last executing test programs: 2m51.313872636s ago: executing program 32 (id=603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/31, 0x1f}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_call_rpcerror\x00', r2, 0x0, 0x100000000000007f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) shutdown(r0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(r3, &(0x7f0000000480)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000380)=""/25, 0x19}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/226, 0xe2}], 0x6, &(0x7f0000000400)}, 0x2}], 0x1, 0x40, &(0x7f00000009c0)={0x0, 0x3938700}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m16.246102495s ago: executing program 5 (id=1342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000002c0)={0x13, "0bb35bb8ce21e02b0913893a7edb920f311aac93f7d2efac3a1a987575fa2e625a7405654640af672579e04d9f6529bb27ec5debbcfc5115e10377de735fd778c30c6dea4819ad3371ca794ac7d24104514ffe0754c75096ac9d1ada2922e715ea7868a7dece9d6ff59acbd93d974f54e3f9a78892f467b28bb644ba76fc6243"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendto$packet(r1, &(0x7f0000000600)="6b8f9da158d1d44c3a9899ccce1bbaf148dc119150e2ed3ed740f97e723ee829c0272c0ff6653ba0fecdbd5a34ea30ecabb2d81423045154d9fc9f1d88bcf43797f345e8715c9a8b9122f8fe19d894b79ad3244d7148b7bc7863e9d391dc86b9e18eff9d19e8df18a68fa8e592ffd3ec5619e88bc0cbf64a2912d69a3a0eab016e0467", 0x83, 0x24049004, 0x0, 0x0) bind$netlink(r9, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfe, 0x2bcc0ee697a1b006}, 0xc) getsockname(r1, &(0x7f0000000540)=@nfc, &(0x7f00000006c0)=0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 2m15.517589543s ago: executing program 5 (id=1356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x80, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000d80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="00000000345f58897f555c03ddd20cfe6f52742f4ae84d17f6a173c7908450fe4dcf075932ba13a0b49f7a61374485bf8302a16d131e2545d4a71c5687d4393175dfe401b163afedfc", @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900020000007d000000050008000100000014006e800400020004000200040001000400010008003700010000000c000a0037f3a1309b059f26"], 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0xaea2}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000640)=""/91, 0x5b}], 0x6}, 0x8101}, {{0x0, 0x0, 0x0}, 0x43}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000003e40)=""/4095, 0xfff}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000080)=""/167, 0xa7}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x401}], 0x8, 0x40010020, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) setsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) ioctl$sock_bt_hci(r6, 0x0, 0x0) syz_emit_ethernet(0xb1, &(0x7f0000000800)={@local, @remote, @void, {@llc_tr={0x11, {@llc={0xf0, 0xe, "12", "e37f70df71f8a6577dfeb6318f0c5d98b3d669f92ac3ab9def0cf8cca816047bc889ad65b201b3673283074040f476d5da236a87d2fcde3a04b80bb58b701a473218c84468015efe23dafff774a3baa78a3dd94a169a1be8c3be3f5341d814d6fa474afeeb3075722abe83168827968324b864b617b103806d3bbae618c1aaecbd019f79ca6f7b395d911aaa1b75933b1579a5dc8505831d6dd3974077502732"}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000000)) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0x100, 0x6, 0x0, 0x2, 0x3}, {0x0, 0x0, 0x1000000002, 0xfffffffffffffff5}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x48}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fcccb95680094ae78389444e937f285f018493"}}, @mark={0xc, 0x15, {0x35075a, 0x101}}, @extra_flags={0x8, 0x18, 0xfffff562}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) 2m14.682741351s ago: executing program 5 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5b}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414b8ac140000000000f8070000010000000000020000"], 0x38}, 0x0) 2m14.418230907s ago: executing program 5 (id=1375): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="9ede247f7aa0074ffce3d8c003611c94", 0x10}, {&(0x7f00000000c0)="6c8ed8fdece1f22042fea3a4deeb0f05565c2ea3baf78640285fd02e8a3d434814146b07", 0x24}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000018"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)=0x8) 2m13.430474597s ago: executing program 5 (id=1392): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x800, 0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m13.181536304s ago: executing program 5 (id=1399): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2m10.181689833s ago: executing program 4 (id=1429): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) socket$kcm(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x1) connect$bt_l2cap(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002200050500000000fbdbdf25633cc7b7bce1978b242936ce36e5b08dff46530190a676758dc97d4d"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r7, @ANYRES32=r5, @ANYRESDEC, @ANYBLOB="00000004458ed3ec88c7912099c11910437bea6d203920f463ea66eca7ea88bc57"], 0x1c}, 0x1, 0x0, 0x0, 0x809bdfc9f449dbee}, 0x24040890) socket$unix(0x1, 0x1, 0x0) 2m10.013233401s ago: executing program 4 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) (rerun: 64) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x1, 0x80, 0x6, {{0x21, 0x4, 0x0, 0x3e, 0x84, 0x66, 0x0, 0xd9, 0x4, 0x0, @private=0xa010102, @multicast2, {[@end, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x1, [{@empty, 0x838}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0x1}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x2e, 0x3, 0xa, [{@loopback, 0xd}, {@rand_addr=0x64010100, 0xfffffffd}, {@private=0xa010101, 0x6}, {@remote, 0xcc3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xc9, 0x0, 0xb, [0x8, 0x2, 0x100, 0xe, 0x80000001, 0x16d]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@delqdisc={0xf8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0x1}, {0xd, 0xd}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xfe, 0x40, 0x100, 0x2, 0x7, 0x100}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x6, 0x6c, 0x0, 0x2, 0x5, 0xfffffffa, 0x9}}, {0x16, 0x2, [0x2, 0x3, 0x9, 0x2, 0x7, 0xd, 0x6, 0x9, 0x8000]}}, {{0x1c, 0x1, {0x7, 0x8, 0x4, 0x2, 0x0, 0xa, 0x0, 0xa}}, {0x18, 0x2, [0x3, 0x0, 0x3, 0x7, 0x3, 0x2, 0xd7b, 0x5, 0xff3f, 0x3e]}}, {{0x1c, 0x1, {0xd, 0x7, 0x7000, 0x40, 0x2, 0x4, 0xffffffff, 0x7}}, {0x12, 0x2, [0x5, 0x9, 0x4, 0x3, 0xd01, 0x2, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1a3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 2m9.969113017s ago: executing program 4 (id=1434): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES64=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff000000ea30b9247b8f334200", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000d000000000008001f0008000000"], 0x4c}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x3, &(0x7f0000000240), 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m9.837997452s ago: executing program 4 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 2m9.814229656s ago: executing program 4 (id=1437): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 2m9.777895446s ago: executing program 4 (id=1438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r0, 0x0, 0xf69}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1m58.13599218s ago: executing program 33 (id=1399): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1m54.24213524s ago: executing program 34 (id=1438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r0, 0x0, 0xf69}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1m9.085806107s ago: executing program 3 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x54, 0x21, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x0, 0xd, 0x56, 0x0, 0x0, 0x4, 0xc}, [@FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x80}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) 1m8.96652223s ago: executing program 3 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1108905, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r8}, 0x10) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x80000, r5}, 0x10) (async) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x80000, r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00ecff", @ANYRES16=r1, @ANYBLOB="010027bd70003829819a690000006ad53e24aa1b080054ff", @ANYRES32=r9, @ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x40000c0) 1m8.595112482s ago: executing program 3 (id=2348): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x3, '\x00', 0x0, 0x0, 0xffffffff, 0x2, 0x40000}, 0x50) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="f55bc524ad63", 'veth0_virt_wifi\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m8.510452933s ago: executing program 3 (id=2350): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) 1m8.189579803s ago: executing program 3 (id=2356): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x74}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 1m8.116355s ago: executing program 3 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x54}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg1\x00', 0x0}) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="4cc8a360b9ad8099aba6d28257dbed279de3585d0f7f6c234c2d46f5"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xea}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 53.414010098s ago: executing program 2 (id=2598): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x200000000a) accept4$rose(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 53.212735645s ago: executing program 2 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r2 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c9c82abd06000000000000000000080003005658bc05afb90ed780a2b2cb7a7b2b85aaa35326822109ae202b85e74352598925046884144780b36e8e6a614ed4dd654c21b8d7447e25c8551b88518440e52b880a602222e1bf4188ce8f5e25716b95f9ac873e3ff1eba13b90e338fae850b89eaec0cbf0534b53004ec573a46cfb32980d8eab1918336673538360b2b36d8a7ae38c8c17275f9bd134d90baea0851388a1838e230e4163af6518ccb3ab5c6cb0ae4b58cca8db9fc7cfaa9468153bf28ee0c5f78aa08dfaeb9725107944830053444e2405cf6fed55e400"/238, @ANYRES32=r3, @ANYBLOB="05008a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004004) 53.057469953s ago: executing program 2 (id=2605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x30, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}]}]}, 0x30}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write(r6, &(0x7f0000000640)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r5, r7, 0x2, 0x100000000000003) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x52, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair(0x1, 0x5, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r14, 0xc88719ede475f2bf, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x400c008) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r14, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x400a004) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', r8, 0x10, 0x80, 0x5, 0x6, {{0x19, 0x4, 0x1, 0x1d, 0x64, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @multicast1, {[@generic={0x89, 0x12, "e54e87fa210a5f7885a3560f1fafac81"}, @cipso={0x86, 0xa, 0x3, [{0x7, 0x4, "ce87"}]}, @timestamp_addr={0x44, 0x34, 0xc, 0x1, 0x5, [{@loopback, 0x3}, {@remote, 0x7}, {@rand_addr=0x7, 0x8000}, {@local, 0x1ff}, {@remote, 0x4}, {@private=0xa010101, 0x4}]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x54, r15, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r16}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40240c4) 53.030667886s ago: executing program 35 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x54}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg1\x00', 0x0}) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="4cc8a360b9ad8099aba6d28257dbed279de3585d0f7f6c234c2d46f5"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xea}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 52.603883544s ago: executing program 2 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) read(r2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000100)}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 52.443891476s ago: executing program 2 (id=2613): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a17000001"], 0x20) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 52.287973637s ago: executing program 2 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) (async) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10060, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000140)={"0ffe0ec524346b2c4f30448f711b40a0", 0x0, 0x0, {0x100, 0xc5}, {0x189, 0x1}, 0x7eb, [0xd6, 0xe3e, 0x4, 0x3, 0xd3, 0x8, 0xc28, 0x1, 0x7, 0x4, 0xfffffffffffffff2, 0x3, 0xfffffffffffffff8, 0x7f, 0x8, 0x5]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000fc0)={{r6}, r7, 0x1e, @inherit={0x68, &(0x7f0000000240)={0x0, 0x4, 0x8, 0x2, {0x20, 0x4, 0x0, 0x10, 0x4}, [0x8, 0xffff, 0x7b, 0x9]}}, @subvolid=0x1}) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$802154_dgram(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r5, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x356}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x38}}, 0x0) 50.707725459s ago: executing program 0 (id=2635): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 50.550338528s ago: executing program 0 (id=2637): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@can={0x1d, r1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="adcb99405268050c9a7be53037200d8623a71fac3176a804553b96b889387c463b194c71", 0x24}, {&(0x7f0000000140)="3b04cdf8", 0x4}], 0x2, &(0x7f00000001c0)=[{0xf0, 0x111, 0x91, "6145b200e6335b62f4027dc42fe01a3dda1efa44ffdb26630b3efd43bb218d0130b5a8db5c5feea3619db3fe8dd601e09d0ef9d000d3f7aa9eb20724600036e2658628ec53ea1ebbd366929f9f1838d3fd320ebc9f8d323be371996738ba49b908487d7ac182829858742a4f495cd5ca6a54ac6fb6077b074546478a42a9a6312b6f0f3c6238d006808756e2e72914afc739fc60c12dc18da775b72e35af2a7d033734af87803ba362591182497307508edd814e7c36ffa1194f30533f602a6b7fbfb170f67958c7a48faf258194feb58738ca91b06d637c91b448847f4250d2"}, {0x20, 0x126, 0x200, "2868fa6d0c9f738eccc4b7971e"}, {0x68, 0x115, 0x10, "2623ce4c2810a1527762588f43a384e3438295d732cde6f037a265574016bcf4001b6a682cd6d6175543e9951fb0c18f13d0f864510e4eb2045662b06235f8b7c35309b4d44b801f959f1b6a43e21b6ba4c0"}, {0xf8, 0x104, 0x7fffffff, "61d93494a977aeb39d01e3ad2cc7592a5f51a68abd33a515c3c20def1150cfc3a1f2dc03f80b7589a78e7842a46e0629007b27f30b298cd68001126f2bb1b9078444eba9acf1b4b87e387b8356440e702a0d1c2d9cd3d5296d273abcaa8f43486f47c17ac9d310103ca7287ad067939577b58c438bd66412bc720c083ddebb2971634c9b98092b6fff4549b34254bd2fa83af40b147454bf56820aba9054b2e994600eda89a27b962c1575bccca4aa1a1cebeb6775365235ab1c37a899789dc9c72b03f0b30b8036222286f02b9dd38652d54171639d6d67dba41005f323f4d2bbe0373afb452b1c"}], 0x270}, 0x40000) close(r0) 50.489968368s ago: executing program 0 (id=2639): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@empty, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x1, 0x203, 0x7fffffff, 0x1, 0x84a, 0x81, 0xc}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x825}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x50) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r5, 0x8000, 0x4, [0xb4cc, 0x5, 0x8, 0x7]}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000440)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4004030, r6, 0x3487e000) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendto$inet6(r2, &(0x7f0000000500)="8e9ab0ed2b1535", 0x7, 0x24040131, &(0x7f0000000540)={0xa, 0x4e20, 0x5, @mcast1, 0x8}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000580)=0x10001, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000005c0)={0x2, 'veth0_virt_wifi\x00', {}, 0x7fff}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000600)={'bond_slave_1\x00', {0x2, 0x4e20, @loopback}}) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000680)={[{0x2b, 'cpuacct'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}]}, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000000900)=[{{&(0x7f0000000700)=@rc={0x1f, @none, 0x2}, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000780)=[{0xe0, 0x102, 0x10000, "be7848efb727e655f5413c83e1eb5e32541ebf19d641df202883b5191b393df52958a7ae70149e2985a72b53dd88061c0fbc2cd85e5cfdb319123ec14da3a315a4d30c11dcf9d74051c789a68323d93c41e51097dac30c15a1174f433db20f362428cc373f7c196ee1f8a99635a0d6ed192d8df1fc86a823608b4595b0685ea6ca67356c894e1bbd39e8c22cbfb835cad0217d174b0f86a8b24901b50bffe89bd324a150e410fc5ab48b73139bb6098aa7f24f50ee53abe6b14ce655b60d61deeca97c35d5ebf5d015c847"}, {0x38, 0x110, 0x401, "3c6879ec1f1612bf2a093f12d95c4b3ec10a165c564f8ef37dd5b627e273f5fe636a35"}, {0x68, 0xff, 0x100, "bb5383c97fb4229ed0221ae0b8197825d79b471bd9b06f52c70299bf1b630f985753cb76b1588ba6fd877dbfeafc54857fcdf496718a048a4a3fbe886b8565c1176f824502687423663a484666691e23baa1c49228ad5e"}], 0x180}}], 0x1, 0x800) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r8, 0x1be09000) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000940)=0x7fffffff, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f0000000980)=@srh={0x3a, 0x8, 0x4, 0x4, 0xb, 0x70, 0xfc01, [@remote, @local, @loopback, @loopback]}, 0x48) ioctl$sock_ifreq(r0, 0xe, &(0x7f0000000a40)={'netpci0\x00', @ifru_settings={0xd8dc, 0xffffffff, @fr=&(0x7f0000000a00)={0x7, 0x7fffffff, 0x5294, 0xe, 0xcff9, 0x0, 0x4}}}) 50.321598509s ago: executing program 0 (id=2641): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x8, 0x0, 0x6}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x1, 0x9}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x702}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe76e, 0xff, 0x8, 0x400, 0x101}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) setsockopt(r2, 0xfffffdfe, 0xc77, &(0x7f0000000580)="f23ae1c29ae3c8187674506bfcc77504c537400100f39110a90895237919c1a7bef9abdd4a7162b59f6af60b39161fefe219e9d866240b2b52819255ea5601fcc74f831f63669526b91d93a096ca69850c9e6be37e35048588cc3ceb5092921c2ed2a3373db23c1eb9abb579ae76d4a6ae7e06d66cfbb4d4e7e97c8935e0fd9002ee1ecc7371bd9bb7e61c9168d7654df914c438db69d70e386a86572b98ce32bec15f36dc5dda7236bc333f4a56cff4bcf2f448ef222bbcd7c18dd449fe0d4bc7ccb0911e5bacb409fedb3b492ed7fa147aa51676", 0xd5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="040000000800000000000000", @ANYRES32=r7, @ANYBLOB="7daa71e0b3a017694dbd7c4020023f952b21f697c0646af2d8ffec724f929f0adc40f9f5a4095597927a71605de73f6e3df521ddf8efa202f232cf3ae6744490d9d7148542e6a8cad81841aad0a880840d2694727b737b242715fb35890eaadb76eedc62e39b54a1667630020fd6274125ece77b7069b9d4d5691a6f91eb4a0999d8fa71eaff69a8c58c5f57", @ANYRES64=0x0], 0x20) close(r6) mmap(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x1000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) write$nci(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="40000700000000000000b0be16c1fc87b951aecb817e2e000000001a001c23fe1a2fde3e2bc22d24769ea93872943577487fe25cb428895c7710f5ef580f35bde6fb36fa376d4292ba9b12def5d1984c27ba51581b46447248ce7697838d6c0384fe7378f5e53befed00401d5ccb5267f67301e1ed3ff52471145f2ff7e2e20a3b78d0bfc31c01f8d0472d283dd23501a72f2958edb2dc2d25f62c87b08eb74f3e67b77461078f64e9ee2b609a908dd007fd5eedc0"], 0xfffffffffffffe13) 50.131279695s ago: executing program 0 (id=2645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000aff8d00"}) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@private2, @empty}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40c4) 49.984577419s ago: executing program 0 (id=2648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 21.789269954s ago: executing program 36 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) (async) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10060, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000140)={"0ffe0ec524346b2c4f30448f711b40a0", 0x0, 0x0, {0x100, 0xc5}, {0x189, 0x1}, 0x7eb, [0xd6, 0xe3e, 0x4, 0x3, 0xd3, 0x8, 0xc28, 0x1, 0x7, 0x4, 0xfffffffffffffff2, 0x3, 0xfffffffffffffff8, 0x7f, 0x8, 0x5]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000fc0)={{r6}, r7, 0x1e, @inherit={0x68, &(0x7f0000000240)={0x0, 0x4, 0x8, 0x2, {0x20, 0x4, 0x0, 0x10, 0x4}, [0x8, 0xffff, 0x7b, 0x9]}}, @subvolid=0x1}) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$802154_dgram(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r5, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x356}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x38}}, 0x0) 21.789147783s ago: executing program 37 (id=2648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 16.269022142s ago: executing program 6 (id=2754): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) (async, rerun: 64) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x83ce, 0xff) (rerun: 64) syz_emit_ethernet(0xb4, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x9, 0xa6, 0x67, 0x0, 0x2, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}, {{0x4e21, 0x4e24, r0, r1, 0x1, 0x0, 0x9, 0x60, 0x0, 0x0, 0x1, {[@eol, @exp_fastopen={0xfe, 0xe, 0xf989, "5af24b56711e57104fbd"}]}}, {"37f93cf650fbee91d3c073f869c17f69edbdec43b369b3620f97fe52660325efa027e54de31a011bbf271d8425a30822925024af0acc7f0d06442a6524fb441c23021fc0f1b6c7061ebf1c9714af60e0d843d594b3453fb7e6304e6ec16c"}}}}}}, 0x0) 16.098904345s ago: executing program 6 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f00000001c0)=r3, 0xa1) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRESDEC], 0x37a0}, 0x1, 0x0, 0x0, 0x80d}, 0x2000000c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept$alg(r5, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac141400ac1e00018307dfac1414aa440c0503000000060000000086060000002000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000005140)={r9}) sendmmsg$alg(r8, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="4a7c39bbbefdb621", 