [ 474.285157][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4372'. [ 474.495985][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4375'. [ 474.530241][T22750] netlink: 'syz.1.4376': attribute type 1 has an invalid length. [ 474.535755][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 474.536003][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 474.536219][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 474.536423][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 474.536668][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 474.536895][T22752] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4376'. [ 475.563103][T22796] FAULT_INJECTION: forcing a failure. [ 475.563103][T22796] name failslab, interval 1, probability 0, space 0, times 1 [ 475.563161][T22796] CPU: 1 UID: 0 PID: 22796 Comm: syz.6.4382 Not tainted syzkaller #0 PREEMPT(full) [ 475.563193][T22796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.563214][T22796] Call Trace: [ 475.563223][T22796] [ 475.563230][T22796] dump_stack_lvl+0xe8/0x150 [ 475.563260][T22796] should_fail_ex+0x410/0x560 [ 475.563288][T22796] should_failslab+0xa8/0x100 [ 475.563308][T22796] ? skb_ext_add+0x148/0x8e0 [ 475.563322][T22796] kmem_cache_alloc_noprof+0xa1/0x600 [ 475.563343][T22796] ? skb_ext_add+0x148/0x8e0 [ 475.563364][T22796] skb_ext_add+0x148/0x8e0 [ 475.563389][T22796] secpath_set+0x58/0x1d0 [ 475.563408][T22796] xfrm_input+0x830/0x7b90 [ 475.563425][T22796] ? lock_acquire+0x115/0x350 [ 475.563447][T22796] ? net_generic+0x1e/0x240 [ 475.563469][T22796] ? ip_tunnel_lookup+0xc9d/0xe90 [ 475.563503][T22796] vti_input+0x21f/0x330 [ 475.563524][T22796] ? __pfx_vti_input+0x10/0x10 [ 475.563542][T22796] ? raw_local_deliver+0x345/0x1010 [ 475.563572][T22796] xfrm4_esp_rcv+0xa9/0x220 [ 475.563591][T22796] ? __pfx_xfrm4_esp_rcv+0x10/0x10 [ 475.563609][T22796] ip_protocol_deliver_rcu+0x2dc/0x440 [ 475.563632][T22796] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 475.563654][T22796] ip_local_deliver_finish+0x3bb/0x6f0 [ 475.563683][T22796] NF_HOOK+0x336/0x3c0 [ 475.563705][T22796] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 475.563724][T22796] ? NF_HOOK+0x9e/0x3c0 [ 475.563742][T22796] ? __pfx_NF_HOOK+0x10/0x10 [ 475.563762][T22796] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 475.563787][T22796] ? ip_local_deliver+0x113/0x190 [ 475.563809][T22796] NF_HOOK+0x336/0x3c0 [ 475.563830][T22796] ? __pfx_ip_rcv_finish+0x10/0x10 [ 475.563849][T22796] ? NF_HOOK+0x9e/0x3c0 [ 475.563870][T22796] ? __pfx_NF_HOOK+0x10/0x10 [ 475.563893][T22796] ? __pfx_ip_rcv_finish+0x10/0x10 [ 475.563920][T22796] ? netif_receive_skb+0x102/0xbf0 [ 475.563944][T22796] ? __pfx_ip_rcv+0x10/0x10 [ 475.563971][T22796] netif_receive_skb+0x45b/0xbf0 [ 475.564000][T22796] ? __pfx_netif_receive_skb+0x10/0x10 [ 475.564028][T22796] ? rcu_is_watching+0x16/0xb0 [ 475.564050][T22796] ? tun_rx_batched+0x185/0x790 [ 475.564078][T22796] tun_rx_batched+0x1de/0x790 [ 475.564106][T22796] ? __pfx_tun_rx_batched+0x10/0x10 [ 475.564130][T22796] ? lock_acquire+0x115/0x350 [ 475.564156][T22796] ? tun_get_user+0x1d3f/0x4450 [ 475.564179][T22796] ? __local_bh_enable_ip+0xd6/0x140 [ 475.564208][T22796] tun_get_user+0x2bb1/0x4450 [ 475.564238][T22796] ? tun_get_user+0x27a6/0x4450 [ 475.564275][T22796] ? aa_file_perm+0x4ed/0x15f0 [ 475.564293][T22796] ? __pfx_tun_get_user+0x10/0x10 [ 475.564318][T22796] ? __lock_acquire+0x747/0x2de0 [ 475.564353][T22796] ? ref_tracker_alloc+0x341/0x4b0 [ 475.564378][T22796] ? lock_acquire+0x115/0x350 [ 475.564398][T22796] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 475.564440][T22796] ? lock_acquire+0x115/0x350 [ 475.564461][T22796] ? tun_get+0x1c/0x2f0 [ 475.564489][T22796] ? tun_get+0x1c/0x2f0 [ 475.564510][T22796] ? tun_get+0x1c/0x2f0 [ 475.564535][T22796] tun_chr_write_iter+0x113/0x200 [ 475.564561][T22796] vfs_write+0x612/0xba0 [ 475.564589][T22796] ? __pfx_vfs_write+0x10/0x10 [ 475.564618][T22796] ? __fget_files+0x2a/0x420 [ 475.564644][T22796] ksys_write+0x150/0x270 [ 475.564666][T22796] ? __pfx_ksys_write+0x10/0x10 [ 475.564698][T22796] do_syscall_64+0x166/0x520 [ 475.564717][T22796] ? trace_irq_disable+0x3b/0x140 [ 475.564736][T22796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.564754][T22796] ? clear_bhb_loop+0x70/0xc0 [ 475.564778][T22796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.564796][T22796] RIP: 0033:0x7f424295ea0e [ 475.564815][T22796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 475.564830][T22796] RSP: 002b:00007f4240bf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.564850][T22796] RAX: ffffffffffffffda RBX: 00007f4240bf66c0 RCX: 00007f424295ea0e [ 475.564863][T22796] RDX: 0000000000000030 RSI: 0000200000000840 RDI: 00000000000000c8 [ 475.564875][T22796] RBP: 00007f4240bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.564886][T22796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.564897][T22796] R13: 00007f4242c26038 R14: 00007f4242c25fa0 R15: 00007ffea577ccc8 [ 475.564930][T22796] [ 477.002840][T22883] ieee802154 phy2 wpan0: encryption failed: -126 [ 477.947299][T22894] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 478.112030][T22894] veth5: entered promiscuous mode [ 478.227474][T22914] lo: entered allmulticast mode [ 479.188738][T22962] __nla_validate_parse: 43 callbacks suppressed [ 479.188759][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.189820][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.190071][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.199646][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.201103][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.201302][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 479.312506][T22972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4426'. [ 479.530322][T22992] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 479.531055][T22992] netlink: 'syz.1.4431': attribute type 2 has an invalid length. [ 479.659256][ T171] IPVS: starting estimator thread 0... [ 479.729300][T23003] netlink: 'syz.6.4432': attribute type 4 has an invalid length. [ 479.744637][T23001] IPVS: using max 38 ests per chain, 91200 per kthread [ 480.469771][T23014] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 480.472911][T23014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.727233][T23027] syzkaller1: entered promiscuous mode [ 480.727257][T23027] syzkaller1: entered allmulticast mode [ 480.890516][T23027] sctp: [Deprecated]: syz.0.4441 (pid 23027) Use of int in maxseg socket option. [ 480.890516][T23027] Use struct sctp_assoc_value instead [ 480.899378][T23031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.019524][T23041] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4443'. [ 481.019549][T23041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4443'. [ 481.128409][T23044] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 481.179719][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 