last executing test programs: 2.960039474s ago: executing program 3 (id=225): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1085f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1085f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_getneigh={0x1fc, 0x1e, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x800, 0x2000}, [@IFLA_PORT_SELF={0x88, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e2cb307279016e72f4030af9e7584662"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'l2tp\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8a19a409cfb4e56833b929a7e87dddda"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "21786a41efba8b4eff19e7828f7b558a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "16597ec7540602e590f4b7efbb794e06"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b76952ebb192038f870b9b72d456bd91"}, @IFLA_PORT_PROFILE={0xb, 0x2, '$$$#.%\x00'}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xb18}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_VFINFO_LIST={0x78, 0x16, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xea2, @remote}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2fc, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x800}}]}]}, @IFLA_AF_SPEC={0x50, 0x1a, 0x0, 0x1, [@AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_PORT_SELF={0x74, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7d629abdffcd79823ccc1815f85aa5f0"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x65}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0152f76fe0b4df7d17be1fe1632c92c8"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'l2tp\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "812dc7bc4e627e4405dab5b7d2ec99e6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '$\x00'}]}]}, 0x1fc}}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) 2.395251637s ago: executing program 3 (id=226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) (async) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x5761, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r8, 0x601, 0x70bd25}, 0x14}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="db17881efb37a2c1a1aa3cbc27cef482621b5c6590075b3b14aa76a3ac55cb033b7d7239ff3aa95ff5065685d93165dabc8bd1a81b61b50123baa63b16b9c66b3aeb69c01b75a1564f18b7340ff247aa2bda9b21351f942d32d03fe7fd9879e67e1f3b2c16a07a69a9e23e342971d539b86c780da582734412334572bfbd8e01c01e0acc36dac3c5cd9c0d30d711f94fdfd42028821606b99a0482648adc59d1295d9cf4b54a748b0208ced340", 0xad}, {&(0x7f0000000300)="b2c141fb1c3223", 0x7}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}], 0x20}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)="be3be2a2f84e534d2ea1729865f4b96d8c72652e4817f8557a9f517657e8bc9f6e59163bd9d540f8cd502c84608368320f9e1ff7b64ca713acdb2c1bcf42ac1f996382b1bff93d7dca238d91b3788e91cfb1b6a8035f95529b949ae8ce8bd648b735c894d16d7ba05c9fffdf309a9af908940f918e8a2242192437c8e1b3fe958a1e097e58e7ec713f188cfe5ec41b43ffc94f191d1c2af0f4bfbd8dc19c1c4bd6715d9d2e1c817251ab0d774ff3e4b2c0ee3a1d336c82f3e769cd", 0xbb}, {&(0x7f00000006c0)="8ee3c7d8e43ab4bc7fa09f7cc1767c7abeca948aaaa635f2fb1973985d4fa670a9f1537d817331641e4a05e3ea00b018386b7c9702399e4c204b7aab753e7238bc366ce8f80842aac513f28475773fb9c6e866bd98c5ab162d4e242a1328f3ee3cf1943d27eab8c3fc94f90b244619a4c6b0e9797bdcf89f98", 0x79}, {&(0x7f0000000740)="7049062051ae659dea817420a039768ac653d0b8a07ac777bae55999b23d59b2541c44ff68cbbb971f12bad7849eb370bd7b8e424718d30328756fe9f69a9c9442c181dad75620d78991f4aae788d3208073dc8c29a241dfea0cbad659267079c2ebf3641ba11c302e2ad6a9eed20c5675beb07c4357628f38c8d81986418dc74c63c668aa19c2b335e5490e08a32807fdfaf380b875e06051cbb8d4f7acb640f62a1f5fb8f2f4065fe45fa26a08bef60ca261dab51cb1110c8233506fea80e0a7afce4c2669438e905118736c48cd90b12ed977", 0xd4}], 0x3}}, {{&(0x7f0000000580)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="48879a2995f29f786c58286b564e5b64efd028b0229c5e4c9f063a10ff2ce12d487523a39d099f6ce97648b747a132cea42087802baf9928088120e4a86fdc0eb0745eb5a919b234ace6e0dfcb4bb911fd6df53d20c66829b22dfe3e05e714644be2b671ea3e024bb0e1c3eac918a345e90de7f540cf3fde9c", 0x79}], 0x1, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x3, 0x40040c4) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x2004a851}, 0x2004c814) (async) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001000)=0x7b1, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d2a894a83e57c67d5b98dcbca6f9be62f5dc8f20ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 2.214011169s ago: executing program 0 (id=230): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80ad}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) 2.202744311s ago: executing program 3 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) socketpair(0x21, 0xc350c604f111c95f, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1dc, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xce, 0x8, "ad3522825928ec254f2d334e8ee3af5eddf0a147e98c27d82b78c2946f9de65051be499c70580aa52926903ae0a0353cc821a81c1e9da3f0307f5cd3eac7919c1800bcb9a1c31c2ed2a7bc8272bb53a40642922b239e0e9c029ee50f558eb7d42193b24c4b9b226ea580a383731e12c82b01855b8acc6131876de0154f5f02e31c3d82d25026b0fa2fbdfcc3bbdb4ad42a567795ea7db2c4162184fd96067aa1746e91820d7d51a75368e1fb3a8674ca1c56198adbd73b3f4e45fa5c321e2fd50c93d77b82052e4d4752"}, @NFTA_OBJ_USERDATA={0xde, 0x8, "e925d0e38a29f885c025c4d56627dc7cd64174637dc001a8eacb30ee6df4a7ea17742ef3a303fbb9a21837e084871b6c1d869a8646bf75e794506aed06938a50a5d284859ccb59fe11c4117b0ad8db5916ea930e522b4d4a97d940ad9a24078cbc6c41c67dd63b33e8fc8b262276f436fcb6d33a2d6a56709ded4c467d44b77133baf738c28b1bf21be1438472268259494ba3fadf5a00fa71ac5d6b4161f210cddac1e86d12df9c6d9fb5027731bb93ab426a9562b694f68da8ad6f308342815f7d8de9b4368de999b753e4e855e83d7c58dd05cdc496a47623"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x14000011) 2.066189494s ago: executing program 3 (id=232): r0 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 2.065774313s ago: executing program 1 (id=233): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) (async) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x1, r3, 0x0, r1}, 0x10) (async) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x40000d4) 2.044772446s ago: executing program 0 (id=235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, &(0x7f0000000180)=""/71, 0x47}, 0x7}], 0x3, 0x100, 0x0) 1.902783639s ago: executing program 4 (id=236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000fdffdf647a80000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1ba40000000000cc95f3e5436e1a7da1b2561f3066a99fe72b082954dcbbc1bf7af8de87794a5507e44d67dd7de5078574102cb7a57f978df1c21540ac8c78fbaeeced9b872259", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000380), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000740), 0x6, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x200508c5) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.858449456s ago: executing program 0 (id=237): r0 = socket$isdn(0x22, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB="34000e"], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0x25}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) bind$vsock_stream(r7, &(0x7f0000009c80)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) bind$vsock_stream(r7, &(0x7f0000009c80)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0x18, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000001200)={0x60000010}) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000001200)={0x60000010}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000280)={0x1000}) close(0x4) getpeername$ax25(r7, &(0x7f00000004c0)={{0x3, @rose}, [@netrom, @remote, @bcast, @null, @netrom, @rose, @netrom, @null]}, &(0x7f0000000540)=0x48) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffe, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010100}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffe, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010100}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r13, 