0x8}, {&(0x7f00000000c0)="71aaf9626fe7da30e6aaa49e81bed7354157a5cc40f381cc8671dccb1b998eec9594340b7bef735f482be6ba6cb87aca76f3c6d3df6003ab34f1cfea84d2739ea445f166bbc2e5b09496161d6bf459be9ce45aa7d9bd6aa720a79f20385cdc4e19bd800b051385afe226d2aec2604352ede1a7f023c8eb0413614532118f37a9e0a039a4c98b6f9f31943f2389614a399e6f7982bea4b61102297cef20e4bed75c39c662bc9507ee91f2fe077c63ed24c472bcc5effdae37748cb43f379b39f330bdd90d2260c8d4b7cfdbcfef54d1949c90005280a568c438a1244979", 0xdd}], 0x2, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x1, "c4"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x400}], 0x60, 0x4040845}, 0x8490) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) recvmmsg(r8, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) 14.174158295s ago: executing program 6 (id=2761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r10}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x1, 0x30, 0x6, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "cf005e895979fa26"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x0, 0xffe4}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f0000000280), 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xd8, r13, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x7b}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x60, 0x115, "bb75a0182f318672c51632a948d719947a66ed0bd6a0760dec53cc4213b9e70d6b6471d75165959fe6738696ce5d786a825d115dcc0f31b9a1cbbae2413c1e8b72e4beb30d4888b5b437c3f58098d3946ff54bbdc73b9d52923bf94e"}, @NL80211_ATTR_PMK={0x3e, 0xfe, "d47d8c3b274988ba1e150c6ab46583fd9e4e53bb3c6bc9754eee21c58708ac2edfcffc335d09f3d8202bb98da07c37a57a8d2c7a23c425a16c01"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac02, 0xfac01]}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x8801}, 0x4000805) 13.802482115s ago: executing program 6 (id=2764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x400000, 0x3}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x400000, 0x3}) 13.751383347s ago: executing program 6 (id=2766): socketpair(0x15, 0x80000, 0x1e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001300)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b07cec4e06a0219b97924e6b9180ea16b5601d0faa559647fafe396cf90409eaa52bfbe3ddae9fcd50b17a40f0c431ba8f81a8d1b242b11efa365ebb07ac9e10b57ce406df9095d0a942e356024fc946103d29b187cb01b5b268f12501c428394cbb0acab8b28c24b5658f985af6dbbf9d9a10b3cbe6710c033b039f3fb9aa329fcde3ded9b810049cfb6bb015732b78ff763ea3d2533874cd5c3bd3b2afc41c96619305815b0468d708063681c927eacc57bf9ed8b3db2965e713b397ba197f7074bfc28654f6eb051773a8ca28f381026ebf993c5141a5125b5b9481dd0ce5af467751d4b6250b049e", 0xea}], 0x1, &(0x7f0000000200)=[{0x1010, 0x118, 0xffffffff, "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"}, {0xd8, 0x10f, 0x92f7, "b79cc09d990d3f54fa178bdbb9d2164d9d1ddf60d8d5b379936f3e99e738c75ed533a7db400a9bad909897334ffe480dca0978ac2a6080e54a23e7224d87dbc91ff39b54df149137f1391fcd49190ee35c9695de1f9d538aeb3a07d99436cfa29433dd50382dd396b00d2222f56b1af1e1d503ae216b9c58290ea2e81bded0b9e7015fd81c8f09be7d0c6265864e72d92a3239261554a40d4cd02cb2f43b5da28a4e67353f11f55cff57d7d135328a8a59168a77a25993f67fe42111a5f2bc7c1227"}], 0x10e8}, 0x20040010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) r3 = accept4(r1, &(0x7f0000001380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001400)=0x80, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001480), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x5c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = gettid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001680)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0, 0x0}, &(0x7f0000001700)=0xc) r10 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8) r13 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001880)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000001980)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) sendmsg$netlink(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000015c0)={0x44, 0x2a, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0x34, 0x143, 0x0, 0x1, [@nested={0x4, 0x7f}, @nested={0x4, 0x131}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@mcast2}, @generic="fb59e71a0dd0d40cda2cb1896f7811ec82f0bed7"]}]}, 0x44}], 0x1, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}], 0xa0, 0x20000000}, 0x24000090) sendmsg$nl_route(r3, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)=@mpls_delroute={0xbc, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x0, 0xff, 0x0, 0xc8, 0x2, 0x800}, [@RTA_VIA={0x14, 0x12, {0xb, "018c9a1fa4f732ed740762fbb5a9"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0xf, 0x0, 0x1}, {0xb7}, {0x4afe, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x20000}, {0x6}, {0x1, 0x0, 0x1}, {0x6}, {0xff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xc2, 0x0, 0x1}, {0xf9fc, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x565c, 0x0, 0x1}, {0xb}, {0xa, 0x0, 0x1}, {0x2}, {0x5}, {0x5, 0x0, 0x1}, {0x7}, {0x7}, {0x9}, {0x367d, 0x0, 0x1}, {0x7, 0x0, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000000) connect$pppoe(r0, &(0x7f0000001cc0)={0x18, 0x0, {0x2, @broadcast, 'xfrm0\x00'}}, 0x1e) sendmsg$netlink(r0, &(0x7f0000004040)={&(0x7f0000001d00)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004000)=[{&(0x7f0000001d40)={0x22bc, 0x2b, 0x400, 0x70bd28, 0x25dfdbfb, "", [@nested={0x9, 0x77, 0x0, 0x1, [@generic="a30a3b7826"]}, @nested={0x1a0, 0x82, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xa0}, @generic="59c35a9f39421392e93acbc6b5ef9c4b91878d5244f3273c375aef8a2acbe501af224fb9b49452e3ba05022eb94fcda241ed48bc5c34a92167f11440079452a1cfe8b043ef144b124587e7f77264ebdecc259ee8cba9388ed44c24577f0e6156cddb081fb2726b95aacbffbbafc1a9ba9e86493a7c6a7bd79c8671d15fa89a78d2f6306187ad9a5c010abd5d43ef8905531988af7eaa297b83a3f9dc8e9f6131c6549c7f9a4621529e5de030fd37f2b2d2d057e857aea0405cd06dfaf1d5b7b846c78b0bf374057a6f4152e115440fc55ce2b7ed879d0ef7f72ef67a0c969d46418a718ebf5bb2b80e53cbfe0f72f7da2a8b444eeb14036cf8999a41", @generic, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x76, 0x1b, 0x0, 0x0, @binary="6fbf3e643d6fa0a9f41aae849f03ce8b1d83fb150c218c242cf8337573ab9d7b9cf7e5b7696d7505d875296b625ed4c8c1eb9431d5443e103a2db8b98d97c0f413898c0f09e2865c02d6bb251eb95971c65ac947b0e8c64b8ed26d633b30935b443fc5d7ab10b17f05ca8aa5d04846b35be2"}, @nested={0x4, 0xda}, @nested={0x4, 0xe3}]}, @nested={0x1069, 0x104, 0x0, 0x1, [@typed={0xf, 0x90, 0x0, 0x0, @binary="41a993a7118a8c9a8f1cc9"}, @generic="f9a7b108f3199e4b441fd252df348ef749534d0e945eb7bd2132e31d793153bb3e1f5f1ee4e7c5e6edfe10de379731f5b9a7a618ae3dd99ecc", @nested={0x4, 0x30}, @nested={0x4, 0x10a}, @generic="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", @nested={0x4, 0xde}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3ff}, @nested={0x4, 0x36}]}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x80000000}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @generic="7dd9f76294463d1b45c1e4a03b1f1af4a7e0314c9c99b1be43eb5c3fcad7c8477d63c131b5d52a511e300a8f9014ec0ddfa1bcfde93d2abde5eb64806810b2", @generic="0479d26132cc6351c49a9abe3d28e6121ed1a33b27a871b4b131d235084755e972160cc072fa5c7f799bd1915a288a83a2bdc90834a481c6e030867473a8bf", @generic="85664bf87bad9d073a6c249272b2cb7fe41ff161bbcc46c951be2a6e34a85526a33a645eb719626962c8f32b4f13d8acaf934621e2a577c98a6142b3b2112bcd9627da3ae62411be8faaea28a6deedc02221e9e4db5cc0e7ab16f231165933bfc428df804f7bf1f9cbabf06306699a278b3b0226c380de72be0c638d0e82a789299c11058d36951c1da382b5a247ab22db9b0ec9bbdc9705ccc0c770634cf0dcf23319db9ccd1524063be8a48e2a23875cda3ca3eade48d5dc544805ddac6857db25aaae667802d01587b1e6366a89cad0b57333026cfd802dc1c78e466134e3a8bf5f4c2778e6b819bf8014828c3151c45332a40036c1e2cda39a1ec413ad0a647a7ed392183e83154b5d20b14e97eb4230240625688585121e71b91e490b42efa598495a3db4c7156d8b185a281607657624b50ccc2e01061dcb0c43418846f01a386196ca9f0311a4de47e3bdf79aeb16d7e88acaf3c3516e375d0b2f5fdd2731366b362123f8b75d807221ca2ffc0a266c73d09e56fdc0c44a0bdd36db4ee6e89ea14a0b340fb316b0d6694fb544c6702980c81afdd36520081d503748b7d1190a5ba136d33ba1faeabd5ddd151c8e38134f6618b994b3bb5758e08891a637e1dc53d68267e78ad668fa65b2c556d88ded0f5defbd87ddd6c72fc02ecd1e100dd0b9f5e60d39a048b66e6f77add07c597ea23784b7b190e206fd7743bde726eea450d50ac651f6b9b179bf811096488e3763bff799a794c890085fb5c7694c74fd8857ea0220444f4658cc3d1aaf7e164e0afe0c6e87fc1db5e101cd3f22c7d87181348568ff9261465690e5fe514f24beb92876fa2677844c9dc19aaa7d00370e539527d12d307601aa0fd7ae43fd1893f1387cea74b6e1cbb41b76f1d2366e85238c3208b9c5b4ef9a1fb6e28be12c098146c1d4be70f6c963e7951d4c6ca0ab10a4d9d88c7e4f49affb3ef76bd8bbfde5b8611d7e52932b0116909dd9456db863ca5811843fa41e5ec17ab01ce23a07a0d3b5f425f3ed64777d0c3ceef3e9927a45f30bda2b608b6a766b50a8b91ed78b958cecd9fa67b919bb5f549f0496341a6f4da9bdec798795289bcb19c163918f2f1de0a2a63fbf8e2628d8ebbbf23d9edcc2c8ae2f46afc773e880971fc0a8fff4556b30e10bdd8dba0020c36edd637582e4c488477c31376d331e0475f97d72b7f66836a32d7f0b6a3df062cccdf851d167fa1072d5a5fdeb5886ecad253d34bb1aade34ba2301ff31b1a9ee99662ed2fed4300e242fa26dd317d56495b2492f0bb340fd791c033dba7fcd2a5198ea04be6c5e5624e3dad20df300862438835da979d2afab5ad55de5a1b1e9d0e273307db59d5dbd2064ccc468ca700b1e088022155d2498ab0fc959dc8960581db52ab08c4a83ba4c4cec73251025f1c695b9442c671fb347ddca1bf2322c1c37a79c269c78dd3e42516f7d07ce2d818e69b3229e15c7944d1671db94202fb9eb6681296056a790f392440eb7fb079a8029a8d9a4aa684f7756ff6400790a5ef7a9ee6018f0b79987a4d0467d19d1cec809bfa3a95546a4e7aa97a2b1a45f31a4a527d7e485fef54a63f8c7ad339f10430b8496b0e8ed803dd05b3b3c2d361aaad951fbe3bf23392fbfc5d0eca98b537a060f99d753f1d9723fbf31c54442fbbdc581759bac7701de85119daf94bf764d3b616450c3d6aafebff48ca5c303f70961d5dacc5cda1fb5fbc2c8c9e193731005fb0f25010b7a78621c2bd18c31585d46dbb0ada1b863824cfb27728aac20f0222147fc6359e0507ac63e47ebda20a2c0e356dcf45c044e3791a992afbdebfa933dae0e71a21ffe63ba794aac14f917bb0f344ae210197a393e1cdd6243d033e8a1e06bcf858de87b6317cda72990b22488d997476061061ecdb47e9c0af7d7b0f2bd2db897332b235ac5807d6345106f0e9a3f782cef2e3a2444545dca885aa79705d21ee9eafe2cd6764668e2c2fa20d7a11193ed487ca51ee344be1940aaaa2eb8aef1cfd1020b5fd7ed1387618ad2345be26bcbc4ecf912f1220ca3eac2d944e808f5ef4f028528e0a3dc518efb5a51d10557f1210add757ceb709567da552370b901170d11b53d8472b87af991f2f4cf3f23352b1cd64524014621f3917c528f019b1ad476c0077ae4acdc451af4d08da652984dcb2288b94ede0012a3f07a6d298c9fa6e99c1d436b8c80a06f3b10f34b5c3ec274bb281343caa73301a7dd24916f7abb1943830aa63dba51856e992e3aff89d1dac4ee9827f398f0367b78a540a70aa84ed03abfe69ab842af63d79f260ae6e9848a906293bdfee1aed3819ca0071c69f59015b8748407a5eedbc1075c89afdd7d423b9e615df372ec92fa7c4b89e354af7c191f5c5f1d00ea890a47a9668b5785d241ccf1cee25f6b4a75ddb13910a36f849bd4a5714e488feaa1296df7eb29b30b4cd61432fc949a7fe102c9f2e82f015608a1aa218b40413c41172fdc3a36bcd7962a2e0e0bf50fa18cdc1330fcb76adc081a785431efb922f1ee3b78acf969885db70fa42329707c5931517cfd86fdbfbf3e7c42d5198479db36ba039c55a2bc64e7350eff90b65a3a360456d6a73490e709af85230479dd688ac649d30d08146b0585526eaa83a6a6958184dfda4c9103267402144bc129d255999cbb48dfd079cd6fa486a2e5dd11d600d81ae54d4f03eb1ea8a706acbe07cc7ec010969323bce32ab8544b9e80cc3cd6e2178848e05a09459afeb5a7656c91c3abeaf9736d2087ab5756e4b1ed3637f040a9a67ae0a7d23a550402be69d4a555de183eed83c8f0226ff998f026e0833857d2e9568971934f06f5e6c5722102a6b74b64d410395d5fb36235fa6fe4f008ffbd3c420cbf734db56f96c733fd7f37eef5e9a08dcd2a171c3ef4b90e1afad41ab7af7e9278f18361331e73d25d6e99429df854732caaaf11baaf7ea7fa8447c100ae0ad030e79faff88183ab2979593981e37d79c4f84fd178b470cc6c6a15e12e59cd1f8f5fa2619779af54245ce829c2ab0cd54a41f48414b84c4b870bd2393394e4ed23e549e054e5ddf6d06d323f9a9f90756247a5c5dbb8ae79d2993be97b39da263e6320d519e9aa37aef72c50b3e25d377881fcee9b2531201aad38ce4429c9ae2d071253a9f658997c6c32e73a3e311b533b803946a2d6400684ac62481dcef34c4d843a15e874b12e3d0ce825502b8217e2e13289d279cfee6c8c8a0bead0ed3f85ac7cc45cbef4b79e569457331e83d9a1322004dad14d11aeb85892656e4c5262ab6564cedf6a2778e2cf346aaacb689d347ff5dd9e64e527517161af5e6d14d6cc3a51fbebbfcf2a507207cd8590fa6ee59ba4f82310774caa55e0eccf85843d4c71b131e772ba97e2c2da87e22ac69f03c59b17f5f89585c9e5b0c05abc03c694c99d99321782410f7e8ed64159c458e439810b40082cd4b408e6cf20877f11ccc8ca559606f4a8e31ef6834e452bb3b58f8fad8050cd308c0c2b0073506dfc94012a5c5f0375b449f407240a437b8cbba9068fd37a6f8d345dcc777d34f661e4373fe360ee1c8544cd08eb417be66705e875a47930fdf51f14707e40758b5d8ddff82137e651a21877838f580164daecf3618639f52cb7eef04ac223c66614063632c344b5f2677cd0877ff9374c74d294fe54e5cfed6fd0c5a88af42c5ea7942a56cb4fbf778bde9cd635bf87ba748a3e605c6bc0bfd82a1dbe49ca3514382455326c3c109fbf3ba04f817a8cbfab498b767a3ff26d8eb2aa72591a5b2c49f036e40efa53672ec857ee05338756a2d84f790c413c9bca02101c99b682316408eccb14a67971860e35fc5448e57fbee3358d4b21f2711a8a1178b392dd94de255d093ef1b4adb56a5ea727d5cd925270a8c96697d60f47ed7d88fc013e28b57d008ed476a3e7a1bcdefd6cecef8cac27cfefee5d3377587ecff6d3017fdf074c1fc21fdc28381a45d2f6cdb5c907883c1905295152939a605ca14d2d7518873e86e9ca1fa6615f9f192e8bdd76f1e64d4ce909034b3aaed9c4ee56733574c0aee88d6316140cfa47f625c41d0c1f4fea2e0cd08b2e2c0415ea87b722ef0d66f15e8b2f41136f066c7150ccdda3e65668392003b94dcf4807ce05adddccff5b00ae4a55d4677b504de7052d2482e850b9f6048273df7ac8903a073c72585e22ed3a4b64cc0066fc3c19dda23aa0e1170fade4fe252db62bdbff22bbe9dd22bc20a47774bddc9a53dd64995aee596c9893b0750f37973a67ab1b2ef1e3d994272c0e420b7e1a171ec67c53da55d5871cff0e0bdeec93789baaa3ae2de45bf14974f21585e551dc6a67654345182d339486dbbd4260a958b42670d37a1e13b59b896675542cc706dd8e7770ab809901c4203506cd348f23a5bd6b80abb0d3e8e62d8d2049e72fc08f6bd2a02fc259ac7aa9249cf69404192c1eb8746649a869ad1fd25f34b6dcd0347b9969dfb887c9fa6a52d4c5247ddb4e06b743749333b7ec9c9afc74b9abb54c189f4e0ee51a41c1efff033015c1c74c25f6720959732a8c8b10b14441fb5b5965767fb6c43cdce8514d86b7257bd88109ea53a7d75ee9057c321a111eb4dcf1dc1b809d3899886c47a72ea7672b6b4cfe5fcdb3b60a935cdf87cf6f529eb602cf992062893a8c7c76a51a833819d4292ed3060a5c87399009ba12a2486e1986d196f7e703540ae48f023d4778566c667bd028d612bcfb58e1900abf071e6ec312cda8a947b076264452cd1d3a2c1ee45b177381e9b95e8ec4bf197d611c30e074aad87d9b3d8010a61d6b8d8d6e783f4f62b5b19fa150f89a6b34791ecc2e5eff15763a2f5120a5b624fba0874a7740811cd69744d11f0871541cf46b85dd7a57353320fb9529f52975a40fcff44a8f0106e5b14469daf0ba7d52194412bc0f424bba9f0568c304ba87e13c726dff6143ed2d92a5d193ce36ec7cd7ca948245025ab7314bcda5413eac35c35ede0cd4bfe1c95e6a27e4891a81fcf30ee28ba934037ce236ae6b5d42d40a433edd57563cc6c592bad76d69a6b209e693af0610330c8540ab4dae393deea837c00e89f575f442e1c436103b98f676fb2402aa49db153b073f7f459f19669f3246318609de31cf8c82dbe7a234866e3b27513ad550aef1c96760c64d8cd08df610d9b7db8412c8bcd99c86f502bb9340df69d8dfa482a7cdeed335e7d457bda512778044dfc28f944dd4ecba0c3b8928679e27f5c801c8673056953f3d881141839f3b8ad5e7d0e404e47b477259cf9b2f9073b661b126b81ae0e484154763f62d5d3ecac7c6b204377f15e2e709bc981952927b0abdbce62a7fcc0e111ba1914595d288fc45df4a64f3aa31ec3b10ff7f041a15640de0ae78abf9d4882db202c4c62eb1afa60cc665612ae66e04284c3e9a36ccccac8d89cf97bfceb73d693f526c201ffa96b46c9f94432a7b57ffb6fcacf0660106918b7b4ca257d2b79dee268f5fa89998d8e101c2dc1526e8c5f1d10c344592fe9448c70f485e475f1996550b8a69b866a94e5090f0d0079f72c6543a5089728c09dc10e481060740031ba74bd054bfcd68ba8ada2c2787df16b4c3713aa312787bd754b40b311cc948c3548672731d3b93b2108ed569ee5705726db48fa025be557c2184f51154ddd75d09a7dfc3192762c6597be97eff59b072c24bbc2de04df0d1555814dc07d2aa43e280a32397d14501b739784d522e101d17231039be2f76cadf8ef8d3b7804ad0f3c9932b2c59cf250843aca441ea3"]}, 0x22bc}], 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000041c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004180)={&(0x7f00000040c0)=@gettaction={0xc0, 0x32, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r17 = syz_genetlink_get_family_id$gtp(&(0x7f0000004240), r0) r18 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004300)={&(0x7f0000004280)={0x48, r17, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_NET_NS_FD={0x8, 0x7, r18}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x5) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000004380), &(0x7f00000043c0)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000004400), &(0x7f0000004440)='%+9llu \x00'}, 0x20) r20 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000044c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000004500)=@base={0x1e, 0x6, 0x7fffffff, 0x4, 0x0, r19, 0x6, '\x00', r4, r20, 0x3, 0x5, 0x4}, 0x50) r21 = socket$nl_generic(0x10, 0x3, 0x10) r22 = syz_genetlink_get_family_id$team(&(0x7f00000045c0), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r21, &(0x7f0000004980)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x56aea5cfa6e6d8ef}, 0xc, &(0x7f0000004940)={&(0x7f0000004640)={0x2d0, r22, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r14}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0x6, 0x54d9}, {0x8a, 0x94, 0xe, 0xbc2}, {0x1, 0x6b, 0x1, 0xffffffff}]}}}]}}, {{0x8, 0x1, r14}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0xb5, 0x2}, {0xfffd, 0x1, 0x6, 0x5}, {0x0, 0xf9, 0x1, 0x3}, {0x0, 0x9, 0x8c, 0xc}, {0x2, 0x4, 0x8, 0x8}, {0xff, 0x97, 0x1, 0x9}, {0xffff, 0xb, 0x4, 0xfff}]}}}]}}, {{0x8, 0x1, r14}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000020) 13.510297255s ago: executing program 6 (id=2768): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) splice(r2, 0x0, r0, 0x0, 0x7ffff040, 0x1200000000000000) recvfrom$l2tp6(r2, &(0x7f00000002c0)=""/186, 0xba, 0x10003, 0x0, 0x0) 8.592645769s ago: executing program 9 (id=2844): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c8, 0x200000f3) (async) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40040c1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r5, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x8, 0xb92, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8, 0x2e, 0x5}}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x0, @local}, 0x10) (async, rerun: 32) r10 = socket(0x11, 0x800000003, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100029bd7000ffdbdf250800000014000180050002000800000008000700", @ANYRES32=r6, @ANYBLOB="3c00018008000700", @ANYRES32=r7, @ANYBLOB="060001000a0000000800060000000000080006000000000008000700", @ANYRES32=r9, @ANYBLOB="050002000200000008000700", @ANYRES32=r11, @ANYBLOB="080003000000000005000500d7000000"], 0x74}, 0x1, 0x0, 0x0, 0x4c851}, 0x20004040) (async) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="183000000108000000000000000000009500000000000000f8525e4d8985b458ce9f69fe6240bb69191e828303943e3f97928c3578de46431c9a0afb1cc324fb8137e9ad22"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 8.430231231s ago: executing program 9 (id=2848): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1a, 0x10, 0x0, 0x1, [@generic="1b547924238fabbdb1371fe6b85fc94e67973f15e7f2"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 7.862395036s ago: executing program 9 (id=2854): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x28, 0x7, 0x0, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@union={0xc, 0x4, 0x0, 0x5, 0x1, 0x7, [{0x8, 0x2, 0xd56}, {0xe, 0x0, 0x9}, {0x10, 0x4, 0x6}, {0x2, 0x3, 0xf536}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xffffff8c}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xc}]}, @var={0x9, 0x0, 0x0, 0xe, 0x2}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x8}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/186, 0xc3, 0xba, 0x1, 0x4}, 0x28) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/222, 0xde, 0x0, &(0x7f0000000480)=""/241, 0xf1}}, 0x10) 7.742462849s ago: executing program 9 (id=2856): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000000c0)={0x72b50f72, 0x48, [0x2, 0x0, 0x7, 0xccb2], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 7.694537937s ago: executing program 9 (id=2857): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x8000, 0x4, 0x6, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x66, 0x0, 0x11, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x55, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x14ee}, {@remote, 0x8}, {@multicast2, 0x3}]}, @generic={0x86, 0x12, "5a8ad27dd0a8d81c6f0e06743f4e544c"}]}}}}}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400002b", @ANYRES16=r3, @ANYBLOB="170a2bbd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc194) (async, rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (rerun: 32) 7.620460121s ago: executing program 9 (id=2859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x107f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xac7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0xd4}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r8, &(0x7f0000000380)="8122c3c8eca94385fc9d62acf8ef047b047e48b104d92739cc7232775b003b0a6ccb057ac7d830901e9e90d7016e2e40f708268e85287966dc1484b09e16156e2f056138f9c861c580b28119c70f8c4dcd5bb0e2efca90ced47379df04830c958c37f46baa392f8587fe1a7cee4728244690b8ce92e9244a342d753c31469f7551056d", &(0x7f0000000140)=""/5}, 0x20) 2.345831196s ago: executing program 1 (id=2926): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @private=0xa010101, 0x4e21, 0x1, 'fo\x00', 0x20, 0x8, 0x80}, 0x2c) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000200)={0x88, @multicast2, 0x4e21, 0x2, 'dh\x00', 0x20, 0x2, 0x3c}, 0x2c) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) poll(&(0x7f0000000040)=[{r1, 0x8}, {r0, 0xa016}, {r1}, {r1, 0xa9100628d1ac9ee3}, {r0, 0x200}], 0x5, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x0, 0x8000) 1.715808206s ago: executing program 8 (id=2938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x1b, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x44841}, 0x200488b0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001180)="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", 0x6ee}], 0x1}, 0x40000040) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000380)="17", 0x1, 0x10008095, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1800000042000701feffffff00000000017c00000400903fe29f83f38d21e370097bbe4e0e4dc7a69a5e91cee47e59e2acbfa9c0541728b92df9d91530369dc32a3c9806fcd06bd46c68f7905d24f4987d98fd4335afb79d4385e123ff57f47707aa9e86db121ea2dbdf115f32e8ceb68ab8afa9050634cff86f09bbd34eb86c1324016728054ddba4b399ffe8875fb1f8b79fc6298d6a5d3c85ba69a7fec739a2cd4d87efefc3e0bd6052b3740a33e004d513bc12bdc041", @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x22}, 