last executing test programs: 2m38.78918452s ago: executing program 32 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) r1 = socket(0x1, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ffffff7}}], 0x30}, 0x884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 2m10.35357462s ago: executing program 33 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x9, 0xc9, 0xb, 0x9, 0x2, 0x3, 0xc, 0x4, 0x39, 0x6, 0x6, 0x1, 0x4, 0xa}, 0xe) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000025000100fdffffff0080000003020000"], 0x14}}, 0x0) 2m6.231773859s ago: executing program 34 (id=1107): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000003000000020000004000000004430400", @ANYRES32=0x1, @ANYBLOB="4ee900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000500"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x31, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0xb, 0x7, 0x9, 0x80, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd29}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd2c}}, @jmp={0x5, 0x0, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffca35}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f00000002c0)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000881}, 0x8000) 2m1.379865847s ago: executing program 3 (id=1377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x7, 0xe000, @remote}}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r12, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20) recvmsg$unix(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) 2m1.319866831s ago: executing program 3 (id=1378): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0xfff2}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r10 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r11}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="beffb8fbc557536f0e0000000c00000002005a86dbb014013a5189a931a5361f000000000000000000040000000000faffffff00e4d5b6a9728d5e3829bd898ab9b68763fc2d968cc95111"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r13, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0xc, 0x8, 0xa, 0x30, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x9d34, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x3, '\x00', r7, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x8, 0x8}, 0x10, r13, r11, 0x4, &(0x7f00000006c0)=[r14, r15], &(0x7f0000000700)=[{0x1, 0x5, 0x7}, {0x0, 0x1, 0xa, 0xc}, {0x0, 0x4, 0x8, 0x6}, {0x3, 0x1, 0x5, 0x4}], 0x10, 0x8}, 0x94) 2m1.112703527s ago: executing program 3 (id=1380): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) listen(r0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000000c0)="ebe3a0e90000000000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca338f025335caf900b1a5c68714bcc41f55c", 0x43}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) shutdown(r2, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002b40)={'syztnl2\x00', &(0x7f0000002ac0)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x7, 0xb, 0x20, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, 0x20, 0x711, 0x5a, 0xfffffffa}}) sendmsg$inet(r5, &(0x7f0000002d80)={&(0x7f0000001600)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000001640)="74b928120ea5e166744645deae6d0d57b34845450f92b26d420d4e0cfd3d439201d187e21e4337f686f0730078bfc61a791a0d91eb5c87646b5a88291f27ab2b6ba92119467cd3cf6c3a14f0cc8889c2c71aad40d3a5daeac687b3bac6180db2f31ca93b46d4de748b9c2545ba99ce4b5feff16944ffd2d9423b7d26e2a127a716325cfbf137ffea5e0e1d0acefbc83c77326a", 0x93}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)}, {&(0x7f0000002740)="5ea663c7f6cb0cbdd63b3c3406b965623f14718968699f7734de3937df03e7be5c819b7ba491a1c45e3031c5e7bf57a4bb5b1eee211f87063e3441614e7b05db8af3ec287b09fe942cc8b0da15cefd76af903a4a710c72e5b80e493c1bac9442268db7f5181bfc67a4e2f82c54fde9ec55f29dcfba238240a0f2d3d298d2fe1c2c3b359594bfaf10a175692f08e6b3bb0fc9640078b1f8ee77e21b9605b4df5a23075e74248b568e549329ea7583c99353a5a6c84f27773ec9140bc3dd7f48a5c30ea1b80d102b0078aae3006829e775c629dd46c36293912a6b626df8da228185aae16d56e75dd0d82dddad9f", 0xed}, {&(0x7f0000002840)="c538d6237628c394c57f57f53c22275622f09ecc928e41f0dfe6b8c063fd8d518ee06747aaf7b8908a0130beaef947ba9c92fc4f4be249b377d0e17df2d7eff49615f0abff429396e78a85dd1343625f81cbe79d5db70f34a2b60341797395a7229d85bf2f17a0a8e7dba1aa8861ac90cdc8c12757eea45ce00ba0bba0f56c35947646a2359cd0f65e4da2f3ab5e6501afe9e9ec93a8b58094630f446c442d3477faaaf3071f75806797fccc08351af5c1d421a4292bf78db646938feb3e85436dfdc7ab3236af4c9545a5a1ea019baf71ab704ab64453c48382a3152e2004520316574547b1cb727514b923245c06c8c3cc4edb60e8", 0xf6}, {&(0x7f0000002940)="85a590bd05df8277f6c262a50fa47820910c27d124024cc63c275eaa42d3f44a4533035df60be5ee1d0462ae3d57a4d321b5e89b29e5eb98", 0x38}, {&(0x7f0000002980)="fec8965466a89623a11b6e126c8ab6184cd373fe98f16a074c239107594c12d828c1cbb7f2d486a79addca42816318044be762db6113693b010e61f34e85647c8b3bd576e42310a863edc3eba53e512a91f665d93a1a4380bf87b3c8b730f2eb34d7612f278f138ab30202205dcdd80a0c1aaef3b4d5c45dc07220b728642326fd05b4a1491771119a06acc986fc1f92b09c11b09c0082ae3c7f81abd025f2e0c72e9d542f8e72fa9fd4eef1a10f7a2a", 0xb0}], 0x7, &(0x7f0000002b80)=[@ip_retopts={{0xc8, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "17159228ccc78d58d6e873541cab"}]}, @timestamp_addr={0x44, 0x3c, 0x1e, 0x1, 0x0, [{@broadcast, 0x8a}, {@multicast2, 0x2}, {@empty, 0xfff}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ef}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb081}, {@rand_addr=0x64010101, 0x23}]}, @timestamp={0x44, 0x10, 0x5c, 0x0, 0x8, [0x7ff, 0x80, 0x7]}, @ssrr={0x89, 0x13, 