0x400454ce, 0xffffffffffffffff) close(r0) 1.85793541s ago: executing program 3 (id=238): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x80000000, 0x6, 0x79a, 0xfffffffc, 0x2, 0x6, 0xdc}, &(0x7f0000000140)=0x9c) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @rose, @rose, @default, @rose, @rose, @netrom, @null]}, &(0x7f0000000200)=0x48, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r3}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000440)={r6}) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000480)={0xff, @local, 0x8, 0x1, 'lc\x00', 0x20, 0xffff, 0x23}, 0x2c) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x880) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x44001143}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x1406, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004}, 0x4040) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004}, 0x8801) (async) listen(r6, 0x3) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000001940)={&(0x7f0000000940)=""/4096, 0x1206000, 0x1800, 0x4f, 0x1}, 0x20) (async, rerun: 64) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001980)='cpu.weight.nice\x00', 0x2, 0x0) (rerun: 64) write$cgroup_int(r9, &(0x7f00000019c0), 0x12) (async) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000001a00), 0x4) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r10, 0x100000000) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001a40)={{0x87, @broadcast, 0x4e20, 0x0, 'lblc\x00', 0x8, 0x0, 0x1c}, {@private=0xa010100, 0x4e21, 0x2000, 0x6, 0x4, 0x5}}, 0x44) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r5, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcfa}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1b9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb55}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async, rerun: 32) sendmsg$inet_sctp(r4, &(0x7f00000020c0)={&(0x7f0000001bc0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001c00)="bf885a0539fe1a7a0d3ce9a155497393b58fdadd25ea02580eb99788ddf051bc05c0b5c892ee6b5b53f92b0e3e4e1d373eb13ea1b99ea1e089c0373a79b523cb96011fc62f30d8d3c6c7e701ee946a1af2ea9272d6d05b993fdc5a11bf93e61e5bbd817dff161c6a56459fe9a675de", 0x6f}, {&(0x7f0000001c80)="7f2a721972cc2b0d1d2e77bd3c19bf91ddea8fed333b25711bdaf742dd06817496ed33e411c20ba4ddb597176af7a2f65a065af69a08921f84cd43bd9678a33c00ca5e56d9a947ac5463e85e22d825a148027fb34383e95acb", 0x59}, {&(0x7f0000001d00)="4b530fa01b28bec5a14b37f80748e0f84c583dffd604e5bb22c1523742a72355ae1fb7aa34f2f76e4f58559ab32286c8f852a789d80808b6f13121836934aeac76d5a3c232a26c0fdf43a0202aee090f523256925b523c880d9a7b6b24bca5de3e84a89977b242e7657e4847a99e6bbc9f0fbc46779efce471e136c7f7f6598c157703f5914cb3bf72b7b901d55a33018f88a2ae6a747b2b49031865bba8bd79740caf40673f095092b93387da616718bd24ba53aee841d5dff5e705fcda036a4bebb2b597", 0xc5}, {&(0x7f0000001e00)="bdaa974e64f21cbb25b9e2f162ab23e05a0102212b230aba0c72edd2c57929bd2a2666d46aec43", 0x27}, {&(0x7f0000001e40)="46cfb6b66aef1f31bf400a3a3e067415404bfe07dacf9ff25089b6bf74c00e23f4a608ddceaaa5e7dcb5d36720c5e45dfa315a8891cfe7a58fdc0c947833e0d5c0e9b9bac5e5045e4588ce552f315306e76c27e6d05d0d53344e5387df322843681c853227dc03fd786c442827f62c1b257ac2953d1ca1f53e56833538364982868448e4e39860b76b123ad8b2abe05ee0b73131295daeecf9d2fa3f7bd1fcd5005dfbcb4acd3980f3a3a22aa4a69544187c8c8f5f7e8357bcb0ee98980f367acc6408f92d74abe5b35f9519af85", 0xce}], 0x5, &(0x7f0000001fc0)=[@init={0x18, 0x84, 0x0, {0xf, 0x54a, 0x6, 0x7}}, @init={0x18, 0x84, 0x0, {0xd1, 0x6, 0x2, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x98e9, 0x204, 0x6, 0x3, r1}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x7fff, 0x8000, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8204, 0x3, 0x8, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0xc8, 0x40}, 0x2004d080) (async, rerun: 32) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000002200)=@ccm_128={{0x303}, "ff9905f1642bfd87", "5a1522ff5b08466625291e451978d5ae", "d1a3503b", "4365d2e83e153cb5"}, 0x28) 1.843044327s ago: executing program 1 (id=239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) syz_emit_ethernet(0xea, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00b42b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd3a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8d}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 1.744187899s ago: executing program 2 (id=240): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x0, 0x1}, 0x6) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) 1.625979597s ago: executing program 1 (id=241): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) 1.604764104s ago: executing program 1 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff28bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r3, @ANYBLOB="b6c2b554d2b5f6ea5c4d7cea12e1599c32410174b9278171bb3331b05c7b50724cc3533dc2cc35a21263bdb868b82b"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.568024037s ago: executing program 2 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvfrom(r4, &(0x7f00000002c0)=""/139, 0x8b, 0x2040, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) 1.567269305s ago: executing program 3 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x840) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010802110000010802110000001000"/40], 0x44}}, 0x0) 1.518396444s ago: executing program 4 (id=245): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2010}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000042000100fffffffffddb80140083801000668009007e00ac66d0741d000000100001780c00c800020000000000000004000480"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) 1.443128446s ago: executing program 0 (id=246): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) 1.399982602s ago: executing program 4 (id=247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.153669733s ago: executing program 2 (id=248): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x3, 0x94c}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x2, 0x3, 0x3}, {0x4, 0x5, 0xd, 0xb}, {0x0, 0x5, 0xc, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x2, 0x4, 0x0, 0x9}, {0x5, 0x4, 0x5, 0x8}, {0x4, 0x4, 0x2, 0x3}, {0x2, 0x5, 0xc, 0xa}], 0x10, 0x9a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xb2, 0xbe, &(0x7f0000000240)="acdba5d2148500e9d151a7f23ceda562e3421edea8636babcf98ace119fdb0224c4f07e41c39f0cb1f42236ebdbdcbb258ff3ab64559d4d967b75091ad49ca0e250dfcb03a8006b72f509043a5d78224d22fc683812169dd8a4d8805aaeec67a2679a482b5e57877be85a27c3beab5931e1ebcfa5894bd0ecbc08bed423d7f09a909e63762729fc88901b90acb8bebfda8fe11e4d8132bc16f4b252f400faa298b2d6a7110fdb3386dc2c1299c0e0c79673e", &(0x7f0000000300)=""/190, 0x1, 0x0, 0x31, 0x26, &(0x7f0000000040)="a363669076e2685a7f29b4ee0ec5b7ca9bc5d0afaa1e3958c958d4d8d40be653f6c58f8e9bac6a84e8bd38749c00c60406", &(0x7f0000000080)="d9aaea92e30befdfb9b70e4363a8498d9fa377e380439661fddb3a525460ed24052b0b999845", 0x2}, 0x50) 1.049352214s ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket(0x11, 0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r6, 0x401}, 0x14}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x3b083f80, 0x4) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11, 0xffffffffffffffff}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x3, 0x4}, @timestamp, @sack_perm, @timestamp], 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 797.641777ms ago: executing program 0 (id=250): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010000507000000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) 489.566399ms ago: executing program 1 (id=251): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @netrom, @remote, @netrom, @remote, @netrom, @rose]}, &(0x7f0000000080)=0x48, 0x800) close(r0) pread64(r0, &(0x7f00000000c0)=""/106, 0x6a, 0x81) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4f8000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000180)={0x1, 0x8, 0x4}) r2 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="c60d5a30938eb2c67edc9df1f92c8dcf7ff37911b521b237b7c610057f01fb52d21607a1a45d9b2a9078d26bf4f448ccf4b2fed467120fdfed30c49611a30b113d00fd0241d9c143ce19ff7aa4c8671e5001afe4717dfb93eb4db51e1278682e9644c83008af762722afc2aaeb225c81789834ac95a9676cd6b4cfcbb4c79ff44ea7f707b51fe7207eba0dfb4c0cd39c8714001f920f104fc93ad66dda8507bbcab90c0672597add548ca203276ef2020a6830bbae82e2820a2177de5dd0a575dfdbca55a17bbef245c20d2dd7e980f5f8cc0334bf70b7fd5b4c4331f0c88417827c40d300f2189fff726b902059", 0xee}, {&(0x7f0000000340)="100cf8b70b111c3e78e4b41ee20368f7365d196c3446c1a9f519476db1d4ca9fcc372a57e734dd45ee57433c67020a1c4d9f815f3d9fa0a86b3c", 0x3a}, {&(0x7f0000000380)="518aa9a44bb1960fad77a5ffdf46336324a5c3a10cfbcabba2b3e97ced1dc26faf39a0f0d3a9902581cabb6682be43397f12ca6be253c97e90c05028000139ba14449105419f8070543bd79f6ec29f1ae42bd21ced041383764f3a9e04643c08f35f7265d1a924be6f759cb3", 0x6c}, {&(0x7f0000000400)="4e455b2f9273e125335a97e8e7a6d7f59a37e2a279d4d74868ecd7c01d86ee36e9adcc751665b7b5d7473b99aee2dd18c06b1b74ef482c27d541afab1623aa5d064cd200538706a9cb03d53feaaeb008daf72955923e329d044438fc6ae682c0b99f3369c77dd7e39900dbaa284345c97f2cd418c0d4776649f6088a3c06d287915d403b6f0b7c6d111b", 0x8a}], 0x4, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r5}}}], 0x40, 0x1}, 0x20008000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2, 0x2, 0xc, 0x2, 0x3, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x18}}, 0x800) r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000700)=0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7800, 0x20, 0x80000000, 0x4, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x64, 0xf, 0x63, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0xe, [{@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e21, 0x0, 0x4e20, 0xff01, 0xa, 0x0, 0x0, 0x16, r8, r9}, {0x10001, 0x7fff, 0x9, 0x13, 0xb2e9, 0x7, 0x9}, {0xffffffffffff8001, 0x9, 0x0, 0xf7}, 0x1, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x4d3}, 0x2, @in=@loopback, 0x3505, 0x1, 0x0, 0x5, 0x1, 0x4, 0xfc}}, 0xe8) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x3, 0xcd2, [0x200000000980, 0x0, 0x0, 0x200000001276, 0x2000000012a6], 0x0, &(0x7f0000000940), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x2a, 0x8906, 'bridge_slave_1\x00', 'team_slave_0\x00', 'vlan0\x00', 'bridge_slave_0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @random="fd35bc700db2", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x856, 0x88e, 0x8c6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x3, 0x2}, {0xffffffff, 0x2}, {0x19d, 0x2}, {0x10001}, {0x9, 0x7}, {0xfffffff7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x8}, {}, {0xf982, 0x1}], [{0xead7, 0x3ff}, {0x1000, 0x2}, {0x9, 0xc}, {0x3, 0x3ff}, {0xffffff01, 0x6}, {0x3, 0x8}, {0x8000, 0x3e}, {0x1, 0x6361930d}, {0x7f, 0x294f}, {0x1, 0x4}, {0x100, 0x7}], 0x3, 0x5}, {[{0x7, 0x2}, {0x8000}, {0x6, 0x3}, {0x6f39, 0x1}, {0x933, 0x1}, {0xffffffff, 0x1}, {0x6a, 0x3}, {0x0, 0x67a9f573b20f17c1}, {0x4, 0x1}, {0xa3, 0x3}, {0x7fff, 0x3}], [{0x2, 0x1}, {0xffffffff, 0xad}, {0x6, 0x8}, {0x0, 0x3}, {0x3, 0xfffffeff}, {0xfff, 0x3}, {0x9, 0x800}, {0x2, 0x82fd}, {0x8, 0x7}, {0x1, 0xffffffff}, {0x200, 0x7}], 0xa, 0xa}, {[{0x2, 0x1}, {0xfffff801, 0x1}, {0xffff0000, 0x2}, {0x200, 0x3}, {0xc4, 0x1}, {0x8001, 0x3}, {0x84}, {0xff, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0xfff, 0x2}], [{0x40, 0x7}, {0x2, 0x5}, {0x635, 0x70000000}, {0x4, 0xeaa}, {0x6, 0x5}, {0x1, 0x1000}, {0x101, 0x200}, {0xf, 0x100}, {0xe3f, 0x25}, {0x200, 0xb5}, {0x8, 0x8}], 0x6, 0x8}, {[{0x607, 0x3}, {0x6e98, 0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x3}, {0x4, 0x2}, {0x6, 0x1}, {0xfff}], [{0x8, 0x89c}, {0x440e, 0x2}, {0x7, 0x84b6}, {0x4, 0x7}, {0xe1, 0x2}, {0x3ff, 0x6}, {0xf, 0x9}, {0x2, 0x55d}, {0x7, 0x9e}, {0x1e}, {0xa0d, 0xfffffff7}], 0x1, 0x9}, {[{0x6, 0x2}, {0x2, 0x2}, {0x2}, {0x8, 0x2}, {0x401, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x144, 0x1}, {0xf65, 0x2}, {0x101, 0x1}], [{0x7, 0x6}, {0x8, 0x6}, {0x4, 0x8}, {0x9, 0x81}, {0x100}, {0xfc0, 0x40}, {0xfffffffe, 0x721e}, {0x4, 0x1}, {0x2, 0x1}, {0x8, 0x65}, {0x8a36, 0x101}], 0x2, 0x2}, {[{0x4}, {0x36f, 0x1}, {0x8a9}, {0x9}, {0x5, 0x2}, {0xfffffff7}, {0x4, 0x1}, {0x249, 0x1}, {0x8, 0x3}, {0xfffffff8, 0x3}, {0x9, 0x3}], [{0x8, 0xfffffff5}, {0x81, 0x8}, {0x57, 0x930}, {0x0, 0xffffff80}, {0x5, 0x3}, {0x5, 0x7}, {0xfffff02e, 0x401}, {0x6, 0x7}, {0x6, 0xfffffffc}, {0xb, 0x1}, {0x8, 0xce5}], 0x7, 0x1}, {[{0x4, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x100, 0x2}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0x3}, {0x900000}, {0x7, 0x3}, {0x10001, 0x1}], [{0x4}, {0x3, 0x9}, {0x5c9c, 0x8}, {0x2, 0x9}, {0x4, 0x7e}, {0x7, 0x14a}, {0x81, 0x41c}, {0x7, 0x9}, {0xe9, 0xc}, {0x8, 0x84ca}, {0x9, 0x50d}], 0x4, 0xb}, {[{0x0, 0x1}, {0x80000000, 0x2}, {0x5, 0x1}, {0x9, 0x3}, {0x0, 0x3}, {0xffff, 0x3}, {0x3, 0x2}, {0x5}, {0xfffffff7, 0x3}, {0xfffffc00, 0x2}, {0x3, 0x1}], [{0x4, 0x4}, {0x200, 0x1}, {0x9, 0x9}, {0x10001, 0x8}, {0x5, 0x6}, {0xffffffff, 0x8000}, {0x2, 0x8}, {0xfffffa00, 0xfffffffe}, {0x9, 0x3cd}, {0x0, 0x3}, {0x5, 0x1}], 0xb, 0xb}, {[{0x2, 0x1}, {0x7ff}, {0x0, 0x2}, {0x4, 0x3}, {0xffff}, {0xf, 0x2}, {0x40, 0x3}, {0x7, 0x3}, {0x7}, {0x6, 0x1}, {0x4, 0x3}], [{0xfffffff0, 0xffff}, {0xffffffff, 0xa7b}, {0x1, 0xcf}, {0x0, 0xa}, {0x800}, {0x0, 0xe7}, {0x1ff, 0x4}, {0x2, 0x4}, {0xf, 0x401}, {0x0, 0x2}, {0x4, 0x80}], 0x9, 0x3}, {[{0xf, 0x2}, {0xeac3, 0x3}, {0xf, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x3}, {0x76b}, {0xb, 0x3}, {0x7fffffff, 0x2}, {0x9, 0x1}], [{0x1000, 0x4}, {0x5, 0x7}, {0x6, 0x7be}, {0x6, 0xfffffff7}, {0x401, 0x80}, {0x5, 0xffffffff}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x3ff}, {0xd, 0x129}, {0x0, 0x6}], 0x4, 0xa}, {[{}, {0x3, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x580, 0x1}, {0x6, 0x2}, {0x8, 0x2}, {0xf0000000}, {0xffffffff, 0x3}, {0x6}, {0x3a}], [{0x7fffffff, 0x7}, {0x7fff, 0x9}, {0x3}, {0xbf, 0xb3b00000}, {0xfffffff3, 0x3}, {0x1, 0x2b05}, {0x8, 0x8}, {0x2, 0x2}, {0xf, 0x9}, {0x0, 0xffffffff}, {0x0, 0x8}], 0x8, 0x8}], 0x3}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0xa, 0x10, 0x11, 'hsr0\x00', 'bridge0\x00', 'veth1_to_team\x00', 'dvmrp1\x00', @random="6bc8569f0e26", [0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xbe, 0xf6, 0x226, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'syz1\x00'}}}], [@common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 0xfffffffffffffffd}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10000, 'system_u:system_r:kernel_t:s0\x00'}}}}, {0x11, 0x8, 0x68, 'batadv_slave_1\x00', 'gretap0\x00', 'ip6gretap0\x00', 'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0x11e, 0x156, [@state={{'state\x00', 0x0, 0x8}, {{0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ed5b5513599b9c1f688a98381db76fce4c349b723b9dbc360f59d3c0d9f5"}}, @snat={'snat\x00', 0x10, {{@random="87940d8e130b", 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}]}, 0xd4a) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001800)={'ip6tnl0\x00', &(0x7f0000001780)={'ip6gre0\x00', r8, 0x4, 0x8, 0x4, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0x3, 