481.912567][T23067] gtp0: entered promiscuous mode [ 481.912581][T23067] gtp0: entered allmulticast mode [ 481.959643][T23069] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 481.960481][T23069] netlink: 'syz.7.4451': attribute type 1 has an invalid length. [ 482.135999][T23069] bridge1: entered promiscuous mode [ 482.136022][T23069] bridge1: entered allmulticast mode [ 482.264234][T23076] ip_tables: iptables: counters copy to user failed while replacing table [ 482.690692][T23104] netlink: 'syz.7.4460': attribute type 12 has an invalid length. [ 482.690713][T23104] netlink: 'syz.7.4460': attribute type 11 has an invalid length. [ 482.810774][T23109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.987514][T23122] batman_adv: batadv0: Adding interface: syzkaller0 [ 482.987532][T23122] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.987559][T23122] batman_adv: batadv0: Interface activated: syzkaller0 [ 483.818107][T23122] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 483.861397][T23122] batman_adv: batadv0: Removing interface: syzkaller0 [ 484.745717][T23156] netlink: 'syz.1.4473': attribute type 7 has an invalid length. [ 484.749694][T23157] __nla_validate_parse: 7 callbacks suppressed [ 484.749710][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 484.931447][T23161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4475'. [ 484.937974][T23161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4475'. [ 485.523590][T23194] netlink: 'syz.1.4484': attribute type 1 has an invalid length. [ 485.523611][T23194] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4484'. [ 485.540001][T23194] tap0: tun_chr_ioctl cmd 2148553947 [ 485.558574][T23196] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4485'. [ 485.588816][T23198] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 485.740574][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4490'. [ 486.656430][T23222] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4491'. [ 488.613110][T23200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.742360][T23227] netlink: 'syz.0.4494': attribute type 2 has an invalid length. [ 488.792908][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 489.088069][T23243] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4498'. [ 489.113268][T23240] 8021q: adding VLAN 0 to HW filter on device bond12 [ 489.301709][T23245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.960263][T23262] IPv6: sit2: Disabled Multicast RS [ 490.236596][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4504'. [ 490.244324][T23274] --map-set only usable from mangle table [ 490.353766][T23264] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 490.556741][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'. [ 491.586125][T23295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4511'. [ 492.384461][T23317] netlink: 'syz.0.4515': attribute type 1 has an invalid length. [ 492.385212][T23317] block nbd296: server does not support multiple connections per device. [ 492.385835][T23317] block nbd296: shutting down sockets [ 493.111915][T23331] veth0: entered promiscuous mode [ 493.113051][T23331] veth0: left promiscuous mode [ 494.088505][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4523'. [ 495.308301][T10729] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 495.324050][T10729] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 495.344898][T10729] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 495.348569][T10729] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 495.349489][T10729] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 495.416680][T23371] team0: Device is already in use. [ 495.422896][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 495.450202][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 495.453230][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 495.464159][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 495.468388][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 495.773597][T23382] sch_fq: defrate 0 ignored. [ 495.879629][T23388] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4530'. [ 497.380924][T23374] lo speed is unknown, defaulting to 1000 [ 497.434993][ T52] Bluetooth: hci8: command tx timeout [ 497.596551][ T52] Bluetooth: hci9: command tx timeout [ 498.140392][T23367] lo speed is unknown, defaulting to 1000 [ 498.314638][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 498.452226][T23428] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 498.793928][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4541'. [ 499.236619][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 499.298808][T23374] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.298942][T23374] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.299091][T23374] bridge_slave_0: entered allmulticast mode [ 499.300987][T23374] bridge_slave_0: entered promiscuous mode [ 499.333576][T23448] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4543'. [ 499.351115][T23448] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4543'. [ 499.368501][T23374] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.368602][T23374] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.368773][T23374] bridge_slave_1: entered allmulticast mode [ 499.370564][T23374] bridge_slave_1: entered promiscuous mode [ 499.515168][T10729] Bluetooth: hci8: command tx timeout [ 499.677315][T10729] Bluetooth: hci9: command tx timeout [ 500.119311][T23374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.150030][T23374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.297648][T23374] team0: Port device team_slave_0 added [ 500.495596][T23367] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.495758][T23367] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.495958][T23367] bridge_slave_0: entered allmulticast mode [ 500.497788][T23367] bridge_slave_0: entered promiscuous mode [ 500.536994][T23374] team0: Port device team_slave_1 added [ 500.618857][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'. [ 500.618937][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'. [ 500.682974][T23367] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.683084][T23367] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.683337][T23367] bridge_slave_1: entered allmulticast mode [ 500.713902][T23367] bridge_slave_1: entered promiscuous mode [ 500.817977][T23374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.817996][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.818018][T23374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.940955][T23374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.940974][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.940997][T23374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.979347][T23479] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 