last executing test programs: 4m23.238791624s ago: executing program 3 (id=2795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRESDEC=r4, @ANYRESDEC, @ANYBLOB="2fe2118e225afa8ff302b1e88c786b23fea2642cedd1cae5eb497f13c3bacc4fa8aac4ff233cf62b87eb362c9608eac2506749299d2c409899ba6a5f73fc5565d67d76d7d39bc97cb160136bce03eccab9ca7ad0fb4b6a904904a9b0af64a94b467aa06aa0abde249ce42847f53f239ce4714256100a48beef6b9e573fc418001edf242bfcec4cf681e6560cb1bac4ed2871dbe642d445f2b05e81f550eebca6bb1115010c1a63f8c080ccfc82d3502c84f8ea53a4ea4ce7bb98220e0d39c48ed34ca4744f8ee5c52a0505b6d8e8fff151f94ac38f83d67100e6b4636266a5a5993252cf8fd379999c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4, &(0x7f0000000000)=0x8080, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r13}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYBLOB="0000000000000000b703000000001466954900000c000000b7000000000000001801000000082c2500000000004303207b1af8ff00000000bfa100000000000007010000f8fffffeb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) sendfile(r4, r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000108010100000000000000000300000006000240000900000500080088000000050003003700"/52], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) close(r3) 4m22.104339503s ago: executing program 3 (id=2809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0xffff, 0xc}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0xffffffffffffffb4, 0x29, 0xb, {0x29, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x3, [0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x200, 0x5]}}]}}}], 0x60}, 0xff00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x51) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x6, 0x8, 0xfffffffd, 0x6, 0x10000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='\x00', 0x0}, 0x50) 4m21.802177479s ago: executing program 3 (id=2813): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="2404010000000000271400030076657468315f746f5f626f6e6400000014001680100001750c000300088b955cc9306eea050011"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60040090) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7800, 0x80, 0x4, 0xb9, {{0x11, 0x4, 0x1, 0x27, 0x44, 0x67, 0x0, 0xc, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x23, 0x27, [@loopback, @multicast1, @loopback, @rand_addr=0x64010101, @local, @loopback, @private=0xa010102, @multicast1]}, @generic={0x89, 0xb, "423f450b236420db1c"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x8, 0x8, {{0x1c, 0x4, 0x1, 0x5, 0x70, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_addr={0x44, 0x24, 0xec, 0x1, 0x1, [{@empty, 0x976e}, {@local, 0x6}, {@empty, 0x10000}, {@multicast2, 0xa3}]}, @timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x7, [{@private=0xa010102, 0x7f}]}, @lsrr={0x83, 0x1f, 0x31, [@private=0xa010101, @local, @remote, @remote, @multicast1, @broadcast, @local]}, @rr={0x7, 0xb, 0x62, [@empty, @multicast1]}, @end]}}}}}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000340)={0x1d, r13, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) (async) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r12, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async) connect$can_j1939(r12, &(0x7f0000000080)={0x1d, r13, 0x1, {0x0, 0x1}}, 0x18) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r13, {0xb, 0xfff2}, {0xa, 0xffff}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4016}, 0x20000050) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x8, 0x80, {{0x16, 0x4, 0x1, 0x3a, 0x58, 0x65, 0x0, 0x86, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x86, 0x4, "df0f"}, @lsrr={0x83, 0x7, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x3, 0xb8}, @timestamp_prespec={0x44, 0x34, 0xa2, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010100, 0x7}, {@empty, 0xfff}, {@private=0xa010101, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x18c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 4m21.688338204s ago: executing program 3 (id=2815): mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) openat$cgroup_freezer_state(r6, &(0x7f0000000480), 0x2, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val={0x6f01, 0x8100}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @ipv6=@tipc_packet={0x5, 0x6, "000200", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x1, 0x6, 0x1, 0x2, 0x6, 0x0, 0x3, 0x2, 0x3, 0x0, 0xfffb, 0xaab, 0x1, 0x4e23, 0x4e21}}}}}}, 0x4e) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x0, 0x10, 0x200, 0xa}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x103, 0x37fc, 0x7, 0x11}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0x6, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r9, 0x0, 0x1c000000007400}, 0x38) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x1e4, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x103, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff73", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}, @generic="6bcfe96b25a9eb93943e9a86c19c27ccf7052959f175400aafd6066f327eacce1bd34eab0ae58ed640d6a96be6907b109409e80318966b33fc271ccf0b8ef1540f71322ea37f54ba76fbe2dcb102530d07c2a44721bcc77a3360f3ceac9c0672a05a8314743697ce4dd525236de48de0c1a2b4c41903192411a5c0e1c9a13de68e9c227b82fd1f7746f8290ff383ee6a83f607de818b1a32b66bbb842b143b7e897baeb7968e9c5f0d5480e0156816970016457d1a461813796816fcbffafde3d9281bc10a98718995c27ee42761"]}, 0x1e4}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 4m20.607495185s ago: executing program 3 (id=2827): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000080) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r11, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0702000200000014000180060001000200000008180300ac2e000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004886}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400100001800db8d0000000000000000022000000000fe010000000008000400", @ANYRES32, @ANYBLOB="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"], 0x140}}, 0x60800) 4m19.516363973s ago: executing program 3 (id=2838): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb050018000000008000000c00ff8773874aeeb2ace4bf00000c00000002000000020000006b63535e189dabd403803f5fba701ec747e6fd0a89a84ab56dff295193dc0c105045635d29cc3801237519c94f5c3da141d5a4b2"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 4m11.04695553s ago: executing program 4 (id=2884): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x20}, 0x4000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x40000) 4m10.75360747s ago: executing program 4 (id=2888): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x20000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "27ddbd03c97a8d06"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000800)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r7, 0x10, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) unshare(0x20000400) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) unshare(0x20040000) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 4m10.523870929s ago: executing program 4 (id=2891): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x30, 0x2) unshare(0x6a040000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x11, 0x64, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1fd, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0xe0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x11, 0x7fffffff, 0x91, 0x6, 0x2f800000, 0x80000000, 0x6, 0x60, 0x80}, {0x7ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x418) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4030000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffc00}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x20000012) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x6, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 4m4.509719368s ago: executing program 32 (id=2838): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb050018000000008000000c00ff8773874aeeb2ace4bf00000c00000002000000020000006b63535e189dabd403803f5fba701ec747e6fd0a89a84ab56dff295193dc0c105045635d29cc3801237519c94f5c3da141d5a4b2"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 3m58.3274275s ago: executing program 4 (id=2899): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m58.116501176s ago: executing program 4 (id=2980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="99a9a665aa2a90ec8adab536f6d095e06ddaee6deef13755fb77597165225ef55b2f7a523738ae76e231117815dc560dd37f2e4d6fd2efc8c349bf41b44efe34dece01b1f8eb4ff9f2997c2da29697c41da6f4aebadfbca3f827b8fc66749ade1e03f14ff9e711196bbaf69c0ba8cf3dd34dad4ab6a04dc2875bc7387aba02e02cc687a6884710e73aae3b5d5f36364d8b5efbc533cb4ec7b44888c19e96a29bfdef9b57", 0xa4}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa0100fe}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000000c0), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000400e000000108000500e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x88044}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000031401002abd700001dcdf250900020073797a3000000000080041007278650014003300626f6e6430000000000000006d0d94ff56404ffec856b600000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 3m57.001237664s ago: executing program 4 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x2a, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="f1a988e6fc"]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0xc050) 3m41.579518668s ago: executing program 33 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x2a, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="f1a988e6fc"]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0xc050) 2m27.809030015s ago: executing program 2 (id=3491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x2, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m27.60418913s ago: executing program 2 (id=3492): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xf9, &(0x7f0000000140)=""/249}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8be2, 0x0, 0xff2, 0x6}, &(0x7f0000000040)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8be2, 0x0, 0xff2, 0x6}, &(0x7f0000000040)=0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x7}, &(0x7f00000000c0)=0x8) 2m27.518878011s ago: executing program 2 (id=3493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x21, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x21, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async) 2m27.399827083s ago: executing program 2 (id=3494): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000009c0)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) recvmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000380)=""/108, 0x6c}, {0xfffffffffffffffd}, {&(0x7f0000000400)=""/140, 0x8c}], 0x6, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x123) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400001008000000270d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_flags=0x2000}) 2m27.361662221s ago: executing program 2 (id=3496): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000040)='\x00', 0x800, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x2]}, {0xffe2, 0x2, 0x2, 0x1}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r9, 0x10001}, 0x8) 2m27.182942853s ago: executing program 2 (id=3497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m53.25335237s ago: executing program 34 (id=3497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 22.920325719s ago: executing program 7 (id=4484): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x200, 0x0, 0x58, 0x0, 0x0}, {[0x6, 0x81, 0x5fa, 0x7fffffff]}, 0x6, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdbb, 0x0, 0x0, 0x0, 0xfe5c}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x4, 0x7, 0x9, 0xfffffffffffffffc, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e3}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffb, 0xe3, &(0x7f0000000440)=""/227, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r0, r0, r0, r0], &(0x7f00000005c0)=[{0x3, 0x3, 0x3, 0x5}, {0x2, 0x4, 0x4}, {0x0, 0x3, 0xc, 0x8}], 0x10, 0x6}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdbb, 0x0, 0x0, 0x0, 0xfe5c}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x4, 0x7, 0x9, 0xfffffffffffffffc, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e3}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffb, 0xe3, &(0x7f0000000440)=""/227, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r0, r0, r0, r0], &(0x7f00000005c0)=[{0x3, 0x3, 0x3, 0x5}, {0x2, 0x4, 0x4}, {0x0, 0x3, 0xc, 0x8}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0xd1, 0x25, &(0x7f00000006c0)="a0b201a8a81616e6cbd7e34086355b2f0b16b2a0466b7c6c4eef1f7a771f0618f6247a2efce2866c323162712ff0ad70fbbad5978a48864b0cfcff78f6032033313766ed919ae0f46d5ea88e1b0cb8c0a8bd919ce22e2d655382541345b6d6285a6a8cb4964e83b270a4b13beb9ee432c2b2d6c1e297b1b384bdd4077b930ecd02ff178d33677a7ad8de9d98cfd3958c7560df5036cc7aed2125ee3636a83a848a0a06641bc5d51bc909f5058169c95186504c7d4ed6185fa344f7a76c1f47c2ae0f12190802173f485875b07cca8fef52", &(0x7f00000007c0)=""/37, 0xb4, 0x0, 0x72, 0xf1, &(0x7f0000000800)="90cd50420fab4d8e53fe43ff17613fb083d31d85fc68addd8b1e3cb9c93a222bf48ec078e976712e633f4382a61d1f6eec77aa8107881850eea39d752af5b14ec7ddfb14e29f0dc0c06a786fa787084a96e07435caae9acd037ab11176da9d37c74760f87f09406d9b1ff67212e334a5c20a", &(0x7f0000000880)="87d2238885abea326fd9f7731ceb3f43c440ddee44f5a6254e141b2b7e468a68322d6daada9e708a0acf0f8c577e13dd6070c98bc51760e63771c806e0e40c3db603d4838e0ae1cda78a751ee52e2cf381e9f98e616244db1b529a8ce2970c8b90b2c5b0f1120dec79fc3cdc1f9b6b35067ed43752b7128badb155c3ba57514ee084f9cee32003eb247e3c1e281a3d2dc809fc23e7e8225f61890985ebc2fcd2c2bdb36d390cbb438d882f83678f7e90f5698e7bc40257e1587257efba681bee08b164908edb906a25e3a6b0ab25c3823f0bc5e3b8fa6b9da804a84e61e0ddd645a69e4f94ad489054602836f0102c0ea2", 0x2, 0x0, 0x3}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000002f80)=[{r3, 0x8e}], 0x1, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) (async) ppoll(&(0x7f0000002f80)=[{r3, 0x8e}], 0x1, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e0000003400028006000300300000001400060000000000000000000000ffffac141427140007"], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) 22.692156585s ago: executing program 7 (id=4489): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x0, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r5, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="574b9b122f6bc5410a92278122857e18", 0x10) (rerun: 64) 22.239848128s ago: executing program 7 (id=4494): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000b000200feffffff0000000030003200020000000000f3ffffffffff01000000000000000000000000000000fc020000000000000000000000000004030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x2, 0x100000000000003) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1) 22.087450511s ago: executing program 7 (id=4496): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x80, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6", 0x6, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x40000000) write$nci(r4, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES32=r5], 0x4) 21.852273283s ago: executing program 7 (id=4500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x287, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe8, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[], 0x6) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000ed05000500020000000500010006000000887250e3b3c65028254ffed2dfe72c"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ppoll(&(0x7f0000000700)=[{r5, 0x12}], 0x1, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) write(r1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x80010, r3, 0x5640b000) write$cgroup_int(r7, &(0x7f0000000080)=0x4, 0x12) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0xda0b3000) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') tee(r2, r9, 0x8, 0xf) 21.135019904s ago: executing program 7 (id=4505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @rand_addr=0x64010100}}]}, 0x30}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 5.925233153s ago: executing program 35 (id=4505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @rand_addr=0x64010100}}]}, 0x30}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 3.836969275s ago: executing program 6 (id=4648): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="6557020000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) (rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x19, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="44c3941d651145b583cdc8a208008a713ab14f83ec0e2e15a7c2c7fd72dec10318af218087", 0x25, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.553242821s ago: executing program 6 (id=4653): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000400)=0x7, 0x71) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x4000000000002f1, 0x10022, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000006800038008000140000000000800024000000004540003801400010070696d3672656731000000000000000014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000014000100767863616e310000000000000000000048000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c00038018000380140001007069bd75f53c1095f8036d367265673100"/292], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b00)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x7, 0x401, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x68, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x4c, [@broadcast, @loopback, @empty, @multicast2, @multicast1, @empty, @multicast1]}, @generic={0x0, 0x5, "ed23d5"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r6], 0x30}}], 0x1, 0xc0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000cc0)={'ip_vti0\x00', 0x0, 0x30, 0x8000, 0xe, 0xfffffffc, {{0x2f, 0x4, 0x3, 0x5, 0xbc, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@noop, @rr={0x7, 0x17, 0x1f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x7, 0x7a, [@broadcast]}, @timestamp_addr={0x44, 0x44, 0x1d, 0x1, 0x8, [{@broadcast, 0xfffffffb}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x10000}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x200}, {@empty}]}, @end, @rr={0x7, 0x1b, 0xaa, [@rand_addr=0x64010100, @remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @empty]}, @generic={0x83, 0x12, "60bf724100b44f0a24b4e9c2e0b14c74"}, @cipso={0x86, 0x16, 0x2, [{0x0, 0x10, "305d34613664cea3e13782ce318b"}]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000020c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x20040011) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 2.709447626s ago: executing program 0 (id=4659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000001500)=0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x33}, @in=@dev, {0x1, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7, 0xa0000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdb7b, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000051}, 0x8860) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000014c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r9, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6c87fb30e3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c000) recvmmsg(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4095, 0xfff}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2}}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x82}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xffa, &(0x7f0000001780)=""/4090, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.548802102s ago: executing program 6 (id=4661): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x45d5a24f61177641, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x5d, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x68, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x2050) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x8) sendmmsg$sock(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x18}}], 0x1, 0x40084) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.238773595s ago: executing program 6 (id=4666): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8810) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7000000}}}}}, 0x0) 1.983151169s ago: executing program 0 (id=4670): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="0839e7a201dbd842699f24df6d422a478d9693cb", 0x14}, {&(0x7f0000000140)="2a2788eed1a998933e9cfb854a71888c52cbb8984b33c4e682b823ff381092a8aa26f734d18e521527", 0x29}, {&(0x7f0000000180)="dcf2109b072b32e15b531c39c34ee008571e1ee28bcc4a4c60e1727dfab506128e22c4f4b7", 