0x60) 1.637005746s ago: executing program 8 (id=2940): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 1.534273832s ago: executing program 8 (id=2941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.526093538s ago: executing program 8 (id=2942): getuid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x1409, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0xfffffffc}, &(0x7f0000000180)=0x8) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x11}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8010) 1.465073278s ago: executing program 1 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="d00100004825bc4fa3a0c71f57a74f55d7cc5acb028cf554d56501c9581bfcbba3b5d76b95c250b2bf20a692e14044aff154fc5660c401a47f494cc311f03601dacfc7f7939f7e3d55cfae004f338f0a6fa48f71af187282175103d5aa6cfcfece261e10f1d5b4ff6a9f13ce38c38dcf7681a922cb0ab1a16088422f5f35faaa98d5aec520b19390d6324cea9489c32696e48691f543139342b081b4e2d508b437b154640698cbd5", @ANYRES16=r3, @ANYBLOB="11022dbd7000fcdbdf258700000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x811}, 0xa7cadb7f35d6bf73) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23020000000000000000030004001400019757"], 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x5, 0xfffffffc]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1e6b}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x2004000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00002a004a8f5bf5967a62b81ffc54ba4f337d82677e42247ecfd5fdb98588757364a321730a8ebbcedfa0a064609bcc380762bf666eff19d3bb23f605f5aef6ab467897ada0028fec19cf7db0b1c494f986c3c84eb1714347883db4a2ba790fb26204c625d05430580e6eb166e838987ae672b1b1", @ANYRES16=r11, @ANYBLOB="030100000000000000001a0000000600210061000000"], 0x1c}}, 0x0) 1.305725488s ago: executing program 1 (id=2946): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8916, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r0, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40010) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, r6, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x1f}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 1.074260289s ago: executing program 7 (id=2947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000000000000b703000000000000850000001700000095ff94dc240bd95645ea56968fb7547936c5f38cfd24f99929473bae55e2da62a0b9c0962bdc16f1e0519280d1eaa4f548213da716cc14ffea60509a929fae0887e70f901f352682013f5f733ca92156a15f3fb9bdaf795a28fdca3cfbbde1298d3974"], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@empty, 0x14, r4}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4d01f3c2f13608060001080006040002ffffffffffffac1414bbaaaaaaaaaaaaac1414bb"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="0800009b9043cb1b0a20ca000026ce8c42f6716803bb0059ae945ec3db39d44714b7495eb60a4a87d6845fbf15eca862880fa0d0253521d8bbf686bde5b10e9972632796534a04a17cc498624aba0e01053d322776f59127ee989ca876df9ab6e94295c857db84f314ed57617a56c036bb8b1e3d1a073948674c0e80a943dca3a6d4baf01345dd6f428405d172be8297472834fb90a85f740541dcc4ed422ab3ecd19621fc7056b22663fd7e335bc312c7e0428ddd6f2ecf10a25a94234496ee44fa42e96f63d293e6f59a0557b5374494211df11a326dfa979e918faf9f9b6046f69390eddc86e2c88c1c0c98"], 0x14}}, 0x0) r9 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d40300001600341828bd7000fedbdf25fe80000000000000000000000000002fff0200000000000000000000000000014e2300004e220003020000006a000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0300000090001400736861332d3531322d6365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020020000600000008a2ddc24153bfe4f6bd2bbea155e177f708734a40cfa9c694054144628e5afcdf1c23085cfba60649b8711e585784143a7b798d9d033dfbcb683c6f80199e3ed"], 0x3d4}}, 0x91) sendmsg$alg(r9, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) r11 = socket(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x3, 0x5f5, 0x8007fa4, 0x7, 0x6, 0x8, 0x3}, 0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1400000010000100000000000a38000000060a090400000000000000003209340c0c00034000000000000000030900010073797a3000000000090002007379a7d421c6a91d0fbdd5a0927a320d000000140000001100010000000000000000000000000a197e530cc3d75466a179a6a506e7285a9a00000000000000003c95fe399212656b25e40137fb3780c6351c70c2c20f0a65466c73b8cce1c25488538161117a9d8048b997183e32994568762252a2ac28353b0555ef792a23c814395a662595a550aab2b937e80c0b6644ca2f29b3ab3ee5b8d98d8d1a55924cece2e58d71517c86b509051cc61735f4a73a"], 0x60}, 0x1, 0x0, 0x0, 0x2404c004}, 0x0) connect$can_bcm(r11, &(0x7f0000000380), 0x10) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000840)=ANY=[@ANYRES64=r6, @ANYRESOCT=r0, @ANYRES8, @ANYRESHEX=r9, @ANYBLOB="f91ffc5211435f229d1c355cb6d14603e5c1e1075d90267d8fb2f004be4470386b10bec7aef5550546a157da381676e0134172c9125797c7a1d63dffca38c75c9672a2147eb80bed392fc8d869fc45e8bc3f67bf640feb72cd7f5a96d955c584583cfe3f10c1ea0e0e8b0b4320d3e8f4cb8c92396499be06df9e11bfbdd63355207fef59ac714c32c7b09b46b1d9070bbe4cffc69d67e9275ac615bb995d3de589c40b03a866b1e22c14537fb8dd09f24a2e4c604d9da552cf4a080f9616180b846a9a649edfae2dd36a5da0f407e765"], 0x30}, 0x1, 0x0, 0x0, 0x4881}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r11, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000200000000000000000000025000000dfda99fde4d6973c855316691a7c1a37c02707b04c7b9a935a659d21464efe7f2cc57ce366"], &(0x7f0000000240)=0x49) 1.072259466s ago: executing program 7 (id=2948): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000440)={0x2c, 0x2, r3}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x104000, 0x0, 0x4, 0x3}, 0x20) r4 = socket(0x28, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_newroute={0x38, 0x18, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x10, 0x6, 0xfd, 0x2, 0xc8, 0x4, 0x2400}, [@RTA_UID={0x8, 0x19, r7}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000080)=@ax25={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f0000000040)}, 0x20008001) 316.930472ms ago: executing program 1 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000008000000008000ac1414bb000000000000000000000000000000004e2300000a00000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/372], 0x1bc}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000e90c00000000000000ffff0000000000001c250800000000000200000000000000f8fffffffffffffd0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff60, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0xfffffffffffffffc, &(0x7f00000001c0)}}, 0x40) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x8, 0x40, 0x4, 0x2, {{0x17, 0x4, 0x3, 0x1, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x46, 0x3, [{0x5, 0xe, "dd2d2e664d9c3e1d325776f4"}, {0x6, 0x12, "fd9177d93b4cd8dec361b167cd7f7dd7"}, {0x6, 0x4, "15ff"}, {0x2, 0x3, "ea"}, {0x0, 0x10, "7a444ba2590b06623088f1ec6712"}, {0x0, 0x9, "9ca7ff000000c8"}]}]}}}}}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000300)=0x3429b6d6, 0x4) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@remote, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7ff}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20004c01}, 0x0) bind$bt_hci(r7, &(0x7f0000000340), 0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRESOCT=r1, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 306.732525ms ago: executing program 7 (id=2950): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 178.10715ms ago: executing program 8 (id=2951): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, 0xffffffffffffffff, 0x7bd3f000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x0, 0x0, 0x148, 0x148, 0x148, 0x340, 0x240, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0xe, [0x4e21, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x4e24, 0x4e22, 0xb07, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfe]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x202b, 0x25, 0x3f, 0x2e, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz0\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) socket(0x21, 0x5, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200cbe50d5d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 176.6713ms ago: executing program 1 (id=2952): r0 = socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffda8, 0xfff, 0x7, 0x4, 0x5, 0xb, 0x2, 0xc}, &(0x7f0000000040)={0x3, 0xfcd, 0x6, 0x7fff, 0x8001, 0xf1f, 0x7, 0x400}, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x2, 0x10001, 0xfffffffffffffff7, 0x2539, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) 171.879228ms ago: executing program 7 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) 129.183683ms ago: executing program 7 (id=2954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) 98.794656ms ago: executing program 1 (id=2955): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x370, 0x0, 0xffffffff, 0x228, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x5}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.508801ms ago: executing program 8 (id=2956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) (async, rerun: 64) close(r0) 0s ago: executing program 7 (id=2957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5e976ddd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc939}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56d4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x28008015}, 0x8000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): unknown, defaulting to 1000 [ 164.769134][ T9586] wg1 speed is unknown, defaulting to 1000 [ 164.776823][ T9596] tipc: Enabled bearer , priority 0 [ 164.794817][ T9586] wg1 speed is unknown, defaulting to 1000 [ 164.795033][ T9596] syzkaller0: entered promiscuous mode [ 164.807606][ T9596] syzkaller0: entered allmulticast mode [ 164.830868][ T9586] wg1 speed is unknown, defaulting to 1000 [ 165.008847][ T9618] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 165.043600][ T9618] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 165.066261][ T9618] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 165.087444][ T9621] netlink: 'syz.2.1038': attribute type 5 has an invalid length. [ 165.209802][ T9630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.526701][ T9588] tipc: Resetting bearer [ 165.591806][ T9588] tipc: Disabling bearer [ 165.855646][ T9665] block nbd0: Unsupported socket: should be TCP or UNIX. [ 166.248724][ T9715] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 166.470323][ T9727] netlink: 'syz.5.1063': attribute type 14 has an invalid length. [ 166.597693][ T9741] netlink: 'syz.5.1069': attribute type 21 has an invalid length. [ 166.670988][ T9749] tipc: Enabled bearer , priority 0 [ 166.680127][ T9749] syzkaller0: entered promiscuous mode [ 166.686890][ T9749] syzkaller0: entered allmulticast mode [ 166.745292][ T9749] tipc: Resetting bearer [ 166.753767][ T9753] bridge0: port 2(macsec0) entered blocking state [ 166.760881][ T9753] bridge0: port 2(macsec0) entered disabled state [ 166.770628][ T9753] macsec0: entered allmulticast mode [ 166.776005][ T9753] veth1_macvtap: entered allmulticast mode [ 166.783168][ T9753] macsec0: entered promiscuous mode [ 166.976257][ T9748] tipc: Resetting bearer [ 167.009354][ T9748] tipc: Disabling bearer [ 167.166738][ T9780] nbd: device at index 4 is going down [ 167.168024][ T9777] vlan3: entered promiscuous mode [ 167.302254][ T9790] netlink: 'syz.5.1083': attribute type 1 has an invalid length. [ 167.312756][ T9787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.331137][ T9789] netlink: 'syz.5.1083': attribute type 1 has an invalid length. [ 167.382380][ T9798] netlink: 'syz.2.1084': attribute type 13 has an invalid length. [ 167.529234][ T9801] netlink: 'syz.5.1085': attribute type 2 has an invalid length. [ 167.996891][ T9843] netem: change failed [ 168.174265][ T9863] unsupported nla_type 52263 [ 168.281568][ T9870] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.307126][ T9870] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.437312][ T9881] syzkaller1: entered promiscuous mode [ 168.442824][ T9881] syzkaller1: entered allmulticast mode [ 168.471932][ T9888] __nla_validate_parse: 11 callbacks suppressed [ 168.471951][ T9888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1111'. [ 168.638357][ T9902] nbd: must specify a device to reconfigure [ 168.795083][ T9912] netlink: 'syz.3.1116': attribute type 3 has an invalid length. [ 168.802848][ T9912] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1116'. [ 168.842488][ T9917] netlink: 'syz.4.1120': attribute type 10 has an invalid length. [ 169.045941][ T9931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.205582][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 169.474584][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 169.581509][ T9962] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 169.900012][ T9981] block nbd0: not configured, cannot reconfigure [ 169.958685][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 169.987309][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 170.080242][ T9993] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 170.115091][ T9993] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1137'. [ 170.132190][ T9993] netlink: 'syz.4.1137': attribute type 83 has an invalid length. [ 170.158508][ T9993] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 170.175399][ T9993] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1137'. [ 170.229242][T10003] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1141'. [ 170.252059][T10003] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1141'. [ 170.460485][T10022] IPv6: sit1: Disabled Multicast RS [ 170.799754][T10049] tipc: Enabled bearer , priority 0 [ 170.819524][T10053] team_slave_0: entered promiscuous mode [ 170.825436][T10053] team_slave_1: entered promiscuous mode [ 170.835440][T10049] syzkaller0: entered promiscuous mode [ 170.840934][T10049] syzkaller0: entered allmulticast mode [ 170.938858][T10057] bond6: (slave geneve2): making interface the new active one [ 170.973416][T10057] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 170.983416][ T7974] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 170.992310][ T7974] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.005934][ T7974] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.018213][ T7974] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.340755][T10072] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 171.359611][T10072] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.413806][T10047] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 171.437863][T10082] team0: Device wireguard0 is of different type [ 171.536582][T10084] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 171.658055][T10098] validate_nla: 7 callbacks suppressed [ 171.658077][T10098] netlink: 'syz.5.1167': attribute type 13 has an invalid length. [ 171.714965][T10048] tipc: Resetting bearer [ 171.760635][T10048] tipc: Disabling bearer [ 171.793517][T10098] veth0_macvtap: left promiscuous mode [ 171.812355][T10098] macvtap0: entered allmulticast mode [ 171.837081][T10098] macvtap0: refused to change device tx_queue_len [ 172.079551][T10123] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 172.380893][T10138] wg1 speed is unknown, defaulting to 1000 [ 172.731271][T10181] erspan0: entered promiscuous mode [ 173.505981][T10223] vcan0: tx address claim with different name [ 173.642069][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.723653][T10248] __nla_validate_parse: 53 callbacks suppressed [ 173.723673][T10248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1206'. [ 173.784062][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 173.939491][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 174.034805][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.058434][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.402354][T10225] macvtap1: left promiscuous mode [ 174.407810][T10225] macvtap1: left allmulticast mode [ 174.417764][T10225] v: left allmulticast mode [ 174.422412][T10225] veth0_vlan: left allmulticast mode [ 174.428026][T10225] v: left promiscuous mode [ 174.432962][T10225] macvtap2: left promiscuous mode [ 174.438782][T10225] macvtap2: left allmulticast mode [ 174.451746][T10225] gtp0: left promiscuous mode [ 174.457425][T10225] gtp0: left allmulticast mode [ 174.477357][T10225] xfrm1: left promiscuous mode [ 174.486547][T10225] xfrm1: left allmulticast mode [ 174.492034][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1200'. [ 174.599797][ T66] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.620344][ T66] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.651077][ T66] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.676334][ T66] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.703904][ T66] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.721369][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 174.730516][ T66] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.751110][ T3565] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.759678][ T3565] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.882158][T10295] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 174.921877][T10299] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 174.930585][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1218'. [ 175.128445][T10315] delete_channel: no stack [ 175.141582][T10314] delete_channel: no stack [ 175.278947][T10328] tipc: Enabled bearer , priority 0 [ 175.295567][T10328] tipc: Resetting bearer [ 175.309265][T10330] netlink: 'syz.0.1228': attribute type 13 has an invalid length. [ 175.399055][T10330] bridge0: port 2(macsec0) entered blocking state [ 175.405721][T10330] bridge0: port 2(macsec0) entered listening state [ 175.412559][T10330] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.419738][T10330] bridge0: port 1(bridge_slave_0) entered listening state [ 175.439983][T10330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.458286][T10330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.610398][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 176.224113][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.275351][T10239] tipc: Node number set to 1411571483 [ 176.326016][T10401] netlink: 'syz.3.1250': attribute type 4 has an invalid length. [ 176.345589][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.628263][T10423] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 176.698676][T10428] 8021q: VLANs not supported on lo [ 176.825217][T10436] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1265'. [ 176.849660][T10436] C: renamed from lo [ 176.933083][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 176.977529][T10443] bond2 (unregistering): Released all slaves [ 177.004689][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1268'. [ 177.049650][T10448] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.082445][T10458] vlan0: entered allmulticast mode [ 177.116601][T10458] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 177.425444][ C1] bridge0: port 2(macsec0) entered learning state [ 177.504583][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 177.800095][T10483] veth0: entered promiscuous mode [ 177.826191][T10482] veth0: left promiscuous mode [ 178.261554][T10530] tipc: Enabling of bearer rejected, already enabled [ 178.463963][T10550] openvswitch: netlink: Flow key attr not present in new flow. [ 178.662175][T10568] netlink: 'syz.3.1298': attribute type 16 has an invalid length. [ 178.670879][T10568] netlink: 'syz.3.1298': attribute type 17 has an invalid length. [ 179.504718][ C1] bridge0: port 2(macsec0) entered forwarding state [ 179.511357][ C1] bridge0: topology change detected, propagating [ 179.594481][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.601729][ C1] bridge0: topology change detected, propagating [ 179.713023][T10553] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 179.733012][T10553] team1: entered promiscuous mode [ 179.738506][T10553] team1: entered allmulticast mode [ 179.833967][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.847738][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.863928][T10568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.882668][T10573] __nla_validate_parse: 9 callbacks suppressed [ 179.882691][T10573] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1303'. [ 179.903734][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 179.913493][T10573] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1303'. [ 179.925523][T10573] netlink: 'syz.2.1303': attribute type 3 has an invalid length. [ 179.940112][T10573] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 179.948028][T10573] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1303'. [ 180.069703][T10587] x_tables: unsorted entry at hook 2 [ 180.324163][T10607] tipc: Enabled bearer , priority 0 [ 180.336099][T10607] syzkaller0: entered promiscuous mode [ 180.341595][T10607] syzkaller0: entered allmulticast mode [ 180.369805][T10607] tipc: Enabling of bearer rejected, already enabled [ 180.410723][T10606] tipc: Resetting bearer [ 180.433959][T10606] tipc: Disabling bearer [ 180.516303][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 180.611958][T10615] syzkaller0: entered promiscuous mode [ 180.621261][T10615] syzkaller0: entered allmulticast mode [ 180.629137][T10616] tipc: Enabled bearer , priority 0 [ 180.643573][T10622] syzkaller0: entered promiscuous mode [ 180.657730][T10622] syzkaller0: entered allmulticast mode [ 180.693999][T10616] tipc: Resetting bearer [ 180.706558][T10614] tipc: Resetting bearer [ 180.733809][T10614] tipc: Disabling bearer [ 180.751122][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 181.956419][T10629] tipc: Enabled bearer , priority 0 [ 181.963459][T10634] syzkaller0: entered promiscuous mode [ 181.983455][T10634] syzkaller0: entered allmulticast mode [ 182.036502][T10649] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.077274][T10653] tipc: Resetting bearer [ 182.095632][T10627] tipc: Resetting bearer [ 182.140434][T10627] tipc: Disabling bearer [ 182.238538][T10668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1326'. [ 182.364686][T10674] C: entered promiscuous mode [ 182.368352][T10673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.369419][T10674] C: left allmulticast mode [ 182.369596][T10674] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 182.509693][T10683] delete_channel: no stack [ 182.684839][T10700] sctp: [Deprecated]: syz.0.1337 (pid 10700) Use of int in max_burst socket option. [ 182.684839][T10700] Use struct sctp_assoc_value instead [ 182.709386][T10700] tipc: Enabling of bearer rejected, failed to enable media [ 182.719098][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 182.769323][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1339'. [ 182.810516][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 182.966074][T10733] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 183.020597][T10731] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.042848][T10744] tipc: Enabling of bearer rejected, media not registered [ 183.067343][T10750] openvswitch: netlink: IP tunnel dst address not specified [ 183.313721][T10764] netlink: 'syz.2.1350': attribute type 5 has an invalid length. [ 183.546284][T10773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.628501][T10773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.712529][T10786] C: left promiscuous mode [ 183.727977][T10786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.843490][T10793] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 183.872120][T10793] bond2 (unregistering): Released all slaves [ 184.197763][T10834] veth0: entered promiscuous mode [ 184.207971][T10833] veth0: left promiscuous mode [ 184.824655][T10872] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 184.871054][T10872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.984570][T10884] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 184.995488][T10885] __nla_validate_parse: 12 callbacks suppressed [ 184.995504][T10885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1377'. [ 185.024065][T10889] openvswitch: netlink: Flow key attr not present in new flow. [ 185.111101][T10891] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.125114][T10891] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 185.163232][T10884] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 185.189227][T10899] gretap4: entered promiscuous mode [ 185.194967][T10899] gretap4: entered allmulticast mode [ 185.548023][T10926] syzkaller1: entered promiscuous mode [ 185.558209][T10926] syzkaller1: entered allmulticast mode [ 185.660679][T10932] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1391'. [ 185.964561][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 185.991034][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 185.999992][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.003639][T10957] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.021259][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.045847][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.069525][T10957] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.071072][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.103040][T10946] bridge0: port 3(batadv1) entered blocking state [ 186.114970][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.122391][T10946] bridge0: port 3(batadv1) entered disabled state [ 186.126427][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 186.134072][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.141804][T10946] batadv1: entered allmulticast mode [ 186.155759][T10946] batadv1: entered promiscuous mode [ 186.161130][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.169621][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.179333][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.188358][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.198944][T10957] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 186.594530][T10729] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 186.604033][T10729] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 186.971585][T11006] tipc: Enabled bearer , priority 0 [ 186.982325][T11005] tipc: Resetting bearer [ 187.027572][T11008] xt_hashlimit: size too large, truncated to 1048576 [ 187.965393][ T10] tipc: Node number set to 2870452505 [ 188.263358][T11005] tipc: Disabling bearer [ 188.292137][T11012] wg1 speed is unknown, defaulting to 1000 [ 188.798036][T11039] x_tables: duplicate underflow at hook 1 [ 189.156315][T11074] veth1_macvtap: left allmulticast mode [ 189.162311][T11074] veth1_macvtap: left promiscuous mode [ 189.183563][T11074] bridge0: port 2(macsec0) entered disabled state [ 189.205456][T11077] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 189.216740][T11077] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.225132][T11077] gretap0: entered promiscuous mode [ 189.230670][T11077] gretap0: entered allmulticast mode [ 189.882119][T11116] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 189.894005][T11116] bond6 (unregistering): Released all slaves [ 189.928883][T11120] validate_nla: 26 callbacks suppressed [ 189.928903][T11120] netlink: 'syz.2.1447': attribute type 27 has an invalid length. [ 189.942905][T11120] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 190.800870][T11163] __nla_validate_parse: 69 callbacks suppressed [ 190.800889][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 190.915454][T11175] IPVS: persistence engine module ip_vs_pe_À not found [ 191.044790][T11182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1465'. [ 191.134668][T11188] nbd2: detected capacity change from 0 to 63 [ 191.149525][T11188] block nbd2: NBD_DISCONNECT [ 191.158654][T11188] block nbd2: Disconnected due to user request. [ 191.167744][T11188] block nbd2: shutting down sockets [ 192.371125][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 192.382112][T11236] netlink: 'syz.0.1480': attribute type 16 has an invalid length. [ 192.390709][T11236] netlink: 'syz.0.1480': attribute type 17 has an invalid length. [ 192.409269][T11236] tunl0: left promiscuous mode [ 192.428833][T11236] bond0: left promiscuous mode [ 192.433747][T11236] bond_slave_0: left promiscuous mode [ 192.439697][T11236] bond_slave_1: left promiscuous mode [ 192.445409][T11236] bridge_slave_1: left promiscuous mode [ 192.455345][T11236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.508436][T11242] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1483'. [ 192.520244][T11242] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1483'. [ 192.566151][T11244] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1484'. [ 192.596475][T11249] netlink: 'syz.0.1486': attribute type 24 has an invalid length. [ 192.746458][T11256] Bluetooth: MGMT ver 1.23 [ 192.752638][T11256] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 192.821970][T11253] team0 (unregistering): Port device team_slave_0 removed [ 192.830915][T11253] team0 (unregistering): Port device team_slave_1 removed [ 192.895359][T11261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.903595][T11261] bond4: (slave bond5): making interface the new active one [ 192.911709][T11261] bond4: (slave bond5): Enslaving as an active interface with an up link [ 192.924805][T11263] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.937624][T11263] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 192.963003][T11256] team0: Device ip6gre1 is of different type [ 193.077168][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 193.086613][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 193.532175][T11307] bond6: entered promiscuous mode [ 193.914647][T11339] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 193.926974][T11339] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 193.936030][T11339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1513'. [ 193.993362][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 194.230783][ T1302] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 194.241233][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247881][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615627][T11365] netlink: 'syz.0.1520': attribute type 12 has an invalid length. [ 194.711113][T11370] sctp: [Deprecated]: syz.0.1522 (pid 11370) Use of int in max_burst socket option deprecated. [ 194.711113][T11370] Use struct sctp_assoc_value instead [ 195.072159][T11381] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 195.208092][T11392] openvswitch: netlink: IP tunnel dst address not specified [ 195.612632][T11418] sctp: [Deprecated]: syz.0.1537 (pid 11418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.612632][T11418] Use struct sctp_sack_info instead [ 195.901612][T11436] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.060719][T11445] __nla_validate_parse: 3 callbacks suppressed [ 196.060731][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 196.113515][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 196.209444][T11454] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 196.285310][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 196.383268][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 196.652500][T11478] xt_policy: output policy not valid in PREROUTING and INPUT [ 196.707455][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 197.347659][T11524] netlink: 'syz.2.1570': attribute type 32 has an invalid length. [ 197.355837][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 197.410968][T11524] bond6: Setting coupled_control to off (0) [ 197.491100][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 197.501217][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 197.511526][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 197.521082][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 197.656403][T11539] tipc: Enabled bearer , priority 0 [ 197.705096][T11542] tipc: Disabling bearer [ 198.088118][T11576] bond7: option lp_interval: invalid value (0) [ 198.095039][T11576] bond7: option lp_interval: allowed values 1 - 2147483647 [ 198.104472][T11576] bond7 (unregistering): Released all slaves [ 198.268817][T11589] policy can only be matched on NF_INET_PRE_ROUTING [ 198.268846][T11589] unable to load match [ 198.343129][T11596] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 198.388828][T11600] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 198.396875][T11600] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.439479][T11603] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 198.452306][T11596] bond7: (slave geneve2): making interface the new active one [ 198.462243][T11596] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 198.471276][T10729] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.483321][T10729] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.499239][T10729] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.507899][T10729] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.878665][T10271] IPVS: starting estimator thread 0... [ 198.887115][T11628] tipc: Enabled bearer , priority 10 [ 198.964467][T11630] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.425017][T11667] team0: Port device geneve3 added [ 199.431528][T10729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.454645][T10729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.463976][T10729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.473409][T10729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.497809][T11669] syzkaller1: entered promiscuous mode [ 199.503314][T11669] syzkaller1: entered allmulticast mode [ 199.832537][T11702] netlink: 'syz.2.1620': attribute type 21 has an invalid length. [ 199.841767][T11702] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.852366][T11702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.859928][T11702] IPv6: NLM_F_CREATE should be set when creating new route [ 199.867313][T11702] IPv6: NLM_F_CREATE should be set when creating new route [ 199.874738][T11702] IPv6: NLM_F_CREATE should be set when creating new route [ 199.954271][T11708] syzkaller0: entered promiscuous mode [ 199.960669][T11708] syzkaller0: entered allmulticast mode [ 200.352012][T11728] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.593099][T11741] netlink: 'syz.3.1634': attribute type 83 has an invalid length. [ 200.795540][T11759] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 200.807136][T11759] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.817290][T11759] gretap5: entered promiscuous mode [ 200.822516][T11759] gretap5: entered allmulticast mode [ 201.128709][T11775] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 201.249188][T11784] __nla_validate_parse: 12 callbacks suppressed [ 201.249205][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 201.255368][T11781] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 201.288320][T11781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1648'. [ 201.449025][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.459681][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.468103][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.477788][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.487387][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.503172][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.511618][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.514267][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.519476][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.538011][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.545802][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.587625][T11790] wg1 speed is unknown, defaulting to 1000 [ 201.703970][T11790] chnl_net:caif_netlink_parms(): no params data found [ 201.774711][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.783141][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.790805][T11790] bridge_slave_0: entered allmulticast mode [ 201.798226][T11790] bridge_slave_0: entered promiscuous mode [ 201.806067][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.813156][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.820744][T11790] bridge_slave_1: entered allmulticast mode [ 201.828297][T11790] bridge_slave_1: entered promiscuous mode [ 201.859042][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.870744][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.902896][T11790] team0: Port device team_slave_0 added [ 201.911584][T11790] team0: Port device team_slave_1 added [ 201.940275][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.947521][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.974067][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.989403][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.996932][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.023298][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.110336][T11790] hsr_slave_0: entered promiscuous mode [ 202.127463][T11790] hsr_slave_1: entered promiscuous mode [ 202.133856][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 202.149827][T11790] Cannot create hsr debugfs directory [ 202.248657][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 202.311233][T11814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1653'. [ 202.422961][T11818] netlink: 'syz.3.1657': attribute type 11 has an invalid length. [ 202.505216][T11823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.550242][T11790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.574919][T11790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.587004][T11790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.603093][T11790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.636314][T11828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.697207][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.718113][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.733304][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.740515][T10729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.768023][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.775247][T10729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.957231][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.149590][T11790] veth0_vlan: entered promiscuous mode [ 203.160265][T11790] veth1_vlan: entered promiscuous mode [ 203.190415][T11790] veth0_macvtap: entered promiscuous mode [ 203.199788][T11790] veth1_macvtap: entered promiscuous mode [ 203.217690][T11790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.233659][T11790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.248399][T10720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.258681][T10720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.269671][T10720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.278965][T10720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.339411][T10720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.354641][T10720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.382179][T10729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.391415][T10729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.584669][ T52] Bluetooth: hci6: command tx timeout [ 203.618676][T11866] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 203.627282][T11866] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1663'. [ 203.692639][T11853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.723564][T11871] openvswitch: netlink: EtherType 0 is less than min 600 [ 203.850573][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 204.036227][T11895] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 204.119774][T11897] bond7: (slave bridge9): making interface the new active one [ 204.151383][T11897] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 204.245978][T11904] tipc: Enabled bearer , priority 0 [ 204.302587][T11904] syzkaller0: entered promiscuous mode [ 204.312746][T11904] syzkaller0: entered allmulticast mode [ 204.320815][T11904] tipc: Resetting bearer [ 204.332749][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 204.372148][T11904] tipc: Resetting bearer [ 204.380911][T11911] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 205.220152][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.241042][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.256261][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.271504][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.279379][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 205.667660][ T5846] Bluetooth: hci6: command tx timeout [ 205.887816][T11904] tipc: Disabling bearer [ 205.904707][T11915] macvlan2: entered promiscuous mode [ 205.910077][T11915] macvlan2: entered allmulticast mode [ 205.919926][T11915] bond8: (slave macvlan2): Opening slave failed [ 206.018037][T11923] wg1 speed is unknown, defaulting to 1000 [ 206.415516][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1692'. [ 206.429427][T11923] chnl_net:caif_netlink_parms(): no params data found [ 206.443640][T11958] bridge0: port 2(veth0_to_bridge) entered blocking state [ 206.444629][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1692'. [ 206.461376][T11958] bridge0: port 2(veth0_to_bridge) entered disabled state [ 206.477715][T11958] veth0_to_bridge: entered allmulticast mode [ 206.503208][T11958] veth0_to_bridge: entered promiscuous mode [ 206.511705][T11962] netlink: 'syz.0.1693': attribute type 33 has an invalid length. [ 206.517016][T11958] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 206.562901][T11959] "syz.2.1690" (11959) uses obsolete ecb(arc4) skcipher [ 206.666673][T11958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.687312][T11965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.694540][T11965] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.706790][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 206.719812][T11965] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 206.756753][T11969] veth5: entered promiscuous mode [ 206.766620][T11969] bond6: (slave veth5): Enslaving as an active interface with a down link [ 206.867271][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.876112][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.888017][T11923] bridge_slave_0: entered allmulticast mode [ 206.898384][T11923] bridge_slave_0: entered promiscuous mode [ 206.908576][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.916109][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.925768][T11923] bridge_slave_1: entered allmulticast mode [ 206.934195][T11923] bridge_slave_1: entered promiscuous mode [ 207.005845][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.038931][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.115434][T11923] team0: Port device team_slave_0 added [ 207.142347][T11923] team0: Port device team_slave_1 added [ 207.150605][T11988] syzkaller1: entered promiscuous mode [ 207.157702][T11988] syzkaller1: entered allmulticast mode [ 207.310234][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.318234][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.344637][ T5846] Bluetooth: hci7: command tx timeout [ 207.365507][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.406528][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.413675][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.478449][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.635603][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 207.663435][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 207.700376][T11923] hsr_slave_0: entered promiscuous mode [ 207.726591][T11923] hsr_slave_1: entered promiscuous mode [ 207.733159][T11923] debugfs: 'hsr0' already exists in 'hsr' [ 207.744785][ T5846] Bluetooth: hci6: command tx timeout [ 207.748992][T11923] Cannot create hsr debugfs directory [ 207.872889][T12028] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 207.884096][T12028] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1711'. [ 207.893725][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 207.908279][T12026] netlink: 'syz.6.1710': attribute type 29 has an invalid length. [ 207.921861][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 207.949729][T12031] netlink: 'syz.6.1710': attribute type 29 has an invalid length. [ 207.974401][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 208.095168][T12039] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 208.112964][T12039] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 208.365591][T11923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.391496][T11923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.468982][T12064] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1721'. [ 208.506170][T11923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.540776][T11923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.912949][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.923808][T12092] tipc: Enabled bearer , priority 0 [ 208.962036][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.977980][T12092] lo: entered allmulticast mode [ 208.983860][T12092] vlan1: entered allmulticast mode [ 208.992131][T12092] veth0_vlan: entered allmulticast mode [ 209.006867][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.014039][T10751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.050821][T12091] tipc: Disabling bearer [ 209.080566][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.087769][T10751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.196666][T10231] IPVS: starting estimator thread 0... [ 209.196710][T12105] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.233730][T11923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.305956][T12108] IPVS: using max 28 ests per chain, 67200 per kthread [ 209.425540][ T5846] Bluetooth: hci7: command tx timeout [ 209.486162][T12124] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 209.519907][T12124] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 209.612307][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.826359][ T5846] Bluetooth: hci6: command tx timeout [ 209.836846][T12146] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 210.082236][T11923] veth0_vlan: entered promiscuous mode [ 210.097374][T11923] veth1_vlan: entered promiscuous mode [ 210.110222][T12157] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 210.136578][T11923] veth0_macvtap: entered promiscuous mode [ 210.149154][T11923] veth1_macvtap: entered promiscuous mode [ 210.171371][T11923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.197778][T11923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.220703][T10721] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.251345][T10721] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.261401][T10721] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.271574][T10721] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.402917][T10721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.448272][T10721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.491164][T10752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.513747][T10752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.778046][T12188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.278448][T12222] netlink: 'syz.7.1770': attribute type 2 has an invalid length. [ 211.480527][T12233] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 211.506267][ T5846] Bluetooth: hci7: command tx timeout [ 211.586126][ T5846] Bluetooth: hci0: command tx timeout [ 211.810123][T12248] validate_nla: 1 callbacks suppressed [ 211.810140][T12248] netlink: 'syz.6.1777': attribute type 1 has an invalid length. [ 211.868231][T12248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.898359][T12252] bond1: (slave geneve2): making interface the new active one [ 211.908623][T12252] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 211.918798][T10720] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.935515][T10720] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.947270][T10729] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.962318][T10729] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.154867][T12260] __nla_validate_parse: 8 callbacks suppressed [ 212.154884][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1780'. [ 212.287896][T12263] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1783'. [ 212.299220][T12266] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1783'. [ 212.337123][T12263] xt_nat: multiple ranges no longer supported [ 212.405730][ T30] audit: type=1804 audit(1760931016.794:2): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1785" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=48 res=1 errno=0 [ 212.426069][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1785'. [ 212.460648][ T30] audit: type=1800 audit(1760931016.834:3): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1785" name="cgroup.controllers" dev="tmpfs" ino=48 res=0 errno=0 [ 212.512578][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 212.570795][T12279] xt_policy: output policy not valid in PREROUTING and INPUT [ 212.638635][T12288] netlink: 'syz.6.1790': attribute type 33 has an invalid length. [ 212.796554][T12296] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 212.883104][T12306] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1794'. [ 213.114777][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 213.127688][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1801'. [ 213.164823][T12318] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20000 [ 213.285133][T12333] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1801'. [ 213.294745][T12333] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1801'. [ 213.492150][T12341] netlink: 'syz.3.1804': attribute type 21 has an invalid length. [ 213.584651][ T52] Bluetooth: hci7: command tx timeout [ 214.409500][T12375] syzkaller0: entered promiscuous mode [ 214.422307][T12375] syzkaller0: entered allmulticast mode [ 214.481420][T12388] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 214.494363][T12388] netlink: 'syz.6.1818': attribute type 10 has an invalid length. [ 215.443725][T12403] netlink: 'syz.0.1822': attribute type 2 has an invalid length. [ 216.831059][T12412] wg1 speed is unknown, defaulting to 1000 [ 217.363657][T12456] IPVS: length: 24 != 12312 [ 217.369491][T12456] __nla_validate_parse: 10 callbacks suppressed [ 217.369506][T12456] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1836'. [ 217.482830][T12466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1838'. [ 217.517553][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 217.648196][T12475] syz_tun: entered allmulticast mode [ 217.676962][T12477] No such timeout policy "syz1" [ 217.693289][T12476] syz_tun: left allmulticast mode [ 217.725216][T12481] Bluetooth: hci0: unsupported parameter 512 [ 217.733554][T12481] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 217.749400][T12482] Bluetooth: hci0: unsupported parameter 512 [ 217.755897][T12482] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 217.888985][T12490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1847'. [ 218.221613][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1855'. [ 218.501288][ T10] IPVS: starting estimator thread 0... [ 218.605632][T12530] IPVS: using max 35 ests per chain, 84000 per kthread [ 218.720002][T12544] netlink: 'syz.7.1863': attribute type 1 has an invalid length. [ 218.729239][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 218.764979][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 218.774023][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 218.822969][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 218.872174][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 218.914218][T12553] syzkaller0: entered promiscuous mode [ 218.925384][T12553] syzkaller0: entered allmulticast mode [ 218.938335][T12543] netlink: 'syz.7.1863': attribute type 1 has an invalid length. [ 218.991983][T12556] netlink: 'syz.0.1869': attribute type 12 has an invalid length. [ 219.018379][T12556] netlink: 'syz.0.1869': attribute type 10 has an invalid length. [ 219.041606][T12556] veth0_virt_wifi: entered allmulticast mode [ 219.092882][T12556] team0: Port device veth0_virt_wifi added [ 219.346932][T12572] netlink: 'syz.0.1874': attribute type 5 has an invalid length. [ 219.995074][T12614] netlink: 'syz.7.1889': attribute type 12 has an invalid length. [ 220.072296][T12619] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 220.076992][T12621] pim6reg1: entered promiscuous mode [ 220.099542][T12621] pim6reg1: entered allmulticast mode [ 220.193315][T12626] Bluetooth: hci0: invalid length 8, exp 2 for type 13 [ 220.272619][T12634] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 220.498909][T12650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 220.538630][T12651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.671614][T12667] netlink: 'syz.7.1906': attribute type 8 has an invalid length. [ 220.802300][T12681] xt_policy: output policy not valid in PREROUTING and INPUT [ 221.757992][T12714] tipc: Enabled bearer , priority 0 [ 221.832694][T12702] tipc: Resetting bearer [ 221.920960][T12702] tipc: Disabling bearer [ 222.030669][T12723] bond9: option resend_igmp: invalid value (32767) [ 222.048082][T12723] bond9: option resend_igmp: allowed values 0 - 255 [ 222.058410][T12723] bond9 (unregistering): Released all slaves [ 222.143534][T12722] bond9: option resend_igmp: invalid value (32767) [ 222.152431][T12722] bond9: option resend_igmp: allowed values 0 - 255 [ 222.163122][T12722] bond9 (unregistering): Released all slaves [ 222.253505][T12736] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 222.265843][T12743] syzkaller1: entered promiscuous mode [ 222.271410][T12743] syzkaller1: entered allmulticast mode [ 222.308799][T12736] 8021q: adding VLAN 0 to HW filter on device bond9 [ 222.362829][T12733] bond9: (slave geneve2): making interface the new active one [ 222.376887][T12733] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 222.389306][T10752] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.404269][T12759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.421304][T10752] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.467082][T10752] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.479220][T10752] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.500244][T12763] sctp: [Deprecated]: syz.6.1931 (pid 12763) Use of int in maxseg socket option. [ 222.500244][T12763] Use struct sctp_assoc_value instead [ 222.576367][T12765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.708019][T12775] __nla_validate_parse: 14 callbacks suppressed [ 222.708037][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1935'. [ 224.088823][T12797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.094483][T12796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.276431][T12808] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 224.313497][T12808] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 224.405996][T12814] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1947'. [ 224.576171][T12823] bond10: entered promiscuous mode [ 224.585377][T12823] bond10: entered allmulticast mode [ 224.606733][T12823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 224.621458][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1953'. [ 224.852726][T12846] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 224.867612][T12846] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1957'. [ 224.901065][T12846] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 224.924607][T10239] IPVS: starting estimator thread 0... [ 224.962082][T12855] ipt_ECN: cannot use operation on non-tcp rule [ 225.015733][T12851] IPVS: using max 30 ests per chain, 72000 per kthread [ 225.046025][T12846] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 225.059726][T12846] bond11 (unregistering): Released all slaves [ 225.060214][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 225.296664][T12873] netlink: 'syz.3.1964': attribute type 29 has an invalid length. [ 227.001572][T12894] syzkaller1: entered promiscuous mode [ 227.007317][T12894] syzkaller1: entered allmulticast mode [ 227.267247][T12923] Bluetooth: hci0: unsupported parameter 512 [ 227.282548][T12923] Bluetooth: hci0: invalid length 11, exp 2 for type 21 [ 227.297227][T12921] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 227.373520][T10746] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 227.431746][T12938] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1984'. [ 227.447261][T12938] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1984'. [ 227.465299][T12938] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1984'. [ 227.477665][T12938] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1984'. [ 227.487327][T12938] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1984'. [ 227.682797][T12953] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 227.868370][T12962] veth7: entered promiscuous mode [ 227.873451][T12962] veth7: entered allmulticast mode [ 228.301622][T13006] __nla_validate_parse: 28 callbacks suppressed [ 228.301640][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2002'. [ 228.318329][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2002'. [ 228.338578][T10751] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.347597][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2002'. [ 228.357092][T10751] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.367074][T10751] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.377061][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2002'. [ 228.386462][T10751] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.596807][T13016] netlink: 14448 bytes leftover after parsing attributes in process `syz.6.2006'. [ 228.992893][T13041] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 229.177562][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 229.288649][T13052] netlink: 'syz.6.2018': attribute type 21 has an invalid length. [ 229.312743][T13052] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2018'. [ 229.547465][T13071] netlink: 'syz.6.2023': attribute type 39 has an invalid length. [ 229.687554][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2025'. [ 229.923182][T13089] : renamed from hsr0 (while UP) [ 229.948136][T13086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.954915][T13086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 230.033955][T13091] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 230.214510][T13102] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2034'. [ 230.418638][T13111] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.562443][T13117] wg1 speed is unknown, defaulting to 1000 [ 231.101755][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2044'. [ 231.281059][T13160] x_tables: duplicate underflow at hook 2 [ 231.303434][T13156] x_tables: duplicate underflow at hook 2 [ 231.829612][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.851319][T13182] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 232.855482][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.873814][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.986903][T13169] gretap1: left promiscuous mode [ 233.010100][T13169] ip6erspan0: left promiscuous mode [ 233.032832][T13169] team1: left promiscuous mode [ 233.041247][T13169] gretap4: left promiscuous mode [ 233.048224][T13169] bond6: left promiscuous mode [ 233.057377][T13169] gretap5: left promiscuous mode [ 233.190280][T13174] syzkaller1: entered promiscuous mode [ 233.199101][T13174] syzkaller1: entered allmulticast mode [ 233.246703][T10746] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.296186][T10746] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.327199][T10746] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.353579][T10746] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.373597][T10746] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.404029][T10746] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.479387][T10746] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.490608][T10746] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.502914][T10746] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.522437][T13214] __nla_validate_parse: 2 callbacks suppressed [ 233.522457][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2062'. [ 233.594866][T13200] netlink: 13212 bytes leftover after parsing attributes in process `syz.0.2061'. [ 233.604697][T13200] netlink: 4372 bytes leftover after parsing attributes in process `syz.0.2061'. [ 233.613917][T13200] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2061'. [ 233.623192][T13200] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2061'. [ 233.633399][T10746] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.641983][T10746] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.650740][T10746] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.659398][T13214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.666990][T13214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.675413][T13214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.683066][T13214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.845867][T13233] netlink: 'syz.3.2068': attribute type 12 has an invalid length. [ 233.866442][T13235] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 233.969005][T13243] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 233.996988][T13243] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 234.300006][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 234.385270][T13260] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2078'. [ 234.400191][T13281] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 234.408432][T13260] openvswitch: netlink: Missing key (keys=40, expected=100) [ 234.595818][T13291] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 234.608158][T13294] netlink: 'syz.0.2084': attribute type 3 has an invalid length. [ 234.630940][T13293] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 234.690811][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 234.913617][T13308] netlink: 'syz.0.2088': attribute type 29 has an invalid length. [ 234.939207][T13308] netlink: 'syz.0.2088': attribute type 29 has an invalid length. [ 234.952588][T13308] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2088'. [ 235.006272][T13308] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 235.014715][T13308] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2088'. [ 235.030364][T13308] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 235.208741][T13326] tipc: Enabling of bearer rejected, failed to enable media [ 235.400619][T13335] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 235.459887][T13342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.867364][T13373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.900387][T13373] tipc: Enabling of bearer rejected, failed to enable media [ 236.048821][T13385] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 236.064920][T13385] bond9 (unregistering): Released all slaves [ 236.335952][T13403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.501782][T13417] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 236.933034][T13453] syzkaller1: entered promiscuous mode [ 236.979888][T13453] syzkaller1: entered allmulticast mode [ 238.499161][T13564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.667537][T13577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.677025][T13578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.679080][T13579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.770053][T13583] sctp: [Deprecated]: syz.3.2165 (pid 13583) Use of int in max_burst socket option. [ 238.770053][T13583] Use struct sctp_assoc_value instead [ 238.863546][T13589] __nla_validate_parse: 20 callbacks suppressed [ 238.863563][T13589] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2168'. [ 238.885681][T13590] ªªªªªª: renamed from vlan0 [ 238.936026][T13596] sctp: [Deprecated]: syz.3.2169 (pid 13596) Use of int in maxseg socket option. [ 238.936026][T13596] Use struct sctp_assoc_value instead [ 239.069225][T13602] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2172'. [ 239.206763][T13609] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2174'. [ 239.277897][T13611] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2176'. [ 239.371851][T13611] tipc: Started in network mode [ 239.401160][T13611] tipc: Node identity 96209ded1d0d, cluster identity 4711 [ 239.445552][T13611] tipc: Enabled bearer , priority 0 [ 239.477937][T13615] syzkaller0: entered promiscuous mode [ 239.502777][T13615] syzkaller0: entered allmulticast mode [ 239.522082][T13619] bond0: option ad_select: unable to set because the bond device is up [ 239.573515][T13615] tipc: Resetting bearer [ 239.610393][T13615] tipc: Disabling bearer [ 239.657592][T13623] tipc: Started in network mode [ 239.662557][T13623] tipc: Node identity bea1184cc6ab, cluster identity 4711 [ 239.671589][T13623] tipc: Enabled bearer , priority 0 [ 239.778544][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2180'. [ 239.811178][T13627] Bluetooth: hci0: invalid length 39, exp 2 for type 17 [ 239.820796][T13627] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2181'. [ 239.857404][T13627] validate_nla: 3 