501.022540][T23367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.037638][T23367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.048308][T23479] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 501.048352][T23479] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 501.119281][T23367] team0: Port device team_slave_0 added [ 501.142526][T23367] team0: Port device team_slave_1 added [ 501.199376][T23374] hsr_slave_0: entered promiscuous mode [ 501.200362][T23374] hsr_slave_1: entered promiscuous mode [ 501.202170][T23367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.202184][T23367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.202205][T23367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.252131][T23367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.252147][T23367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.252170][T23367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.297823][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'. [ 501.297875][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'. [ 501.330512][T23479] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 501.366602][ T1309] ieee802154 phy2 wpan0: encryption failed: -22 [ 501.368870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.596926][T10729] Bluetooth: hci8: command tx timeout [ 501.617094][T23494] netlink: zone id is out of range [ 501.617108][T23494] netlink: zone id is out of range [ 501.617115][T23494] netlink: zone id is out of range [ 501.617121][T23494] netlink: zone id is out of range [ 501.617127][T23494] netlink: zone id is out of range [ 501.617133][T23494] netlink: zone id is out of range [ 501.617143][T23494] netlink: zone id is out of range [ 501.617150][T23494] netlink: zone id is out of range [ 501.756543][T10729] Bluetooth: hci9: command tx timeout [ 501.826046][T23367] hsr_slave_0: entered promiscuous mode [ 501.829961][T23367] hsr_slave_1: entered promiscuous mode [ 501.830657][T23367] debugfs: 'hsr0' already exists in 'hsr' [ 501.830675][T23367] Cannot create hsr debugfs directory [ 501.877841][ T7145] smbdirect: ib_dev[syz2] removed [ 501.948908][T23479] siw: device registration error -19 [ 502.189526][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4556'. [ 502.558668][T23374] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 502.584896][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.586015][T23374] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 502.593889][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.618870][T23374] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 502.642176][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.652709][T23374] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 502.670289][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.839230][T23517] IPVS: Unknown mcast interface: caif0 [ 503.021280][T23521] syzkaller0: entered promiscuous mode [ 503.021303][T23521] syzkaller0: entered allmulticast mode [ 503.029896][T23367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.068545][T23367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.135668][T23367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 503.139826][T23367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.167602][T23367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 503.168890][T23525] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 503.172539][T23367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.254414][T23525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.263275][T23367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.290181][T23367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.360307][T23528] netlink: 'syz.1.4560': attribute type 10 has an invalid length. [ 503.360329][T23528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4560'. [ 503.598422][ T7152] net_ratelimit: 1004 callbacks suppressed [ 503.598444][ T7152] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.604369][T23525] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 503.610689][T23528] dummy0: entered promiscuous mode [ 503.661724][T23528] bond5: (slave dummy0): Removing an active aggregator [ 503.662418][T23528] bond5: (slave dummy0): Releasing backup interface [ 503.675078][T10729] Bluetooth: hci8: command tx timeout [ 503.837808][T10729] Bluetooth: hci9: command tx timeout [ 504.127260][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.190185][T23374] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.264487][T23552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4565'. [ 504.281611][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.281672][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.284288][T23552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4565'. [ 504.380565][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.380661][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.501649][T23550] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4564'. [ 504.501676][T23550] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4564'. [ 504.711589][T23367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.049768][T23367] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.102737][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.102848][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.166650][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.166749][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.318752][T23577] openvswitch: netlink: Message has 8 unknown bytes. [ 505.456335][T23580] xfrm0: entered allmulticast mode [ 505.582901][T23581] 8021q: VLANs not supported on gre0 [ 506.442488][T23614] netlink: 'syz.1.4578': attribute type 10 has an invalid length. [ 506.443407][T23613] netlink: 'syz.1.4578': attribute type 10 has an invalid length. [ 506.972416][T23374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.256952][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4582'. [ 507.439341][T23367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.956185][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4584'. [ 508.368710][T23374] veth0_vlan: entered promiscuous mode [ 508.403848][T23367] veth0_vlan: entered promiscuous mode [ 508.411069][T23374] veth1_vlan: entered promiscuous mode [ 508.441707][T23367] veth1_vlan: entered promiscuous mode [ 508.493738][T23367] veth0_macvtap: entered promiscuous mode [ 508.615960][T23669] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4587'. [ 508.615986][T23669] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4587'. [ 508.615998][T23669] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4587'. [ 508.761661][T23367] veth1_macvtap: entered promiscuous mode [ 508.843026][T23374] veth0_macvtap: entered promiscuous mode [ 508.868031][T23367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.896279][T23374] veth1_macvtap: entered promiscuous mode [ 508.913109][T23367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.036918][T23374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.079909][T23374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.095663][ T7152] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.096044][ T7152] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.135235][ T263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.155736][ T9719] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.305651][ T7145] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.348336][ T7152] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.348500][ T7152] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.348530][ T7152] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.643463][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.643484][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.766778][ T7145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.766799][ T7145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.959769][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.959791][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.144000][T23689] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 510.303510][ T9719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.303532][ T9719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.658280][T23695] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4525'. [ 510.715362][T23695] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4525'. [ 510.849794][T23699] netlink: 'syz.9.4527': attribute type 10 has an invalid length. [ 510.864326][T23699] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.864983][T23699] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.005148][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4527'. [ 511.117284][T23699] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.117416][T23699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.117844][T23699] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.117986][T23699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.228436][T23699] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 511.328291][T23700] bridge_slave_1: left allmulticast mode [ 511.328321][T23700] bridge_slave_1: left promiscuous mode [ 511.328569][T23700] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.362726][T23700] bridge_slave_0: left allmulticast mode [ 511.362759][T23700] bridge_slave_0: left promiscuous mode [ 511.363011][T23700] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.651548][T23700] bond0: (slave bridge0): Releasing backup interface [ 511.783603][T23711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.077787][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4597'. [ 512.077826][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4597'. [ 512.441593][T23725] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.549447][T23739] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 512.618982][T23737] __nla_validate_parse: 2 callbacks suppressed [ 512.619005][T23737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4604'. [ 512.619033][T23737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4604'. [ 513.138140][T23753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4607'. [ 513.437025][T23750] lo: left allmulticast mode [ 513.707961][T23762] veth3: entered allmulticast mode [ 513.711525][T23764] tipc: Started in network mode [ 513.711544][T23764] tipc: Node identity 2000004, cluster identity 4711 [ 513.711556][T23764] tipc: Node number set to 33554436 [ 514.461497][T23795] batadv0: entered promiscuous mode [ 514.483512][T23795] macsec1: entered promiscuous mode [ 514.502040][T23795] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 514.617824][T23795] batadv0: left promiscuous mode [ 514.753597][T23802] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4618'. [ 514.753632][T23802] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4618'. [ 514.828743][T23799] gretap1: entered promiscuous mode [ 514.847702][T23799] batman_adv: batadv0: Adding interface: gretap1 [ 514.847720][T23799] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 514.847748][T23799] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 514.907012][T23801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4618'. [ 515.108009][T23815] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4620'. [ 515.667647][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4624'. [ 516.042404][T23847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4625'. [ 516.218972][T23839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4624'. [ 516.631604][T23855] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 516.774083][T23860] bond1: option lp_interval: invalid value (0) [ 516.774110][T23860] bond1: option lp_interval: allowed values 1 - 2147483647 [ 516.797679][T23860] bond1 (unregistering): Released all slaves [ 517.873415][T23900] netlink: 'syz.7.4638': attribute type 1 has an invalid length. [ 517.873440][T23900] netlink: 'syz.7.4638': attribute type 2 has an invalid length. [ 517.973247][T23898] netlink: 'syz.0.4636': attribute type 21 has an invalid length. [ 517.973270][T23898] __nla_validate_parse: 6 callbacks suppressed [ 517.973282][T23898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4636'. [ 518.233508][T23907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'. [ 518.253705][T23907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4640'. [ 518.253747][T23907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4640'. [ 518.868648][T23913] netlink: 'syz.7.4643': attribute type 7 has an invalid length. [ 519.063236][T23919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4647'. [ 519.332237][T23932] netlink: 'syz.0.4650': attribute type 1 has an invalid length. [ 519.451421][T23935] netlink: 'syz.0.4650': attribute type 10 has an invalid length. [ 519.451444][T23935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4650'. [ 519.529745][T23938] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4649'. [ 519.562119][T23938] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4649'. [ 519.769926][T23941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4652'. [ 520.735728][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4658'. [ 521.333043][T23996] batadv_slave_1: entered promiscuous mode [ 521.333509][T23993] batadv_slave_1: left promiscuous mode [ 522.089404][T24014] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 522.120444][T24014] bond1 (unregistering): Released all slaves [ 522.255406][T24024] batman_adv: batadv0: Adding interface: dummy0 [ 522.255428][T24024] batman_adv: batadv0: Interface activated: dummy0 [ 522.346797][T24025] batadv0: mtu less than device minimum [ 522.348244][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.349280][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.350005][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.350705][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.351408][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.352115][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.352812][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.353619][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 