0x25}, {&(0x7f00000002c0)="4a1cc7667e8cafd71d198f36ee88361bc074a2c0b995a1e312d02368d6d7b7c5af309040dcf13fd40e647901dbb7ad4e2a7acc547da1412b156198c65f9bd56d1fd985696dff44dac6962dedaacf523d0ac595edb3cb26a5adcfd875d352f3767f8d46b770dbd3670a7874846fd1e6f1817f95dc6499dd36f7ac01bcf77fa326247d17fa10fa76b970f8c7a49972c399a9bfe38079baeb034a1c18bee7822f0570dabc11e51367c9c98a62184cd65998f4c2578f635cbc53a8f876ff1110562764e48d", 0xc3}, {&(0x7f00000003c0)="fa33d10b9076de97a126fa6ad65036a8eab28c4f017e24424444934c22da3efed276f952cdd301350f36", 0x2a}, {&(0x7f0000000400)="ad9bd066c72d46f9fe1c8be9f33b2c359c1b76092368d717b487f95d3310620a5ac0f25f67bb7f73117cc93f3051e6ae64e6ce62d4989b4b5237f9d780e99d0b94da", 0x42}], 0x6, &(0x7f0000000500)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0x6, [{@private=0xa010102, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb8}, {@private=0xa010101}, {@local, 0x8}, {@multicast1, 0x8e1f}, {@loopback, 0x9}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xc6, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@loopback, 0x5}, {@private=0xa010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@loopback, 0x7}, {@rand_addr=0x64010102}]}, @end, @ssrr={0x89, 0xb, 0xa1, [@rand_addr=0x64010102, @private=0xa010102]}, @ssrr={0x89, 0x13, 0x14, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x89, 0x9, "1eaa7d43823fb6"}, @end, @rr={0x7, 0xb, 0xb5, [@multicast2, @empty]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0xc1}, @ra={0x94, 0x4}, @end]}}}], 0x100}, 0x4008001) (async) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="0839e7a201dbd842699f24df6d422a478d9693cb", 0x14}, {&(0x7f0000000140)="2a2788eed1a998933e9cfb854a71888c52cbb8984b33c4e682b823ff381092a8aa26f734d18e521527", 0x29}, {&(0x7f0000000180)="dcf2109b072b32e15b531c39c34ee008571e1ee28bcc4a4c60e1727dfab506128e22c4f4b7", 0x25}, {&(0x7f00000002c0)="4a1cc7667e8cafd71d198f36ee88361bc074a2c0b995a1e312d02368d6d7b7c5af309040dcf13fd40e647901dbb7ad4e2a7acc547da1412b156198c65f9bd56d1fd985696dff44dac6962dedaacf523d0ac595edb3cb26a5adcfd875d352f3767f8d46b770dbd3670a7874846fd1e6f1817f95dc6499dd36f7ac01bcf77fa326247d17fa10fa76b970f8c7a49972c399a9bfe38079baeb034a1c18bee7822f0570dabc11e51367c9c98a62184cd65998f4c2578f635cbc53a8f876ff1110562764e48d", 0xc3}, {&(0x7f00000003c0)="fa33d10b9076de97a126fa6ad65036a8eab28c4f017e24424444934c22da3efed276f952cdd301350f36", 0x2a}, {&(0x7f0000000400)="ad9bd066c72d46f9fe1c8be9f33b2c359c1b76092368d717b487f95d3310620a5ac0f25f67bb7f73117cc93f3051e6ae64e6ce62d4989b4b5237f9d780e99d0b94da", 0x42}], 0x6, &(0x7f0000000500)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0x6, [{@private=0xa010102, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb8}, {@private=0xa010101}, {@local, 0x8}, {@multicast1, 0x8e1f}, {@loopback, 0x9}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xc6, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@loopback, 0x5}, {@private=0xa010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@loopback, 0x7}, {@rand_addr=0x64010102}]}, @end, @ssrr={0x89, 0xb, 0xa1, [@rand_addr=0x64010102, @private=0xa010102]}, @ssrr={0x89, 0x13, 0x14, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x89, 0x9, "1eaa7d43823fb6"}, @end, @rr={0x7, 0xb, 0xb5, [@multicast2, @empty]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0xc1}, @ra={0x94, 0x4}, @end]}}}], 0x100}, 0x4008001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000fd07004100727865"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000fd07004100727865"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) 1.91694079s ago: executing program 6 (id=4671): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000400)=0x7, 0x71) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x4000000000002f1, 0x10022, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000006800038008000140000000000800024000000004540003801400010070696d3672656731000000000000000014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000014000100767863616e310000000000000000000048000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c00038018000380140001007069bd75f53c1095f8036d367265673100"/292], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b00)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x7, 0x401, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x68, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x4c, [@broadcast, @loopback, @empty, @multicast2, @multicast1, @empty, @multicast1]}, @generic={0x0, 0x5, "ed23d5"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r6], 0x30}}], 0x1, 0xc0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000cc0)={'ip_vti0\x00', 0x0, 0x30, 0x8000, 0xe, 0xfffffffc, {{0x2f, 0x4, 0x3, 0x5, 0xbc, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@noop, @rr={0x7, 0x17, 0x1f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x7, 0x7a, [@broadcast]}, @timestamp_addr={0x44, 0x44, 0x1d, 0x1, 0x8, [{@broadcast, 0xfffffffb}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x10000}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x200}, {@empty}]}, @end, @rr={0x7, 0x1b, 0xaa, [@rand_addr=0x64010100, @remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @empty]}, @generic={0x83, 0x12, "60bf724100b44f0a24b4e9c2e0b14c74"}, @cipso={0x86, 0x16, 0x2, [{0x0, 0x10, "305d34613664cea3e13782ce318b"}]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000020c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x20040011) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 1.672467872s ago: executing program 1 (id=4675): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000024002100000000000000000000000000060004"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x114}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.616768399s ago: executing program 0 (id=4676): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c00)={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x30, 0x0, 0x1, [@nested={0x46, 0xb6, 0x0, 0x1, [@generic="ee4c08fa9d68b144a31e67c46e67fb5d1758e1cee43c0537999c3c3635cf50b80cc3e329a40cc7c9df8fdc7b1faf453bad98ffac8da79422228a513b720dc0fbea25"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff7fff}, @jmp={0x5, 0x1, 0xc, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r6, 0x4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000008000000000000040000008500"/32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r4, 0x25, 0x4, @void}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x40, r10, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x40, r10, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 1.35925055s ago: executing program 5 (id=4677): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) recvmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.331043452s ago: executing program 1 (id=4678): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4018}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 1.258527642s ago: executing program 0 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a749bd7000f9dbdf250a0000cdff000001020001000800060000000000080018f04e234e2308001000f0"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0xc}, @void, @eth={@multicast, @multicast, @void, {@generic={0x88f7}}}}, 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.112578093s ago: executing program 5 (id=4680): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8810) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7000000}}}}}, 0x0) 1.103704444s ago: executing program 1 (id=4681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xe, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 973.229365ms ago: executing program 5 (id=4682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x20, 0x5, 0x7fff, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x66, 0x0, 0xe2, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 879.1314ms ago: executing program 6 (id=4683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r5, 0x0, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$802154_dgram(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x4021) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 632.441322ms ago: executing program 1 (id=4684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x5c04a200}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x188, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x104, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x24004005}, 0x10004004) r6 = socket$netlink(0x10, 0x3, 0x9) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="fbd5a739", @ANYRES16=r9, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4008880}, 0x4c884) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ee2c2bb}]}, @NFTA_CHAIN_USERDATA={0x2e, 0xc, "650e3fa6ca88a13956094f3cbff8da264b53f5950a53472bba49879f3348d43f9088dc7a50395fe2b882"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x144}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 631.776158ms ago: executing program 5 (id=4685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="b9e9b053"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="010006002700000000000b00000040000580"], 0x54}}, 0x4000020) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast1}, 0x1, 0x1, 0x1, 0x4}}, 0x26) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x7}, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000000c0)={{r7, 0x9, 0x8001, 0x80000000, 0x0, 0x6, 0x5c, 0x4, 0x3, 0x800, 0x8, 0x5, 0x8, 0x9}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001540)={0x0, r8, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000002c0)={{r7, 0xa, 0x7, 0x10000, 0xfffffffffffffff7, 0x4, 0xa, 0x8, 0xed7f, 0x2, 0x4, 0x1, 0xfffffffffffffffd, 0x100, 0x80}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, r7, "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", "f1914239613d0ebff7f45dcf60c2119f4501489b9d086eec3cd99b4a5e5033a5b2a06685946c125c8880f5127671297b744d4ac0e08d94e63278a3a30c99285c43a3c3802d5bc77ed4f90e123bcfaaff3089e3608f6eed077406ba572c32e04c1f5550ab1eeb5ac7e52f24334c56adec64ff2126b79e9467a497f9893d12d1304870d68d38043fcaeb409369ca74e89bd218dc68b2b8b13ba5139622258ba4c03aa9e1f02d8a87de7006343bbd947c20c1aa00a6da1ea1bfd452dcb84c749021e26bfa6679907ce0f1c23130bba3533ce38b9d194ad3d8fe4920dfa31f38ced593008da63107d374dac78a953c4665e22e5403573c51dd9eb9e57ff9104c1f58ba465ae42e06b33db01b07ca95eceadb055cff925f013dac4fb84f3615b6a0bf759944fd41c4c812b6aa1b23b9fce73fc1a81f88834647a26b6e45976e25ec956d1ac665a6006a525107a25d101ea7de7f8dc134b8f2c9873a2f2c5703e3a662726f7b2c1e9160af87941b3258787702b7e6f86abe81e6c89f947e75534018a42d5496a29c4b1d36e309f18765f85a8637d2571d615bf1a5f38e861fb480c7d0e9d0618011834135417cf40e92da8ca074ae1d59a95d01b53b55cd94846569531fdc72788feb6b9b5858fc3edec4ca461735759ede18009204ef65b3db4047e3730261fb0287ae065b435fa28f082a96168f944627fac1dea90af9102fcc8efad59977d6119c04207cf6c1a5e921d9a965180d83aa80de6adf32bf129b2e7dd8118bac721cc45cf6f1fc7ede19e45af946b9fa808caa026834e6dcf96effc0d49c50b54eaef73f98ecd8e0fc9f75398619dc129fc9e2af220e43c82785acd99970c2c72372c6b2c07c98ff8c191583eb64bb0a19358d7e9d8922de7a828c1d29a21d6b8cd6d0de6f4995a6f5e67dbc8df17814772f30324faf87acfe218e549d2afb53847828dac69e01a0c2ee5e80f859cc31f0effe8ab53cfcd320407327acf6c4593c440324e7e460881aeb3152ce524003291623520f3252e13950aff513b7eec2ada21ee3ecd297583028c3dc1afb4f6b14b4b4c3531af165852e33c86540f87fc1d1aed931e4de46b6a5aced50a5d54051f5b25bd97258ae0d197a42bc15607e87132661cf2d11637bb6ef6b6164afa4f646f4c3a516d0a09e16e7b9eef9d35f2c885f1fdd30be7b1940d4e2ee28a0a8f2a08b95f87e6bd1f149bfcef3cc73c041a67d205f3e150d5d146f88dff56f542724af730178cbcf1442b9d4f985a9b94cddfd9f3447a54598766acbdfd2c1a5efd21d7249dd8f2c151bd3122aa7b8ddbb779982845752e4bc1cc86dd42beb300b7742b015f6cb58a4a694c1f367d5f94f824fae114a572e2b98b875de92ee2e17be2bccc47b63d5dc5a03d67f22e9e39f75335a361824d94631aa352de50f0b240993c3d67a58b70db1f094c6ea5ccf7c97f5e904d00e00f860bad43d145e52281ed2631486b173cb1c0f000c2c174dcf3c614db4316e978cd2e4c05af18afe5da014b865bf92c53ebcfdd2de63c5aaa77ef5fb1ee876732fa6417ed07d8e1a8626493dc8e829cfabe6ceceb7889f77ba8ea5ab12ee3f10bb122269340bdaf76ac284e80092fd28a98b9147996aa1e270eb80a564fef7aae8f89db31bb37f2a45f6e066d41a249eb498363e6830881053e612b55e22be8bcc8a54592c06ba58a79d26bc91c71f796969f661dd96f20fa2d229022caef55772ba298026af72ee2edd00ec383429d2b1b7b6e217fbfe7b05e89c9b15592258bc591790c8f8376012d0a78309bdc522fad486485f283893844de35a62d71b1aa56b31e8ee921b4dbf7b22ab2600a32e406c8767ca026e9a962c43b948750fcc5efc6edd524d304063f38f70800612a8e73bc8f87848b438a07b83008afd18c2ed029817cd2eced95f5b414815104efba1636ea7bfc9fc4feb35ff7b22a72ee07557d31e748dc9f16d6cea7e1e6b9d4d2a3555df7e948a610a9023541511f579de98f6f2ab480f982965af25bc359e95c1d0b28badee12abb3a415bd9793963dde887a256708d87ab1df7b0b33caf4afd48c584826a0c7fcfe24bd86faa6d57d8dd8f1d5564ceb193352452a7bf87e09992c8f2306d068becc2c7c3434dd7ac1481b8395b4d9a1ed4e235be678a48637738f6c423880d5f2d8ac532cda5ca1823fc2415b734b59440ac6fdf9502d30c0c03a2d2550c38c6bcf0e2a34f67e2fcfc6f9e166f9b9318658c2f80835ab4aec2662d2ee003c30d0b5974ec589a5df59da9271f5dd8754d941343e597be3b42574dd965e022afe4b71554546182310475c5c38acbb1d1b256ebd991402d41af9fc8457e04b8bda992eceba9eaf8c0229200ff6b0d10992e7021f498813a7d63435dc6bd55671f3b6171e60cd0e32a8ce3b024f82093c0899d2fde2dea5c1624124ad5732ae07809209568a8efa73dbafc2f7f58c54009732be820cbd18f8cf7e091f1f8b40f82e5b05b3f8aa2872a2660237e0aad686faaeb5ac92514f597c2f5a7f5aebc53deaf5d360d8ba09373052c2c8e99848f3d97d90ff68e4f3f9d50aec36241ef1665afb1633c929a74584a27aeabb54d4c2b1ba48d0fb63681f50e1877ddbf961f834366ef55d0e61580406453ef39be6379c43a05d1a58824fc8da2d60dbd01e161bd826258fa03197fe5a91a6c685f11d78bdc693016c47bc5151b3e3c302ae29b8b151b277e18911a079f66b62aa2e7ccb3e8dbd3f3aa4c234ea64e8076ef8854132638520d4852b6ac336cef33903254b5312596776de5d2e4a32aaa90e4b068cf3cfd2780486d4a1d899f8cbcbbf78f9edfff4d5a8f997c005e417d67321de62a2c3e1d621cf0e71ad170012cbd4509057c1b4d9b4dfc7076337b4c28e98e932ae52cb6a29e4e5965ab8d5a4c2f49eb89bd44f6b0c84fde605df1b100f390fefd7a14e85638bc87763e2de0c7b6bdc7f8e4e5c5e4522254f1ecf090ec1243d817ee6c5043040e3e198fd0b1290d303e58359c9dcd6b2e8907896b1802c1cbc2a74f0f489f5b423d2079d6fbb4f1c775b259f231fdfce6157bf94bfcb16487d8948ccf1c7f7ea778c184a9549bdbcdfaf117449baad8dd3fec7dbc95962e65e4c81d5db82c8e0841b0f7dd5dee5f64c5e8367a1df9cb73951dea1cd2df6630171bda8589f8099eea58aa66a56652b662bfab168e67ad8a1ce9e5cf1d817579a1127bcb9928535fcc0e115dac7a87db3c664c20c6ae9c9a542a78a82d5693dc807a8762182e8e7889643668636cccaa18204ab35aa0fea4627bb070f0753ca7531c1f25edd65805fada8fdd4a8640fd141ae59ae0c9e5b5a47808202694c739a388541460687b8c48c5155afb3e4481feb362a79165389bc123b1857f7d8cdbef8b9e33283e50de33b52407f4ac91ff539bb7359d87cef892dbe3ec18eadb577737159694dc6255204d1aa5013a0d9fa38d118c75430163b581396258fabb5f0151e06d2571c0591da4305ce64409a83a2ecdef0330418a85f496f59a6fdfc112585a9f6421133b694e28467521f14dcbe3750a9c4e73deb40596e6a6d048fe3187cad29496f8c781ac409bf9c069322d89ee4fbf437476ae624c91d49c02dbee629eae2e0f015346979767ebbd98e891b1901dd97604515d3c8ed109482d2569551d7243a30e38c1ec1b3d3dbc7cbc36230b5c707d6fc416591c0d448c943727304902fd0dbaccd085f8095ce3e9c04f2f9391bfbe64fbf27c406183d4ccd7acd3e0194a3fa392017ca10bd1aeb768559cc084f3f08e3f3e81a6d518e84d90fccdb09f9bc644566ed109c4a3cf98a3506c1ceb8ae6fec7571d3dab81238de5a781f971cf89513f7d4551ea8b562ae9b746ee8e2a80a05960970f586fa80fcc5f893e067e5e727eab0fcb92ba8c3755837c5a8c8d610728a7629a1507e9b9d9d248a2918a0af5ec9048aeeb82729e33ff48cc668d7d7438a40f58d62218365dfa4ae7a66c4d4bc637964faa8023f0d8c414ecbc97f982a66130a47a4741fdaff46c471a15e314feaa079324475c0e8fd5147babd9f13d1b22a7bb28bea3261ddea1eea484d3cd2bd227b6c887cc57d0ad73511fa199a81ef7592e255fe0c06a3ac681bbc03e26fe5038d4a3ce408ee507f7973aba48e4161db1eda1810e460a7474c2be5b5bf68909ce6ee15b59e551abe258a169717bf8de670130697af93c2ba4707d43f663479c6c6838e9d5a58c990a398ae7082512633ecad15808321a75457a16cc8b5ee40e84af03f501a7536806cecb9e4d47155a9eebd47d95d3be8c9902ef68ffb63775b2079b5f15795d56f3c527d48b7eab7dd9ab07e63dc1af95dfb5e1e85dd691ece45c3f2a3bc0607cc829ead6adc7d1bace9bda1a5ff513211eb440ddab24fbe4897729ac388fb9937966d36889b1d8f430ee49f4804a4017aff71042d2b8bec76343a4e927e553a7cce1ade8094a7b9e2eb98b648a9836433c118f1ea2eceea69eb119e2e8d9522bdad46b31c49f842adf09edfbfb65f83a2569daedc881a60228ef1b5dfdca8c3d7fd1433bcb200ce225dba37dff911c81f4e555af143e5c7ec6605e24434b385bcf36303ba8e265b3dcddec1da6bd5250892373ca9aaa369f143a9c701f7087a745ca7e074aba9d75a569b7fc3292a41118a65a81e2a3a5e664538fa41639241aa9849dc667b70d44a36d88beecfb10ef406584b125cafbe0cfb4366e112778e6846de07298a73738fc3ccbe729f81ff9badea849492c72d17661565641a5788f7bab31a1e4d3dc5e7eae8f03661261f2460af0ee5e764211a32c60bc82c44998e416748db71b6cce104975cd2f75ef9e8f634deb33cf8201edc949bf65536c5b2ff8a978a1594e1f5b08f85bd098ddbe62f4ea4e46c3498bcdf3413a0a8b4b1cb5d143cc1ad3a45dcd51adce841ba92e2c14561708f6f23498fe536fc5c04e8fe30496ef473335a5acebc04ee4bd860eed7af66e52a7429e9870ac3c9c9bb549f7c3edccaea0b7e87cc5bbaac629e4fc7a0425ca0dd3b46bd496c511e1844e8679ba0fcc0ddb721ce794cd0a9d5264c89b26c88439af4379acdc576e6469942b18db5c9cd6483e2aab911c4e902bacbe609b2a6bd18ca5bbd7f031cd8e8d6026b8767cf5906e7701bd5adeec39f03211925b1421681c499e561a0d947cb36955b76ddf7c6cf9e41bccab02ae7e225a294ed60ec25448f8511a5f73a19d8ff2a7c87a49fba3057a50adb7d399a478848b0f60c654ad9d3dd79674b530eb9a2c5725465d63f02fc77a7a07f7d1844a92fb03c6141684d9ab1791723ac5b3d7b3660fca0c5f61748510fe1452ee080c037a91622349cc35d9c466b6deb91836e950d348accafde6c211a8767c979294c5eab3c2a1a64e54b2d0d79813b965425"}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="030500000000020024001280090000030005004b4b0fe16336bcf60000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000140)) 353.13521ms ago: executing program 0 (id=4686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffff}, @initr0, @exit, @ldst={0x3, 0x3, 0x6, 0x7, 0x2, 0x30}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0xde, &(0x7f0000000940)=""/222, 0x41100, 0x8}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x338}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xad}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) 346.680739ms ago: executing program 5 (id=4687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="28000000130a050000000000000000000a00000a08000340000000050900020073790600000000"], 0x28}, 0x1, 0x0, 0x0, 0x60008010}, 0x24008004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x48, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000300000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="50c338e088a8", 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x20, 0x20, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 192.220095ms ago: executing program 1 (id=4688): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56542, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0xc, 0x3da48c8682330ab8}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x8}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 138.842718ms ago: executing program 5 (id=4689): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(0xffffffffffffffff, &(0x7f0000003800)=[{&(0x7f0000005580)="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"/4265}, {&(0x7f0000000700)="56ee09737d11b915"}], 0x126a) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, &(0x7f0000002640)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xdcc}, {&(0x7f0000002180)=""/112, 0x70}, &(0x7f0000002500), 0x0, 0x8, 0x600}}, @cswp={0x58, 0x114, 0x7, {{0x80000001, 0x7}, &(0x7f0000002540)=0x2, &(0x7f0000002580)=0x72056128, 0x7, 0x4, 0x867, 0x2f3, 0x80}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000025c0)=""/36, 0x24}, &(0x7f0000002600), 0x10}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x118, 0x8000}, 0x4000801) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000700000000000000000000a518110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005300000018130000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="00000000e89bf191b703000000000000857978010c000000b70000000000000028a6500008000000bf91000000000000b749031001000000850000da9369ce3f3e184059d90091130000b70000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xae, &(0x7f0000000340)=""/174, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x9, 0x8, 0x4}, 0x10, 0x2c551, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x0, 0xa}, {0x4, 0x1, 0x2, 0xe1e6277f6c4b6f9c}, {0x2, 0x1, 0x1, 0x4}, {0x4, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x9, 0x9}]}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x1b6, 0x0, 0x0, 0x0, 