0x8d, [@rand_addr=0x64010100, @loopback, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x64, 0x3, 0x9, [{@rand_addr=0x64010100, 0x80000001}, {@loopback, 0x3}, {@multicast2, 0x9}, {@empty, 0xffffffff}, {@local, 0x6}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0x1}]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x77, [@rand_addr=0x64010101]}, @generic={0x89, 0xf, "fc0dd323b91957c69bc1801561"}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x12, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x4, "2192"}, @end, @cipso={0x86, 0x12, 0x0, [{0x6, 0xc, "22c4dd379e6f2fdcf8e0"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x380}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x3, [{0xf41627be117c0183, 0x5, "6c4614"}, {0x0, 0x7, "b55c35205b"}]}, @ssrr={0x89, 0x1f, 0x67, [@local, @broadcast, @loopback, @private=0xa010101, @local, @multicast1, @loopback]}]}}}], 0x1d0}, 0x40801) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) r7 = socket$kcm(0x29, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0xd1383000) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=@bloom_filter={0x1e, 0x25009840, 0x100, 0x10001, 0x20000, 0xffffffffffffffff, 0x2, '\x00', r6, r8, 0x5, 0x1, 0x2, 0xf}, 0x50) (async) sendmsg$kcm(r7, &(0x7f0000000180)={&(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="e803eba44fd54a5be05e12a3c259b66f5072a2a5904830d6c40f50b48a04c0775f9c42af30c0befb4b59f4964e9d66fd5b2a49034dc2393d65b130b52809acf08aa004827859ebc2dbac7c7dad1ad05ed6fb1717cc0e4c925014f59303f4938f83bc455412aeca04376edd156514f6921b9d341648267182b472786f1e2f8feca28818e27bb85c9a6933b0da2d340b9fac67f57a5c67725a953a47016af19675f0a088a255dcbc5c81ca7751463cbab663ccc44b07c002f8c765978c08947d5402b82d086fd37112a9ba80e21bed135cbcd80faa049cc48016669d5527142058d34945dfade92a918f55be8eb0abb82e2ab0c6064d3166ee68f734ec4e34d446c1b08c8b8972f693d78a498a7dde359f2af32e8a5e93dfa0f77cc96d7a13ca740e5474da37da436e407acc5f6dbd7d3c1142acfe74c3e9b4b4aa7c5e8cfb0cb7460c43080d35aed9e1b622324eec44cd49d29471c98f921a9a5309249378aae8d4665ddd5c10d6b0330bf060cc8890c706cfb471f274e1b78711fc330f500e98a9852779c263846f3d20b692311693e9e68c2c544d2da5a144ddcbc3677d83fb1306f35bca95726f30531b8c68d12237887824745aad2ab020b617375a5e4ad333c48ada736fc9de0ac211c7f27b4e004c0d001c12bae6af1f5afd3f96b89dfbee95e029105d83aa1b0f81ed23aa5361a1166f54f131bc8c21e1fb04f704d9144dd88ac5f265ded71d0ccf846831619d31dbdbe76afe774538c2344742d48dcd687e7362f6d8261fd746c958271ff4bcbdaa63c88e7fd94ea95b89e80d7565435d19c61711bf41e5237eef3d37f6a05e6e83f9868483fcc55fc7c402d258532dd03577e34714ea7379acf7cb7d4ae7fa5a760cee258de69ac084bf7b658dffef64497ee431b06f2c117ba74bd0764d69c3f389753bfca1ea216dd6de9bde061d89ea0ea4ad38ef814dc05a79de37dc59f72b1ec0691728c28326e71f81fb61a5f4cdcc372325b2611efdcb7c4c50f1667167dad300e4f17e50823130f68167f08965f07cd46f544fe2cf342b74a2584a62e4103d9182b719e46211ebdeba20430229b9c431ae8e3d5699334141b1bb3ce112239185f45ea63db499d719e68664555fe44abbdc112100b9a44f34563149a6782877febb583d85759bf06c4877c706028910b2b81168a468e93a93c6a48ff42320144878aea9dc576a3d710c3c610efb0f83f97b17d350a85241e007f87d20ffc0d57626b4e1ef421971df48bff64ecf5043c968fb27148ce32d38e3c911321147f3a81b6524d78eda3447dc2d947606fc96aaead582a044a024cbe0ab50f01d5cd833405389d457e5eef18820b0c055087bd140c75bce7487b4a711c36775a83fbfab04dc39721a30dbcc5ae99beb99e19d3685542e9f06146347896b4d7cb5b93da97a10982cae939ba9f79e6c51563fdad303f2e86d00ef79bd01f2a8bc279e13725b5eaff36ed08d9f8c85ee006bec97004ed368684f7c8b5267e7d371567bf604a18b307bfef93b08d2521fde87a139d48165734d0663bf9bc0aa18de75577b426e44324a9f6de13f6ddbf2687ee8127a2750cbb6abdcd36ed3a96d3deae27a8271c14f9584f094166dd561fb9361b7ae9d458c28b89a4190d3057ca0b297dfc2a3b7a5839e75f1a39e26272af92859b3e90088a2c6cb112be73b9c186f8d801aa6af35496446727d1e0d7c866701a3ec1eb3cc36cc226338d9837a26cc442e08b7da88e08eefed41a70128b0f48c71701a31eeb51a6601511ac3ac8e740e1c99d76f759c75e5af414da7f5388b5a667698fb5e59872872d3855195976f16a9f2fbc6760e541f71751ea7e676895ec13824bc7dadbfea1cde90f2f656db3fed7bf2cd23ea997f720dba58703861d24f6559f06e00af2a6ddd611db504eec432bc8c9b4ad65ef24179bb04ac42973a882ad1ab9bcc7de1ae92faa9bc048c106e07d8ce8e804f83f6b9f537ffcd22359d569392c1093ad425eb47b77bd9240b5f7206dbcb02c4a9078a089b0b7f2ac34997d40b5b0e6dd809b8472e1a4b4b0e71d26293dce00c043c1e68494a9728f286fc317a00de9ba52779759c2e7b463d77caa100a20e503d02abf7d0d24a770f0e9604dfef14c3bb28d00bb9343af8e8358cd63f087c8f4fadde7faf3ab38a0bb8066f5a0fb93c9ab18fed9e971394638ea7c922d0b53e7519fbf33511eba0ebe7e9ba5795eb9609c78339861d8eb54809c6155d2f98de9ab776c82bde8f37787572cf206c29fffdc6fc7907d426f29f7cc976f21c1d944bd3647bcd6e0b43c99836af74084ac6d8af426c64c0d3e0aaade489809f099c0b813b18e8aa28f02311bdda4136ddfcdbd65ea1c8a9564819393ee1c40dbf0276dcf73d6795037b5ee0e1d87a28d1658345c735217981d6a605b8dc0656fb7b4e177693399699345d8998222e4988bddf7310c8d6873479a275f7bd810f85cf30bb954fd798c2dcfdeb15102e285ba992ced5b0737184e156d2b14eaa628d8ab55fc6f633e42d63529c1f8d5fe2cf47a17b94191bc7a9400b265fb6a5a47400af18cf9d6925ff153850ac5a96599cd8a1adf37e6e5cdd2fcef39fc4423723da834b6f856237111b26b924f703124afedfecd23a74ba539d53124de245bde20fae3e14a46f3f6081591515c5d44ca345061f58b51165de22ecbb93fd25835c69384dcde953da4932a2e2d1a1062d5ef4b9e9122e0e3f8667de9f038afe2cd05d6fe990b612010b29977f932f50c5bde96f533d14f26b83c7ae1a6c7d225187c4a7fd00cbe16310bc5fd1d76477d2d3dc2ae111204f3d22aaa2656167b0ae990cb3996847c7a3a96917f809897e8a4a59f41c034ccbb0bccd3c70f1f0db30ec04b01cd671bcf29c472beda6bda9b9cf66936da6f4117e2f3cd424feb26a3feed384c0e3de63b2f09cc60758d9b783401a28288e6ccbe46c3c8d02f1acfda4a9d9da4da5c350b9d3ec3d65f87eb357fbdf02545628b99c2ffa50b390630