callbacks suppressed [ 239.857423][T13627] netlink: 'syz.3.2181': attribute type 9 has an invalid length. [ 239.888408][T13623] syzkaller0: entered promiscuous mode [ 239.894196][T13623] syzkaller0: entered allmulticast mode [ 239.901956][T13623] tipc: Resetting bearer [ 239.950965][T13630] tipc: Enabled bearer , priority 0 [ 239.966746][T13630] syzkaller0: entered promiscuous mode [ 239.981704][T13630] syzkaller0: entered allmulticast mode [ 240.012758][T13620] tipc: Resetting bearer [ 240.728680][T10271] tipc: Node number set to 2013927500 [ 241.345408][T13620] tipc: Disabling bearer [ 241.372899][T13639] tipc: Resetting bearer [ 241.425561][T13621] tipc: Resetting bearer [ 241.541512][T13621] tipc: Disabling bearer [ 241.581550][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2189'. [ 241.605122][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2189'. [ 241.681624][T13667] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2191'. [ 241.691852][T13667] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2191'. [ 241.701759][T13667] netlink: 'syz.6.2191': attribute type 6 has an invalid length. [ 241.711994][T13667] netlink: 'syz.6.2191': attribute type 5 has an invalid length. [ 241.853839][T13679] º: renamed from veth1_vlan [ 242.214915][T13706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.322217][T13712] openvswitch: netlink: Message has -2 unknown bytes. [ 242.440116][T13718] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 242.556123][T13722] can: request_module (can-proto-4) failed. [ 242.675913][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.808536][T13741] xt_l2tp: invalid flags combination: 8 [ 242.871132][T13750] xt_l2tp: invalid flags combination: 8 [ 243.085987][T13759] netlink: 'syz.7.2223': attribute type 2 has an invalid length. [ 243.228277][T13777] IPVS: Unknown mcast interface: vcan0 [ 243.598158][T13807] netlink: 'syz.7.2234': attribute type 1 has an invalid length. [ 243.708494][T13813] bond1: (slave gretap2): making interface the new active one [ 243.717929][T13813] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 243.887602][T13829] __nla_validate_parse: 7 callbacks suppressed [ 243.887619][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 243.920814][T13831] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2240'. [ 243.923854][T13829] vlan0: entered allmulticast mode [ 243.939094][T13829] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 243.969178][T13831] netlink: 'syz.7.2240': attribute type 11 has an invalid length. [ 243.975557][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2241'. [ 244.001425][T13831] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2240'. [ 244.209330][T13847] ip6t_srh: unknown srh match flags 5F28 [ 244.272646][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2247'. [ 244.378173][T13860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.471890][T13865] netlink: 'syz.6.2250': attribute type 39 has an invalid length. [ 244.480031][T13866] lo: entered allmulticast mode [ 244.573988][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2253'. [ 244.585588][T13869] netlink: 'syz.0.2253': attribute type 7 has an invalid length. [ 244.585609][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2254'. [ 244.593414][T13869] netlink: 'syz.0.2253': attribute type 8 has an invalid length. [ 244.619400][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 244.622988][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2254'. [ 244.660449][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2254'. [ 244.885173][T13887] netlink: 'syz.7.2257': attribute type 11 has an invalid length. [ 244.975907][T10237] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 245.006381][T10237] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 245.046579][T10237] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 245.080090][T10237] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 245.114730][T10237] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 245.142564][T10237] hid-generic 0005:0C45:1012.0001: unexpected long global item [ 245.162598][T10237] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 245.255496][T13914] netlink: 'syz.6.2267': attribute type 17 has an invalid length. [ 245.415609][T13922] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.429884][T13926] Unsupported ieee802154 address type: 0 [ 245.479250][T13926] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.765669][T13946] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 246.060562][T13968] netlink: 'syz.7.2283': attribute type 1 has an invalid length. [ 246.145577][T13971] netlink: 'syz.2.2285': attribute type 6 has an invalid length. [ 246.238543][T13976] netlink: 'syz.2.2285': attribute type 6 has an invalid length. [ 246.613260][T14006] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 246.638007][T14007] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.691839][T14006] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.749359][T14009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.757782][T14009] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.769717][T14009] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 246.804710][T14011] tipc: Enabled bearer , priority 0 [ 246.812195][T14011] syzkaller0: entered promiscuous mode [ 246.818197][T14011] syzkaller0: entered allmulticast mode [ 246.886079][T14011] syzkaller0: mtu less than device minimum [ 246.905973][T14017] syzkaller1: entered promiscuous mode [ 246.911630][T14017] syzkaller1: entered allmulticast mode [ 246.918616][T14010] tipc: Resetting bearer [ 246.940646][T14010] tipc: Disabling bearer [ 247.729749][T14056] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 247.732374][T14066] syzkaller1: entered promiscuous mode [ 247.748038][T14066] syzkaller1: entered allmulticast mode [ 248.188876][T14101] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 248.226250][T14100] netlink: 'syz.6.2317': attribute type 12 has an invalid length. [ 248.270126][T14100] bond2: option primary_reselect: invalid value (255) [ 248.329997][T14100] bond2 (unregistering): Released all slaves [ 248.611389][T14133] bond2 (unregistering): Released all slaves [ 248.877460][T14145] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.317739][T14150] netlink: 'syz.7.2328': attribute type 10 has an invalid length. [ 249.339118][T14150] team0: Port device dummy0 added [ 249.407998][T14154] __nla_validate_parse: 13 callbacks suppressed [ 249.408016][T14154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2331'. [ 249.489519][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 249.518179][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 249.559537][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 249.569947][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'. [ 249.638300][T10748] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 249.822089][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 249.849106][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 250.518397][T14207] validate_nla: 2 callbacks suppressed [ 250.518415][T14207] netlink: 'syz.6.2345': attribute type 4 has an invalid length. [ 250.717974][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2351'. [ 250.737318][T14219] netlink: 'syz.2.2349': attribute type 21 has an invalid length. [ 250.751696][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2351'. [ 250.779666][T14219] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2349'. [ 250.860931][T14229] team0: Device gtp0 is of different type [ 250.943055][T14237] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 250.966278][T14236] syzkaller1: entered promiscuous mode [ 250.971794][T14236] syzkaller1: entered allmulticast mode [ 251.020196][T14237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.112958][T14243] tipc: Enabled bearer , priority 0 [ 251.197492][T14243] syzkaller0: entered promiscuous mode [ 251.209752][T14243] syzkaller0: entered allmulticast mode [ 252.730900][T14256] vlan0: entered promiscuous mode [ 252.736935][T14256] vlan0: entered allmulticast mode [ 252.742189][T14256] veth0_vlan: entered allmulticast mode [ 252.756827][T14261] tipc: Resetting bearer [ 252.772583][T14264] tipc: Enabled bearer , priority 0 [ 252.806019][T14241] tipc: Resetting bearer [ 252.825880][T14241] tipc: Disabling bearer [ 252.837319][T14264] tipc: Disabling bearer [ 252.988873][T14281] 8021q: VLANs not supported on ip_vti0 [ 253.024200][T14285] syzkaller1: entered promiscuous mode [ 253.030161][T14285] syzkaller1: entered allmulticast mode [ 253.212048][T14296] netlink: 'syz.0.2373': attribute type 28 has an invalid length. [ 253.230836][T14296] netlink: 'syz.0.2373': attribute type 3 has an invalid length. [ 253.485979][T14314] tipc: Cannot configure node identity twice [ 253.678705][T14327] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 253.719444][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.728146][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.957683][T14337] bond9: ARP target 1.0.0.0 is already present [ 253.964259][T14337] bond9: option arp_ip_target: invalid value (1) [ 253.973902][T14337] bond9 (unregistering): Released all slaves [ 254.328476][T14366] syzkaller1: entered promiscuous mode [ 254.336033][T14366] syzkaller1: entered allmulticast mode [ 254.344436][T14366] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 254.364644][T14366] netlink: 'syz.0.2392': attribute type 8 has an invalid length. [ 254.417825][T14370] __nla_validate_parse: 13 callbacks suppressed [ 254.417842][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2394'. [ 254.485554][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2394'. [ 254.660381][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.673774][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.687051][T14387] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2400'. [ 254.689220][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.729299][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 254.750256][T14391] netlink: 11562 bytes leftover after parsing attributes in process `syz.7.2398'. [ 254.758979][T14385] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 254.823739][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 254.838718][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.866069][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 254.876915][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.912039][T14395] tipc: Enabled bearer , priority 0 [ 254.927433][T14398] macsec0: entered promiscuous mode [ 254.932802][T14398] macsec0: entered allmulticast mode [ 254.939331][T14398] bond9: (slave macsec0): Error -34 calling dev_set_mtu [ 254.952462][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.958853][T14395] syzkaller0: entered promiscuous mode [ 254.964600][T14395] syzkaller0: entered allmulticast mode [ 254.971555][T14385] hsr0 speed is unknown, defaulting to 1000 [ 254.977944][T14395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 255.000048][T14385] hsr0 speed is unknown, defaulting to 1000 [ 255.008034][T14394] tipc: Resetting bearer [ 255.047883][T14394] tipc: Disabling bearer [ 255.069989][T14385] hsr0 speed is unknown, defaulting to 1000 [ 255.082243][T14385] hsr0 speed is unknown, defaulting to 1000 [ 255.113658][T14385] hsr0 speed is unknown, defaulting to 1000 [ 255.218508][T14410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2407'. [ 255.245086][T14410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2407'. [ 255.379863][T14425] block nbd0: Unsupported socket: should be TCP or UNIX. [ 255.443560][T14430] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.545711][T14436] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 255.554183][T14436] bond10: option packets_per_slave: allowed values 0 - 65535 [ 255.581331][T14436] bond10 (unregistering): Released all slaves [ 255.621219][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 255.680218][ T1302] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 255.698758][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761497][T14451] pim6reg1: entered promiscuous mode [ 255.767612][T14451] pim6reg1: entered allmulticast mode [ 255.859543][T14463] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 255.921286][T14466] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 255.986879][T14470] netlink: 'syz.7.2423': attribute type 7 has an invalid length. [ 255.995837][T14470] netlink: 'syz.7.2423': attribute type 8 has an invalid length. [ 256.007785][T14470] netlink: 'syz.7.2423': attribute type 1 has an invalid length. [ 256.085932][T14470] veth5: entered promiscuous mode [ 256.222900][T14480] block nbd0: not configured, cannot reconfigure [ 256.270184][T14480] bond3: Unable to set up delay as MII monitoring is disabled [ 256.280589][T14480] bond3 (unregistering): Released all slaves [ 256.328543][T14484] bond3: Unable to set up delay as MII monitoring is disabled [ 256.341628][T14484] bond3 (unregistering): Released all slaves [ 256.527969][T14496] IPVS: length: 239 != 24 [ 256.567269][T14501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.574607][T14501] IPv6: NLM_F_CREATE should be set when creating new route [ 256.581877][T14501] IPv6: NLM_F_CREATE should be set when creating new route [ 256.592507][T14501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.797057][T14513] IPv6: sit1: Disabled Multicast RS [ 256.803413][T14513] sit1: entered allmulticast mode [ 256.992699][T14530] netlink: 'syz.0.2438': attribute type 9 has an invalid length. [ 257.070149][T14536] batadv_slave_1: entered promiscuous mode [ 257.082136][T14535] batadv_slave_1: left promiscuous mode [ 257.253147][T14546] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 257.357639][T14553] xt_bpf: check failed: parse error [ 257.511855][T14565] macsec1: entered promiscuous mode [ 257.517531][T14565] macsec1: entered allmulticast mode [ 257.523640][T14565] bridge0: entered allmulticast mode [ 257.530818][T14565] bridge0: port 4(macsec1) entered blocking state [ 257.538055][T14565] bridge0: port 4(macsec1) entered disabled state [ 257.549176][T14565] bridge0: left allmulticast mode [ 257.609812][T14569] netlink: 'syz.7.2453': attribute type 1 has an invalid length. [ 257.635417][T14569] netlink: 'syz.7.2453': attribute type 2 has an invalid length. [ 257.808919][T14585] tipc: Enabled bearer , priority 0 [ 257.817135][T14585] syzkaller0: entered promiscuous mode [ 257.826017][T14585] syzkaller0: entered allmulticast mode [ 257.957233][T14598] tipc: Resetting bearer [ 258.072745][T14615] netlink: 'syz.0.2465': attribute type 3 has an invalid length. [ 258.083552][T14615] netlink: 'syz.0.2465': attribute type 3 has an invalid length. [ 258.263675][T14622] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 258.276840][T14622] bond10 (unregistering): Released all slaves [ 258.626468][T14583] tipc: Resetting bearer [ 258.643789][T14583] tipc: Disabling bearer [ 258.956533][T14645] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.053632][T14650] netlink: 'syz.0.2477': attribute type 1 has an invalid length. [ 259.146709][T14654] tipc: Enabling of bearer rejected, failed to enable media [ 259.491723][T14679] 8021q: VLANs not supported on ipvlan0 [ 259.509906][T14681] __nla_validate_parse: 16 callbacks suppressed [ 259.509926][T14681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2486'. [ 259.526227][T14679] netlink: 'syz.7.2484': attribute type 1 has an invalid length. [ 259.590136][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2487'. [ 259.656103][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 259.658925][T14690] syzkaller0: entered promiscuous mode [ 259.670757][T14690] syzkaller0: entered allmulticast mode [ 259.695558][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'. [ 259.875272][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 259.973695][T14716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 259.991033][T14719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 260.168719][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 260.478328][T14750] delete_channel: no stack [ 260.531461][T14753] syzkaller0: entered promiscuous mode [ 260.546044][T14753] syzkaller0: entered allmulticast mode [ 260.812134][T14761] GUP no longer grows the stack in syz.6.2508 (14761): 200000003000-20000000a000 (200000001000) [ 260.823979][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.6.2508 Not tainted syzkaller #0 PREEMPT(full) [ 260.824007][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.824025][T14761] Call Trace: [ 260.824034][T14761] [ 260.824043][T14761] dump_stack_lvl+0x189/0x250 [ 260.824074][T14761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.824094][T14761] ? __pfx__printk+0x10/0x10 [ 260.824112][T14761] ? find_vma+0xe7/0x160 [ 260.824145][T14761] __get_user_pages+0x2470/0x2a00 [ 260.824180][T14761] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 260.824223][T14761] ? rcu_is_watching+0x15/0xb0 [ 260.824254][T14761] __gup_longterm_locked+0xde4/0x1660 [ 260.824279][T14761] ? try_grab_folio_fast+0x1bf/0x6a0 [ 260.824312][T14761] ? gup_fast_fallback+0x1b86/0x22d0 [ 260.824332][T14761] gup_fast_fallback+0x1d65/0x22d0 [ 260.824383][T14761] ? __pfx_gup_fast_fallback+0x10/0x10 [ 260.824400][T14761] ? __mutex_lock+0x335/0x1350 [ 260.824429][T14761] ? is_valid_gup_args+0x11f/0x200 [ 260.824460][T14761] ? get_user_pages_fast+0x4d/0xb0 [ 260.824481][T14761] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 260.824513][T14761] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 260.824535][T14761] ? wait_for_space+0x248/0x2d0 [ 260.824568][T14761] iov_iter_get_pages2+0x5e/0xa0 [ 260.824596][T14761] __se_sys_vmsplice+0x548/0x10d0 [ 260.824640][T14761] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 260.824663][T14761] ? __pfx_futex_wait+0x10/0x10 [ 260.824699][T14761] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 260.824777][T14761] ? do_syscall_64+0xbe/0xfa0 [ 260.824798][T14761] do_syscall_64+0xfa/0xfa0 [ 260.824815][T14761] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.824832][T14761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.824851][T14761] ? clear_bhb_loop+0x60/0xb0 [ 260.824874][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.824891][T14761] RIP: 0033:0x7f4ee038efc9 [ 260.824921][T14761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.824937][T14761] RSP: 002b:00007f4ede5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 260.824964][T14761] RAX: ffffffffffffffda RBX: 00007f4ee05e5fa0 RCX: 00007f4ee038efc9 [ 260.824978][T14761] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 260.824991][T14761] RBP: 00007f4ee0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.825002][T14761] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 260.825014][T14761] R13: 00007f4ee05e6038 R14: 00007f4ee05e5fa0 R15: 00007fffa39bf988 [ 260.825048][T14761] [ 261.091062][T14761] block nbd0: Unsupported socket: should be TCP or UNIX. [ 261.134958][T14764] netlink: 'syz.7.2509': attribute type 11 has an invalid length. [ 261.142841][T14764] validate_nla: 2 callbacks suppressed [ 261.142859][T14764] netlink: 'syz.7.2509': attribute type 5 has an invalid length. [ 261.156318][T14764] netlink: 4112 bytes leftover after parsing attributes in process `syz.7.2509'. [ 261.191791][T14766] xt_l2tp: wrong L2TP version: 0 [ 261.498520][T14782] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2518'. [ 261.686318][T14797] delete_channel: no stack [ 261.772179][T14805] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 261.788695][T14805] netlink: 'syz.0.2526': attribute type 4 has an invalid length. [ 262.228707][T14836] sctp: [Deprecated]: syz.0.2535 (pid 14836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.228707][T14836] Use struct sctp_sack_info instead [ 262.282823][T14839] IPVS: Scheduler module ip_vs_sip not found [ 262.364105][T14848] tipc: Enabled bearer , priority 0 [ 262.373403][T14848] syzkaller0: entered promiscuous mode [ 262.378955][T14848] syzkaller0: entered allmulticast mode [ 262.403377][T14848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 262.433657][T14848] tipc: Resetting bearer [ 262.474586][T14847] tipc: Resetting bearer [ 262.490970][T14847] tipc: Disabling bearer [ 262.504241][T14854] delete_channel: no stack [ 262.523907][T14852] tipc: Enabled bearer , priority 0 [ 262.532389][T14852] syzkaller0: entered promiscuous mode [ 262.539027][T14852] syzkaller0: entered allmulticast mode [ 262.554146][T14852] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 262.577036][T14852] tipc: Resetting bearer [ 262.587549][T14851] tipc: Resetting bearer [ 262.605200][T14851] tipc: Disabling bearer [ 262.616791][T14860] netlink: 'syz.6.2545': attribute type 1 has an invalid length. [ 262.711885][T14866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.717854][T14866] netlink: 'syz.0.2548': attribute type 12 has an invalid length. [ 262.815068][T14873] No such timeout policy "syz1" [ 262.828943][T14866] bond10: option primary_reselect: invalid value (255) [ 262.829819][T14873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.851173][T14866] bond10 (unregistering): Released all slaves [ 263.064256][T14895] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 263.075594][T14895] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.083996][T14895] gretap2: entered promiscuous mode [ 263.090102][T14895] gretap2: entered allmulticast mode [ 263.643796][T14923] ip6gre0: entered promiscuous mode [ 263.650339][T14923] ip6gre0: entered allmulticast mode [ 264.731753][T14991] netlink: 'syz.7.2581': attribute type 4 has an invalid length. [ 265.222377][T15006] netlink: 'syz.0.2587': attribute type 8 has an invalid length. [ 265.357621][T15008] __nla_validate_parse: 14 callbacks suppressed [ 265.357642][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 