0x42}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd60122d9200083afffe8000000000000000000000000000aa00000000000000000044844a8bf843add400907800710007"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x404000}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000b0044000610005000000180001801400020073797a6b616c6c65723100000000000004000380"], 0x5b}, 0x1, 0x0, 0x0, 0x24008881}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc030000", @ANYRES16=r5, @ANYBLOB="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"], 0x3bc}}, 0x4010) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) recvmmsg(r6, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x41000000}], 0x1c) (async) socket$inet_sctp(0x2, 0x1, 0x84) 21.3873ms ago: executing program 0 (id=4690): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2102, &(0x7f00000042c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x2000c000) 0s ago: executing program 1 (id=4691): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8810) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7000000}}}}}, 0x0) kernel console output (not intermixed with test programs): uetooth: hci2: command tx timeout [ 541.646045][T19199] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 541.656188][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 541.680598][T15756] team0 (unregistering): Port device team_slave_0 removed [ 541.985628][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.380058][T19209] bond1: entered promiscuous mode [ 542.427988][T19209] bond1: entered allmulticast mode [ 542.458162][T19209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.585703][T18904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.599462][T19224] Cannot find add_set index 0 as target [ 542.684149][T18904] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.769443][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.776702][T15756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.843280][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.850538][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.039077][T19228] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3146'. [ 543.841436][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 543.860567][T19267] openvswitch: netlink: Multiple metadata blocks provided [ 544.565009][T19293] Cannot find add_set index 0 as target [ 544.588768][T18904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.003527][T19314] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 545.565751][T18904] veth0_vlan: entered promiscuous mode [ 545.588612][T18904] veth1_vlan: entered promiscuous mode [ 545.669987][T18904] veth0_macvtap: entered promiscuous mode [ 545.714145][T18904] veth1_macvtap: entered promiscuous mode [ 545.720650][T19343] Cannot find del_set index 4 as target [ 545.816484][T18904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.912613][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 545.951358][T18904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.993783][ T65] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.023326][ T65] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.063463][ T65] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.120089][ T3285] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.411068][T19352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3166'. [ 546.454254][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.480745][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.614830][T11099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.643970][T11099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.731615][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.747187][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.757661][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.768912][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.788532][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.797019][T19393] block nbd0: Unsupported socket: should be TCP or UNIX. [ 548.802261][T19410] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 548.843864][T14869] team_slave_0: entered promiscuous mode [ 548.849691][T14869] team_slave_1: entered promiscuous mode [ 549.034899][T19392] lo speed is unknown, defaulting to 1000 [ 549.860540][ T5621] Bluetooth: hci5: command tx timeout [ 550.252854][ T65] lo: left allmulticast mode [ 550.864601][ T65] gretap0 (unregistering): left promiscuous mode [ 550.946871][ T65] bond2 (unregistering): (slave geneve6): Releasing active interface [ 551.039876][T19443] sctp: [Deprecated]: syz.0.3182 (pid 19443) Use of int in max_burst socket option deprecated. [ 551.039876][T19443] Use struct sctp_assoc_value instead [ 551.214322][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.228877][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.241699][ T65] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 551.253523][ T65] bond0 (unregistering): Released all slaves [ 551.270308][ T65] bond1 (unregistering): Released all slaves [ 551.292634][ T65] bond2 (unregistering): Released all slaves [ 551.326828][ T65] bond3 (unregistering): Released all slaves [ 551.646665][T19392] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.666369][T19459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3185'. [ 551.701456][T19392] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.714351][T19392] bridge_slave_0: entered allmulticast mode [ 551.746417][T19392] bridge_slave_0: entered promiscuous mode [ 551.792740][ T65] : left promiscuous mode [ 551.856179][T19392] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.896656][T19392] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.921521][T19392] bridge_slave_1: entered allmulticast mode [ 551.940258][ T5621] Bluetooth: hci5: command tx timeout [ 551.947795][T19392] bridge_slave_1: entered promiscuous mode [ 552.040354][ T65] tipc: Left network mode [ 552.160705][T19392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.206756][T19479] netlink: 'syz.2.3188': attribute type 8 has an invalid length. [ 552.255255][T19392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.275379][T19481] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3190'. [ 552.561606][T19392] team0: Port device team_slave_0 added [ 552.575716][T19392] team0: Port device team_slave_1 added [ 552.596230][T19498] tipc: Started in network mode [ 552.614040][T19498] tipc: Node identity 3a2304e1a534, cluster identity 4711 [ 552.624959][T19489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.640383][T19498] tipc: Enabled bearer , priority 0 [ 552.890620][T19488] syzkaller0: entered promiscuous mode [ 552.910556][T19488] syzkaller0: entered allmulticast mode [ 552.925287][T19488] tipc: Resetting bearer [ 554.018720][ T4938] Bluetooth: hci5: command tx timeout [ 556.098099][ T5621] Bluetooth: hci5: command tx timeout [ 558.812758][T19509] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3192'. [ 558.825166][T19392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.832375][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.859071][T19392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.891647][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 558.912595][T19486] tipc: Resetting bearer [ 558.981049][T19486] tipc: Disabling bearer [ 559.012054][ T5724] tipc: Node number set to 2669085921 [ 559.021169][T19392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.029359][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.062111][T19392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.192616][ T65] veth0_to_team: left promiscuous mode [ 559.229165][ T65] hsr_slave_0: left promiscuous mode [ 559.274878][ T65] hsr_slave_1: left promiscuous mode [ 559.290382][T19563] netlink: 'syz.6.3204': attribute type 39 has an invalid length. [ 559.306613][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 559.445776][T19579] netlink: 'syz.5.3202': attribute type 2 has an invalid length. [ 559.455422][T19579] netlink: 'syz.5.3202': attribute type 2 has an invalid length. [ 559.471026][T19579] netlink: 'syz.5.3202': attribute type 1 has an invalid length. [ 559.629626][T19582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3202'. [ 562.460294][ T65] team0 (unregistering): Port device team_slave_1 removed [ 562.476886][ T65] team0 (unregistering): Port device team_slave_0 removed [ 562.720498][T19392] hsr_slave_0: entered promiscuous mode [ 562.740858][T19392] hsr_slave_1: entered promiscuous mode [ 562.758204][T19392] debugfs: 'hsr0' already exists in 'hsr' [ 562.774666][T19392] Cannot create hsr debugfs directory [ 563.163192][T19598] veth1_macvtap: renamed from vlan0 [ 563.384279][T19618] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3212'. [ 563.946847][ T65] IPVS: stop unused estimator thread 0... [ 564.047705][T19640] smbdirect: ib_dev[syz2] removed [ 564.493428][T10910] IPVS: starting estimator thread 0... [ 564.511273][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3222'. [ 564.607480][T19670] IPVS: using max 29 ests per chain, 69600 per kthread [ 564.786566][T19686] netlink: 1200 bytes leftover after parsing attributes in process `syz.2.3228'. [ 564.821879][T19686] netlink: 1200 bytes leftover after parsing attributes in process `syz.2.3228'. [ 564.944706][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3225'. [ 565.539180][T19392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.568984][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 565.593079][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.618330][T19392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.648484][T19723] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 565.656842][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.684356][T19392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.724682][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.747000][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'. [ 565.756924][T19392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.797289][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.125821][T19724] ip6gre1: entered promiscuous mode [ 566.166704][T19724] ip6gre1: entered allmulticast mode [ 566.255340][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.277832][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.285697][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.700125][T14870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.806439][T19392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.141614][T19392] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.149479][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.213787][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.221063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.310654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.317907][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.016233][T19789] bond1: entered promiscuous mode [ 568.045102][T19789] bond1: entered allmulticast mode [ 568.075264][T19789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.239391][T19797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3247'. [ 568.350482][T19809] veth1_to_batadv: mtu less than device minimum [ 568.605372][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3250'. [ 568.662090][T19822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3250'. [ 568.716582][T19822] netlink: 'syz.0.3250': attribute type 7 has an invalid length. [ 568.750600][T19822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3250'. [ 569.130135][T19392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.348697][T19392] veth0_vlan: entered promiscuous mode [ 569.403694][T19858] xt_TCPMSS: Only works on TCP SYN packets [ 569.443534][T19392] veth1_vlan: entered promiscuous mode [ 569.570295][T19859] __nla_validate_parse: 2 callbacks suppressed [ 569.570316][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3255'. [ 569.669145][T19392] veth0_macvtap: entered promiscuous mode [ 569.702080][T19392] veth1_macvtap: entered promiscuous mode [ 569.706960][T19869] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.784979][T19392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.851791][T19392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.963948][T11099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.002692][T11099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.035850][T11099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.063957][T11099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.133785][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3261'. [ 570.176295][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3261'. [ 570.254558][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3261'. [ 570.291353][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3261'. [ 570.329983][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3261'. [ 570.339677][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.509587][T11098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.540960][T11098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.644351][T15758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.688705][T15758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.840626][T19908] syzkaller1: entered promiscuous mode [ 570.856300][T19908] syzkaller1: entered allmulticast mode [ 571.812122][T19940] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3269'. [ 571.932027][T19939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3270'. [ 572.014208][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.033776][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.044584][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.053476][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.066984][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 574.097409][ T5621] Bluetooth: hci3: command tx timeout [ 574.451328][T20041] syzkaller0: entered promiscuous mode [ 574.484578][T20041] syzkaller0: entered allmulticast mode [ 574.676130][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3287'. [ 574.716097][T19949] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.748142][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.759912][T19949] bridge_slave_0: entered allmulticast mode [ 574.773070][T19949] bridge_slave_0: entered promiscuous mode [ 574.884819][T19949] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.906082][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.934122][T19949] bridge_slave_1: entered allmulticast mode [ 574.956452][T19949] bridge_slave_1: entered promiscuous mode [ 575.143835][T19949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.163885][T19949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.214098][T20079] veth0: entered promiscuous mode [ 575.256525][T20071] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3289'. [ 575.345944][T20085] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3293'. [ 575.365247][T20080] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 575.392989][T20080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 575.453126][T19949] team0: Port device team_slave_0 added [ 575.465478][T20073] veth0: left promiscuous mode [ 575.496002][T19949] team0: Port device team_slave_1 added [ 575.637025][T19949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.670283][T19949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.720397][T19949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.798071][T19949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.821995][T19949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.921955][T19949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.171853][T19949] hsr_slave_0: entered promiscuous mode [ 576.187946][ T5621] Bluetooth: hci3: command tx timeout [ 576.195138][T19949] hsr_slave_1: entered promiscuous mode [ 576.213624][T19949] debugfs: 'hsr0' already exists in 'hsr' [ 576.230627][T19949] Cannot create hsr debugfs directory [ 576.534461][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3301'. [ 577.256131][T20160] Bluetooth: MGMT ver 1.23 [ 577.274438][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3306'. [ 577.455197][T19949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.470432][T19949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.486023][T19949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.102793][T19949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.140077][T19949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.151364][T19949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.233271][T20190] Cannot find add_set index 0 as target [ 578.257639][ T5621] Bluetooth: hci3: command tx timeout [ 578.398294][T19949] team0: Port device netdevsim1 removed [ 578.460884][T19949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.488330][T19949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.519487][T19949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.775856][T19949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.809781][T19949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.857350][T19949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.908129][T20208] netlink: 'syz.6.3316': attribute type 354 has an invalid length. [ 578.957812][T20210] batadv_slave_1: entered promiscuous mode [ 578.977709][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.026095][T20207] batadv_slave_1: left promiscuous mode [ 579.185511][T20211] syzkaller0: entered promiscuous mode [ 579.208018][T20211] syzkaller0: entered allmulticast mode [ 579.285066][T20223] netlink: 'syz.6.3318': attribute type 1 has an invalid length. [ 579.395016][T20203] bond1: entered promiscuous mode [ 579.421494][T20203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.666247][T20223] bond2: entered promiscuous mode [ 579.693010][T20223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.750098][T20227] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.797524][T20227] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 579.818869][T20227] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 579.849462][T20227] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 579.925532][T20230] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.952212][T20230] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 579.969243][T20230] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 580.263153][T20246] Cannot find add_set index 0 as target [ 580.345667][ T5621] Bluetooth: hci3: command tx timeout [ 581.344781][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3323'. [ 581.399148][T20253] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3323'. [ 583.608511][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.657847][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.690188][T20256] ip6gre1: entered promiscuous mode [ 583.695473][T20256] ip6gre1: entered allmulticast mode [ 583.788439][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.842423][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'. [ 583.949272][T19949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.983763][T19949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.088703][T20283] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.115633][T20283] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.135606][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054742000: rx timeout, send abort [ 584.153087][T20288] netlink: 'syz.6.3328': attribute type 16 has an invalid length. [ 584.172458][T20288] netlink: 'syz.6.3328': attribute type 17 has an invalid length. [ 584.195090][T19949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.208685][T19949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.217621][T20281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.278976][T20288] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.286257][T20288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.300512][T20288] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.307801][T20288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.323146][T20290] Cannot find add_set index 0 as target [ 584.396779][T20288] bond1: left promiscuous mode [ 584.403964][T20288] bond1: left allmulticast mode [ 584.416710][T20288] bond2: left promiscuous mode [ 584.425989][T20288] ip6gre1: left promiscuous mode [ 584.432350][T20288] ip6gre1: left allmulticast mode [ 