080a299acbd6b817427445f565a82a8f2fffa7cc03e2bb33c83d4c30f00df3895898a195f01138ec6fc05c909d575eb9210196631bc865406e18f923b69f72fd09e0cf9ab30b13d0d9d76ffdd506e24f6282bcd246c63978b38f3aaa561f5864b6e5909bdd4cf0b83feaf4c60e4c9e0856c185f73e969648bb544ba69445b5803816fde5d66f9faca782e45bb5f40a39d8eab75e2113a30f01debc3a356dacd973d8dc035ec596be1ce2b1aae1e496c18ac966f497751f8ea3dc9424de3caad13a5351d7d0901e08baab28cc56d462cfcf3fcce469488b965972c9311bec4dae93c5371d6bd7865048dc16927a2121fd4584d3ba8affe1934d59b29bfefb3a3e141e1b13ec94b8a0ce70082966f40ef45d0c7441441d686491e684f86b510284c66ffa99590db95d83b980c13bb5b759131622cc7538082eaa42bd3bda999b823b5eb9db1a041e88b18fdb54c5f61fb421a9debe57d6b26f8603bca122b33b4e2d837d90c3910d2d7ebb94dc0bb27cad2efb45f28158ae17061209b08f3e2ef64e2d650ad41d3bc3ed4e7e69d3ae56186627528c86f94073950df0de4bfe93ecf6eeb1a5f73c74d31fb47834236852b925427fc1473014cd76596d9351a9b6bbda0713d6d4a42335bfaf9291425474180e7815fff8f29511ead5454f227d4f7db95ffb068afdc4f5c0f01438b1b4742653395478dda094315c15bfeda1892ee50c15dfe587e20ba0cd01dc61765ac5d5cb1a8741fe5bd5c083b23d4a69422aa2f34a34c04f81f393939bb2f56de8ec7ac8c8127d223fca77a4477250f0567581a3a0b3c796c16d13bbe906939b5284d0f1f95edf108c8fa85bb134e68dcc3617be4b449a850ffe04e3cc0912494d325b3dc55f71838ec4d56abafc84ea0f3bc545c0813613ca451dd752b2a717ddf74ff7e48070d3395da9ece672350946ab500925b215979ada1a5b050bd5d53e4df66fa3b1086c20b538525a6ece538bcd199ec5de4d1e47e844a86b2f6befefb20d8d6ffe427d7afcee99fb5636d6f7d4bc3f0c6dec6f88af4c94df310b332ca7285860be2c1a3dfcc6d48d2a49a66e8de80f2f4cb33e645eb1141dc091c2385ab9be630a775aa760bf7d5136baae113c00291cf267e20c54806bac8e842edc11e9e2c03eae18cb184d165cccded1ab97704fffd57e44a8900343bae9ec822253cb06876b3ec77854ba6d6e84f58ec59098ff0d0d3b63c92d5e2853da9bea9cb09324329c98a7ed748feb68b464635bc1f8cb285ea87f4cdc588eeb8c384a91584eeb688d067e1be8ff50949e8d30a35022aeb1bfaa84e1c21f39c84b382b18facd09e7d409fc49fa502e17a62e89108c6b89dd448499795e23e3f7266a70c038fc04d4b86fa5bc5eee66b21baeaa0ed5f02af27ac26fa94eea3d086529d52d103ad39188e4e5affc445a95ad8d09d7099e070a16a5589f010c8b4cb15db1f917b33a7ef093f34331c51a81b1123b88f434b0c239ef2b8ddd206f1ff2790f22393a784f1ceb5a871e4f65b0fba1017e49cb49ddc6b99bddc0d93d3a958e8345d1eaa9a468b31ee8d9fc2903989b75a1075fd0e66ce320d32911cc49cffb5044ab5bb3765efb874999b11055ae33ee054fb3dd6902ec1a9b81082bae5e225d4fd68ac0dda570e849b480a0014c8c8ec0230bffaf2023c7db3fa4d8572829efc584421bfd90d037149a2dc06eaec8f46130b9185e825919ea4eee1c3729ff6bbb6bba20d95ec8036e4eb8eed08c1079ac957ebc961adc39eaca36412959237c915eddd4bb634e0bcd532bc0af4d6e70808d296085b7208fbfca5749566b82cb47cd7941c81282c60dc76366ea1b04e98f02b67918cc0edbdb97da2039ed9101fd867194bf04a75a187c672bc546c970e3de7836d63b7c6409d3b31ea6cc3edda896922bf7f9e0f798a4a56667743bed113de109f65797177da9fe09e9956ac3d06ab5c2eb5dc78a9182a672f2f47e1c8c54d468a5de4107ebda055d9ee9cd000fef22741c071bb722e8a764f87d2fdde4b0167aa65bfa19785d083b99edceaed28b39835addf7ac1c959d035d5cb6ff706e735f2928f4a95462b2719b0a8965b4f454eba4e72a468e7a3a46d0ab9d4b3db426d28f81de04efb6cda47b08c6b1d1fb70d7499c88f812da1acaefa699d6dcb3fd8f9455f82fdddc8cf40bd768777b4d9701349fa36a8a1ff86eff74e49347b35756864cabfc2431ab6a8d549bd5127b179b317861bb3ac9fe9c4bd887afd7edb1641f81745098f2a97f80ef2bf6811ea209cfcb112c604e3e48bc23c605e746adac42ad427ff8a52ff217b5363504c4786ffa9a5aea5932b47fcb0bd0e3b8051b77fcca795567b1f1b6657bf39055c6cd13858138d8262b3fb6594feb4b49cb38f04ac5a2e9780c25d20a770075bfdf69bae3596ad2f364760bd425637fb6325c1ff04e0ecac53e51d6d358bd0b9acc11e9be24b04e330573182fdef89ea578d1bdee8101c5c79695d8950308dd11c8850487f06a17c96066dee0f79796d4ddeb10077d646427b7b271f319966f5b2edfeb20648d0cba0bacfb92d4dbd9b82455e5839da99db9683c2f88eee0a00ef1d420a54e500a3add208be6adce386a8137adb60db25c85611b17f57f5518feb5c27cd75d9d31a3c4c348bcff6fac83aa8f37c0e04ad0e6b78784a44eff0dd3508865bec57350375c0c1a0d2c9ec537bb4d812c097626723362ee6d6c0dce7a39a9da8ca41491c1deedb70d3eecd76ede0da34ef1f532abd939d67", 0x1000}], 0x1, &(0x7f00000012c0)=[{0xf8, 0x109, 0x8, "d628d56366411b390d960128a70d88cf17e6fa14ef933da6bf5477db7d8905d7ba154db417549506f34b7c80f3c9c18386311f1fceef88dd7ecedc50a3824be6f0b8e55c4d0ed9d38432b507219d264c1abf0bcbfa66a120e6145fe0f197109b4cb0fdeba1906cdde8e0914151de16f6c7d47f62c3a80ce0d100adcbdd43807e3af0cdb263a2e5425d453b273534fc108719b84bd5fa033eb68814a4ef5d536a03c0ace8f4621dcec4556d2cf7d6b1e30b8cf202576daea2abbb3d7645ac4e0ef26770998d236b12aa70eb25ab19781d2b6997e98f1b1404f568f099dc4a0f070cfb"}, {0x60, 0x88, 0x9, "d846b4e6ea639257df610e7cd6e601e5570da11f60a488df4da8f8839de3c9bb5e0be1f8a429c6b78e62bf0d3fa6d64ca1b3171396b7222b148f5e3f201e70d30524f2216d0dee1db101"}, {0x30, 0x10a, 0x80000000, "d3838b3b6c837a377f3b030d4410605564a80cd06e32684cb550d46eacd8"}, {0xb0, 0x1, 0x800, "ebf6b9b9e589bb5a3d2efb84c3dd46340f6e274ad26fecaeff99fcb0e8bde83abde9dbc441fd4035be6e93a5c541c9b2ca037d762931c44247e2f0b7ffeaeb32d8ce9123f1454eea150bcd765cb5fcc3776bb3c5ba3fbff2f0f40103f518102042d1d1ebf65fa38d138955b5c5d0264fc74a26ead374cd16c3277fd0c9cbbea4a121b98b52e2c0dfa9b8ea87506e932b87257b40b6e05d5b9188558a8bdb"}, {0x68, 0x10a, 0xc0, "2f536ff418cd311ecd82ca6d151a32433bd2cdd6093e6fd8e2fde9569409ceae2c070962678df0f4ff63f45cda640a91dc0c1bc3e33832bf13e71446f811a14bae7b26360b381dda351974c6977fe119676f5b105a3d"}, {0x68, 0x10d, 0xff, "c196cad275a50b076efddd5061317a7804b6a708b8969f4769a05e748b7e67d8008c403321ada2c1208e0b1a0843a148ade6dfeffee5c28941249866622ef74f97f182fbcd257f8f0e92d6bbc7fdec5fb8ad9413ba3e4033"}], 0x308}, 0x0) 2m0.988580951s ago: executing program 3 (id=1385): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bind$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x284, 