0x3}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xb0, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9176}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x4008, r3}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@map, 0x1e, 0x1, 0xb87f, &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001b80)='syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001bc0)={r1, 0x70d, 0x1, 0x9}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b40)={@cgroup=r15, r13, 0x18, 0x14, 0x0, @void, @value=r16, @void, @void, r14}, 0x20) r17 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r17, &(0x7f0000001c00)={0x2, 0x0, @loopback, 0x3}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(r15, &(0x7f0000001c40)='cpuacct.usage_sys\x00', 0x0, 0x0) 489.024221ms ago: executing program 4 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) 487.232717ms ago: executing program 0 (id=253): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x28, 0x8000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x13, 0x11, 0xf, 0x7, 0x7f, {0x6, 0x407c, 0x7, 0x5, 0x2b52, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000010) close(r3) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000000c0000000800040000000000"], 0x1c}}, 0x0) 459.26165ms ago: executing program 2 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff}) splice(r3, &(0x7f000000ccc0)=0xffffffff, r2, 0x0, 0x5, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r4]) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010300000043341ad39c5e6f7eb3a3084943c8203617ccaff9f98847d7ec1fc289d71b0074c3e3f15146f2a4444d4a80fa85620c05baf0dab5389933c58d565a6ab5a132d79acf9653b11b351962c2fd8215ddc010003e8d01f0bf5ef3c22dfec7c16df88d81a72fa3ad3bc5ff734b8da69a737316c471511bc75a3fbd29cd1911504e57cdcd47fb", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 287.653758ms ago: executing program 1 (id=255): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) shutdown(r3, 0x0) close(r2) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x800) 242.616023ms ago: executing program 4 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async, rerun: 32) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async, rerun: 32) shutdown(r0, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000a0601010000000000200000070000090900020073797a310000000005000100070000000800094000000005100008800ccb"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000), 0x2) 30.61954ms ago: executing program 2 (id=257): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) write(r3, &(0x7f0000000000)='S', 0x1) 0s ago: executing program 4 (id=258): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 78.771338][ T5818] cgroup: Unknown subsys name 'net' [ 78.924205][ T5818] cgroup: Unknown subsys name 'cpuset' [ 78.933744][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.619154][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.942160][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.951738][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.959625][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.968220][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.976299][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.095314][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.104775][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.113842][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.122789][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.131350][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.180540][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.189610][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.197843][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.206359][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.214953][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.230657][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.242604][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.255193][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.265169][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.276801][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.293160][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.302466][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.310561][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.321885][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.330192][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.843011][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.059463][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.117655][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.141445][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.187686][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.195909][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.203504][ T5831] bridge_slave_0: entered allmulticast mode [ 84.211097][ T5831] bridge_slave_0: entered promiscuous mode [ 84.237493][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.260659][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.267819][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.275280][ T5831] bridge_slave_1: entered allmulticast mode [ 84.282733][ T5831] bridge_slave_1: entered promiscuous mode [ 84.398239][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.441394][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.547539][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.555750][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.563535][ T5839] bridge_slave_0: entered allmulticast mode [ 84.571174][ T5839] bridge_slave_0: entered promiscuous mode [ 84.586375][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.593608][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.601846][ T5837] bridge_slave_0: entered allmulticast mode [ 84.609368][ T5837] bridge_slave_0: entered promiscuous mode [ 84.631828][ T5831] team0: Port device team_slave_0 added [ 84.638199][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.646552][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.653877][ T5839] bridge_slave_1: entered allmulticast mode [ 84.661601][ T5839] bridge_slave_1: entered promiscuous mode [ 84.691993][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.699178][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.706583][ T5837] bridge_slave_1: entered allmulticast mode [ 84.714658][ T5837] bridge_slave_1: entered promiscuous mode [ 84.723216][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.730959][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.738170][ T5841] bridge_slave_0: entered allmulticast mode [ 84.745899][ T5841] bridge_slave_0: entered promiscuous mode [ 84.756106][ T5831] team0: Port device team_slave_1 added [ 84.798995][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.806351][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.813668][ T5841] bridge_slave_1: entered allmulticast mode [ 84.821577][ T5841] bridge_slave_1: entered promiscuous mode [ 84.844405][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.853831][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.861411][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.868628][ T5842] bridge_slave_0: entered allmulticast mode [ 84.876235][ T5842] bridge_slave_0: entered promiscuous mode [ 84.921100][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.930988][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.938370][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.945701][ T5842] bridge_slave_1: entered allmulticast mode [ 84.953004][ T5842] bridge_slave_1: entered promiscuous mode [ 