584.456132][T19949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.475994][T19949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.515040][T19949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.555325][T19949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.572439][T20294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.595710][T20294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.630785][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3333'. [ 584.639899][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057d25800: rx timeout, send abort [ 584.650192][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054742000: abort rx timeout. Force session deactivation [ 584.700592][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3333'. [ 584.874313][T20318] xt_hashlimit: size too large, truncated to 1048576 [ 584.890853][T19949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.898522][T20318] xt_hashlimit: max too large, truncated to 1048576 [ 584.975459][T19949] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.044648][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.051965][T15756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.133999][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.140645][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057d25800: abort rx timeout. Force session deactivation [ 585.141474][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.403067][T20336] Cannot find add_set index 0 as target [ 585.589560][T20353] netlink: 'syz.2.3344': attribute type 30 has an invalid length. [ 585.804214][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.812060][T20350] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.005288][T20350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.037066][T20350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.083265][ T88] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.092617][ T88] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.188165][ T88] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.222847][ T88] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.748814][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 587.771496][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 587.965650][T19949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.108918][T19949] veth0_vlan: entered promiscuous mode [ 588.188182][T19949] veth1_vlan: entered promiscuous mode [ 588.409636][T19949] veth0_macvtap: entered promiscuous mode [ 588.497541][T19949] veth1_macvtap: entered promiscuous mode [ 588.621718][T19949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.730987][T19949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.752387][T11098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.774837][T11098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.786883][T11098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.828596][T11098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.093341][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.112723][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.200736][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.222781][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.276313][T20412] Cannot find del_set index 4 as target [ 589.326067][T20433] geneve2: entered promiscuous mode [ 589.372239][T15758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.415337][T20437] sctp: [Deprecated]: syz.0.3266 (pid 20437) Use of int in max_burst socket option. [ 589.415337][T20437] Use struct sctp_assoc_value instead [ 589.417751][T15758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.556423][T15758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.580450][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3360'. [ 589.587057][T15758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.628830][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 589.670585][T20436] x_tables: duplicate underflow at hook 1 [ 589.770282][T20449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3364'. [ 589.846253][T20455] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 589.964695][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 589.987845][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 590.020667][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 590.077789][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 590.100490][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 590.407161][T20473] block nbd0: reconnected socket [ 590.420632][ T5621] block nbd0: Receive control failed (result -32) [ 590.594654][T20475] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 591.228242][ T5724] bridge0: entered promiscuous mode [ 591.822945][T20494] dvmrp0: entered allmulticast mode [ 591.932712][ T12] dvmrp0: left allmulticast mode [ 592.442381][T20529] tipc: Started in network mode [ 592.469103][T20529] tipc: Node identity 022cebe91665, cluster identity 4711 [ 592.486234][T20364] Set syz1 is full, maxelem 65536 reached [ 592.506529][T20529] tipc: Enabled bearer , priority 0 [ 592.556587][T20530] syzkaller0: entered promiscuous mode [ 592.568215][T20530] syzkaller0: entered allmulticast mode [ 592.668792][T20529] tipc: Resetting bearer [ 592.699210][T20528] tipc: Resetting bearer [ 592.805475][T20528] tipc: Disabling bearer [ 592.880767][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 592.911695][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 592.965470][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.013160][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.051021][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.091805][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.112478][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.131481][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.153019][T20554] netlink: 'syz.6.3385': attribute type 3 has an invalid length. [ 593.246142][T20560] syzkaller0: entered promiscuous mode [ 593.252530][T20560] syzkaller0: entered allmulticast mode [ 594.590259][T20585] syzkaller0: entered promiscuous mode [ 594.596109][T20585] syzkaller0: entered allmulticast mode [ 594.977663][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.807153][T20545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.514614][T20638] __nla_validate_parse: 65 callbacks suppressed [ 596.514636][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 596.841427][T20649] tipc: Enabled bearer , priority 0 [ 596.860925][T20649] syzkaller0: entered promiscuous mode [ 596.877825][T20649] syzkaller0: entered allmulticast mode [ 597.033729][T20653] tipc: Resetting bearer [ 597.088273][T20648] tipc: Resetting bearer [ 597.335034][T20648] tipc: Disabling bearer [ 597.495123][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3401'. [ 597.543243][T20658] bond3: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 597.590958][T20668] sctp: [Deprecated]: syz.2.3400 (pid 20668) Use of int in max_burst socket option. [ 597.590958][T20668] Use struct sctp_assoc_value instead [ 597.620249][T20658] bond3: entered promiscuous mode [ 597.636916][T20658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.661286][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3401'. [ 597.926505][T20682] validate_nla: 56 callbacks suppressed [ 597.926566][T20682] netlink: 'syz.0.3406': attribute type 8 has an invalid length. [ 597.967774][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 598.052646][T20682] bond0: entered promiscuous mode [ 598.077433][T20682] bond_slave_0: entered promiscuous mode [ 598.102164][T20682] bond_slave_1: entered promiscuous mode [ 598.140711][T20682] gretap0: entered promiscuous mode [ 598.215887][T20691] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3408'. [ 598.269887][T20682] bond0: left promiscuous mode [ 598.309199][T20682] bond_slave_0: left promiscuous mode [ 598.325057][T20682] bond_slave_1: left promiscuous mode [ 598.369086][T20682] gretap0: left promiscuous mode [ 598.774323][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3414'. [ 598.883590][T20718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3414'. [ 599.018997][T20724] can: request_module (can-proto-4) failed. [ 599.769877][T20771] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3423'. [ 599.876120][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3426'. [ 600.026814][T20785] tipc: Enabled bearer , priority 0 [ 600.046022][T20785] syzkaller0: entered promiscuous mode [ 600.072745][T20785] syzkaller0: entered allmulticast mode [ 600.195554][T20785] tipc: Resetting bearer [ 600.364756][T20808] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 600.489540][T20808] bond2: entered promiscuous mode [ 600.495490][T20808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.928340][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3432'. [ 600.963758][T20814] ipvlan2: entered allmulticast mode [ 600.969681][T20814] bond2: entered allmulticast mode [ 601.049033][T20808] ipvlan3: entered allmulticast mode [ 601.083690][T20823] sctp: [Deprecated]: syz.0.3434 (pid 20823) Use of int in max_burst socket option deprecated. [ 601.083690][T20823] Use struct sctp_assoc_value instead [ 601.122195][T20783] tipc: Resetting bearer [ 601.202039][T20783] tipc: Disabling bearer [ 601.365254][T20838] netlink: 'syz.5.3438': attribute type 33 has an invalid length. [ 602.934474][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3449'. [ 602.983234][T20892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.175895][T20900] openvswitch: netlink: IPv6 tunnel dst address is zero [ 603.460029][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3453'. [ 604.454338][T20936] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.563957][T20936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.691648][T20936] geneve1: left promiscuous mode [ 604.730629][T20936] ip6gre1: left promiscuous mode [ 604.735864][T20936] ip6gre1: left allmulticast mode [ 604.754524][ T3285] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.780522][ T3285] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.868227][ T3285] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.917469][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 605.020984][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 605.061457][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 605.165366][T20982] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 605.204794][T20982] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 605.351682][T20993] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3473'. [ 605.398225][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3469'. [ 605.431186][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'. [ 605.800599][T21017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3479'. [ 605.828137][T21019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3480'. [ 605.960911][T21023] tun0: tun_chr_ioctl cmd 1074025692 [ 606.128807][ T8038] IPVS: starting estimator thread 0... [ 606.227880][T21034] IPVS: using max 25 ests per chain, 60000 per kthread [ 606.328488][T21036] macvtap1: entered promiscuous mode [ 606.334061][T21036] vlan0: entered promiscuous mode [ 606.520489][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.531504][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.541444][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.553937][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.327118][T21136] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 608.358110][T21147] Cannot find add_set index 0 as target [ 608.369684][T21136] bond1 (unregistering): Released all slaves [ 608.648155][T21158] tipc: Started in network mode [ 608.659147][T21158] tipc: Node identity ac14140f, cluster identity 4711 [ 608.715843][T21158] tipc: New replicast peer: 172.20.20.187 [ 608.734641][T21158] tipc: Enabled bearer , priority 10 [ 608.873486][T21168] __nla_validate_parse: 12 callbacks suppressed [ 608.873506][T21168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3522'. [ 609.322331][T21190] Cannot find del_set index 4 as target [ 612.764604][ T8038] tipc: Node number set to 2886997007 [ 612.778809][T21200] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 613.420576][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3543'. [ 613.455545][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3543'. [ 613.472150][T21257] xt_hashlimit: size too large, truncated to 1048576 [ 613.916574][T21241] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.924219][T21241] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.419125][T21241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.465462][T21241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.082689][ T88] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.113957][ T88] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.148910][ T88] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.174480][ T88] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.309689][T21273] netlink: 'syz.6.3547': attribute type 11 has an invalid length. [ 615.994946][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 616.083424][T21318] netlink: 'syz.6.3559': attribute type 1 has an invalid length. [ 616.115157][T21318] netlink: 'syz.6.3559': attribute type 3 has an invalid length. [ 616.128290][T21318] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3559'. [ 616.180780][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'. [ 616.310691][T21333] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3562'. [ 616.729944][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 616.981983][T21365] vlan2: entered promiscuous mode [ 616.990081][T21365] bridge0: entered promiscuous mode [ 617.020189][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3571'. [ 617.034358][T21367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3571'. [ 617.070777][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 617.079955][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 617.092475][T21374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3573'. [ 617.115447][T21374] syzkaller1: entered promiscuous mode [ 617.122946][T21374] syzkaller1: entered allmulticast mode [ 617.402813][T21383] syzkaller0: entered promiscuous mode [ 617.408649][T21383] syzkaller0: entered allmulticast mode [ 617.568390][T21388] syzkaller1: entered promiscuous mode [ 617.574018][T21388] syzkaller1: entered allmulticast mode [ 617.592424][T21385] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 617.607490][T21385] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 617.626132][T21385] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 617.650090][T21385] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 617.771053][T21394] netlink: 'syz.5.3579': attribute type 5 has an invalid length. [ 617.856019][ T151] smbdirect: ib_dev[syz2] removed [ 618.477965][T21422] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 618.493539][T21422] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 618.753955][T21434] batman_adv: batadv0: Adding interface: dummy0 [ 618.762185][T21434] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.822177][T21434] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 618.889139][T21443] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 618.906699][T21444] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 618.986194][T21447] x_tables: duplicate underflow at hook 4 [ 619.226981][T21464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.535664][T21478] syzkaller0: entered promiscuous mode [ 619.542408][T21478] syzkaller0: entered allmulticast mode [ 619.833940][T21488] netlink: 'syz.6.3604': attribute type 5 has an invalid length. [ 619.866842][T21492] pimreg: tun_chr_ioctl cmd 2147767520 [ 620.011006][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.020069][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.122191][T21506] netlink: 'syz.1.3609': attribute type 30 has an invalid length. [ 620.480799][T21530] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 620.493234][T21529] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 620.560885][T21527] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 620.977890][ T5621] Bluetooth: hci3: command tx timeout [ 621.194647][T21562] __nla_validate_parse: 5 callbacks suppressed [ 621.194669][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3620'. [ 621.211829][T21562] tipc: Enabling of bearer rejected, failed to enable media [ 621.690558][T21589] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 621.799520][T21586] netlink: 'syz.1.3629': attribute type 4 has an invalid length. [ 621.840765][T21584] syzkaller0: entered promiscuous mode [ 621.856840][T21584] syzkaller0: entered allmulticast mode [ 621.868113][T21598] netlink: 'syz.6.3632': attribute type 11 has an invalid length. [ 622.136092][T21586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3629'. [ 622.145561][T21586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3629'. [ 622.155672][T21586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3629'. [ 622.502481][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3635'. [ 622.780153][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 622.792259][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 622.808389][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 622.818779][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 622.833552][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 622.934745][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3636'. [ 623.536103][T21619] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.543870][T21619] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.551718][T21619] bridge_slave_0: entered allmulticast mode [ 623.559243][T21619] bridge_slave_0: entered promiscuous mode [ 623.568136][T21619] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.575336][T21619] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.582691][T21619] bridge_slave_1: entered allmulticast mode [ 623.590343][T21619] bridge_slave_1: entered promiscuous mode [ 623.623876][T21619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.635999][T21619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.671044][T21619] team0: Port device team_slave_0 added [ 623.679354][T21619] team0: Port device team_slave_1 added [ 623.708963][T21619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.716052][T21619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.742578][T21619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.755113][T21619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.762380][T21619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.789627][T21619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.837559][T21619] hsr_slave_0: entered promiscuous mode [ 623.844537][T21619] hsr_slave_1: entered promiscuous mode [ 623.851461][T21619] debugfs: 'hsr0' already exists in 'hsr' [ 623.857428][T21619] Cannot create hsr debugfs directory [ 624.035475][T21619] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.048999][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.057022][T21619] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.067687][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.075817][T21619] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.086155][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.094475][T21619] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.111359][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.143347][T21619] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.150536][T21619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.158061][T21619] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.165482][T21619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.227095][T21619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.244705][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.254087][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.276228][T21619] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.290880][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.298086][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.314248][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.321423][T11099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.716311][T21619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.897779][ T5621] Bluetooth: hci0: command tx timeout [ 624.956432][T21619] veth0_vlan: entered promiscuous mode [ 624.972080][T21619] veth1_vlan: entered promiscuous mode [ 625.005645][T21619] veth0_macvtap: entered promiscuous mode [ 625.015740][T21619] veth1_macvtap: entered promiscuous mode [ 