0x2, [@TCA_MATCHALL_ACT={0x280, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 2m0.771883235s ago: executing program 3 (id=1389): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x3f7, 0x800, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xf, 0x4, 0x4, 0x12, 0x80, 0xffffffffffffffff, 0x800}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x8, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)={@map=r2, r1, 0x1, 0x0, 0x0, @void, @value, @void, @void, r3}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x8, 0x0, 0x8000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000001400000000b7080000000000007b8af8ff000000000e0000000000000007020000f8ffffffb7030000080000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r10, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000280)="bac35e964d8017a5774b25f5a4794a7d6f059d0146721c5dac72cad7fa4a3ca86bfa7cee1edb77ba7f89c329ae91ca4d5380e3d0ce07bdc7bd8a411f6f1ed9d583d4fc4bf080c3e5ec9d31e4fab905dbbd9ace9e8ed9017211854cec58fe1f85fd14bb4e318342b324bb44d2b047b69172b8433a621c309502f13f6aa75a12be1e1f40f520fc80d6845afd432ba43c86f19a34860891b87ea4cac87df26e7ea28c82ac8ec0af3dbf60e4e6722537c4551895433eb91630048560c7da5877e2c7e2"}, 0x20) 2m0.636637385s ago: executing program 3 (id=1391): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) (async) 1m56.262606928s ago: executing program 35 (id=1256): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c0002800700010000000000080005"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000440)="79765cdae88226c86a959a0cb97db52f1d6006265664033201961beb22e357f601f080c992d928e2e2d7ee46437b78e8396932bba46f44f6734e8813620c9ba9e0be341fcb4e74aa0fe71965e8214f8982fda670642ed7afe3e95773f61a7d6dc8ca39a0408a25ae4dbb3a90567bdc0f6b08c762ae4ffd3ce38fd8aab6ada8147e59274208bbee090ea514b6d34c1ad9aaa0328ae04762268c5732f1fab682a110fac278bea15071e5cba4bb7ae3c7f461dd24c64377fffb866503b25e61ce0d3bb85b", 0xc3}, {&(0x7f0000000540)="9998fa4fa060322ea11e0cc6a640c7e08ec9041db193d0ca4abef71555ec53436db7a893a7b751c94eaac778ab0fb0e1b109dfbd77b6c47c52e5eb44db28e1f7a5a39fbeac03131abfb64d37f71f138056b24375d170dbda3d77b3b162ad5e0cf2258c3864e0ee66c821ed17e6f84ef9c380866f6c1345da0c052c938fe5ad67bd2f98335e78539b04510752a19a76a7d481d723ab219426fa8aef71175491be3ad951d32f7a690f2ee57b15fc126150c88ec159520d712680", 0xb9}, {&(0x7f0000000600)="12644b9cb5660b04a96461b3fb4a3c3ee06e02d52a9932e743044f782973ce4ccae0d5d9bb7321efdd55510692cd9b00b60f4ca9075e7b178cc409ef922029abbc53733667f8e9cd5e4dfd68dfab44dc6b226532df95d0f24fc58488eaef0dbb4bc94c3c6a162476746d682109f7b7799e0c78ed28bdd8c7b03a0b8e70aecbef12", 0x81}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000340)="ad5ca043ed41e1541fa637abd8df0718a411904831ff93b4fb658bc657c9580812", 0x21}, {&(0x7f00000006c0)="fa6e3641457e14595fd70322024bd05c51b9b0dd0e6704b9953aefdc97810b", 0x1f}], 0x6, 0x8, 0x9) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa000}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001900", @ANYRES32=r4, @ANYBLOB="0c8029007f000007ed6668ce21198bb7fc4da227c08646c0cc6eab28d99df099a5dc58f5a22aae4bf97410fa638522600bdb4bf9efbc4dd4eb650d0932c1204e75ae58344ade2eac7edd37a1b2c6fe2625fb38f800252455bb4eeeae85220c758a885b7156bbd5503facf98188b68c99e54f201f1d93533ca65f20289a65a61479e2491db569a8f1dbcdeff17217d5b5ef60cc9c0c8f642f3f", @ANYRES32=0x0, @ANYBLOB="080017000c000000"], 0x1044}, 0x1, 0x0, 0x0, 0x4880}, 0xa000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}, {&(0x7f00000035c0)={0x10ec, 0x42, 0x100, 0x70bd28, 0x25dfdbff, "", [@generic="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", @generic="2d88bda7dceeb3e04f2ff392c687535bd9a8d575ba3eb54abd4dac5660f83f7fca4e765a1daf32e8bfca492e7738da2aa8dd3f125da82ff76e42c06b3fb151eaa4ecab9b6db9f56272509447d128881bd374cb6b8f38776c6eeb3615359c7f73badb2b8d512753b6c98618fc845296ece91192651a28e12e6d97b96dccb7fcc9d4b0013a70200e0a383ea13c6338ab08c29278258a41a885a0f0299dc0f497be3fbcd43808d79792d35e20d33afd4884598feb07f90d6eea101681ae9d7cee2e6fed44a0c8d0e94d6531ed84d2f06c6bfc5fe6367eaf3c035d3a"]}, 0x10ec}, {&(0x7f0000000bc0)={0xec, 0x11, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x9d, 0x129, 0x0, 0x0, @binary="d631790a1bdd5cc584a0a3bd52b5e6af30cb9d5de60c8d0561122020066d0d788d05100a057ae3dd718ec99e8d5dfce60aafe35069e4cde85c67cc91672a1a214805a265e951b492621443a68fcda636a7622e1cee668c96d869a02ce29338736677a686c23a3b79eac2044dd7ec508cf7beee04d60625e36f5a0ea88edb535810624a26df322b53fc3febd45724b5e3c08b5b8a1cb5879917"}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x35, 0x0, 0x1, [@nested={0x4, 0x30}, @nested={0x4, 0xa2}]}, @nested={0x28, 0x1a, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x12b}, @nested={0x4, 0xb9}, @nested={0x4, 0x106}, @typed={0x4, 0x13f}]}]}, 0xec}, {&(0x7f0000000a80)={0x13c, 0x1f, 0x200, 0x70bd2a, 0x25dfdbff, "", [@generic="a44940179d45afd17bdd5ca76805e7664558e1cb291ed4188b4d1395150f6b1d591f5c5fbcfc068a68ae2ea52df14410e692d9e20184172563abaaa7f0d7c4a050535ba73538516b1b65b6b991419422f39793ae90d57844d051517a81befc6c4a", @typed={0x15, 0x55, 0x0, 0x0, @binary="0b48da61911815139f80f3859666e427ff"}, @generic="01d98aa537c45ccaa729c9244cc987ba4f619cea896d5c4a249f2ad54b42d81371bc071f8a599500be0b69d03e8a435308d183c703e88dd9c0bcffc91cb39d4adf6627e105f5aea60c47f621bf3ebc9f4e3bb525143ce8fffa6ebbd28a6de20bf77de2a2af592caf05a5f718a67108ba26a27e14b6db36e7be04", @nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@empty}, @generic="b1f3fc1bf922ba317d7fc36a1303f6b33faf336b27ee5820"]}, 0x13c}], 0x4, 0x0, 0x0, 0x4011}, 