84.962810][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.984943][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.992211][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.018573][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.054512][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.065281][ T5835] Bluetooth: hci0: command tx timeout [ 85.076917][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.087001][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.094464][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.120860][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.166646][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.187308][ T5839] team0: Port device team_slave_0 added [ 85.196296][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.230214][ T5835] Bluetooth: hci1: command tx timeout [ 85.234085][ T5839] team0: Port device team_slave_1 added [ 85.244083][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.255906][ T5837] team0: Port device team_slave_0 added [ 85.275061][ T5841] team0: Port device team_slave_0 added [ 85.303643][ T5837] team0: Port device team_slave_1 added [ 85.310835][ T5835] Bluetooth: hci2: command tx timeout [ 85.327636][ T5841] team0: Port device team_slave_1 added [ 85.380421][ T5835] Bluetooth: hci4: command tx timeout [ 85.380429][ T5845] Bluetooth: hci3: command tx timeout [ 85.401028][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.408032][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.434342][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.447456][ T5842] team0: Port device team_slave_0 added [ 85.470031][ T5831] hsr_slave_0: entered promiscuous mode [ 85.477689][ T5831] hsr_slave_1: entered promiscuous mode [ 85.496810][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.503890][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.530451][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.543435][ T5842] team0: Port device team_slave_1 added [ 85.549737][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.556833][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.582895][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.595447][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.602557][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.628827][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.642021][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.649007][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.675241][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.705113][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.712335][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.738404][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.787422][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.794611][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.822083][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.856558][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.863817][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.890010][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.995959][ T5839] hsr_slave_0: entered promiscuous mode [ 86.004057][ T5839] hsr_slave_1: entered promiscuous mode [ 86.011460][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 86.017342][ T5839] Cannot create hsr debugfs directory [ 86.036457][ T5841] hsr_slave_0: entered promiscuous mode [ 86.043176][ T5841] hsr_slave_1: entered promiscuous mode [ 86.049415][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 86.055269][ T5841] Cannot create hsr debugfs directory [ 86.067328][ T5837] hsr_slave_0: entered promiscuous mode [ 86.074088][ T5837] hsr_slave_1: entered promiscuous mode [ 86.081336][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 86.087098][ T5837] Cannot create hsr debugfs directory [ 86.191354][ T5842] hsr_slave_0: entered promiscuous mode [ 86.197884][ T5842] hsr_slave_1: entered promiscuous mode [ 86.204351][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 86.210332][ T5842] Cannot create hsr debugfs directory [ 86.696349][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.717054][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.728106][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.748404][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.797649][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.815365][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.828842][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.855482][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.936798][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.947744][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.965127][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.992423][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.129300][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.150489][ T5835] Bluetooth: hci0: command tx timeout [ 87.193196][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.207742][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.225602][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.269660][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.301206][ T5835] Bluetooth: hci1: command tx timeout [ 87.334018][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.373412][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.400137][ T5835] Bluetooth: hci2: command tx timeout [ 87.426163][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.433477][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.448400][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.455624][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.466283][ T5835] Bluetooth: hci3: command tx timeout [ 87.466293][ T5845] Bluetooth: hci4: command tx timeout [ 87.479604][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.513628][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.539258][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.601069][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.680994][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.706351][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.713541][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.759602][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.766863][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.812880][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.907052][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.922689][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.989634][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.996921][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.016410][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.023750][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.051706][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.089691][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.136674][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.143880][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.167896][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.206950][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.214307][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.234915][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.244936][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.252214][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.294526][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.301922][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.525314][ T5831] veth0_vlan: entered promiscuous mode [ 88.575491][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.602203][ T5831] veth1_vlan: entered promiscuous mode [ 88.724721][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.779201][ T5831] veth0_macvtap: entered promiscuous