625.035758][T21619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.053457][T21619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.074803][T15758] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.083785][T15758] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.094996][T15758] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.104943][T15758] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.224088][T11098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.236340][T11098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.271525][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.280456][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.977972][ T4938] Bluetooth: hci0: command tx timeout [ 629.057504][ T4938] Bluetooth: hci0: command tx timeout [ 631.137938][ T4938] Bluetooth: hci0: command tx timeout [ 636.737590][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 641.284898][T21683] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3642'. [ 641.504071][T21700] netlink: 'syz.5.3647': attribute type 1 has an invalid length. [ 641.524413][T21700] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3647'. [ 641.550179][T21700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3647'. [ 642.866160][T21732] syzkaller0: entered promiscuous mode [ 642.880548][T21732] syzkaller0: entered allmulticast mode [ 643.365550][T21746] netlink: 'syz.7.3661': attribute type 32 has an invalid length. [ 643.715931][T21761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3665'. [ 643.813301][T21765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3665'. [ 643.837201][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3665'. [ 644.013279][T21769] ip6gre1: entered promiscuous mode [ 644.042525][T21769] ip6gre1: entered allmulticast mode [ 644.074714][T21774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.147315][T21777] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3668'. [ 644.458340][T21785] netlink: 'syz.6.3670': attribute type 1 has an invalid length. [ 644.513119][T21785] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3670'. [ 644.594136][T15758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.614158][T15758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.623364][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.760784][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3673'. [ 644.843359][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 644.895546][T21798] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 644.927831][T10909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.944874][T21809] sock: sock_set_timeout: `syz.1.3677' (pid 21809) tries to set negative timeout [ 645.005552][T21798] bond1 (unregistering): Released all slaves [ 645.182520][T21822] openvswitch: netlink: Message has 512 unknown bytes. [ 645.268665][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.779161][T21845] sctp: [Deprecated]: syz.0.3688 (pid 21845) Use of int in max_burst socket option. [ 645.779161][T21845] Use struct sctp_assoc_value instead [ 646.607988][T21887] __nla_validate_parse: 7 callbacks suppressed [ 646.608011][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3699'. [ 646.630398][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3699'. [ 646.641858][T21889] netlink: 'syz.1.3697': attribute type 3 has an invalid length. [ 646.716211][T21895] netlink: 'syz.6.3698': attribute type 1 has an invalid length. [ 646.785366][T21895] netlink: 'syz.6.3698': attribute type 2 has an invalid length. [ 646.996684][T21908] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 647.028294][T21908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3703'. [ 647.189284][T21913] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3704'. [ 647.199396][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.735249][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3712'. [ 647.831296][T21947] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 648.149565][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3710'. [ 648.232169][T21961] netlink: 221 bytes leftover after parsing attributes in process `syz.0.3716'. [ 648.288445][T21962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3716'. [ 648.433734][T21938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.476790][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3713'. [ 648.498485][T21947] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 648.811041][T21968] netlink: 'syz.1.3718': attribute type 354 has an invalid length. [ 648.827817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.845127][T21968] batadv_slave_1: entered promiscuous mode [ 648.864035][T21970] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3719'. [ 648.878674][T21967] batadv_slave_1: left promiscuous mode [ 649.137151][T21983] netlink: 'syz.1.3723': attribute type 6 has an invalid length. [ 649.186186][T21987] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 650.126194][T22036] netlink: 'syz.6.3737': attribute type 1 has an invalid length. [ 650.314189][T22036] bond5: entered promiscuous mode [ 650.351096][T22036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.357999][T22068] bond1: entered promiscuous mode [ 651.392823][T22068] bond1: entered allmulticast mode [ 651.412628][T22071] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 651.462211][T22071] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 651.500412][T22071] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 652.142286][T22092] __nla_validate_parse: 7 callbacks suppressed [ 652.142309][T22092] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3748'. [ 652.194724][T22092] Cannot find del_set index 4 as target [ 652.256547][T22086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3747'. [ 652.528825][T22099] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3750'. [ 652.613126][T22080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3747'. [ 653.555612][T22146] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3760'. [ 653.577714][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 653.600817][T22146] Cannot find del_set index 4 as target [ 654.039721][T22167] ±ÿmrÝ„`eù: renamed from lo (while UP) [ 654.595934][T22185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3772'. [ 654.609131][T22188] Cannot find del_set index 4 as target [ 654.817753][T22183] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 655.115494][T22204] sit0: entered promiscuous mode [ 655.166978][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3777'. [ 655.200929][T22204] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 655.257799][T22204] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3777'. [ 655.313659][T22206] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 655.336447][T22213] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 655.341020][T22206] netlink: 'syz.0.3777': attribute type 2 has an invalid length. [ 655.385429][T22214] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3779'. [ 655.564290][T22216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 655.731377][ T30] audit: type=1800 audit(1783861650.978:21): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3780" name=20 dev="tmpfs" ino=629 res=0 errno=0 [ 655.833004][T22239] v: renamed from ip6_vti0 [ 655.846849][T22237] Cannot find del_set index 4 as target [ 655.852082][T22239] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 655.964198][T22242] pimreg: entered allmulticast mode [ 656.051633][T22241] pimreg: left allmulticast mode [ 657.217360][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 657.295957][T22306] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 657.355220][T22309] __nla_validate_parse: 5 callbacks suppressed [ 657.355244][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 657.424372][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 657.476071][T22315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3805'. [ 657.493580][T22305] bond1: option arp_interval: invalid value (18446744072770027524) [ 657.502981][T22305] bond1: option arp_interval: allowed values 0 - 2147483647 [ 657.515044][T22305] bond1 (unregistering): Released all slaves [ 657.585444][T22317] tipc: Enabled bearer , priority 0 [ 657.632671][T22317] syzkaller0: entered promiscuous mode [ 657.646062][T22317] syzkaller0: entered allmulticast mode [ 657.717446][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.833660][T22317] tipc: Resetting bearer [ 657.861726][T22328] netlink: 'syz.7.3808': attribute type 29 has an invalid length. [ 657.884396][T22313] tipc: Resetting bearer [ 657.948023][T22313] tipc: Disabling bearer [ 657.954051][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3807'. [ 658.150933][T22337] batadv_slave_1: mtu less than device minimum [ 658.197177][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3810'. [ 658.254618][T22335] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3810'. [ 658.395467][T22348] Cannot find del_set index 4 as target [ 658.434225][T22350] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3815'. [ 658.626665][T22361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3816'. [ 658.642880][T22362] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 658.692415][T22361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 659.314731][T22382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.361354][T22382] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.434864][T22382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.734427][T22382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.773951][T22382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.817070][T22382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.843915][T22382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.930808][T22381] No such timeout policy "syz1" [ 659.944136][T22382] veth1_vlan: left promiscuous mode [ 659.976133][T22382] veth0_vlan: left promiscuous mode [ 659.988969][T22382] veth0_vlan: entered promiscuous mode [ 659.998106][T22382] veth1_vlan: entered promiscuous mode [ 660.010615][T22382] veth1_macvtap: left promiscuous mode [ 660.018956][T22382] veth0_macvtap: left promiscuous mode [ 660.025873][T22382] veth0_macvtap: entered promiscuous mode [ 660.033850][T22382] veth1_macvtap: entered promiscuous mode [ 660.048072][T22382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.056733][T22382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.066001][T22382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.075265][T22382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.098104][T22382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.134607][T22382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.172022][T22382] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 660.234433][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.241712][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.280761][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.288087][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.452662][T22409] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 660.521423][T11099] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.548798][T14869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.556783][T11099] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.792065][T14870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.888473][T14870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.957800][T22435] Cannot find del_set index 4 as target [ 661.151316][T22439] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3831'. [ 661.441937][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3834'. [ 661.579370][T22447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 661.607170][T22460] netlink: 'syz.5.3837': attribute type 1 has an invalid length. [ 661.691664][T22472] bridge2: entered promiscuous mode [ 661.703543][T22472] bridge2: entered allmulticast mode [ 661.901191][T22481] Cannot find del_set index 4 as target [ 662.347639][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 662.357092][T22513] netlink: 'syz.7.3851': attribute type 3 has an invalid length. [ 662.543663][T22520] __nla_validate_parse: 1 callbacks suppressed [ 662.543684][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3853'. [ 662.585966][T22520] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 662.609386][T22524] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3856'. [ 662.625414][T22526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3854'. [ 662.645164][T22524] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 662.672041][T22524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 662.698130][T22528] block nbd0: reconnected socket [ 662.836259][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3858'. [ 662.944006][T22527] ip6gre2: entered promiscuous mode [ 662.949955][T22527] ip6gre2: entered allmulticast mode [ 662.968488][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3859'. [ 662.986409][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3859'. [ 663.051033][ T3285] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.090247][ T3285] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.133495][ T3285] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.156417][ T3285] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.393581][T22553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3862'. [ 663.805379][T22590] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3870'. [ 663.862795][T22593] Cannot find del_set index 4 as target [ 663.986099][T22585] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 663.995375][T22585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.024014][T22589] bridge: RTM_NEWNEIGH with unconfigured vlan 1025 on bridge0 [ 664.135808][T22603] Cannot find del_set index 4 as target [ 664.192323][T22606] netlink: 'syz.5.3875': attribute type 5 has an invalid length. [ 664.218885][T22608] syzkaller0: entered promiscuous mode [ 664.234367][T22608] syzkaller0: entered allmulticast mode [ 664.265739][T22608] tipc: Enabled bearer , priority 0 [ 664.297737][T22607] tipc: Resetting bearer [ 664.376606][T22607] tipc: Disabling bearer [ 664.435451][T22620] netlink: 'syz.5.3878': attribute type 32 has an invalid length. [ 664.461033][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3878'. [ 664.513291][T22620] bond3: Setting coupled_control to off (0) [ 664.659557][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.747458][T22637] Cannot find del_set index 4 as target [ 665.014883][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3884'. [ 665.088194][T22655] Cannot find del_set index 4 as target [ 665.402667][T22665] vlan0: entered promiscuous mode [ 665.602125][T22673] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 665.671229][T22682] xt_hashlimit: size too large, truncated to 1048576 [ 665.705782][T22684] xt_hashlimit: size too large, truncated to 1048576 [ 665.796198][T22677] bond2: option min_links: invalid value (18446744073709551612) [ 665.821887][T22677] bond2: option min_links: allowed values 0 - 2147483647 [ 665.848033][T22677] bond2 (unregistering): Released all slaves [ 665.974565][T22686] @0Ù: renamed from bond_slave_1 [ 666.189585][T22696] Cannot find del_set index 4 as target [ 666.950676][T22733] sctp: [Deprecated]: syz.6.3906 (pid 22733) Use of int in max_burst socket option. [ 666.950676][T22733] Use struct sctp_assoc_value instead [ 667.924919][T22757] Cannot find del_set index 4 as target [ 668.409242][T22781] netlink: 'syz.7.3915': attribute type 1 has an invalid length. [ 668.486589][T22786] x_tables: duplicate underflow at hook 3 [ 668.533452][T22789] __nla_validate_parse: 4 callbacks suppressed [ 668.533473][T22789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 668.595757][T22789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.020696][T22806] 8021q: VLANs not supported on ip_vti0 [ 669.151783][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3919'. [ 669.226589][T22820] netdevsim netdevsim7 €Â: renamed from netdevsim0 (while UP) [ 669.259355][T22820] netlink: 'syz.7.3923': attribute type 2 has an invalid length. [ 669.292046][T22824] Cannot find del_set index 4 as target [ 669.293338][T22820] : entered promiscuous mode [ 669.826995][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3933'. [ 670.181113][T22863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 670.292300][T22867] ip6gre1: entered promiscuous mode [ 670.309851][T22867] ip6gre1: entered allmulticast mode [ 670.387142][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 670.751041][T22894] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 671.256364][T22918] erspan0: entered promiscuous mode [ 671.271881][T22918] macsec2: entered promiscuous mode [ 671.282391][T22918] macsec2: entered allmulticast mode [ 671.292922][T22918] erspan0: entered allmulticast mode [ 671.313454][T22918] erspan0: left allmulticast mode [ 671.319504][T22918] erspan0: left promiscuous mode [ 671.470539][T22884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.669148][T22937] SET target dimension over the limit! [ 672.578581][T22879] Bluetooth: hci5: command 0x0406 tx timeout [ 672.656446][T22968] x_tables: duplicate underflow at hook 2 [ 672.744971][T22970] Cannot find del_set index 4 as target [ 672.952648][T22982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3960'. [ 672.991012][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3961'. [ 673.003963][T22987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3962'. [ 673.014949][T22982] netlink: 'syz.0.3960': attribute type 2 has an invalid length. [ 673.032558][T22982] netlink: 'syz.0.3960': attribute type 2 has an invalid length. [ 673.057685][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.303990][T22993] tipc: Started in network mode [ 673.321912][T22993] tipc: Node identity , cluster identity 4711 [ 673.337749][T22993] tipc: Failed to obtain node identity [ 673.355681][T22993] tipc: Enabling of bearer rejected, failed to enable media [ 673.386097][T23002] syzkaller0: entered promiscuous mode [ 673.396596][T23002] syzkaller0: entered allmulticast mode [ 673.402860][T23006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3967'. [ 673.977070][T23029] Cannot find del_set index 4 as target [ 674.339295][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.455225][T23052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3977'. [ 674.506794][T23052] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3977'. [ 674.641807][T23062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3979'. [ 674.653425][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3977'. [ 675.100225][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3983'. [ 675.124899][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3983'. [ 675.192044][T23080] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 675.349699][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 675.391261][T23084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3984'. [ 675.460456][T23084] geneve2: entered promiscuous mode [ 675.472085][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3987'. [ 675.481887][T23084] geneve2: entered allmulticast mode [ 675.490592][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3987'. [ 675.503693][T15756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.558880][T15756] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.584619][T15756] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.616101][T15756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.912231][T23111] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 676.249940][T23131] IPVS: set_ctl: invalid protocol: 45 224.0.0.2:20004 [ 676.815207][T23115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.442555][T23216] __nla_validate_parse: 4 callbacks suppressed [ 680.442575][T23216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4016'. [ 681.634241][T23248] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 681.660426][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 681.820709][T23248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.889276][T23255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4025'. [ 681.925334][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 682.565188][T23287] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4032'. [ 682.854257][T23294] ip6gre2: entered promiscuous mode [ 682.874660][T23294] ip6gre2: entered allmulticast mode [ 682.903971][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4035'. [ 