0x0) write(r0, &(0x7f0000000280)="e5caf715f6778567e957a38c9424fe96918d435a25b2f2c24eeaa2c010ef3f38f7b65d72e36656dc850d2c13c4082f3ed93b65ee1aae205a0b02a2ef4522f51914680d", 0x43) 1m46.004394005s ago: executing program 36 (id=1381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getaddr={0x14, 0x16, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) 1m45.621127719s ago: executing program 37 (id=1391): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) (async) 1m44.776813572s ago: executing program 2 (id=1609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r2, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x408240, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000140)) 1m44.763135825s ago: executing program 2 (id=1610): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001a08000640ffffff000800034000"], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x24}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x1}], 0x1c) listen(r4, 0x100) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000084000000070000000a14140a0000000020"], 0x38, 0x8000}, 0x20000000) 1m44.552593767s ago: executing program 2 (id=1612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r1, 0x25, 0x0, @void}, 0x10) 1m44.533851994s ago: executing program 2 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x4, 0xc0, 0x9, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x0, 0x800000, 0xa42}}) 1m44.40038882s ago: executing program 2 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200be8e2b00010180c200000008004500001c00000000001190780800001ce0000004000017c100089078"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) close(r1) socket(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x280) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ffff03000089100179834d00009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}]}, 0x28}}, 0x0) r4 = socket(0x5, 0x3, 0xe2) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x10) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r4}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff03, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, r12, 0x4, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x16, &(0x7f0000000080)=@raw=[@exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0x3, 0x8, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x1, 0x1, 0x5, 0x80, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0xb}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}], &(0x7f0000000140)='GPL\x00', 0x2, 0x57, &(0x7f0000000280)=""/87, 0x61680, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r8, r9, r10, r12], &(0x7f00000004c0)=[{0x3, 0x4, 0xb, 0xa195b54867c4289}, {0x4, 0x1, 0x7, 0xc}, {0x7, 0x5, 0x3, 0xb}, {0x1, 0x2, 0xc}], 0x10, 0x2}, 0x94) r13 = openat$cgroup(r6, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r13, 0x5000940f, &(0x7f0000000780)={{r7}, "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"}) 1m44.048670973s ago: executing program 2 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="4dc07f94", 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x7, 0x1, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x40, 0x0, 0x7ff}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m28.788607057s ago: executing program 38 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="4dc07f94", 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x7, 0x1, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x40, 0x0, 0x7ff}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m20.344771797s ago: executing program 9 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="24010000", @ANYRES16, @ANYBLOB="08002cbd7000fbdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000180000006001100008000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00f50000000600110000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000100000006001100040000000e3301006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000100000006001100050000000e0001006e657464657673696d"], 0x124}, 0x1, 0x0, 0x0, 0xc054}, 0x4000) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000027c0000040000000c"], 0x528}}, 0xc000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="120088f70000120000"], 0xfce) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x20}, 0x0) (async, rerun: 32) r7 = epoll_create1(0x0) (rerun: 32) epoll_pwait(r7, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) 1m20.08428066s ago: executing program 9 (id=1945): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd7a18000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x80001000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xa1, "7b5968a19a207f61a56f337987c1c66719ab9b4c854e87aa79cebdb002e5f89742ea83109dc8d27cc13c0b17d086decaca72cd4a1624ce0dac37dec638a2b553377393a3297f2ee9df42099931cbf2e657929988adbd7caa8bc43f52f2b62ee3a277ca4845ec667df6b32ddf2feab22c7c1bdb5e1826c28eb17d3f3d711e1609967badf4e471bd97a43860c91ddce52ab1bc4966cb50417fafebc8405fa1e4424f"}, &(0x7f0000000640)=0xa9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x424, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x40, [0x9, 0x2c, 0x6, 0xabc, 0x2, 0x1, 0x2, 0x0, 0xfff, 0x3, 0x8, 0x0, 0x3, 0x2, 0x5, 0x1, 0x5, 0x9, 0x5, 0x607b, 0x6, 0x7fffffff, 0x6, 0x5b3, 0x2, 0x10000, 0x0, 0x8, 0x4, 0x9, 0x8, 0x818a, 0x6, 0x521, 0x7c4b, 0x7ff, 0x3000000, 0x9, 0x3, 0xa, 0x7, 0x1ff, 0x4, 0x1, 0x9, 0xffff, 0x2, 0x5, 0x2, 0x3, 0x4, 0xffff5c16, 0x1, 0x8, 0x5, 0x0, 0x4, 0x421, 0x2, 0xc527, 0x6, 0x81, 0x10001, 0x8], [0x2, 0x4, 0x81, 0xfffffffe, 0x3, 0xfffffffc, 0xfffeffff, 0x4, 0x77a, 0x3, 0x9, 0x1, 0x6, 0x8, 0x200, 0x7, 0xf, 0xed, 0x3, 0x7a, 0x56, 0x1, 0xffff, 0x3, 0x7, 0xc5, 