265.580394][T10751] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.596093][T10751] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.604612][T10751] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.636763][T10751] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.658304][T15026] syzkaller0: entered promiscuous mode [ 265.663810][T15026] syzkaller0: entered allmulticast mode [ 265.674553][T15026] netlink: 'syz.7.2595': attribute type 11 has an invalid length. [ 265.682423][T15026] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2595'. [ 266.144696][T15054] tipc: Enabled bearer , priority 0 [ 266.208753][T15054] syzkaller0: MTU too low for tipc bearer [ 266.217741][T15054] tipc: Disabling bearer [ 266.447666][T15073] IPVS: Error connecting to the multicast addr [ 266.467271][T15073] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 266.768560][T15086] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2613'. [ 266.777774][T15086] team0: No ports can be present during mode change [ 266.922561][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 266.941638][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 266.956960][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 266.960589][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2615'. [ 266.978264][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2616'. [ 266.989517][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 266.998308][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 267.005570][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.006104][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.123077][T15091] hsr0 speed is unknown, defaulting to 1000 [ 267.272195][T15110] tipc: Enabled bearer , priority 0 [ 267.280955][T15110] syzkaller0: entered promiscuous mode [ 267.287250][T15110] syzkaller0: entered allmulticast mode [ 267.330259][T15110] tipc: Resetting bearer [ 267.358158][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.366670][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.494542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.502995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.571672][T15109] tipc: Resetting bearer [ 267.608824][T15109] tipc: Disabling bearer [ 267.652403][T15091] chnl_net:caif_netlink_parms(): no params data found [ 267.890481][T15091] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.905658][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.923110][T15091] bridge_slave_0: entered allmulticast mode [ 267.931203][T15091] bridge_slave_0: entered promiscuous mode [ 267.940550][T15091] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.947946][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.955283][T15091] bridge_slave_1: entered allmulticast mode [ 267.972181][T15091] bridge_slave_1: entered promiscuous mode [ 267.980937][T15155] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2631'. [ 267.999226][T15155] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 268.031207][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.049438][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.108642][T15091] team0: Port device team_slave_0 added [ 268.138313][T15091] team0: Port device team_slave_1 added [ 268.222966][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.232445][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.267740][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.280170][ T30] audit: type=1800 audit(1760931072.684:4): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2633" name="memory.events" dev="tmpfs" ino=2964 res=0 errno=0 [ 268.282983][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.309072][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.336646][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.417680][T15091] hsr_slave_0: entered promiscuous mode [ 268.428615][T15091] hsr_slave_1: entered promiscuous mode [ 268.435183][T15091] debugfs: 'hsr0' already exists in 'hsr' [ 268.440930][T15091] Cannot create hsr debugfs directory [ 268.547958][ T5846] Bluetooth: hci4: command tx timeout [ 268.595375][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2638'. [ 268.728389][T15184] netlink: 'syz.7.2640': attribute type 21 has an invalid length. [ 268.760337][T15184] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2640'. [ 268.772573][T15091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 268.786523][T15091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 268.801868][T15091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 268.836914][T15091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 268.930250][T15203] netlink: 'syz.6.2644': attribute type 33 has an invalid length. [ 268.963251][T15203] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2644'. [ 269.051397][T10721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.062038][T10721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.080419][T10721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.107486][ T5846] Bluetooth: hci8: command tx timeout [ 269.108685][T10721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.130711][T15091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.159482][T15213] netlink: 'syz.6.2647': attribute type 18 has an invalid length. [ 269.162924][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.183428][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2647'. [ 269.196214][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.203402][T10721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.223641][T15213] netlink: 'syz.6.2647': attribute type 18 has an invalid length. [ 269.224136][T15216] netlink: 'syz.6.2647': attribute type 18 has an invalid length. [ 269.241611][T10751] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.252809][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.259985][T10721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.272863][T15216] netlink: 'syz.6.2647': attribute type 18 has an invalid length. [ 269.275933][T10751] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.290349][T10751] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.332551][T10751] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.404497][T15226] .: renamed from veth0_to_hsr (while UP) [ 269.487526][T10746] batman_adv: batadv1: IGMP Querier appeared [ 269.493613][T10746] batman_adv: batadv1: MLD Querier appeared [ 269.602356][T15091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.671644][T15242] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 269.717777][T15245] netlink: 'syz.6.2654': attribute type 1 has an invalid length. [ 269.923317][T15091] veth0_vlan: entered promiscuous mode [ 269.941668][T15091] veth1_vlan: entered promiscuous mode [ 269.988609][T15091] veth0_macvtap: entered promiscuous mode [ 270.001468][T15091] veth1_macvtap: entered promiscuous mode [ 270.029140][T15091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.101352][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.125482][T10720] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.149394][T10720] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.171541][T10720] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.205039][T10720] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.242968][T10720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.252999][T10720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.288105][T10746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.297051][T10746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.508294][T15279] __nla_validate_parse: 3 callbacks suppressed [ 270.508314][T15279] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.2660'. [ 270.638815][T15285] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 270.677926][T15277] tipc: Started in network mode [ 270.683096][T15277] tipc: Node identity 2e516c3885b1, cluster identity 4711 [ 270.693471][T15277] tipc: Enabled bearer , priority 0 [ 270.703354][T15277] syzkaller0: entered promiscuous mode [ 270.728016][T15277] syzkaller0: entered allmulticast mode [ 270.758191][T15276] tipc: Resetting bearer [ 270.789814][T15276] tipc: Disabling bearer [ 270.941894][T15301] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2667'. [ 271.055097][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2668'. [ 271.065725][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2668'. [ 271.093222][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2670'. [ 271.189167][ T5846] Bluetooth: hci8: command tx timeout [ 271.220947][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2672'. [ 271.237023][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2672'. [ 271.286777][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2673'. [ 271.401200][T15333] xt_ecn: cannot match TCP bits for non-tcp packets [ 271.423034][T15334] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2675'. [ 271.902459][T15349] netlink: 'syz.7.2680': attribute type 33 has an invalid length. [ 271.915935][T15349] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2680'. [ 271.949804][T15351] netlink: 'syz.8.2681': attribute type 1 has an invalid length. [ 271.958104][T15351] netlink: 'syz.8.2681': attribute type 1 has an invalid length. [ 273.264586][ T5846] Bluetooth: hci8: command tx timeout [ 275.345551][ T5846] Bluetooth: hci8: command tx timeout [ 297.381208][T15362] __nla_validate_parse: 3 callbacks suppressed [ 297.381227][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2686'. [ 297.415897][T15366] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2687'. [ 297.454179][T15365] delete_channel: no stack [ 297.512183][T15362] geneve2: entered promiscuous mode [ 297.572404][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2687'. [ 297.831001][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 297.846923][T15388] x_tables: duplicate underflow at hook 2 [ 297.847441][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 297.869223][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 297.879303][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 297.889761][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 297.896645][T15392] validate_nla: 1 callbacks suppressed [ 297.896661][T15392] netlink: 'syz.8.2692': attribute type 10 has an invalid length. [ 297.956014][T15392] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 297.978722][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 297.989708][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 298.003242][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 298.021086][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 298.030485][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 298.089463][T15386] hsr0 speed is unknown, defaulting to 1000 [ 298.167361][T15396] hsr0 speed is unknown, defaulting to 1000 [ 298.307887][T15421] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 298.336640][T15421] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 298.653546][T15396] chnl_net:caif_netlink_parms(): no params data found [ 298.676001][T15442] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2704'. [ 298.796569][T15386] chnl_net:caif_netlink_parms(): no params data found [ 298.819876][T15447] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2705'. [ 298.927408][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2707'. [ 298.985287][T15452] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.158928][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.175348][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.190400][T15396] bridge_slave_0: entered allmulticast mode [ 299.208169][T15396] bridge_slave_0: entered promiscuous mode [ 299.223734][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.231664][T15472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2712'. [ 299.234082][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.248611][T15396] bridge_slave_1: entered allmulticast mode [ 299.256546][T15396] bridge_slave_1: entered promiscuous mode [ 299.450986][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.460914][T15386] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.468914][T15386] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.476341][T15386] bridge_slave_0: entered allmulticast mode [ 299.484694][T15386] bridge_slave_0: entered promiscuous mode [ 299.499996][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.512470][T15386] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.520210][T15386] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.532914][T15386] bridge_slave_1: entered allmulticast mode [ 299.543049][T15386] bridge_slave_1: entered promiscuous mode [ 299.598368][T15396] team0: Port device team_slave_0 added [ 299.618596][T15396] team0: Port device team_slave_1 added [ 299.639123][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.664271][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.675153][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.682088][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.709096][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.733291][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.741158][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.768328][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.813473][T15386] team0: Port device team_slave_0 added [ 299.821926][T15386] team0: Port device team_slave_1 added [ 299.907282][T15386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.915912][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.941976][T15386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.962649][T15396] hsr_slave_0: entered promiscuous mode [ 299.969461][T15396] hsr_slave_1: entered promiscuous mode [ 299.976536][T15396] debugfs: 'hsr0' already exists in 'hsr' [ 299.982283][T15396] Cannot create hsr debugfs directory [ 299.987983][ T52] Bluetooth: hci9: command tx timeout [ 299.995811][T15386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.002810][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.029818][T15386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.068859][ T52] Bluetooth: hci10: command tx timeout [ 300.242957][T15386] hsr_slave_0: entered promiscuous mode [ 300.251450][T15386] hsr_slave_1: entered promiscuous mode [ 300.257692][T15386] debugfs: 'hsr0' already exists in 'hsr' [ 300.263548][T15386] Cannot create hsr debugfs directory [ 300.287740][T15488] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2715'. [ 300.425581][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2718'. [ 300.630029][T15511] xt_CT: No such helper "pptp" [ 300.712688][T15511] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2721'. [ 300.722725][T15511] openvswitch: netlink: Message has 512 unknown bytes. [ 300.801751][T15396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.902645][T15396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.011322][T15396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.042308][T15530] syzkaller0: entered promiscuous mode [ 301.050618][T15530] syzkaller0: entered allmulticast mode [ 301.126558][T15396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.297943][T15544] tipc: Enabling of bearer rejected, media not registered [ 301.382422][T15396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.393955][T15547] tipc: Enabled bearer , priority 0 [ 301.402508][T15547] syzkaller0: entered promiscuous mode [ 301.408386][T15547] syzkaller0: entered allmulticast mode [ 301.419178][T15396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.449793][T15396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.468297][T15555] netlink: 'syz.6.2734': attribute type 2 has an invalid length. [ 301.486355][T15555] nbd: must specify at least one socket [ 301.500151][T15556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 301.519860][T15396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.524048][T15555] netlink: 'syz.6.2734': attribute type 83 has an invalid length. [ 301.551641][T15547] tipc: Resetting bearer [ 301.579643][T15546] tipc: Resetting bearer [ 301.604079][T15546] tipc: Disabling bearer [ 301.622630][T15558] openvswitch: netlink: Missing key (keys=40, expected=80) [ 301.662091][T15386] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.730888][T15386] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.806715][T15570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.855880][T15386] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.864111][T15579] netlink: 'syz.7.2741': attribute type 3 has an invalid length. [ 301.878980][T15386] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 302.044016][T15396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.066737][ T52] Bluetooth: hci9: command tx timeout [ 302.089015][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.108844][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.116048][T10748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.144981][ T52] Bluetooth: hci10: command tx timeout [ 302.170675][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.177920][T10720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.337602][T15386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.420231][T15386] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.474023][T15615] __nla_validate_parse: 9 callbacks suppressed [ 302.474041][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2748'. [ 302.497379][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.504570][T10752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.570200][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.577387][T10752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.692038][T15624] netlink: 'syz.7.2750': attribute type 1 has an invalid length. [ 302.692058][T15623] netlink: 'syz.7.2750': attribute type 1 has an invalid length. [ 302.995912][T15396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.010953][T15645] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2756'. [ 303.059547][T15646] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2755'. [ 303.082180][T15396] veth0_vlan: entered promiscuous mode [ 303.102550][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2756'. [ 303.143592][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2755'. [ 303.153531][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2755'. [ 303.173141][T15648] syzkaller0: entered promiscuous mode [ 303.178943][T15648] syzkaller0: entered allmulticast mode [ 303.192056][T15396] veth1_vlan: entered promiscuous mode [ 303.195872][T15648] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2757'. [ 303.248993][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.385548][T15396] veth0_macvtap: entered promiscuous mode [ 303.551965][T15664] netlink: 'syz.8.2760': attribute type 13 has an invalid length. [ 303.669010][T15668] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 303.690252][T15668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.147750][ T52] Bluetooth: hci9: command tx timeout [ 304.226898][ T52] Bluetooth: hci10: command tx timeout [ 304.956111][T15396] veth1_macvtap: entered promiscuous mode [ 305.022457][T15396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.074941][T15396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.115103][T15683] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2761'. [ 305.129083][T10751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.152884][T10751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.171650][T10751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.198933][T10751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.206838][T15686] netlink: 'syz.7.2763': attribute type 1 has an invalid length. [ 305.208544][T15687] bond0: Caught tx_queue_len zero misconfig [ 305.221456][T15687] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 305.332147][T15688] bond5 (unregistering): Released all slaves [ 305.456874][T15699] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2767'. [ 305.458281][T15688] bond5 (unregistering): Released all slaves [ 305.572378][T15688] bond5 (unregistering): Released all slaves [ 305.631419][T10752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.648503][T15386] veth0_vlan: entered promiscuous mode [ 305.658639][T10752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.673413][T15386] veth1_vlan: entered promiscuous mode [ 305.720865][T15688] bond5 (unregistering): Released all slaves [ 305.746276][T15705] netlink: 'syz.6.2768': attribute type 12 has an invalid length. [ 305.754210][T15705] netlink: 'syz.6.2768': attribute type 29 has an invalid length. [ 305.762414][T15705] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2768'. [ 305.797642][T15708] syz_tun: entered promiscuous mode [ 305.803016][T15708] vlan2: entered promiscuous mode [ 305.848551][T15688] bond5 (unregistering): Released all slaves [ 305.877999][T10713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.887585][T10713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.998780][T15688] bond5 (unregistering): Released all slaves [ 306.067377][T15721] sctp: [Deprecated]: syz.8.2771 (pid 15721) Use of int in maxseg socket option. [ 306.067377][T15721] Use struct sctp_assoc_value instead [ 306.079314][T15386] veth0_macvtap: entered promiscuous mode [ 306.082249][T15721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.108584][T15386] veth1_macvtap: entered promiscuous mode [ 306.172786][T15386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.210673][T15386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.225265][ T52] Bluetooth: hci9: command tx timeout [ 306.294137][T10713] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.305865][ T5846] Bluetooth: hci10: command tx timeout [ 306.319595][T10713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.353434][T10713] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.369424][T15737] sock: sock_timestamping_bind_phc: sock not bind to device [ 306.379869][T10713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.600553][T10721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.616435][T10721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.670423][T10752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.682979][T10752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.739809][T15754] netlink: 'syz.1.2780': attribute type 29 has an invalid length. [ 306.836173][T15754] netlink: 'syz.1.2780': attribute type 2 has an invalid length. [ 307.371199][T15796] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.522803][T15802] netlink: 'syz.8.2793': attribute type 5 has an invalid length. [ 307.539857][T15802] __nla_validate_parse: 6 callbacks suppressed [ 307.539875][T15802] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2793'. [ 307.607640][T15815] pim6reg1: entered promiscuous mode [ 307.618513][T15815] pim6reg1: entered allmulticast mode [ 307.779756][T15822] hsr0 speed is unknown, defaulting to 1000 [ 307.977654][T15833] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 308.037550][T15833] hsr0 speed is unknown, defaulting to 1000 [ 308.562072][T15873] block nbd0: Unsupported socket: should be TCP or UNIX. [ 308.978078][T15887] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2816'. [ 309.213372][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2820'. [ 309.254258][T15914] netlink: 'syz.9.2824': attribute type 39 has an invalid length. [ 309.322289][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2825'. [ 309.332589][T15916] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2825'. [ 309.494657][T15928] netlink: 'syz.9.2829': attribute type 1 has an invalid length. [ 309.699496][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2832'. [ 310.034134][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 310.057583][T15946] bridge_slave_0: default FDB implementation only supports local addresses [ 310.068840][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2835'. [ 310.099270][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2835'. [ 310.114220][T15949] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2835'. [ 310.176109][T15954] netlink: 'syz.8.2837': attribute type 1 has an invalid length. [ 310.185598][T15952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.742767][T15992] openvswitch: netlink: IP tunnel attribute has 22 unknown bytes. [ 310.830145][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.837907][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.951867][T15992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.970772][T15992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.161634][T10713] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.180061][T10713] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.193238][T10713] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.203931][T10713] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.217251][T16007] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 311.245082][T16007] netlink: 'syz.1.2853': attribute type 2 has an invalid length. [ 311.544078][T16032] lo: entered promiscuous mode [ 311.562921][T16032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.620539][T16036] netlink: 'syz.9.2859': attribute type 1 has an invalid length. [ 311.634484][T16036] netlink: 'syz.9.2859': attribute type 2 has an invalid length. [ 312.009623][T16059] netlink: 'syz.8.2868': attribute type 1 has an invalid length. [ 312.096013][T16058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.105900][T16058] bond0: (slave bond5): Enslaving as an active interface with an up link [ 312.656648][T16099] ip6gre1: entered allmulticast mode [ 313.136933][T16115] syzkaller1: entered promiscuous mode [ 313.142491][T16115] syzkaller1: entered allmulticast mode [ 313.350455][T16118] __nla_validate_parse: 15 callbacks suppressed [ 313.350468][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2885'. [ 313.446894][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2887'. [ 313.759203][T16146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2892'. [ 313.967029][T16165] netlink: 'syz.1.2898': attribute type 32 has an invalid length. [ 314.394837][T16192] vxlan0: entered promiscuous mode [ 314.400068][T16192] vxlan0: entered allmulticast mode [ 314.408401][T10721] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.418560][T10721] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.429595][T10721] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.441033][T10721] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.841117][T16197] tipc: New replicast peer: 255.255.255.255 [ 314.850929][T16197] tipc: Enabled bearer , priority 10 [ 314.865124][ T52] Bluetooth: hci10: command 0x0405 tx timeout [ 314.922244][T16202] sock: sock_set_timeout: `syz.7.2905' (pid 16202) tries to set negative timeout [ 315.788326][T16226] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2913'. [ 315.902615][T16232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2915'. [ 315.953303][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'. [ 315.965984][ T939] tipc: Node number set to 2335022573 [ 315.972283][T16234] veth0_macvtap: left promiscuous mode [ 316.134789][T16238] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 316.190384][T16240] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 316.201890][T16240] bond1: option packets_per_slave: allowed values 0 - 65535 [ 316.212673][T16240] bond1 (unregistering): Released all slaves [ 316.271290][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2921'. [ 316.280740][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2921'. [ 316.291502][T16246] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 316.476002][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2919'. [ 316.501608][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.501608][T16252] Use struct sctp_assoc_value instead [ 316.518291][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.518291][T16252] Use struct sctp_assoc_value instead [ 316.535529][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.535529][T16252] Use struct sctp_assoc_value instead [ 316.551812][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.551812][T16252] Use struct sctp_assoc_value instead [ 316.567206][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.567206][T16252] Use struct sctp_assoc_value instead [ 316.581833][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.581833][T16252] Use struct sctp_assoc_value instead [ 316.597828][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.597828][T16252] Use struct sctp_assoc_value instead [ 316.613358][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.613358][T16252] Use struct sctp_assoc_value instead [ 316.628763][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.628763][T16252] Use struct sctp_assoc_value instead [ 316.644283][T16252] sctp: [Deprecated]: syz.7.2922 (pid 16252) Use of int in maxseg socket option. [ 316.644283][T16252] Use struct sctp_assoc_value instead [ 316.677142][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2923'. [ 316.779851][T16262] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 317.111349][ T1302] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 317.125056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.228467][T16290] netlink: 'syz.8.2935': attribute type 10 has an invalid length. [ 317.247045][T16290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.257529][T16290] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 317.366464][T16295] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 317.448622][T16300] netlink: 'syz.7.2939': attribute type 2 has an invalid length. [ 318.840552][T16344] __nla_validate_parse: 3 callbacks suppressed [ 318.840568][T16344] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2949'. [ 318.859571][T16347] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2950'. [ 319.041528][T16358] netlink: 146780 bytes leftover after parsing attributes in process `syz.7.2954'. [ 319.059182][T16358] openvswitch: netlink: Key type 112 is out of range max 32 [ 319.431657][T16391] bond0: option ad_select: unable to set because the bond device is up [ 319.586104][T16397] veth0: entered promiscuous mode [ 319.592279][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 324.305874][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 330.545705][ T31] INFO: task syz.5.1399:10958 blocked for more than 143 seconds. [ 330.554002][ T31] Not tainted syzkaller #0 [ 330.559099][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.568496][ T31] task:syz.5.1399 state:D stack:26120 pid:10958 tgid:10955 ppid:8568 task_flags:0x400140 flags:0x00080002 [ 330.581052][ T31] Call Trace: [ 330.584466][ T31] [ 330.587421][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 330.591921][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.596844][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.602960][ T31] ? __pfx___schedule+0x10/0x10 [ 330.608695][ T31] ? schedule+0x91/0x360 [ 330.612968][ T31] schedule+0x165/0x360 [ 330.617181][ T31] schedule_preempt_disabled+0x13/0x30 [ 330.623925][ T31] __mutex_lock+0x7e6/0x1350 [ 330.647767][ T31] ? __mutex_lock+0x5bb/0x1350 [ 330.652590][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 330.674722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.679805][ T31] ? stack_trace_save+0x9c/0xe0 [ 330.734446][ T31] ? stack_depot_save_flags+0x40/0x860 [ 330.739966][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 330.747227][ T31] ? __alloc_skb+0x142/0x2d0 [ 330.751843][ T31] ? netlink_dump+0x1b7/0xe90 [ 330.759494][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 330.768017][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 330.773932][ T31] ? genl_rcv_msg+0x5da/0x790 [ 330.782127][ T31] ? netlink_rcv_skb+0x208/0x470 [ 330.788216][ T31] ? genl_rcv+0x28/0x40 [ 330.792384][ T31] ? netlink_unicast+0x82f/0x9e0 [ 330.797535][ T31] ? netlink_sendmsg+0x805/0xb30 [ 330.802485][ T31] ? __sock_sendmsg+0x21c/0x270 [ 330.808672][ T31] ? ____sys_sendmsg+0x505/0x830 [ 330.813636][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 330.819567][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 330.824817][ T31] ? do_syscall_64+0xfa/0xfa0 [ 330.829500][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.836896][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 330.843447][ T31] ? rcu_is_watching+0x15/0xb0 [ 330.848281][ T31] ? trace_kmalloc+0x1f/0xd0 [ 330.852878][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 330.859637][ T31] ? __alloc_skb+0x142/0x2d0 [ 330.864248][ T31] ? __build_skb_around+0x262/0x3f0 [ 330.876784][ T31] genl_dumpit+0x10b/0x1b0 [ 330.881235][ T31] netlink_dump+0x6e4/0xe90 [ 330.887673][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 330.892745][ T31] ? genl_start+0x499/0x6c0 [ 330.901642][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 330.907008][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 330.912740][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 330.919271][ T31] ? genl_get_cmd+0x496/0x910 [ 330.923956][ T31] ? __pfx_genl_start+0x10/0x10 [ 330.929401][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 330.934456][ T31] ? __pfx_genl_done+0x10/0x10 [ 330.939226][ T31] genl_rcv_msg+0x5da/0x790 [ 330.943714][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.949161][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 330.956305][ T31] ? __asan_memcpy+0x40/0x70 [ 330.960884][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 330.966274][ T31] netlink_rcv_skb+0x208/0x470 [ 330.971848][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.977001][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.982034][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.987989][ T31] ? down_read+0x1ad/0x2e0 [ 330.992430][ T31] genl_rcv+0x28/0x40 [ 330.996723][ T31] netlink_unicast+0x82f/0x9e0 [ 331.001512][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.007035][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.011982][ T31] ? skb_put+0x11b/0x210 [ 331.016858][ T31] netlink_sendmsg+0x805/0xb30 [ 331.021619][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.028608][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.033563][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.038936][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.044210][ T31] __sock_sendmsg+0x21c/0x270 [ 331.049431][ T31] ____sys_sendmsg+0x505/0x830 [ 331.054190][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.059572][ T31] ? import_iovec+0x74/0xa0 [ 331.064067][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 331.068759][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.075327][ T31] ? __fget_files+0x2a/0x420 [ 331.079952][ T31] ? __fget_files+0x3a0/0x420 [ 331.086225][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 331.091192][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.096771][ T31] ? do_syscall_64+0xbe/0xfa0 [ 331.101455][ T31] do_syscall_64+0xfa/0xfa0 [ 331.106579][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.111786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.118178][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.122881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.128866][ T31] RIP: 0033:0x7f8cc858efc9 [ 331.133296][ T31] RSP: 002b:00007f8cc94ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.141965][ T31] RAX: ffffffffffffffda RBX: 00007f8cc87e5fa0 RCX: 00007f8cc858efc9 [ 331.150220][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 331.158288][ T31] RBP: 00007f8cc8611f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.166456][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.174638][ T31] R13: 00007f8cc87e6038 R14: 00007f8cc87e5fa0 R15: 00007ffd1816b718 [ 331.183332][ T31] [ 331.187516][ T31] [ 331.187516][ T31] Showing all locks held in the system: [ 331.196352][ T31] 4 locks held by rcu_exp_gp_kthr/18: [ 331.201748][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 331.212775][ T31] #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 331.235222][ T31] #2: ffff8880544b46e8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0 [ 331.247597][ T31] #3: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 331.259952][ T31] 1 lock held by khungtaskd/31: [ 331.266504][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 331.280016][ T31] 2 locks held by getty/5589: [ 331.285974][ T31] #0: ffff8880304620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 331.295812][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 331.308354][ T31] 3 locks held by kworker/0:3/5835: [ 331.313576][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 331.328176][ T31] #1: ffffc9000431fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 331.338739][ T31] #2: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 331.350564][ T31] 3 locks held by kworker/1:4/5891: [ 331.360051][ T31] 2 locks held by syz.1.603/8063: [ 331.374431][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.404410][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 331.424505][ T31] 3 locks held by syz.5.1399/10958: [ 331.429744][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.454482][ T31] #1: ffff88807e6a56e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 331.475580][ T31] #2: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 331.494488][ T31] 2 locks held by syz.4.1438/11089: [ 331.499729][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.524564][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 331.547992][ T31] 2 locks held by syz.3.2358/14251: [ 331.553231][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.562090][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 331.572414][ T31] 2 locks held by syz.2.2614/15099: [ 331.578681][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.588879][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 331.600169][ T31] 5 locks held by syz-executor/15091: [ 331.605699][ T31] #0: ffff888053e84dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 331.616033][ T31] #1: ffff888053e840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 331.625720][ T31] #2: ffffffff8f6491e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 331.635982][ T31] #3: ffff888054f6db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 331.645755][ T31] #4: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 331.656894][ T31] 2 locks held by syz.0.2648/15215: [ 331.662125][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.670344][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 331.680737][ T31] 3 locks held by syz-executor/15396: [ 331.686154][ T31] #0: ffff8880794c4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 331.696833][ T31] #1: ffff8880794c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 331.707066][ T31] #2: ffffffff8f6491e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 331.717186][ T31] 2 locks held by syz.6.2768/15704: [ 331.722399][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.730613][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 331.741082][ T31] 2 locks held by syz.9.2859/16030: [ 331.746310][ T31] #0: ffffffff8f545950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.754579][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 331.765545][ T31] [ 331.767876][ T31] ============================================= [ 331.767876][ T31] [ 331.781757][ T31] NMI backtrace for cpu 0 [ 331.781775][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 331.781795][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.781805][ T31] Call Trace: [ 331.781813][ T31] [ 331.781821][ T31] dump_stack_lvl+0x189/0x250 [ 331.781849][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.781867][ T31] ? __pfx__printk+0x10/0x10 [ 331.781899][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 331.781923][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 331.781946][ T31] ? __pfx__printk+0x10/0x10 [ 331.781967][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.781990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 331.782012][ T31] watchdog+0xf60/0xfa0 [ 331.782035][ T31] ? watchdog+0x1e2/0xfa0 [ 331.782062][ T31] kthread+0x711/0x8a0 [ 331.782097][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.782118][ T31] ? __pfx_kthread+0x10/0x10 [ 331.782137][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.782160][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.782174][ T31] ? __pfx_kthread+0x10/0x10 [ 331.782193][ T31] ret_from_fork+0x4bc/0x870 [ 331.782217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.782246][ T31] ? __switch_to_asm+0x39/0x70 [ 331.782264][ T31] ? __switch_to_asm+0x33/0x70 [ 331.782281][ T31] ? __pfx_kthread+0x10/0x10 [ 331.782299][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.782333][ T31] [ 331.782342][ T31] Sending NMI from CPU 0 to CPUs 1: [ 331.938999][ C1] NMI backtrace for cpu 1 [ 331.939018][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 331.939035][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.939045][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 331.939065][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 11 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 331.939079][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 331.939094][ C1] RAX: f019f0e224a4d600 RBX: ffffffff8196bc07 RCX: f019f0e224a4d600 [ 331.939106][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 331.939118][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 331.939129][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1370 [ 331.939141][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 331.939152][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 331.939165][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.939176][ C1] CR2: 00007fc499f17d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 331.939191][ C1] Call Trace: [ 331.939197][ C1] [ 331.939204][ C1] default_idle+0x13/0x20 [ 331.939221][ C1] default_idle_call+0x73/0xb0 [ 331.939238][ C1] do_idle+0x1e7/0x510 [ 331.939261][ C1] ? __pfx_do_idle+0x10/0x10 [ 331.939288][ C1] cpu_startup_entry+0x44/0x60 [ 331.939308][ C1] start_secondary+0x101/0x110 [ 331.939326][ C1] common_startup_64+0x13e/0x147 [ 331.939350][ C1] [ 331.940247][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 332.105975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.115068][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.125118][ T31] Call Trace: [ 332.128395][ T31] [ 332.131307][ T31] dump_stack_lvl+0x99/0x250 [ 332.135885][ T31] ? __asan_memcpy+0x40/0x70 [ 332.140456][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.145727][ T31] ? __pfx__printk+0x10/0x10 [ 332.150349][ T31] vpanic+0x237/0x6d0 [ 332.154341][ T31] ? __pfx_vpanic+0x10/0x10 [ 332.158848][ T31] ? preempt_schedule_common+0x83/0xd0 [ 332.164290][ T31] panic+0xb9/0xc0 [ 332.168023][ T31] ? __pfx_panic+0x10/0x10 [ 332.172421][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 332.177777][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 332.183915][ T31] watchdog+0xf9f/0xfa0 [ 332.188059][ T31] ? watchdog+0x1e2/0xfa0 [ 332.192374][ T31] kthread+0x711/0x8a0 [ 332.196422][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.201087][ T31] ? __pfx_kthread+0x10/0x10 [ 332.205662][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.210845][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.216042][ T31] ? __pfx_kthread+0x10/0x10 [ 332.220616][ T31] ret_from_fork+0x4bc/0x870 [ 332.225199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.230367][ T31] ? __switch_to_asm+0x39/0x70 [ 332.235119][ T31] ? __switch_to_asm+0x33/0x70 [ 332.239882][ T31] ? __pfx_kthread+0x10/0x10 [ 332.244459][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.249214][ T31] [ 332.252490][ T31] Kernel Offset: disabled [ 332.256796][ T31] Rebooting in 86400 seconds..