683.040078][ T3285] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.083405][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.091882][ T3285] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.166837][T23304] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4037'. [ 683.258120][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.333199][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4039'. [ 683.350536][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4039'. [ 684.104639][ T5753] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 684.409662][T23350] x_tables: duplicate entry at hook 1 [ 684.751032][T23369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.859306][T23369] bridge0: entered promiscuous mode [ 684.874941][T23369] bridge0: entered allmulticast mode [ 685.245092][T23387] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4058'. [ 685.420010][T23393] netlink: 'syz.6.4061': attribute type 83 has an invalid length. [ 685.638697][T23398] Cannot find del_set index 4 as target [ 685.766746][T23404] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4064'. [ 685.846566][T23408] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 685.869617][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 686.642200][T23432] sctp: [Deprecated]: syz.1.4072 (pid 23432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.642200][T23432] Use struct sctp_sack_info instead [ 686.794319][T23438] Cannot find del_set index 4 as target [ 687.150571][T23450] syzkaller0: entered promiscuous mode [ 687.166726][T23450] syzkaller0: entered allmulticast mode [ 687.196250][T23453] pim6reg1: entered promiscuous mode [ 687.223470][T23453] pim6reg1: entered allmulticast mode [ 687.377408][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 687.806190][T23484] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4083'. [ 687.874478][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'. [ 688.064874][T23498] Cannot find del_set index 4 as target [ 688.101735][T23505] syz_tun: entered allmulticast mode [ 688.113069][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4090'. [ 688.124888][T23505] netlink: 'syz.0.4090': attribute type 9 has an invalid length. [ 688.134300][T23505] netlink: 'syz.0.4090': attribute type 6 has an invalid length. [ 688.144666][T23504] syz_tun: left allmulticast mode [ 688.434217][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4094'. [ 688.490506][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4094'. [ 688.555585][T23522] syzkaller0: entered promiscuous mode [ 688.577929][T23522] syzkaller0: entered allmulticast mode [ 688.947175][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4101'. [ 689.149004][T23566] Cannot find del_set index 4 as target [ 689.358623][T23579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 689.370971][T23580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.392263][T23579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 689.463825][T23579] geneve2: entered promiscuous mode [ 689.698174][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.740351][T23593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4108'. [ 690.251292][T23611] bond2: entered allmulticast mode [ 690.644976][T23627] Cannot find del_set index 4 as target [ 691.034231][T23645] __nla_validate_parse: 1 callbacks suppressed [ 691.034252][T23645] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4122'. [ 691.068221][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4122'. [ 691.342246][T23655] tipc: Enabling of bearer rejected, failed to enable media [ 691.803344][T23670] Cannot find del_set index 4 as target [ 692.863190][T23735] netlink: 'syz.6.4141': attribute type 8 has an invalid length. [ 692.879339][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4141'. [ 692.965339][T23735] bond0: entered promiscuous mode [ 692.998781][T23735] bond_slave_0: entered promiscuous mode [ 693.014732][T23735] bond_slave_1: entered promiscuous mode [ 693.046017][T23735] gretap0: entered promiscuous mode [ 693.080372][T23735] bond0: left promiscuous mode [ 693.085384][T23735] bond_slave_0: left promiscuous mode [ 693.092761][T23735] bond_slave_1: left promiscuous mode [ 693.108957][T23735] gretap0: left promiscuous mode [ 693.371923][T23755] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 693.371923][T23755] Please contact the netfilter-devel mailing list or update your nftables rules. [ 693.436069][T23756] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.452021][T23756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.459358][T23756] IPv6: NLM_F_CREATE should be set when creating new route [ 693.466693][T23756] IPv6: NLM_F_CREATE should be set when creating new route [ 693.474006][T23756] IPv6: NLM_F_CREATE should be set when creating new route [ 693.511945][T23763] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4148'. [ 693.686276][T23768] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 693.815461][T23774] vlan2: entered allmulticast mode [ 693.826938][T23774] bond0: entered allmulticast mode [ 693.842738][T23774] bond_slave_0: entered allmulticast mode [ 693.862143][T23774] @0Ù: entered allmulticast mode [ 694.159935][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'. [ 694.246644][T23804] netlink: 1324 bytes leftover after parsing attributes in process `syz.1.4161'. [ 694.274494][T23761] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 694.710947][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4166'. [ 694.738174][T23822] bond7: option primary_reselect: invalid value (6) [ 694.746668][T23822] bond7 (unregistering): Released all slaves [ 695.031336][T23835] IPVS: fo: FWM 3 0x00000003 - no destination available [ 695.218894][T23841] Cannot find del_set index 4 as target [ 695.538683][ T5621] Bluetooth: hci0: command 0x0405 tx timeout [ 696.100374][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 697.140739][T23804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.598248][T23858] bond1: entered promiscuous mode [ 697.608442][T23858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.675678][T23885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 697.771151][T23885] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 697.835808][T23885] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 697.881783][T23885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.916319][T23885] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4182'. [ 698.020043][T23888] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 698.311523][T23906] Cannot find del_set index 4 as target [ 698.713579][T23927] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4192'. [ 699.004532][T23942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4197'. [ 700.256577][T23986] netlink: 'syz.5.4206': attribute type 1 has an invalid length. [ 700.403500][T23993] netlink: 'syz.6.4208': attribute type 2 has an invalid length. [ 700.427540][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4206'. [ 700.584065][T23998] 8021q: VLANs not supported on lo [ 700.749822][T24011] netlink: 'syz.1.4212': attribute type 11 has an invalid length. [ 701.423255][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4216'. [ 701.504591][T24039] netlink: 'syz.1.4217': attribute type 21 has an invalid length. [ 701.530879][T24039] IPv6: NLM_F_CREATE should be specified when creating new route [ 701.557487][T24039] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 701.895751][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 701.980303][T24063] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 702.423145][T24051] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.430781][T24051] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.794465][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.820754][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.983086][T24051] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 702.993525][T24051] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 703.036427][T24051] geneve2: left promiscuous mode [ 703.044368][T24051] bond3: left promiscuous mode [ 703.066291][T24051] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 703.080158][T24051] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 703.098942][T24051] bond5: left promiscuous mode [ 703.114803][T24063] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 703.203037][T24078] netlink: 'syz.1.4221': attribute type 4 has an invalid length. [ 703.279755][ T3285] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.321885][ T3285] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.354798][ T3285] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.386558][ T3285] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.402609][T24096] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4226'. [ 704.044437][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4237'. [ 704.078238][T24131] block nbd1: server does not support multiple connections per device. [ 704.119753][T24131] block nbd1: shutting down sockets [ 704.204248][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4239'. [ 704.571247][T24161] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4244'. [ 704.606027][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4244'. [ 704.653685][T24161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 704.714939][T24167] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 705.064379][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'. [ 705.205349][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 705.272544][T24191] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4249'. [ 705.319442][T24191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4249'. [ 705.800045][T24219] netlink: 'syz.0.4261': attribute type 1 has an invalid length. [ 705.915751][T24219] bond4: entered promiscuous mode [ 705.954206][T24219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 706.046123][T24227] vlan3: entered allmulticast mode [ 706.070774][T24227] bond4: entered allmulticast mode [ 706.160135][T24243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.185561][T24230] bond4: (slave bridge3): making interface the new active one [ 706.209954][T24230] bridge3: entered promiscuous mode [ 706.222805][T24230] bridge3: entered allmulticast mode [ 706.252515][T24230] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 706.421353][T24255] netlink: 'syz.6.4267': attribute type 1 has an invalid length. [ 706.466431][T24255] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 706.657026][T24268] netlink: 'syz.5.4269': attribute type 10 has an invalid length. [ 706.712658][T24268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.808717][T24268] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 706.928166][T24280] netlink: 'syz.1.4273': attribute type 4 has an invalid length. [ 706.965497][T24280] .`: renamed from bond0 (while UP) [ 707.216804][T24293] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 707.238787][T24293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 707.710645][T24319] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0 [ 708.122467][T24331] syzkaller0: entered promiscuous mode [ 708.144288][T24331] syzkaller0: entered allmulticast mode [ 708.257910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.478552][T24349] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 711.511845][T24349] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 711.551159][T24349] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 712.161142][T24379] __nla_validate_parse: 7 callbacks suppressed [ 712.161163][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 712.319433][T24379] Bluetooth: MGMT ver 1.23 [ 712.346022][T24379] bridge0: left promiscuous mode [ 712.353999][T24379] bridge0: left allmulticast mode [ 712.402474][T24379] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 712.433909][T24379] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 712.467590][T24379] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 712.518181][T24379] bond1: left promiscuous mode [ 712.545592][T24379] bond1: left allmulticast mode [ 712.579941][T24379] ip6gre2: left promiscuous mode [ 712.589080][T24379] ip6gre2: left allmulticast mode [ 712.711136][T24398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.264959][T24426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4308'. [ 713.662396][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4313'. [ 713.856096][T24448] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4314'. [ 714.171781][T24461] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 714.318645][T24461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.354741][T24461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4318'. [ 714.393905][T24467] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 714.453497][T24473] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 714.504777][T24473] bond5 (unregistering): Released all slaves [ 714.612519][T24486] Cannot find del_set index 4 as target [ 714.619978][T24488] batman_adv: batadv0: Adding interface: dummy0 [ 714.631876][T24488] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.703576][T24488] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 714.996527][T24504] syzkaller0: entered promiscuous mode [ 715.017803][T24504] syzkaller0: entered allmulticast mode [ 715.049869][T24504] Bluetooth: MGMT ver 1.23 [ 715.414758][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 715.501948][T24519] netlink: 'syz.0.4335': attribute type 8 has an invalid length. [ 715.540593][T24523] x_tables: duplicate underflow at hook 1 [ 715.551155][T24519] bridge4: entered allmulticast mode [ 715.736841][T24531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4337'. [ 715.805589][T24536] Cannot find del_set index 4 as target [ 716.802926][T24579] Cannot find del_set index 4 as target [ 717.520784][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 717.580579][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4360'. [ 717.594539][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 717.638290][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 718.127872][T24633] Cannot find del_set index 4 as target [ 718.278332][T24608] infiniband syz0: set active [ 718.284573][ T5734] xfrm0 speed is unknown, defaulting to 1000 [ 718.294811][T24608] infiniband syz0: added xfrm0 [ 718.304043][T24608] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 718.309735][T24608] infiniband syz0: Couldn't open port 1 [ 718.325199][T24608] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 718.342942][T24608] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 718.378295][T24608] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 718.489853][T24608] RDS/IB: syz0: added [ 718.494081][T24608] smc: adding ib device syz0 with port count 1 [ 718.508985][T24608] smc: ib device syz0 port 1 has no pnetid [ 718.532072][ T5734] xfrm0 speed is unknown, defaulting to 1000 [ 718.552501][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 718.780834][T24653] netlink: 'syz.0.4371': attribute type 1 has an invalid length. [ 718.950362][T24653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4371'. [ 719.192791][T24666] netlink: 'syz.5.4375': attribute type 1 has an invalid length. [ 719.318859][T24674] batman_adv: batadv0: Removing interface: dummy0 [ 719.376296][T24678] Cannot find del_set index 4 as target [ 719.403129][T24674] bond4: (slave dummy0): making interface the new active one [ 719.439902][T24674] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 719.476372][T24657] xfrm0 speed is unknown, defaulting to 1000 [ 719.621656][T24685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4372'. [ 719.641210][T24666] bond4: (slave dummy0): Releasing active interface [ 719.654146][T24666] bridge_slave_0: left allmulticast mode [ 719.668846][T24666] bridge_slave_0: left promiscuous mode [ 719.675701][T24666] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.683537][T24686] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 719.695866][T24666] bridge_slave_1: left allmulticast mode [ 719.710331][T24666] bridge_slave_1: left promiscuous mode [ 719.727884][T24666] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.749846][T24666] bond0: (slave bond_slave_0): Releasing backup interface [ 719.771908][T24666] bond0: (slave bond_slave_1): Releasing backup interface [ 719.783000][T24666] team0: Port device team_slave_0 removed [ 719.792510][T24666] team0: Port device team_slave_1 removed [ 719.799495][T24666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 719.842641][T24684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 719.856849][T24684] syzkaller1: linktype set to 805 [ 719.878149][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 719.977752][T24689] syzkaller1: entered promiscuous mode [ 719.994820][T24689] syzkaller1: entered allmulticast mode [ 720.258180][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 720.445503][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 720.622241][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 720.791038][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 720.956113][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 721.129282][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 721.299712][T24608] xfrm0 speed is unknown, defaulting to 1000 [ 722.172929][T24668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.381385][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 722.432878][T24711] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4381'. [ 722.479203][T24716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4382'. [ 722.561306][T24714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4383'. [ 722.587812][T24714] batman_adv: batadv0: Removing interface: dummy0 [ 722.704957][T24714] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4383'. [ 722.785341][T24730] Cannot find del_set index 4 as target [ 723.009344][T24745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.191036][T24756] netlink: 'syz.6.4393': attribute type 3 has an invalid length. [ 723.236742][T24756] netlink: 'syz.6.4393': attribute type 3 has an invalid length. [ 723.251785][T24756] netlink: 'syz.6.4393': attribute type 1 has an invalid length. [ 723.262641][T24756] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4393'. [ 723.272447][T24756] netlink: 'syz.6.4393': attribute type 1 has an invalid length. [ 723.444312][ T188] IPVS: starting estimator thread 0... [ 723.451016][T24762] IPVS: ip_vs_add_dest(): server weight less than zero [ 723.468671][T24762] IPVS: rr: FWM 3 0x00000003 - no destination available [ 723.484246][T24768] netlink: 193 bytes leftover after parsing attributes in process `syz.0.4396'. [ 723.538248][T24767] IPVS: using max 24 ests per chain, 57600 per kthread [ 723.680536][T24772] vlan4: entered promiscuous mode [ 723.722641][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4398'. [ 723.909142][T24784] Cannot find del_set index 4 as target [ 724.046064][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'. [ 724.084038][T24797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4402'. [ 724.187013][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4406'. [ 724.982456][T24826] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4414'. [ 725.546486][T24841] Cannot find del_set index 4 as target [ 725.580289][T24818] xt_bpf: check failed: parse error [ 725.781997][T24845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4418'. [ 725.795887][T24842] xfrm0 speed is unknown, defaulting to 1000 [ 726.066146][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4419'. [ 726.533205][T24879] Cannot find del_set index 4 as target [ 727.077124][T24902] syzkaller1: entered promiscuous mode [ 727.103396][T24902] syzkaller1: entered allmulticast mode [ 727.520470][T24924] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 727.679217][T24933] Cannot find del_set index 4 as target [ 727.959612][T24947] wlan0: renamed from ip6tnl0 [ 727.967836][T24947] wlan0: entered promiscuous mode [ 727.973167][T24947] wlan0: entered allmulticast mode [ 727.979163][T24947] __nla_validate_parse: 7 callbacks suppressed [ 727.979181][T24947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4447'. [ 727.995337][T24947] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 728.293806][T24952] syzkaller0: entered promiscuous mode [ 728.299718][T24952] syzkaller0: entered allmulticast mode [ 728.566385][T24954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4450'. [ 