0x2, 0x64b16fff, 0x4, 0x9, 0xd1a, 0x5, 0xc, 0xf865, 0x5, 0x1296, 0x7, 0x7, 0x3, 0x5, 0x80000001, 0x9, 0x79, 0x14ac, 0x1, 0xfffffffb, 0x0, 0x10001, 0xfffffc07, 0xfff, 0xe, 0x3, 0x7, 0x8001, 0x6, 0x80, 0x4, 0x9, 0x6, 0xbd6, 0xff, 0x9, 0x0, 0x4], [0x6, 0x3, 0x7, 0x401, 0x600000, 0x0, 0xe4, 0x1, 0x9, 0x2, 0x0, 0x8, 0x8, 0xfffff2e8, 0xc5, 0x1, 0xea, 0x0, 0x67, 0x3, 0x40, 0x8, 0x6, 0x4, 0x5, 0x8, 0xeb, 0x1, 0x10, 0x3, 0x7f, 0x40, 0x10001, 0x4, 0x1, 0x4, 0xfffffeff, 0x0, 0xf, 0x6, 0x3fe6, 0x3, 0x1, 0x401, 0xb, 0x8, 0x4, 0x5, 0x10001, 0x5, 0x10, 0xfa, 0x3, 0x2, 0xc92, 0x152, 0x5, 0x6, 0xfff, 0x31b5, 0x7, 0x7, 0x7, 0x8], [0x5, 0x61, 0x7, 0x1, 0x1, 0x2, 0x4, 0x0, 0xfff, 0x2f, 0x9, 0xe, 0x40, 0x0, 0x401, 0x6, 0x6, 0x7f, 0xbe, 0x1, 0xff, 0xcfd, 0x7, 0x5, 0x8, 0x6, 0x8, 0x1, 0x5, 0x10, 0x0, 0x6, 0x100, 0x8000, 0x7, 0x1, 0x9, 0xe, 0x2d, 0x9, 0x81, 0x7, 0xf, 0xfffffffa, 0xbc, 0x1, 0x6, 0x5, 0xadd0, 0x2, 0xfffc0000, 0x5, 0x6, 0x6, 0x4000000, 0x3, 0x8, 0x18fa, 0x80000000, 0x8, 0x9, 0x7ff, 0x7, 0x5], 0x3, ['\x00', '.\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1m19.885874258s ago: executing program 9 (id=1949): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8e1, 0x1e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r2, 0x0, &(0x7f0000000400)=""/55}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet6(r4, &(0x7f0000000580)=""/66, 0x42, 0x40010121, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @private1, 0xa}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @empty, 0xffffffff}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x97, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000073114300000000008510000002000000b7000000000000009500c200000200009e2e6f9b299500004c4df78fe72c9dd907f9f168"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x8, 'macvlan1\x00', {'tunl0\x00'}, 0x1}) close(r0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r6) socket$packet(0x11, 0x2, 0x300) 1m19.692484314s ago: executing program 9 (id=1952): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a31000088a659990480080002401886c30108000140000000051400030070696d7265673100000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m19.53275429s ago: executing program 9 (id=1956): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r4, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x3, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}}, 0x2400c040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000005a0000fc00001fd7eac1b8bdae0771000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 1m19.461472774s ago: executing program 9 (id=1958): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb2}, 0x18) socketpair(0x1, 0x1, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) clock_gettime(0xfffffffffffffffd, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m12.500577255s ago: executing program 8 (id=2058): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socketpair(0x28, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, 0x0, 0x4804) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x6c, r8, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800007f}]}, 0x6c}}, 0x840) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3ff, 0x5}, &(0x7f00000000c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x8, 0x5, 0x40, @local, @mcast2, 0x700, 0x7, 0x101, 0x5}}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000380)={r12, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r11, &(0x7f0000000140)=0x4) 1m12.052458277s ago: executing program 8 (id=2067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="b2", 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 1m11.588626481s ago: executing program 8 (id=2078): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0xffffffffffffffac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b200000094f2000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 1m11.494342556s ago: executing program 8 (id=2081): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018006000100", @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fe0041080000000000557128bf5a1bc323e14c123351a1ca4b1cd2143a9b8be210324fc62b217bc7c26ca9399b9352c937902c79d583dbb370410ed29093daefd7c308516e312ddc5c39b1cb8390da85e80750f9dc46bbeb1d87c68e3ac19d2c4d91d646f33e012708"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000600000008000000e439000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000001c00"/23], 0x48) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4f}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) 1m11.278113598s ago: executing program 8 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getpid() sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x57}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x1b, 0x7, 0xfffffffffffffff8, 0x4}, @generic={0x8, 0x1, 0x5, 0x8, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x83}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @map_idx={0x18, 0x1c7d92dd4fd99990, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xf8, &(0x7f0000000300)=""/248, 0x41100, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x4, 0x6, 0xc}], 0x10, 0x1}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x34c, 0x14, 0x200, 0x70bd2b, 0x25dfdbfc, {0x8}, [@generic="93dded55ce845aaba67fb9f1d0f1465b0db0ca9a66240e8cffb397c9fc34ce5a7d5630e639291cf490af22cb773874070e8cdd49cb7da2dea35fac48bf6088e3094e7e37268658abb9d3c440bba44aed6875c89aa270d466248d3ff55bef1a65d5837c015d427141f6e12836d865327ce5277c301bacbdb7989591a6e92c4d8391f6294de9156ac734cbdc38a68a0797e86ce4f639a50907fdac25d248fce52c77c58e4e4c89", @nested={0x44, 0x58, 