522.354598][T24025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 523.017177][T24043] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003 [ 523.117851][T24039] bond13: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 523.148486][T24046] xt_IDLETIMER: label is empty or not nul-terminated [ 523.213165][T24039] bond13 (unregistering): Released all slaves [ 523.250426][ T171] IPVS: starting estimator thread 0... [ 523.286354][T24051] __nla_validate_parse: 8 callbacks suppressed [ 523.286373][T24051] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4683'. [ 523.340028][T24051] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4683'. [ 523.347109][T24053] IPVS: using max 31 ests per chain, 74400 per kthread [ 524.207235][T24085] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4692'. [ 524.281007][T24095] netlink: 'syz.7.4693': attribute type 32 has an invalid length. [ 524.281029][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4693'. [ 524.376929][T24095] bond2: option coupled_control: invalid value (192) [ 524.384420][T24095] bond2 (unregistering): Released all slaves [ 524.618878][T24104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4695'. [ 525.103268][T24121] netlink: 'syz.7.4700': attribute type 10 has an invalid length. [ 525.473791][T24126] bridge0: port 1(veth0) entered blocking state [ 525.474214][T24126] bridge0: port 1(veth0) entered disabled state [ 525.474918][T24126] veth0: entered allmulticast mode [ 525.477233][T24126] veth0: entered promiscuous mode [ 525.479653][T24126] bridge0: port 1(veth0) entered blocking state [ 525.479752][T24126] bridge0: port 1(veth0) entered forwarding state [ 525.493888][T24127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4702'. [ 525.799373][T24136] pimreg: entered allmulticast mode [ 525.828439][T24136] syz_tun: entered allmulticast mode [ 525.873489][T24134] syz_tun: left allmulticast mode [ 525.884262][T24142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4709'. [ 525.896443][T24140] netlink: 'syz.9.4705': attribute type 1 has an invalid length. [ 526.724240][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4714'. [ 526.724270][T24170] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4714'. [ 526.724286][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4714'. [ 527.072444][T24180] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.241790][T24189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.140600][T24222] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 528.249334][T24222] 8021q: adding VLAN 0 to HW filter on device bond13 [ 528.396572][T24229] net_ratelimit: 13 callbacks suppressed [ 528.396591][T24229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.453597][T24231] netlink: 'syz.9.4731': attribute type 3 has an invalid length. [ 528.549141][T24241] netlink: 'syz.9.4731': attribute type 3 has an invalid length. [ 528.631038][T24242] netlink: 'syz.1.4736': attribute type 1 has an invalid length. [ 528.632187][T24239] netlink: 'syz.1.4736': attribute type 2 has an invalid length. [ 528.815826][T24256] netlink: 'syz.7.4740': attribute type 1 has an invalid length. [ 528.836761][T24260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.034675][T10729] Bluetooth: hci1: command 0x0406 tx timeout [ 529.461410][T24266] __nla_validate_parse: 4 callbacks suppressed [ 529.461430][T24266] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4742'. [ 529.624228][T24279] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4746'. [ 529.847008][T24289] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4748'. [ 529.987001][T24288] sit0: entered promiscuous mode [ 530.024017][T24288] netlink: 'syz.1.4747': attribute type 1 has an invalid length. [ 530.024041][T24288] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4747'. [ 530.292225][T24304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4751'. [ 530.513505][T24312] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4753'. [ 530.610473][T24314] syzkaller0: entered promiscuous mode [ 530.610657][T24314] syzkaller0: entered allmulticast mode [ 530.649269][T24317] sctp: [Deprecated]: syz.8.4756 (pid 24317) Use of int in maxseg socket option. [ 530.649269][T24317] Use struct sctp_assoc_value instead [ 531.063328][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 531.187336][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 531.813185][T24360] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 531.851993][T24362] syzkaller0: entered promiscuous mode [ 531.852016][T24362] syzkaller0: entered allmulticast mode [ 531.951513][T24364] tun0: tun_chr_ioctl cmd 1074025675 [ 531.951536][T24364] tun0: persist enabled [ 532.067840][T24365] netlink: 'syz.0.4773': attribute type 9 has an invalid length. [ 532.110252][T24369] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 532.216473][T24381] netlink: 'syz.0.4773': attribute type 9 has an invalid length. [ 532.241714][T24364] tun0: tun_chr_ioctl cmd 1074025673 [ 532.241806][T24373] tun0: tun_chr_ioctl cmd 1074025675 [ 532.241819][T24373] tun0: persist enabled [ 532.379991][T24384] netlink: 'syz.8.4776': attribute type 11 has an invalid length. [ 532.858175][T24404] netlink: 'syz.0.4781': attribute type 23 has an invalid length. [ 533.134035][T24412] v: renamed from veth0_vlan [ 533.201065][T24416] syzkaller0: entered promiscuous mode [ 533.201088][T24416] syzkaller0: entered allmulticast mode [ 533.501837][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4786'. [ 533.556608][T24424] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4786'. [ 534.174684][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 534.788382][T24464] __nla_validate_parse: 1 callbacks suppressed [ 534.788403][T24464] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.4796'. [ 534.888442][T24477] syzkaller0: entered promiscuous mode [ 534.888466][T24477] syzkaller0: entered allmulticast mode [ 535.305263][ T5277] v: left promiscuous mode [ 535.334158][ T9520] v: entered promiscuous mode [ 536.083610][T24500] netlink: 'syz.0.4805': attribute type 21 has an invalid length. [ 536.291504][T24500] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 536.331458][T24500] bond14 (unregistering): Released all slaves [ 536.513860][T24501] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 536.612357][T24500] netlink: 'syz.0.4805': attribute type 21 has an invalid length. [ 536.808459][T24500] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 536.830511][T24500] bond14 (unregistering): Released all slaves [ 537.309119][T24535] syzkaller0: entered promiscuous mode [ 537.309143][T24535] syzkaller0: entered allmulticast mode [ 537.583627][T24538] netlink: 'syz.0.4812': attribute type 64 has an invalid length. [ 537.583650][T24538] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4812'. [ 