728.575948][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4450'. [ 728.669165][T24955] veth3: entered promiscuous mode [ 728.674243][T24955] veth3: entered allmulticast mode [ 728.680584][T24955] team0: Device veth3 is up. Set it down before adding it as a team port [ 728.710566][T24956] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 729.099404][T24859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.318079][T24961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4453'. [ 729.420108][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 729.486892][T24971] tipc: Invalid UDP bearer configuration [ 729.486949][T24971] tipc: Enabling of bearer rejected, failed to enable media [ 729.544181][T24972] Cannot find del_set index 4 as target [ 729.655844][T24975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 729.686960][ T30] audit: type=1800 audit(1783861724.938:22): pid=24975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4458" name=20 dev="tmpfs" ino=1386 res=0 errno=0 [ 729.758582][T24967] bond2: Removing last arp target with arp_interval on [ 729.892213][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 730.004741][T24998] netlink: 536 bytes leftover after parsing attributes in process `syz.7.4463'. [ 730.027869][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4463'. [ 730.265404][T25008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4469'. [ 730.275280][T25008] netlink: 'syz.1.4469': attribute type 2 has an invalid length. [ 730.294003][T25008] netlink: 'syz.1.4469': attribute type 1 has an invalid length. [ 730.320714][T25008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4469'. [ 731.394446][T25055] netlink: 'syz.7.4484': attribute type 11 has an invalid length. [ 731.445479][T25055] ip6erspan0: entered allmulticast mode [ 731.706997][T25079] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 731.753110][T25079] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 731.935554][T25089] netlink: 'syz.5.4491': attribute type 3 has an invalid length. [ 731.964332][T25089] netlink: 'syz.5.4491': attribute type 3 has an invalid length. [ 732.373908][T25113] syzkaller0: entered promiscuous mode [ 732.405368][T25113] syzkaller0: entered allmulticast mode [ 732.519233][T25113] tc action pedit 'at' offset 20 out of bounds [ 733.598866][T25163] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 733.612594][T25163] bond6 (unregistering): Released all slaves [ 734.014380][T25188] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 734.400802][T25213] Cannot find add_set index 2 as target [ 734.654883][T25235] __nla_validate_parse: 7 callbacks suppressed [ 734.654903][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4527'. [ 734.787804][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 734.798821][T25239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 735.000276][T25238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4531'. [ 735.606918][T25260] syzkaller0: entered promiscuous mode [ 735.612781][T25260] syzkaller0: entered allmulticast mode [ 735.624599][T25260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4535'. [ 737.494429][T25223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.718281][T25275] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4540'. [ 737.727667][T25275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4540'. [ 737.736851][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4540'. [ 737.784008][T25279] tipc: Enabled bearer , priority 0 [ 737.792714][T25279] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 737.812371][T25279] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 737.872793][T25279] tipc: Resetting bearer [ 737.912290][T25283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 738.101337][T25297] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 738.140715][T25297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.193418][T25302] FAULT_INJECTION: forcing a failure. [ 738.193418][T25302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.210918][T25302] CPU: 0 UID: 0 PID: 25302 Comm: syz.5.4548 Not tainted syzkaller #0 PREEMPT(full) [ 738.210948][T25302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.210962][T25302] Call Trace: [ 738.210970][T25302] [ 738.210980][T25302] dump_stack_lvl+0xe8/0x150 [ 738.211021][T25302] should_fail_ex+0x40c/0x560 [ 738.211054][T25302] _copy_from_user+0x2d/0xb0 [ 738.211088][T25302] do_ipt_set_ctl+0x743/0xe20 [ 738.211210][T25302] ? rcu_is_watching+0x15/0xb0 [ 738.211247][T25302] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 738.211296][T25302] ? __mutex_unlock_slowpath+0x731/0x900 [ 738.211332][T25302] ? aa_sk_perm+0x6d5/0x900 [ 738.211368][T25302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 738.211405][T25302] ? __pfx_aa_sk_perm+0x10/0x10 [ 738.211445][T25302] nf_setsockopt+0x26f/0x290 [ 738.211529][T25302] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 738.211562][T25302] do_sock_setsockopt+0x17c/0x1b0 [ 738.211601][T25302] __x64_sys_setsockopt+0x13d/0x1b0 [ 738.211635][T25302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.211659][T25302] do_syscall_64+0x174/0x580 [ 738.211690][T25302] ? trace_irq_disable+0x3b/0x140 [ 738.211718][T25302] ? clear_bhb_loop+0x40/0x90 [ 738.211746][T25302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.211768][T25302] RIP: 0033:0x7f73f119de59 [ 738.211789][T25302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.211808][T25302] RSP: 002b:00007f73f2047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 738.211832][T25302] RAX: ffffffffffffffda RBX: 00007f73f1425fa0 RCX: 00007f73f119de59 [ 738.211848][T25302] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 738.211861][T25302] RBP: 00007f73f2047090 R08: 0000000000000358 R09: 0000000000000000 [ 738.211876][T25302] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 738.211889][T25302] R13: 00007f73f1426038 R14: 00007f73f1425fa0 R15: 00007ffeb73c11d8 [ 738.211926][T25302] [ 738.441822][T25307] netlink: 'syz.1.4549': attribute type 142 has an invalid length. [ 738.650456][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4550'. [ 738.968441][T25337] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4554'. [ 738.997088][T25338] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.007857][T25338] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.789187][T25324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.019437][T25357] syzkaller0: entered promiscuous mode [ 742.028043][T25357] syzkaller0: entered allmulticast mode [ 742.037894][T25360] FAULT_INJECTION: forcing a failure. [ 742.037894][T25360] name failslab, interval 1, probability 0, space 0, times 0 [ 742.056642][T25360] CPU: 0 UID: 0 PID: 25360 Comm: syz.6.4560 Not tainted syzkaller #0 PREEMPT(full) [ 742.056671][T25360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.056686][T25360] Call Trace: [ 742.056694][T25360] [ 742.056703][T25360] dump_stack_lvl+0xe8/0x150 [ 742.056742][T25360] should_fail_ex+0x40c/0x560 [ 742.056771][T25360] ? xt_alloc_table_info+0x40/0xb0 [ 742.056900][T25360] should_failslab+0xa8/0x100 [ 742.056975][T25360] __kvmalloc_node_noprof+0x176/0x860 [ 742.057011][T25360] ? xt_alloc_table_info+0x40/0xb0 [ 742.057048][T25360] xt_alloc_table_info+0x40/0xb0 [ 742.057076][T25360] do_ipt_set_ctl+0x962/0xe20 [ 742.057108][T25360] ? rcu_is_watching+0x15/0xb0 [ 742.057143][T25360] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 742.057188][T25360] ? __mutex_unlock_slowpath+0x731/0x900 [ 742.057222][T25360] ? aa_sk_perm+0x6d5/0x900 [ 742.057257][T25360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.057294][T25360] ? __pfx_aa_sk_perm+0x10/0x10 [ 742.057334][T25360] nf_setsockopt+0x26f/0x290 [ 742.057365][T25360] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 742.057395][T25360] do_sock_setsockopt+0x17c/0x1b0 [ 742.057433][T25360] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.057469][T25360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.057494][T25360] do_syscall_64+0x174/0x580 [ 742.057528][T25360] ? clear_bhb_loop+0x40/0x90 [ 742.057555][T25360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.057577][T25360] RIP: 0033:0x7ffb47b9de59 [ 742.057599][T25360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.057617][T25360] RSP: 002b:00007ffb489ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.057640][T25360] RAX: ffffffffffffffda RBX: 00007ffb47e25fa0 RCX: 00007ffb47b9de59 [ 742.057656][T25360] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 742.057669][T25360] RBP: 00007ffb489ea090 R08: 0000000000000358 R09: 0000000000000000 [ 742.057682][T25360] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 742.057696][T25360] R13: 00007ffb47e26038 R14: 00007ffb47e25fa0 R15: 00007ffed73c1898 [ 742.057732][T25360] [ 742.457515][T25367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.673483][T25381] __nla_validate_parse: 4 callbacks suppressed [ 742.673514][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 742.868642][T25390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4569'. [ 742.959236][T25393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4570'. [ 742.968718][T25393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4570'. [ 742.979044][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'. [ 743.009293][T25395] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 743.209765][T25402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4574'. [ 743.222741][T25403] FAULT_INJECTION: forcing a failure. [ 743.222741][T25403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.237101][T25403] CPU: 0 UID: 0 PID: 25403 Comm: syz.1.4575 Not tainted syzkaller #0 PREEMPT(full) [ 743.237131][T25403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.237144][T25403] Call Trace: [ 743.237153][T25403] [ 743.237162][T25403] dump_stack_lvl+0xe8/0x150 [ 743.237203][T25403] should_fail_ex+0x40c/0x560 [ 743.237235][T25403] _copy_from_user+0x2d/0xb0 [ 743.237267][T25403] copy_from_sockptr_offset+0x66/0xa0 [ 743.237294][T25403] do_ipt_set_ctl+0x991/0xe20 [ 743.237325][T25403] ? rcu_is_watching+0x15/0xb0 [ 743.237360][T25403] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 743.237399][T25403] ? __mutex_unlock_slowpath+0x731/0x900 [ 743.237434][T25403] ? aa_sk_perm+0x6d5/0x900 [ 743.237470][T25403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.237508][T25403] ? __pfx_aa_sk_perm+0x10/0x10 [ 743.237548][T25403] nf_setsockopt+0x26f/0x290 [ 743.237578][T25403] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 743.237609][T25403] do_sock_setsockopt+0x17c/0x1b0 [ 743.237647][T25403] __x64_sys_setsockopt+0x13d/0x1b0 [ 743.237682][T25403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.237706][T25403] do_syscall_64+0x174/0x580 [ 743.237738][T25403] ? trace_irq_disable+0x3b/0x140 [ 743.237765][T25403] ? clear_bhb_loop+0x40/0x90 [ 743.237801][T25403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.237820][T25403] RIP: 0033:0x7fac8e39de59 [ 743.237839][T25403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.237855][T25403] RSP: 002b:00007fac8c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.237876][T25403] RAX: ffffffffffffffda RBX: 00007fac8e625fa0 RCX: 00007fac8e39de59 [ 743.237890][T25403] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 743.237902][T25403] RBP: 00007fac8c5f6090 R08: 0000000000000358 R09: 0000000000000000 [ 743.237914][T25403] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 743.237926][T25403] R13: 00007fac8e626038 R14: 00007fac8e625fa0 R15: 00007ffda3beb848 [ 743.237959][T25403] [ 743.604420][T25408] Cannot find del_set index 4 as target [ 743.612615][T25410] Cannot find del_set index 4 as target [ 743.803343][T25419] netlink: 'syz.0.4578': attribute type 1 has an invalid length. [ 743.871552][T25419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.588091][T25438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 744.902581][T25450] FAULT_INJECTION: forcing a failure. [ 744.902581][T25450] name failslab, interval 1, probability 0, space 0, times 0 [ 744.944150][T25450] CPU: 0 UID: 0 PID: 25450 Comm: syz.1.4587 Not tainted syzkaller #0 PREEMPT(full) [ 744.944181][T25450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.944194][T25450] Call Trace: [ 744.944202][T25450] [ 744.944212][T25450] dump_stack_lvl+0xe8/0x150 [ 744.944267][T25450] should_fail_ex+0x40c/0x560 [ 744.944296][T25450] ? translate_table+0x193/0x1f80 [ 744.944320][T25450] should_failslab+0xa8/0x100 [ 744.944353][T25450] __kvmalloc_node_noprof+0x176/0x860 [ 744.944383][T25450] ? nf_setsockopt+0x26f/0x290 [ 744.944411][T25450] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 744.944443][T25450] ? do_syscall_64+0x174/0x580 [ 744.944475][T25450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.944497][T25450] ? translate_table+0x193/0x1f80 [ 744.944526][T25450] translate_table+0x193/0x1f80 [ 744.944570][T25450] ? __pfx_translate_table+0x10/0x10 [ 744.944590][T25450] ? __might_fault+0xaf/0x130 [ 744.944655][T25450] ? __might_fault+0xaf/0x130 [ 744.944699][T25450] ? _copy_from_user+0x94/0xb0 [ 744.944747][T25450] do_ipt_set_ctl+0xa53/0xe20 [ 744.944780][T25450] ? rcu_is_watching+0x15/0xb0 [ 744.944815][T25450] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 744.944856][T25450] ? __mutex_unlock_slowpath+0x731/0x900 [ 744.944889][T25450] ? aa_sk_perm+0x6d5/0x900 [ 744.944926][T25450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 744.944963][T25450] ? __pfx_aa_sk_perm+0x10/0x10 [ 744.945003][T25450] nf_setsockopt+0x26f/0x290 [ 744.945034][T25450] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 744.945071][T25450] do_sock_setsockopt+0x17c/0x1b0 [ 744.945110][T25450] __x64_sys_setsockopt+0x13d/0x1b0 [ 744.945144][T25450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.945168][T25450] do_syscall_64+0x174/0x580 [ 744.945199][T25450] ? trace_irq_disable+0x3b/0x140 [ 744.945227][T25450] ? clear_bhb_loop+0x40/0x90 [ 744.945254][T25450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.945276][T25450] RIP: 0033:0x7fac8e39de59 [ 744.945297][T25450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.945317][T25450] RSP: 002b:00007fac8c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 744.945340][T25450] RAX: ffffffffffffffda RBX: 00007fac8e625fa0 RCX: 00007fac8e39de59 [ 744.945356][T25450] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 744.945369][T25450] RBP: 00007fac8c5f6090 R08: 0000000000000358 R09: 0000000000000000 [ 744.945383][T25450] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 744.945396][T25450] R13: 00007fac8e626038 R14: 00007fac8e625fa0 R15: 00007ffda3beb848 [ 744.945430][T25450] [ 745.569861][T25470] Cannot find del_set index 4 as target [ 745.753500][T25479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4594'. [ 746.025185][T25497] FAULT_INJECTION: forcing a failure. [ 746.025185][T25497] name failslab, interval 1, probability 0, space 0, times 0 [ 746.030971][T25493] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4598'. [ 746.057883][T25497] CPU: 0 UID: 0 PID: 25497 Comm: syz.5.4600 Not tainted syzkaller #0 PREEMPT(full) [ 746.057912][T25497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.057924][T25497] Call Trace: [ 746.057933][T25497] [ 746.057942][T25497] dump_stack_lvl+0xe8/0x150 [ 746.057981][T25497] should_fail_ex+0x40c/0x560 [ 746.058023][T25497] should_failslab+0xa8/0x100 [ 746.058058][T25497] __kmalloc_noprof+0xfe/0x720 [ 746.058086][T25497] ? __pfx___mutex_trylock_common+0x10/0x10 [ 746.058108][T25497] ? bm_init+0x74/0xf50 [ 746.058125][T25497] ? bm_init+0x74/0xf50 [ 746.058153][T25497] bm_init+0x74/0xf50 [ 746.058179][T25497] ? lookup_ts_algo+0x1e/0x260 [ 746.058301][T25497] ? lookup_ts_algo+0x1e/0x260 [ 746.058332][T25497] ? lookup_ts_algo+0x1e/0x260 [ 746.058367][T25497] ? lookup_ts_algo+0x24d/0x260 [ 746.058403][T25497] textsearch_prepare+0x84/0x170 [ 746.058440][T25497] string_mt_check+0x183/0x260 [ 746.058540][T25497] xt_check_match+0x602/0xce0 [ 746.058574][T25497] ? __pfx_xt_check_match+0x10/0x10 [ 746.058604][T25497] ? pcpu_alloc_noprof+0x1036/0x1900 [ 746.058659][T25497] ? xt_find_match+0x213/0x260 [ 746.058695][T25497] translate_table+0x1498/0x1f80 [ 746.058740][T25497] ? __pfx_translate_table+0x10/0x10 [ 746.058761][T25497] ? __might_fault+0xaf/0x130 [ 746.058787][T25497] ? __might_fault+0xaf/0x130 [ 746.058832][T25497] ? _copy_from_user+0x94/0xb0 [ 746.058869][T25497] do_ipt_set_ctl+0xa53/0xe20 [ 746.058901][T25497] ? rcu_is_watching+0x15/0xb0 [ 746.058935][T25497] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 746.058977][T25497] ? __mutex_unlock_slowpath+0x731/0x900 [ 746.059019][T25497] ? aa_sk_perm+0x6d5/0x900 [ 746.059054][T25497] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 746.059092][T25497] ? __pfx_aa_sk_perm+0x10/0x10 [ 746.059132][T25497] nf_setsockopt+0x26f/0x290 [ 746.059163][T25497] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 746.059195][T25497] do_sock_setsockopt+0x17c/0x1b0 [ 746.059232][T25497] __x64_sys_setsockopt+0x13d/0x1b0 [ 746.059268][T25497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.059292][T25497] do_syscall_64+0x174/0x580 [ 746.059325][T25497] ? clear_bhb_loop+0x40/0x90 [ 746.059352][T25497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.059375][T25497] RIP: 0033:0x7f73f119de59 [ 746.059395][T25497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.059414][T25497] RSP: 002b:00007f73f2047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 746.059436][T25497] RAX: ffffffffffffffda RBX: 00007f73f1425fa0 RCX: 00007f73f119de59 [ 746.059452][T25497] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 746.059465][T25497] RBP: 00007f73f2047090 R08: 0000000000000358 R09: 0000000000000000 [ 746.059478][T25497] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 746.059492][T25497] R13: 00007f73f1426038 R14: 00007f73f1425fa0 R15: 00007ffeb73c11d8 [ 746.059525][T25497] [ 746.359998][T25493] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4598'. [ 746.395340][T25493] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4598'. [ 746.655385][T25516] Cannot find del_set index 4 as target [ 746.929777][T25524] syzkaller1: entered promiscuous mode [ 746.946552][T25524] syzkaller1: entered allmulticast mode [ 747.306954][T25545] Cannot find del_set index 4 as target [ 747.314007][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.326098][T25545] FAULT_INJECTION: forcing a failure. [ 747.326098][T25545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.335301][T25542] bond6: option tlb_dynamic_lb: invalid value (128) [ 747.347314][T25545] CPU: 1 UID: 0 PID: 25545 Comm: syz.6.4613 Not tainted syzkaller #0 PREEMPT(full) [ 747.347344][T25545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.347356][T25545] Call Trace: [ 747.347365][T25545] [ 747.347373][T25545] dump_stack_lvl+0xe8/0x150 [ 747.347414][T25545] should_fail_ex+0x40c/0x560 [ 747.347446][T25545] _copy_to_user+0x31/0xb0 [ 747.347480][T25545] simple_read_from_buffer+0xe1/0x170 [ 747.347516][T25545] proc_fail_nth_read+0x1bb/0x230 [ 747.347550][T25545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 747.347584][T25545] ? rw_verify_area+0x24a/0x4c0 [ 747.347619][T25545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 747.347649][T25545] vfs_read+0x213/0xa80 [ 747.347687][T25545] ? __pfx___mutex_lock+0x10/0x10 [ 747.347721][T25545] ? __pfx_vfs_read+0x10/0x10 [ 747.347756][T25545] ? __fget_files+0x2a/0x420 [ 747.347790][T25545] ? __fget_files+0x3a2/0x420 [ 747.347817][T25545] ? __fget_files+0x2a/0x420 [ 747.347855][T25545] ksys_read+0x150/0x270 [ 747.347891][T25545] ? __pfx_ksys_read+0x10/0x10 [ 747.347941][T25545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.347966][T25545] do_syscall_64+0x174/0x580 [ 747.347996][T25545] ? trace_irq_disable+0x3b/0x140 [ 747.348024][T25545] ? clear_bhb_loop+0x40/0x90 [ 747.348052][T25545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.348073][T25545] RIP: 0033:0x7ffb47b5e68e [ 747.348094][T25545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 747.348114][T25545] RSP: 002b:00007ffb489e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 747.348137][T25545] RAX: ffffffffffffffda RBX: 00007ffb489ea6c0 RCX: 00007ffb47b5e68e [ 747.348152][T25545] RDX: 000000000000000f RSI: 00007ffb489ea0a0 RDI: 000000000000000a [ 747.348165][T25545] RBP: 00007ffb489ea090 R08: 0000000000000000 R09: 0000000000000000 [ 747.348178][T25545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.348190][T25545] R13: 00007ffb47e26038 R14: 00007ffb47e25fa0 R15: 00007ffed73c1898 [ 747.348226][T25545] [ 747.574704][T25542] bond6 (unregistering): Released all slaves [ 747.733376][T25554] __nla_validate_parse: 1 callbacks suppressed [ 747.733398][T25554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4616'. [ 747.972542][T25569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4621'. [ 748.044828][T25575] bridge_slave_0: left allmulticast mode [ 748.057084][T25575] bridge_slave_0: left promiscuous mode [ 748.063522][T25575] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.078373][T25575] bridge_slave_1: left allmulticast mode [ 748.084094][T25575] bridge_slave_1: left promiscuous mode [ 748.094458][T25575] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.115846][T25575] .