0x0, 0x1, [@generic="262998e8e9faa253ae36ebcab330c57d757bacd70aa827918f9755fe169293f7b9ea3f22a2e5a9faede30b86c8bd041a80f60c7d98d5e2c5fca95d8de48e254a"]}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x7fff}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x144, 0x95, 0x0, 0x1, [@generic="92cb565819610a93f2d6629eecf1fc20f32411f9fca94757ae9bf4578995263c8b2bbd8398b7efe4d1d910a94ab5357b5a4d517d5981bced26369b73bb94ab8a47038f5ba9761c1e76778531b646d414ea761ee93ad4922558c86fa4f08deddc052ab18086158f7c06d99a328d2f532813b695bffe16764e1eabaa86f935cbf6e4a4786eef0b8e3c8772e32b7d572c81ee0c27249a48a57366ce83536c4f78d88fc48db19d368d209a96ad611057adf5566c376e2ad2c893bc3bb61ec75b62a270045bf85c194581bde676c1e88fe263a6343bde9a6c", @typed={0x14, 0xee, 0x0, 0x0, @ipv6=@empty}, @typed={0x4, 0x1f}, @nested={0x4, 0x66}, @generic="bfaafbb13d07da9743a047f0e56c3d8b8bc804c2de5f56f9874da35b8c3cd371a8bcf8190a18d52106d629540fb0f1cca269894dcaabb8a0bda1e4e992fcde6fbae2634f060000ff000000004368"]}, @generic="e2fb509b80064612ce50e2254c2fb5f82ecef24bc9c6ab9720caca5bf936db31bb0f35f7a98c79e93c04f3ad1cb9cd8a1629e6e7a7de5453b22126cbdda18ae49c3d5f53e91ba08566b85e37d8a5c779ec0520ae8ee4db5059c656c6ea130a48ef", @typed={0x8, 0xe4, 0x0, 0x0, @fd=r3}, @generic="96e051a8f8db97998d1f3d3420e5631607fcea3041c46b1ba1be543f9c2bf3103d5ca0ef2ef5f39e9d270aeb9061e6bc2e57c18ed5dd2dc1992622c2ca7ba7a1ca73f7623f30ae1c2a7b64438c4e034e5b7539cb123f613a2bca911107d8b6b5cc7b78e9ad24b4ffce59c2329b9450902f39fed4e5bc91ba616c65386f2eb73e9cf33d88e8a7ea48bc85"]}, 0x34c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x10) 1m11.18485158s ago: executing program 8 (id=2088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0x100000000000007f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m4.409124133s ago: executing program 39 (id=1958): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb2}, 0x18) socketpair(0x1, 0x1, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) clock_gettime(0xfffffffffffffffd, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 56.189475198s ago: executing program 40 (id=2088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0x100000000000007f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.072594245s ago: executing program 7 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.924626871s ago: executing program 7 (id=2343): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0)) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@remote, @remote, @bcast, @null, @netrom, @netrom, @bcast, @bcast]}, &(0x7f0000000180)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'gretap0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f0000000400)=""/209, 0xd1, 0x2, &(0x7f0000000500)=@sco={0x1f, @none}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) (async) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4feffff911f110529bd700000dcdf2500000000", @ANYRES32=r4, @ANYBLOB="07010500400001000000030070696d36726567300000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4feffff911f110529bd700000dcdf2500000000", @ANYRES32=r4, @ANYBLOB="07010500400001000000030070696d36726567300000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000001c000380140003800c000180080001000200000004000188040001"], 0x48}}, 0x4814) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x44015) (async) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x44015) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@can_newroute={0x7c, 0x18, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "26bdf9260a45fa98"}, 0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "641f48f430900893"}, 0x9}}, @CGW_SRC_IF={0x8, 0x9, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2}, 0x3, 0x1, 0x0, 0x0, "07317c165097665e"}, 0x3}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "cd0d2bd85553b5b1"}, 0x4}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x2004c820) 52.839443073s ago: executing program 7 (id=2345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 51.115238398s ago: executing program 7 (id=2354): syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$packet(r0, &(0x7f0000000680)="01f95f78fcef3de79aff213682aeddbcdee4b3e214729ea2388da9c0d9b8916a81326e5b3b868e7100c8521a3a59d6124ac4e056a4c2ba57d6245cdd7314ed63f4e2d4a925db3d2c24e185fddc5b48cba1c527123819690c09aecb601d21ba8b78cf69ee250cf1912900d4186c5aa59fc3c5a18c63def50862eab10289ae6b77e930a6229f83f6aefcf84c4e5888011e4ddd83e53bb3f22e5d75787d6cf8df6666e7caa1c9d5a3113279f495d857d523baa0afc500b35bbb2d9aa53159559e614053e6333a52c9e6c7d36908aab0ac81073c10c6d970a78d7dab644f975e46a26842b001e5", 0xe5, 0x8000, &(0x7f0000000780)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x234681, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x1d, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x50e) 50.992534363s ago: executing program 7 (id=2356): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f000000cd00)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x0, 0x6}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'erspan0\x00', {0xe}, 0xc3c}) 49.958163185s ago: executing program 7 (id=2367): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r5, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r10, 0x952de000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) 33.927574823s ago: executing program 41 (id=2367): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r5, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r10, 0x952de000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) 1.768343093s ago: executing program 0 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x11, 