537.738535][T24541] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 538.378747][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.379612][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.384636][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.394845][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.395651][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.396456][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 538.397313][T24558] netlink: 'syz.0.4819': attribute type 4 has an invalid length. [ 539.220442][T24574] syzkaller0: entered promiscuous mode [ 539.220622][T24574] syzkaller0: entered allmulticast mode [ 540.473710][T24595] erspan0: entered promiscuous mode [ 540.473737][T24595] erspan0: entered allmulticast mode [ 540.821490][T24602] netlink: zone id is out of range [ 540.821508][T24602] netlink: zone id is out of range [ 540.821516][T24602] netlink: zone id is out of range [ 540.821524][T24602] netlink: zone id is out of range [ 540.821530][T24602] netlink: zone id is out of range [ 540.821538][T24602] netlink: zone id is out of range [ 540.821545][T24602] netlink: zone id is out of range [ 540.821552][T24602] netlink: zone id is out of range [ 541.494278][T24609] bond1: (slave bond_slave_0): Device is not our slave [ 541.494301][T24609] bond1: option active_slave: invalid value (bond_slave_0) [ 541.523791][T24609] bond1 (unregistering): Released all slaves [ 542.027340][T24619] syzkaller0: entered promiscuous mode [ 542.027367][T24619] syzkaller0: entered allmulticast mode [ 542.157459][T24626] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4836'. [ 544.673198][T24616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.725530][T24673] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4843'. [ 546.305115][T24685] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4845'. [ 546.424709][T24685] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4845'. [ 546.751916][T24691] syzkaller0: entered promiscuous mode [ 546.751942][T24691] syzkaller0: entered allmulticast mode [ 547.160434][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 547.177857][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 547.193562][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 547.194461][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 547.215006][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 547.641899][T24711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.568821][T24734] ip_tables: iptables: counters copy to user failed while replacing table [ 549.274711][T10729] Bluetooth: hci10: command tx timeout [ 549.516999][T10729] Bluetooth: hci6: command 0x0405 tx timeout [ 550.074490][T24776] validate_nla: 58 callbacks suppressed [ 550.075337][T24776] netlink: 'syz.1.4863': attribute type 5 has an invalid length. [ 550.257389][T24783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4862'. [ 550.490198][T24783] 8021q: adding VLAN 0 to HW filter on device bond14 [ 550.593760][T24699] lo speed is unknown, defaulting to 1000 [ 550.760275][T24804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.242822][T24812] netlink: 'syz.8.4870': attribute type 7 has an invalid length. [ 551.242845][T24812] netlink: 'syz.8.4870': attribute type 5 has an invalid length. [ 551.242864][T24812] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4870'. [ 551.355400][ T52] Bluetooth: hci10: command tx timeout [ 551.514867][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4866'. [ 551.514921][T24795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4866'. [ 551.622140][T24795] bridge0: entered promiscuous mode [ 551.622332][T24795] bridge0: entered allmulticast mode [ 552.416206][T24850] ip_tables: iptables: counters copy to user failed while replacing table [ 552.451547][T24849] bridge_slave_0: left allmulticast mode [ 552.451885][T24849] bridge_slave_0: left promiscuous mode [ 552.454490][T24849] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.520512][T24849] bridge_slave_1: left allmulticast mode [ 552.520538][T24849] bridge_slave_1: left promiscuous mode [ 552.520728][T24849] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.565951][T24849] bond0: (slave bond_slave_0): Releasing backup interface [ 552.609915][T24849] bond0: (slave bond_slave_1): Releasing backup interface [ 552.627956][T24849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.627978][T24849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.633494][T24849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.633515][T24849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.669035][T24849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 552.669374][T24699] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.671137][T24699] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.671281][T24699] bridge_slave_0: entered allmulticast mode [ 552.685299][T24699] bridge_slave_0: entered promiscuous mode [ 552.703516][T24699] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.710186][T24699] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.710458][T24699] bridge_slave_1: entered allmulticast mode [ 552.748763][T24699] bridge_slave_1: entered promiscuous mode [ 552.823086][T24859] ip_tables: iptables: counters copy to user failed while replacing table [ 552.951056][T24699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.977448][T24699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.998543][T24859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4877'. [ 553.096419][T24699] team0: Port device team_slave_0 added [ 553.119377][T24699] team0: Port device team_slave_1 added [ 553.224548][T24862] netlink: 'syz.8.4878': attribute type 1 has an invalid length. [ 553.251260][T24699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.251277][T24699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.251300][T24699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.313748][T24699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.313764][T24699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.313788][T24699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.435435][ T52] Bluetooth: hci10: command tx timeout [ 553.708316][T24699] hsr_slave_0: entered promiscuous mode [ 553.722800][T24699] hsr_slave_1: entered promiscuous mode [ 553.734033][T24699] debugfs: 'hsr0' already exists in 'hsr' [ 553.734054][T24699] Cannot create hsr debugfs directory [ 553.835822][ T32] INFO: task syz.2.3711:20200 blocked for more than 143 seconds. [ 553.835846][ T32] Not tainted syzkaller #0 [ 553.835857][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.835866][ T32] task:syz.2.3711 state:D stack:24392 pid:20200 tgid:20199 ppid:17892 task_flags:0x400140 flags:0x00080002 [ 553.835941][ T32] Call Trace: [ 553.835948][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 553.835961][ T32] __schedule+0x17db/0x58f0 [ 553.836003][ T32] ? kasan_save_track+0x3e/0x80 [ 553.836053][ T32] ? __pfx___schedule+0x10/0x10 [ 553.836081][ T32] ? schedule+0x90/0x2b0 [ 553.836103][ T32] schedule+0x164/0x2b0 [ 553.836125][ T32] schedule_preempt_disabled+0x13/0x30 [ 553.836143][ T32] __mutex_lock+0x7c1/0x1550 [ 553.836170][ T32] ? __mutex_lock+0x5d4/0x1550 [ 553.836195][ T32] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 553.836226][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 553.836245][ T32] ? net_generic+0x1e/0x240 [ 553.836276][ T32] ? net_generic+0x1e/0x240 [ 553.836327][ T32] ? net_generic+0x1e/0x240 [ 553.836350][ T32] ? net_generic+0x1e/0x240 [ 553.836380][ T32] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 553.836409][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 553.836446][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.836487][ T32] ? bpf_lsm_capable+0x9/0x20 [ 553.836508][ T32] ? security_capable+0x7e/0x2c0 [ 553.836541][ T32] genl_rcv_msg+0x614/0x7a0 [ 553.836575][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.836608][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 553.836650][ T32] netlink_rcv_skb+0x226/0x4a0 [ 553.836674][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.836703][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.836742][ T32] ? down_read+0x2be/0x330 [ 553.836768][ T32] genl_rcv+0x28/0x40 [ 553.836794][ T32] netlink_unicast+0x7bd/0x940 [ 553.836826][ T32] netlink_sendmsg+0x813/0xb40 [ 553.836859][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.836910][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 553.836939][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.836961][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 553.836989][ T32] ____sys_sendmsg+0x54e/0x850 [ 553.837016][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.837045][ T32] ? import_iovec+0x73/0xa0 [ 553.837077][ T32] ___sys_sendmsg+0x2a5/0x360 [ 553.837096][ T32] ? __lock_acquire+0x747/0x2de0 [ 553.837122][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.841995][ T32] ? futex_wait+0x2a2/0x390 [ 553.842057][ T32] ? __fget_files+0x2a/0x420 [ 553.842077][ T32] ? __fget_files+0x3a2/0x420 [ 553.842105][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 553.842131][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.842174][ T32] do_syscall_64+0x166/0x520 [ 553.842194][ T32] ? trace_irq_disable+0x3b/0x140 [ 553.842215][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.842235][ T32] ? clear_bhb_loop+0x70/0xc0 [ 553.842259][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.842279][ T32] RIP: 0033:0x7f9e0ef9e1d9 [ 553.842296][ T32] RSP: 002b:00007f9e0ff3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.842317][ T32] RAX: ffffffffffffffda RBX: 00007f9e0f225fa0 RCX: 00007f9e0ef9e1d9 [ 553.842332][ T32] RDX: 0000000004000880 RSI: 00002000000003c0 RDI: 0000000000000008 [ 553.842344][ T32] RBP: 00007f9e0f035888 R08: 0000000000000000 R09: 0000000000000000 [ 553.842356][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.842367][ T32] R13: 00007f9e0f226038 R14: 00007f9e0f225fa0 R15: 00007ffc107f5968 [ 553.842400][ T32] [ 553.842475][ T32] [ 553.842475][ T32] Showing all locks held in the system: [ 553.842483][ T32] locks held by kworker/u8:1/13: 3, on CPU#1: [ 553.842498][ T32] #0: ffff888033418940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.842551][ T32] #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.842622][ T32] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 553.842669][ T32] locks held by kworker/1:0/25: 3, on CPU#1: [ 553.842682][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.842732][ T32] #1: ffffc900001f7c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.842781][ T32] #2: ffffffff8fe8bda0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 553.842830][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 553.842842][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 553.842938][ T32] locks held by getty/5368: 2, on CPU#0: [ 553.842951][ T32] #0: ffff8880369fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 553.843327][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 553.843386][ T32] locks held by kworker/0:5/5705: 2, last CPU#0: [ 553.843400][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.843450][ T32] #1: ffffc900049dfc40 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.843503][ T32] locks held by kworker/u8:10/7145: 2, on CPU#1: [ 553.843516][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.843565][ T32] #1: ffffc9000dd4fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859596][ T32] locks held by kworker/u8:12/7150: 2, on CPU#1: [ 553.859612][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859683][ T32] #1: ffffc9000dc57c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859733][ T32] locks held by kworker/u8:13/7152: 3, last CPU#0: [ 553.859746][ T32] #0: ffff8880336a2940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859795][ T32] #1: ffffc9000dc37c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859845][ T32] #2: ffff8880b8428298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 553.859922][ T32] locks held by kworker/1:9/9520: 2, last CPU#1: [ 553.859935][ T32] #0: ffff888068eb5d40 ((wq_completion)wg-crypt-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.859989][ T32] #1: ffffc900050ffc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 553.860049][ T32] locks held by syz.3.3095/17932: 2, on CPU#0: [ 553.860062][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.860112][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 553.860191][ T32] locks held by syz.2.3711/20200: 2, on CPU#0: [ 553.860205][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.860253][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 553.860306][ T32] locks held by syz.4.4045/21309: 2, on CPU#1: [ 553.860319][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.860367][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 553.860419][ T32] locks held by syz.5.4423/22958: 2, on CPU#0: [ 553.860432][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.860481][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 554.006215][ T32] locks held by syz.6.4432/22996: 3, on CPU#1: [ 554.006236][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.006295][ T32] #1: ffff8880274dc6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 554.006343][ T32] #2: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 554.006397][ T32] locks held by syz-executor/23367: 4, last CPU#1: [ 554.006411][ T32] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 554.006459][ T32] #1: ffff88803d68a800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 554.006504][ T32] #2: ffff88802bb94080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 554.006551][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 554.006615][ T32] locks held by syz.9.4765/24344: 2, on CPU#1: [ 554.006629][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.006677][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 554.006728][ T32] locks held by