`: (slave bond_slave_0): Releasing backup interface [ 748.135876][T25575] .`: (slave bond_slave_1): Releasing backup interface [ 748.160823][T25575] team0: Port device team_slave_0 removed [ 748.181966][T25582] xt_hashlimit: max too large, truncated to 1048576 [ 748.192562][T25575] team0: Port device team_slave_1 removed [ 748.202320][T25575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.229822][T25575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.253512][T25575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.287718][T25575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.305027][T25575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 748.378428][T25588] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4625'. [ 748.388565][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4625'. [ 748.560722][T25591] openvswitch: netlink: IPv4 tunnel dst address is zero [ 748.598149][T25591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.611170][T22879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 748.631346][T22879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 748.641316][T22879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 748.652695][T22879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 748.662770][T22879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 748.703505][T25597] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 748.906566][T25608] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4628'. [ 749.119445][T25620] netlink: 'syz.0.4631': attribute type 1 has an invalid length. [ 749.154055][T25620] netlink: 'syz.0.4631': attribute type 2 has an invalid length. [ 749.536376][T25594] xfrm0 speed is unknown, defaulting to 1000 [ 749.575723][T25644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4637'. [ 749.594998][T25601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.963723][T25659] Cannot find del_set index 4 as target [ 750.235611][T25668] can: request_module (can-proto-3) failed. [ 750.483985][T25679] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 750.638169][T25693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4651'. [ 750.749180][ T5621] Bluetooth: hci7: command tx timeout [ 750.852700][T25701] Cannot find del_set index 4 as target [ 751.033565][T25697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.045210][T25708] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4654'. [ 751.133927][T25594] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.158304][T25594] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.175941][T25594] bridge_slave_0: entered allmulticast mode [ 751.186944][T25594] bridge_slave_0: entered promiscuous mode [ 751.205716][T25594] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.219845][T25594] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.228340][T25594] bridge_slave_1: entered allmulticast mode [ 751.236443][T25594] bridge_slave_1: entered promiscuous mode [ 751.282703][T25594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.297084][T25594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.421724][T25594] team0: Port device team_slave_0 added [ 751.454994][T25594] team0: Port device team_slave_1 added [ 751.542619][T25594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.551374][T25594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.594340][T25594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.616899][T25734] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 751.620431][T25594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.634962][T25594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.662071][T25594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.808037][T25740] netlink: 'syz.6.4661': attribute type 1 has an invalid length. [ 751.819422][T25734] bond6: entered promiscuous mode [ 751.824648][T25740] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4661'. [ 751.836437][T25734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.895376][T25748] Cannot find del_set index 4 as target [ 751.965943][T25746] bond6: (slave bridge5): making interface the new active one [ 751.985141][T25746] bridge5: entered promiscuous mode [ 752.002876][T25746] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 752.021918][T25750] netlink: 'syz.5.4665': attribute type 29 has an invalid length. [ 752.158296][T25594] hsr_slave_0: entered promiscuous mode [ 752.174111][T25594] hsr_slave_1: entered promiscuous mode [ 752.186989][T25594] debugfs: 'hsr0' already exists in 'hsr' [ 752.193976][T25594] Cannot create hsr debugfs directory [ 752.209986][T25756] vlan2: entered promiscuous mode [ 752.439950][T25771] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 752.454315][T25771] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 752.665919][T25786] Cannot find del_set index 4 as target [ 752.817857][ T5621] Bluetooth: hci7: command tx timeout [ 753.044965][T25594] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 753.085721][T25594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.126755][T25594] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 753.148636][T25594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.161385][T25594] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 753.175633][T25800] netlink: 'syz.0.4679': attribute type 32 has an invalid length. [ 753.215328][T25800] __nla_validate_parse: 5 callbacks suppressed [ 753.215349][T25800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'. [ 753.260660][T25594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.279418][T25594] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 753.305597][T25594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.433040][T25800] bond7: option coupled_control: invalid value (115) [ 753.501455][T25800] bond7 (unregistering): Released all slaves [ 753.711030][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4685'. [ 753.780760][T25823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.816367][T25594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.824461][T25823] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 753.881621][T25823] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 753.893866][T25594] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.907524][T25823] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 753.934709][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.942025][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.998859][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.006089][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.069753][T25823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.093232][T25823] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 754.141903][T25823] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.162428][T25823] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 754.281530][T25823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.307757][T25823] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 754.337684][ T31] INFO: task syz.2.3497:21076 blocked for more than 143 seconds. [ 754.351438][ T31] Not tainted syzkaller #0 [ 754.356485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.366027][ T31] task:syz.2.3497 state:D stack:25064 pid:21076 tgid:21075 ppid:18515 task_flags:0x400140 flags:0x00080002 [ 754.381192][ T31] Call Trace: [ 754.384561][ T31] [ 754.387658][ T31] __schedule+0x17d9/0x56c0 [ 754.392472][ T31] ? __lock_acquire+0x683/0x2cf0 [ 754.398904][ T31] ? __lock_acquire+0x683/0x2cf0 [ 754.404154][ T31] ? __pfx___schedule+0x10/0x10 [ 754.409397][ T31] ? schedule+0x90/0x2b0 [ 754.413715][ T31] schedule+0x164/0x2b0 [ 754.420319][ T31] schedule_preempt_disabled+0x13/0x30 [ 754.425871][ T31] __mutex_lock+0x7bf/0x1550 [ 754.431165][ T31] ? __mutex_lock+0x5d4/0x1550 [ 754.436026][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 754.442196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 754.447530][ T31] ? net_generic+0x1e/0x240 [ 754.453950][ T31] ? net_generic+0x1e/0x240 [ 754.458924][ T31] ? net_generic+0x1e/0x240 [ 754.464019][ T31] ? net_generic+0x1e/0x240 [ 754.468752][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 754.474534][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 754.480561][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 754.486872][ T31] ? bpf_lsm_capable+0x9/0x20 [ 754.495685][ T31] ? security_capable+0x7e/0x2c0 [ 754.502980][ T31] genl_rcv_msg+0x614/0x7a0 [ 754.507937][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 754.513008][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 754.519207][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 754.524740][ T31] netlink_rcv_skb+0x226/0x4a0 [ 754.531067][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 754.536172][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 754.541984][ T31] ? down_read+0x2be/0x330 [ 754.546544][ T31] genl_rcv+0x28/0x40 [ 754.550969][ T31] netlink_unicast+0x7bb/0x940 [ 754.555802][ T31] netlink_sendmsg+0x813/0xb40 [ 754.561853][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.568368][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 754.573360][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.581759][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 754.586881][ T31] ____sys_sendmsg+0x54e/0x850 [ 754.592052][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.599794][ T31] ? import_iovec+0x73/0xa0 [ 754.604388][ T31] ___sys_sendmsg+0x2a5/0x360 [ 754.610210][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.615520][ T31] ? futex_wake+0x51b/0x5f0 [ 754.620234][ T31] ? __pfx_do_futex+0x10/0x10 [ 754.624985][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 754.630736][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.636282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.642572][ T31] do_syscall_64+0x174/0x580 [ 754.647833][ T31] ? clear_bhb_loop+0x40/0x90 [ 754.652676][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.658780][ T31] RIP: 0033:0x7ff03039de59 [ 754.663422][ T31] RSP: 002b:00007ff031330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.672874][ T31] RAX: ffffffffffffffda RBX: 00007ff030625fa0 RCX: 00007ff03039de59 [ 754.681095][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000009 [ 754.689482][ T31] RBP: 00007ff030433e6f R08: 0000000000000000 R09: 0000000000000000 [ 754.697642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.705654][ T31] R13: 00007ff030626038 R14: 00007ff030625fa0 R15: 00007ffca32203a8 [ 754.715043][ T31] [ 754.718840][ T31] [ 754.718840][ T31] Showing all locks held in the system: [ 754.726775][ T31] 1 lock held by khungtaskd/31: [ 754.734659][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 754.748859][ T31] 3 locks held by kworker/0:2/188: [ 754.754126][ T31] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.765265][ T31] #1: ffffc90002e97c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.780030][ T31] #2: ffffffff9033e1e0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 754.792398][ T31] 2 locks held by kworker/u9:1/4938: [ 754.798088][ T31] #0: ffff888027128140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.809893][ T31] #1: ffffc9000ff57c40 ((work_completion)(&args->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.827291][ T31] 2 locks held by getty/5377: [ 754.832187][ T31] #0: ffff8880326b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 754.842518][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 754.853349][ T31] 3 locks held by kworker/u8:14/11098: [ 754.859127][ T31] #0: ffff888032357940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.871200][ T31] #1: ffffc900066cfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.884275][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 754.894682][ T31] 3 locks held by kworker/u8:19/15756: [ 754.898330][ T5621] Bluetooth: hci7: command tx timeout [ 754.901572][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.919780][ T31] #1: ffffc90004e27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 754.931684][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 754.941040][ T31] 3 locks held by kworker/u8:20/15757: [ 754.946624][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 754.957058][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 754.966223][ T31] #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 754.975720][ T31] 2 locks held by syz.3.2838/17780: [ 754.989370][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 754.998024][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 755.009616][ T31] 2 locks held by syz.2.3497/21076: [ 755.014903][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 755.023302][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 755.033639][ T31] 2 locks held by syz.7.4505/25142: [ 755.039244][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 755.048009][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 755.059860][ T31] 1 lock held by syz-executor/25594: [ 755.065439][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 755.075806][ T31] 1 lock held by syz.6.4683/25818: [ 755.081262][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 755.090952][ T31] 6 locks held by syz.6.4683/25823: [ 755.096267][ T31] #0: ffffffff9033e1e0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560 [ 755.106653][ T31] #1: ffff888086534ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x28/0xc0 [ 755.117036][ T31] #2: ffff8880865340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 755.127906][ T31] #3: ffffffff901b3460 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 755.138882][ T31] #4: ffff888054c8e2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 755.149085][ T31] #5: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 755.160295][ T31] 1 lock held by syz.5.4689/25842: [ 755.165493][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 755.175543][ T31] 1 lock held by syz.0.4690/25852: [ 755.181533][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 755.191448][ T31] 1 lock held by syz.1.4691/25853: [ 755.196672][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 755.206398][ T31] 1 lock held by syz.1.4691/25855: [ 755.211876][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 755.222974][ T31] [ 755.225488][ T31] ============================================= [ 755.225488][ T31] [ 755.275890][ T31] NMI backtrace for cpu 0 [ 755.275912][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 755.275935][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.275947][ T31] Call Trace: [ 755.275956][ T31] [ 755.275965][ T31] dump_stack_lvl+0xe8/0x150 [ 755.276003][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 755.276128][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 755.276163][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 755.276195][ T31] sys_info+0x135/0x170 [ 755.276218][ T31] watchdog+0xfd7/0x1030 [ 755.276262][ T31] ? watchdog+0x1c7/0x1030 [ 755.276296][ T31] kthread+0x388/0x470 [ 755.276328][ T31] ? __pfx_watchdog+0x10/0x10 [ 755.276351][ T31] ? __pfx_kthread+0x10/0x10 [ 755.276383][ T31] ret_from_fork+0x514/0xb70 [ 755.276435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 755.276466][ T31] ? __switch_to+0xc89/0x1420 [ 755.276494][ T31] ? __pfx_kthread+0x10/0x10 [ 755.276526][ T31] ret_from_fork_asm+0x1a/0x30 [ 755.276564][ T31] [ 755.276575][ T31] Sending NMI from CPU 0 to CPUs 1: [ 755.390632][ C1] NMI backtrace for cpu 1 [ 755.390651][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 755.390673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.390685][ C1] Workqueue: krds_cp_wq#12/0 rds_connect_worker [ 755.390841][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 755.390912][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 1b 19 61 f5 cc [ 755.390929][ C1] RSP: 0018:ffffc900001174d8 EFLAGS: 00000293 [ 755.390944][ C1] RAX: ffffffff8a50eab3 RBX: 0000000000000001 RCX: 0000000000000000 [ 755.390957][ C1] RDX: ffff88801de98000 RSI: 0000000000000001 RDI: 0000000000000002 [ 755.390969][ C1] RBP: 00000000000000ff R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 755.390982][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: dffffc0000000000 [ 755.390997][ C1] R13: 00000000fffffff5 R14: 0000000000000001 R15: ffffc90000117660 [ 755.391010][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 755.391025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.391038][ C1] CR2: 00007f73f13eb158 CR3: 000000007b386000 CR4: 00000000003526f0 [ 755.391054][ C1] Call Trace: [ 755.391062][ C1] [ 755.391068][ C1] trace_fib_table_lookup+0x73/0x210 [ 755.391122][ C1] fib_table_lookup+0x11e1/0x16e0 [ 755.391152][ C1] ? __inet_dev_addr_type+0x159/0x560 [ 755.391186][ C1] __inet_dev_addr_type+0x2fc/0x560 [ 755.391210][ C1] ? __inet_dev_addr_type+0x159/0x560 [ 755.391232][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 755.391259][ C1] ? irqentry_exit+0x218/0x8f0 [ 755.391285][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 755.391318][ C1] ? kernel_bind+0xf0/0x1c0 [ 755.391335][ C1] ? l3mdev_fib_table_by_index+0x7f/0x2d0 [ 755.391385][ C1] __inet_bind+0x132/0xaa0 [ 755.391411][ C1] ? kernel_bind+0xf0/0x1c0 [ 755.391432][ C1] kernel_bind+0x13e/0x1c0 [ 755.391453][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 755.391487][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 755.391541][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 755.391564][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 755.391587][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 755.391610][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 755.391636][ C1] rds_connect_worker+0x1d8/0x290 [ 755.391666][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 755.391687][ C1] process_scheduled_works+0xa8e/0x14e0 [ 755.391726][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.391751][ C1] ? assign_work+0x3cf/0x5d0 [ 755.391775][ C1] worker_thread+0xa47/0xfb0 [ 755.391814][ C1] kthread+0x388/0x470 [ 755.391841][ C1] ? __pfx_worker_thread+0x10/0x10 [ 755.391861][ C1] ? __pfx_kthread+0x10/0x10 [ 755.391887][ C1] ret_from_fork+0x514/0xb70 [ 755.391916][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 755.391943][ C1] ? __switch_to+0xc89/0x1420 [ 755.391967][ C1] ? __pfx_kthread+0x10/0x10 [ 755.391994][ C1] ret_from_fork_asm+0x1a/0x30 [ 755.392022][ C1] [ 755.411976][T25823] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 755.726946][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 755.733874][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 755.743015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.753089][ T31] Call Trace: [ 755.756405][ T31] [ 755.759369][ T31] vpanic+0x56c/0xa60 [ 755.763402][ T31] ? __pfx___schedule+0x10/0x10 [ 755.768299][ T31] ? __pfx_vpanic+0x10/0x10 [ 755.772854][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 755.779071][ T31] panic+0xc5/0xd0 [ 755.782844][ T31] ? __pfx_panic+0x10/0x10 [ 755.787310][ T31] ? preempt_schedule_common+0x82/0xd0 [ 755.792909][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 755.798330][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 755.804535][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 755.810743][ T31] watchdog+0x1030/0x1030 [ 755.815136][ T31] ? watchdog+0x1c7/0x1030 [ 755.819608][ T31] kthread+0x388/0x470 [ 755.823717][ T31] ? __pfx_watchdog+0x10/0x10 [ 755.828416][ T31] ? __pfx_kthread+0x10/0x10 [ 755.833054][ T31] ret_from_fork+0x514/0xb70 [ 755.837712][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 755.842874][ T31] ? __switch_to+0xc89/0x1420 [ 755.847597][ T31] ? __pfx_kthread+0x10/0x10 [ 755.852221][ T31] ret_from_fork_asm+0x1a/0x30 [ 755.857022][ T31] [ 755.860258][ T31] Kernel Offset: disabled [ 755.864602][ T31] Rebooting in 86400 seconds..