mode [ 88.804375][ T5831] veth1_macvtap: entered promiscuous mode [ 88.834538][ T5837] veth0_vlan: entered promiscuous mode [ 88.871044][ T5837] veth1_vlan: entered promiscuous mode [ 88.881792][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.895141][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.942547][ T244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953493][ T244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.972007][ T244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.988999][ T244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.023580][ T5841] veth0_vlan: entered promiscuous mode [ 89.053457][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.085979][ T5841] veth1_vlan: entered promiscuous mode [ 89.126433][ T5837] veth0_macvtap: entered promiscuous mode [ 89.137506][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.175519][ T5837] veth1_macvtap: entered promiscuous mode [ 89.220236][ T5835] Bluetooth: hci0: command tx timeout [ 89.237957][ T5841] veth0_macvtap: entered promiscuous mode [ 89.248873][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.260581][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.295840][ T5841] veth1_macvtap: entered promiscuous mode [ 89.351107][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.381901][ T5835] Bluetooth: hci1: command tx timeout [ 89.389484][ T5839] veth0_vlan: entered promiscuous mode [ 89.396753][ T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.406168][ T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.418750][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.442150][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.460493][ T5835] Bluetooth: hci2: command tx timeout [ 89.482390][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.492618][ T5839] veth1_vlan: entered promiscuous mode [ 89.502558][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.513971][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.533036][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.542589][ T5835] Bluetooth: hci4: command tx timeout [ 89.550950][ T5835] Bluetooth: hci3: command tx timeout [ 89.564634][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576271][ T1135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.598394][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.601147][ T1135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.650728][ T1135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.673461][ T1135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.836649][ T5839] veth0_macvtap: entered promiscuous mode [ 89.864666][ T5839] veth1_macvtap: entered promiscuous mode [ 89.898718][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.923029][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.953877][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.020593][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.039912][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.056984][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.097163][ T1135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107848][ T1135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.137106][ T1135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.151937][ T244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.183054][ T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.214867][ T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.243649][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.256040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.279705][ T5842] veth0_vlan: entered promiscuous mode [ 90.346006][ T5842] veth1_vlan: entered promiscuous mode [ 90.506777][ T5956] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.608590][ T5960] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 90.644950][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.675166][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.784881][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.826591][ T5842] veth0_macvtap: entered promiscuous mode [ 90.833929][ T5971] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9'. [ 90.845756][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.858664][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.880748][ T5842] veth1_macvtap: entered promiscuous mode [ 90.988023][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.022588][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.100672][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.144757][ T4101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.157543][ T4101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.218597][ T4101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252757][ T5981] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.297896][ T5981] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.307046][ T5845] Bluetooth: hci0: command tx timeout [ 91.321374][ T5981] xt_l2tp: invalid flags combination: 8 [ 91.471462][ T5845] Bluetooth: hci1: command tx timeout [ 91.481931][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 91.539404][ T5990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 91.560649][ T5845] Bluetooth: hci2: command tx timeout [ 91.624445][ T5835] Bluetooth: hci4: command tx timeout [ 91.630731][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.639261][ T5845] Bluetooth: hci3: command tx timeout [ 91.655232][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.895588][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.918314][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.971262][ T6000] Zero length message leads to an empty skb [ 92.094018][ T6010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17'. [ 92.249908][ T6014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'. [ 92.676317][ T6032] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.23'. [ 92.951421][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'. [ 93.052480][ T6047] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 93.185239][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.244528][ T6059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.424998][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.542156][ T6068] tipc: Trying to set illegal importance in message [ 93.619231][ T6044] bond1 (unregistering): Released all slaves [ 93.784616][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.992175][ T6091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.485295][ T6124] netlink: 'syz.1.53': attribute type 13 has an invalid length. [ 95.503809][ T6123] Cannot find set identified by id 65534 to match [ 95.560688][ T6126] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 95.862434][ T6146] netlink: 'syz.4.59': attribute type 6 has an invalid length. [ 96.132759][ T6156] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.310157][ T6157] syzkaller0: entered promiscuous mode [ 96.315836][ T6157] syzkaller0: entered allmulticast mode [ 96.477861][ T6170] __nla_validate_parse: 6 callbacks suppressed [ 96.477880][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.505325][ T6173] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.68'. [ 96.542459][ T6173] netlink: Conntrack attr has 3 unknown bytes [ 96.565699][ T6180] tipc: Started in network mode [ 96.573462][ T6180] tipc: Node identity 0276fcdeb8b8, cluster identity 4711 [ 96.599233][ T6180] tipc: Enabled bearer , priority 11 [ 96.632997][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.650453][ T6179] netlink: 'syz.4.69': attribute type 5 has an invalid length. [ 96.658151][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.718189][ T6179] geneve2: entered promiscuous mode [ 96.735308][ T6179] geneve2: entered allmulticast mode [ 96.747189][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 96.778850][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 96.810163][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 96.822979][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 96.928064][ T6196] netlink: 164 bytes leftover after parsing attributes in process `syz.2.76'. [ 96.950347][ T6196] netlink: 92 bytes leftover after parsing attributes in process `syz.2.76'. [ 97.191989][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 97.225174][ T10] cfg80211: failed to load regulatory.db [ 97.272821][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 98.122320][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.141775][ T6221] bridge_slave_1: left allmulticast mode [ 98.147762][ T6221] bridge_slave_1: left promiscuous mode [ 98.154687][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.167257][ T5834] tipc: Node number set to 3134127326 [ 98.425675][ T6234] netlink: 104 bytes leftover after parsing attributes in process `syz.0.85'. [ 98.440239][ T6233] netlink: 240 bytes leftover after parsing attributes in process `syz.1.82'. [ 99.026868][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.089572][ T6261] tipc: Started in network mode [ 99.124783][ T6261] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.192850][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 99.248265][ T6259] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 99.286979][ T6259] 0ªî{X¹¦: entered allmulticast mode [ 99.321966][ T6259] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.517290][ T6259] syzkaller0: entered promiscuous mode [ 99.528748][ T6259] syzkaller0: entered allmulticast mode [ 99.667130][ T6300] syzkaller0: entered promiscuous mode [ 99.672939][ T6300] syzkaller0: entered allmulticast mode [ 99.805475][ T6305] netlink: 'syz.4.101': attribute type 2 has an invalid length. [ 100.113674][ T6314] IPv6: sit1: Disabled Multicast RS [ 100.339600][ T6326] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 100.388630][ T6326] openvswitch: netlink: Flow key attr not present in new flow. [ 100.399151][ T6326] netlink: 'syz.2.110': attribute type 11 has an invalid length. [ 100.407393][ T6326] netlink: 'syz.2.110': attribute type 8 has an invalid length. [ 100.520458][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026e86000: rx timeout, send abort [ 100.531595][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888026e86000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.109290][ T6360] netem: change failed [ 101.238636][ T6364] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 101.302775][ T6362] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 101.313258][ T6362] nbd: error processing sock list [ 101.318872][ T6362] block nbd0: shutting down sockets [ 101.469401][ T6370] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 101.513751][ T6373] IPv6: addrconf: prefix option has invalid lifetime [ 101.559926][ T6374] bond1: (slave geneve3): making interface the new active one [ 101.605257][ T6374] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 101.652193][ T37] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 101.679619][ T37] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 101.714271][ T6377] __nla_validate_parse: 16 callbacks suppressed [ 101.714285][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 101.730796][ T37] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 101.739826][ T37] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 102.248139][ T6403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.254916][ T6403] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.276056][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 102.285314][ T6396] syzkaller0: entered promiscuous mode [ 102.298721][ T6396] syzkaller0: entered allmulticast mode [ 102.585009][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 102.601715][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 103.431338][ T6409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.135'. [ 103.466459][ T6419] IPv6: sit1: Disabled Multicast RS [ 103.486750][ T6419] sit1: entered allmulticast mode [ 103.640811][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 103.679453][ T6428] netlink: 'syz.2.143': attribute type 9 has an invalid length. [ 103.692826][ T6431] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 103.705232][ T6430] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 103.719413][ T6428] netlink: 'syz.2.143': attribute type 11 has an invalid length. [ 103.727894][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.750296][ T6428] netlink: 'syz.2.143': attribute type 12 has an invalid length. [ 103.759261][ T6428] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.143'. [ 103.769604][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 103.792080][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.829150][ T6436] bond1: (slave geneve2): making interface the new active one [ 103.842076][ T6436] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.870705][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 103.879758][ T6428] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 103.903114][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.908812][ T6428] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.946122][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 103.986419][ T6431] veth3: entered promiscuous mode [ 104.032100][ T6431] bond1: (slave veth3): Enslaving as an active interface with a down link [ 104.100360][ T6436] vlan2: entered allmulticast mode [ 104.105894][ T6436] bond1: entered allmulticast mode [ 104.115586][ T6436] geneve2: entered allmulticast mode [ 104.151793][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.170505][ T6442] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 104.193100][ T6442] team0: Failed to send options change via netlink (err -105) [ 104.201759][ T6442] team0: Port device batadv1 added [ 104.304361][ T6455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.915290][ T6482] ip6t_REJECT: ECHOREPLY is not supported [ 104.941165][ T6485] SET target dimension over the limit! [ 105.227017][ T37] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 105.265852][ T6500] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 106.266504][ T6543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.292760][ T6544] xt_ecn: cannot match TCP bits for non-tcp packets [ 106.434264][ T6556] : renamed from hsr0 (while UP) [ 106.748019][ T6555] __nla_validate_parse: 4 callbacks suppressed [ 106.748042][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.177'. [ 106.895594][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 107.059797][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 107.099821][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 107.219049][ T6584] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.272867][ T6584] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.651068][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.189'. [ 107.738929][ T6611] xt_HMARK: spi-set and port-set can't be combined [ 108.123965][ T6627] bond1: entered promiscuous mode [ 108.129110][ T6627] bond1: entered allmulticast mode [ 108.214997][ T6627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.476458][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 108.496114][ T6657] tipc: Started in network mode [ 108.516443][ T6657] tipc: Node identity 060050e18f8b, cluster identity 4711 [ 108.535993][ T6657] tipc: Enabled bearer , priority 0 [ 108.570516][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.614714][ T6658] vxcan2: entered allmulticast