syz-executor/24699: 3, last CPU#1: [ 554.006741][ T32] #0: ffffffff909bc7a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 554.006790][ T32] #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 554.006841][ T32] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 554.006914][ T32] locks held by syz.0.4881/24874: 1, on CPU#1: [ 554.006926][ T32] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 554.006972][ T32] locks held by modprobe/24875: 1, last CPU#1: [ 554.006985][ T32] #0: ffff88802bb90340 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 554.007033][ T32] locks held by dhcpcd/24877: 2, last CPU#1: [ 554.032619][ T32] #0: ffff88802bb95900 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x224/0xbe0 [ 554.032687][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 554.047697][ T32] [ 554.047707][ T32] ============================================= [ 554.047707][ T32] [ 554.047735][ T32] NMI backtrace for cpu 1 [ 554.047749][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.047769][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.047781][ T32] Call Trace: [ 554.047788][ T32] [ 554.047796][ T32] dump_stack_lvl+0xe8/0x150 [ 554.047828][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 554.047857][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 554.047893][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 554.047923][ T32] sys_info+0x135/0x170 [ 554.047945][ T32] watchdog+0xfd7/0x1030 [ 554.047974][ T32] ? watchdog+0x1c7/0x1030 [ 554.048000][ T32] kthread+0x38b/0x480 [ 554.048020][ T32] ? __pfx_watchdog+0x10/0x10 [ 554.048037][ T32] ? __pfx_kthread+0x10/0x10 [ 554.048057][ T32] ret_from_fork+0x514/0xb70 [ 554.048078][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 554.048097][ T32] ? __switch_to+0xc89/0x1420 [ 554.048125][ T32] ? __pfx_kthread+0x10/0x10 [ 554.048146][ T32] ret_from_fork_asm+0x1a/0x30 [ 554.048182][ T32] [ 554.048482][ T32] Sending NMI from CPU 1 to CPUs 0: [ 554.048512][ C0] NMI backtrace for cpu 0 [ 554.048525][ C0] CPU: 0 UID: 0 PID: 7152 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 554.048545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.048557][ C0] Workqueue: bat_events batadv_tt_purge [ 554.048586][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x80 [ 554.048606][ C0] Code: de 5b e9 23 5e 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d b8 00 ce 12 <65> 48 8b 15 b8 00 ce 12 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 [ 554.048621][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000093 [ 554.048637][ C0] RAX: ffffffff81b4c9e3 RBX: 00118fc53231d800 RCX: ffff888027501f40 [ 554.048651][ C0] RDX: 8000000000000100 RSI: 0000000000000018 RDI: 0000000000000040 [ 554.048664][ C0] RBP: 000000000001a9fc R08: 0000000000000100 R09: 0000000000000001 [ 554.048676][ C0] R10: 0000000000000003 R11: 8000000000000100 R12: 00000080ecd79e03 [ 554.048688][ C0] R13: ffffffffffffffff R14: 0000000000000018 R15: dffffc0000000000 [ 554.048702][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 554.048718][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.048731][ C0] CR2: 00007fffeb427b80 CR3: 00000000734f8000 CR4: 00000000003526f0 [ 554.048748][ C0] Call Trace: [ 554.048754][ C0] [ 554.048759][ C0] ktime_get+0x103/0x220 [ 554.048782][ C0] clockevents_program_event+0x290/0x630 [ 554.048812][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 554.048841][ C0] ? tick_program_event+0x8f/0x120 [ 554.048863][ C0] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 554.048894][ C0] irqentry_exit+0x8d9/0x920 [ 554.048918][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.048941][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 554.048973][ C0] Code: f7 e8 4d bf b8 f5 f7 c3 00 02 00 00 74 05 e8 40 0e e5 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 bc a9 f5 65 48 8b 05 0c c0 aa 08 48 85 c0 74 18 5b 41 5e e9 [ 554.048989][ C0] RSP: 0018:ffffc90000007f40 EFLAGS: 00000206 [ 554.049004][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000102 [ 554.049017][ C0] RDX: 0000000000000002 RSI: ffffffff8e46914c RDI: 0000000000000001 [ 554.049030][ C0] RBP: 0000000000000007 R08: ffffffff917a717f R09: 1ffffffff22f4e2f [ 554.049043][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e30 R12: 0000000000000009 [ 554.049057][ C0] R13: 0000000000000008 R14: ffff8880b8428280 R15: 0000000000000100 [ 554.049087][ C0] handle_softirqs+0x226/0x860 [ 554.049115][ C0] ? do_softirq+0x77/0xd0 [ 554.049141][ C0] ? process_scheduled_works+0x97a/0x1630 [ 554.049166][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 554.049194][ C0] do_softirq+0x77/0xd0 [ 554.049218][ C0] [ 554.049225][ C0] [ 554.049231][ C0] __local_bh_enable_ip+0x100/0x140 [ 554.049257][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 554.049290][ C0] ? process_scheduled_works+0x97a/0x1630 [ 554.049315][ C0] batadv_tt_purge+0x35/0xa10 [ 554.049345][ C0] ? rcu_is_watching+0x16/0xb0 [ 554.049371][ C0] ? process_scheduled_works+0x97a/0x1630 [ 554.049398][ C0] process_scheduled_works+0xc3d/0x1630 [ 554.049441][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.049471][ C0] ? assign_work+0x3cf/0x5d0 [ 554.049499][ C0] worker_thread+0xa47/0xfb0 [ 554.049532][ C0] ? __kthread_parkme+0x71/0x1f0 [ 554.049564][ C0] kthread+0x38b/0x480 [ 554.049581][ C0] ? __pfx_worker_thread+0x10/0x10 [ 554.049605][ C0] ? __pfx_kthread+0x10/0x10 [ 554.049624][ C0] ret_from_fork+0x514/0xb70 [ 554.049642][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 554.049660][ C0] ? __switch_to+0xc89/0x1420 [ 554.049686][ C0] ? __pfx_kthread+0x10/0x10 [ 554.049705][ C0] ret_from_fork_asm+0x1a/0x30 [ 554.049729][ C0] [ 554.222618][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 555.336272][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 555.345369][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.355415][ T32] Call Trace: [ 555.358688][ T32] [ 555.361616][ T32] vpanic+0x56d/0xa60 [ 555.365593][ T32] ? __pfx___schedule+0x10/0x10 [ 555.370436][ T32] ? __pfx_vpanic+0x10/0x10 [ 555.374940][ T32] panic+0xc5/0xd0 [ 555.378661][ T32] ? __pfx_panic+0x10/0x10 [ 555.383089][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 555.388536][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 555.393896][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 555.400042][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 555.406191][ T32] watchdog+0x1030/0x1030 [ 555.410514][ T32] ? watchdog+0x1c7/0x1030 [ 555.414921][ T32] kthread+0x38b/0x480 [ 555.418980][ T32] ? __pfx_watchdog+0x10/0x10 [ 555.423638][ T32] ? __pfx_kthread+0x10/0x10 [ 555.428212][ T32] ret_from_fork+0x514/0xb70 [ 555.432790][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 555.437885][ T32] ? __switch_to+0xc89/0x1420 [ 555.442557][ T32] ? __pfx_kthread+0x10/0x10 [ 555.447137][ T32] ret_from_fork_asm+0x1a/0x30 [ 555.451913][ T32] [ 555.455229][ T32] Kernel Offset: disabled [ 555.459547][ T32] Rebooting in 86400 seconds..