mode [ 108.634980][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 108.644663][ T6662] syzkaller0: entered promiscuous mode [ 108.667043][ T6662] syzkaller0: entered allmulticast mode [ 108.717705][ T6663] veth5: entered allmulticast mode [ 108.744030][ T6662] tipc: Resetting bearer [ 108.784512][ T6656] tipc: Resetting bearer [ 108.811850][ T6656] tipc: Disabling bearer [ 109.117834][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 109.197061][ T6682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.214'. [ 109.443772][ T6689] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 109.459760][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.626972][ T6689] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 109.643705][ T6689] bond2 (unregistering): Released all slaves [ 109.660823][ T6705] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 109.731241][ T6709] netlink: 'syz.1.221': attribute type 6 has an invalid length. [ 109.740247][ T6709] netlink: 'syz.1.221': attribute type 5 has an invalid length. [ 109.777675][ T6693] geneve2: entered promiscuous mode [ 109.783404][ T6693] geneve2: entered allmulticast mode [ 109.993215][ T6722] syzkaller0: entered promiscuous mode [ 109.998732][ T6722] syzkaller0: entered allmulticast mode [ 110.709644][ T6739] xt_hashlimit: invalid rate [ 111.072547][ T6754] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 111.083279][ T6755] netlink: 'syz.0.237': attribute type 14 has an invalid length. [ 111.191275][ T6755] delete_channel: no stack [ 111.369967][ T6778] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 111.605380][ T6778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.644985][ T6784] bond1: (slave geneve2): making interface the new active one [ 111.654854][ T6784] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 111.754164][ T6788] veth3: entered promiscuous mode [ 111.775362][ T6788] bond1: (slave veth3): Enslaving as an active interface with a down link [ 111.825268][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.887052][ T6793] bridge_slave_0 (unregistering): left allmulticast mode [ 111.896717][ T6793] bridge_slave_0 (unregistering): left promiscuous mode [ 111.908236][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.961457][ T6798] vlan2: entered allmulticast mode [ 111.966871][ T6798] bond1: entered allmulticast mode [ 111.977847][ T6798] geneve2: entered allmulticast mode [ 111.996684][ T6798] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 112.139872][ T6813] __nla_validate_parse: 10 callbacks suppressed [ 112.139892][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.249'. [ 112.157725][ T6808] netlink: 'syz.2.249': attribute type 11 has an invalid length. [ 112.170693][ T6816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.250'. [ 112.181716][ T6773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.193105][ T6773] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 112.229496][ T6773] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.238325][ T6773] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 112.433838][ T6773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.455446][ T6773] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 112.564849][ T6773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.579564][ T6823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.253'. [ 112.602375][ T6773] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 112.624264][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.718879][ T6773] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.761769][ T6773] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 112.846922][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 112.878586][ T6832] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 112.890547][ T6832] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 112.899020][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 112.908525][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 112.918712][ T6832] RIP: 0010:klist_del+0x49/0x110 [ 112.923787][ T6832] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 7e ba f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 7e ba f6 4d 8b 7e 58 4c 89 f7 e8 5f 26 [ 112.943616][ T6832] RSP: 0018:ffffc9000b8d77a8 EFLAGS: 00010202 [ 112.949729][ T6832] RAX: 000000000000000b RBX: ffff888059fa3860 RCX: ffff888030febd00 [ 112.957745][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 112.965757][ T6832] RBP: ffffc9000b8d78d0 R08: ffff88801d7ddc33 R09: 1ffff11003afbb86 [ 112.973867][ T6832] R10: dffffc0000000000 R11: ffffed1003afbb87 R12: dffffc0000000000 [ 112.981873][ T6832] R13: 1ffff1100b3f470c R14: 0000000000000000 R15: ffff888058594758 [ 112.989958][ T6832] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 112.999104][ T6832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.005893][ T6832] CR2: 00007f4a3c5e0ad8 CR3: 000000006c078000 CR4: 00000000003526f0 [ 113.013890][ T6832] Call Trace: [ 113.017205][ T6832] [ 113.020163][ T6832] device_del+0x27f/0x8f0 [ 113.024620][ T6832] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 113.030728][ T6832] ? __pfx_device_del+0x10/0x10 [ 113.035610][ T6832] ? netdev_unregister_kobject+0x344/0x450 [ 113.041465][ T6832] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 113.047916][ T6832] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 113.054715][ T6832] ? rtnl_net_dev_lock+0x36/0x2f0 [ 113.059926][ T6832] ? rtnl_net_dev_lock+0x36/0x2f0 [ 113.065020][ T6832] unregister_netdev+0x15f/0x200 [ 113.070440][ T6832] ? __pfx_unregister_netdev+0x10/0x10 [ 113.076127][ T6832] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.082074][ T6832] bnep_session+0x29e2/0x2c10 [ 113.086833][ T6832] ? __lock_acquire+0x6b5/0x2cf0 [ 113.091858][ T6832] ? __pfx_bnep_session+0x10/0x10 [ 113.097196][ T6832] ? __pfx_woken_wake_function+0x10/0x10 [ 113.103750][ T6832] ? __kthread_parkme+0x7a/0x1f0 [ 113.109006][ T6832] ? __kthread_parkme+0x19c/0x1f0 [ 113.114348][ T6832] kthread+0x726/0x8b0 [ 113.118496][ T6832] ? __pfx_bnep_session+0x10/0x10 [ 113.123650][ T6832] ? __pfx_kthread+0x10/0x10 [ 113.128283][ T6832] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.133527][ T6832] ? __pfx_kthread+0x10/0x10 [ 113.138157][ T6832] ret_from_fork+0x51b/0xa40 [ 113.142877][ T6832] ? __pfx_ret_from_fork+0x10/0x10 [ 113.148028][ T6832] ? __switch_to+0xc82/0x1410 [ 113.152771][ T6832] ? __pfx_kthread+0x10/0x10 [ 113.157502][ T6832] ret_from_fork_asm+0x1a/0x30 [ 113.162320][ T6832] [ 113.165371][ T6832] Modules linked in: [ 113.170736][ T6832] ---[ end trace 0000000000000000 ]--- [ 113.177892][ T6832] RIP: 0010:klist_del+0x49/0x110 [ 113.184864][ T6832] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 7e ba f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 7e ba f6 4d 8b 7e 58 4c 89 f7 e8 5f 26 [ 113.204626][ T6832] RSP: 0018:ffffc9000b8d77a8 EFLAGS: 00010202 [ 113.210777][ T6832] RAX: 000000000000000b RBX: ffff888059fa3860 RCX: ffff888030febd00 [ 113.218907][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 113.228366][ T6832] RBP: ffffc9000b8d78d0 R08: ffff88801d7ddc33 R09: 1ffff11003afbb86 [ 113.236504][ T6832] R10: dffffc0000000000 R11: ffffed1003afbb87 R12: dffffc0000000000 [ 113.246615][ T6832] R13: 1ffff1100b3f470c R14: 0000000000000000 R15: ffff888058594758 [ 113.255718][ T6832] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 113.264808][ T6832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.272079][ T6832] CR2: 00007f4a3c5e0ad8 CR3: 00000000601f4000 CR4: 00000000003526f0 [ 113.284864][ T6832] Kernel panic - not syncing: Fatal exception [ 113.291586][ T6832] Kernel Offset: disabled [ 113.295927][ T6832] Rebooting in 86400 seconds..