0xa, 0x0) bind$packet(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd010000000000140036cb6cc46000000003"], 0xfdef) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}}}, 0x24) 1.656292641s ago: executing program 5 (id=3113): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) (async) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) epoll_create1(0x0) (async) epoll_create1(0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001200)={0x3, 0x5ac, 0xef, &(0x7f0000001100)=""/239}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001200)={0x3, 0x5ac, 0xef, &(0x7f0000001100)=""/239}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)=@alg={0xf8, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {{'crct10dif-pclmul\x00'}, '\x00', '\x00', 0x0, 0x4000}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc010}, 0x24000000) (async) sendmsg$nl_crypto(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)=@alg={0xf8, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {{'crct10dif-pclmul\x00'}, '\x00', '\x00', 0x0, 0x4000}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc010}, 0x24000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001480)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wpan3\x00', 0x0}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000600}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x48}}, 0x4001) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001640)={0x2, 0x5, 0xa, 0x6, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0xd, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0xf0c341f}, @sadb_x_sec_ctx={0xc, 0x18, 0x0, 0x9, 0x55, "3c9f7e425970ef48bb25daee2bef7921d574a1f579b5978642f4a6ed8ca9955b46fd98bec756442cc91afaa30bf895a4e3cc1128bd1b6a87385428da30ce664075e1254cf46159449ad9408adcc57d59fc53d7991d"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0xc}, @in6={0xa, 0x4e23, 0x3, @empty}}, @sadb_address={0x3, 0x17, 0x3c, 0xe0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0xe8}}, 0x41) (async) sendmsg$key(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001640)={0x2, 0x5, 0xa, 0x6, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0xd, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0xf0c341f}, @sadb_x_sec_ctx={0xc, 0x18, 0x0, 0x9, 0x55, "3c9f7e425970ef48bb25daee2bef7921d574a1f579b5978642f4a6ed8ca9955b46fd98bec756442cc91afaa30bf895a4e3cc1128bd1b6a87385428da30ce664075e1254cf46159449ad9408adcc57d59fc53d7991d"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0xc}, @in6={0xa, 0x4e23, 0x3, @empty}}, @sadb_address={0x3, 0x17, 0x3c, 0xe0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0xe8}}, 0x41) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x11c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0afd1cead0289ee912fab4d29a0ac8238d7f952889cf89dc2857d421b7899df2"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "99521382838e60f60b7b71a58b1076e295901a34f12ed7000f3dd3eb8f125094"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cca30f4412ab761527266285e78654d7aa8ce5d39f68e2069e145d208ddeb39b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2f3dce222381e23ec26b943f2e3f8d0f"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3000000}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "558fe9c65f305b2598aa43d175fd3a1c"}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000064) socket(0x0, 0x4, 0x7fffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2a, 0x25dfdbfb, 0x2, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20040014) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={r10, 0x58, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r12, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r12, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) socketpair(0x2, 0x80000, 0x101, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000001d00)=@req={0xde, 0x8, 0x8}, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80), r14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r9, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001e80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x68, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r13, &(0x7f0000002240)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002200)={&(0x7f00000020c0)={0x13c, r15, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040404) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000002280)={0x0, 0x7}, 0x8) 1.533557371s ago: executing program 0 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) shutdown(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc00180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020e00"], 0x0) 1.359771509s ago: executing program 5 (id=3119): socket(0x15, 0xa, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a0500000000000000000000cc97128200010073797a3100000000ad5958b70f48e90f479d4d11246bd95674595a79b4640c0e009c50d7e03b1b7e67ab028a563e0c9229540c061b3a8a2c353e75f6631cde2c8b21f85f739511b3a7e215357e872b3f9317be4cdd3a48cd89e05afaf4694e82559e2f29ddcfe9f30f2e84eef506f5e5c7b0859485bc594b51f593fc2c83e65dba7337e7b9a3a31467582623279b62245735058e4274815dcab06036c372bc8e085624385c2ad61d7ca9e5eb4c85e1282bfc10aa8ff617cba1dd661aa600"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7a7289590b36af5}, 0x48) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x60, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4e}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff2d05}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000044}, 0x4890) 1.308632395s ago: executing program 6 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x4e0, 0x0, 0x2d0, 0xffffffff, 0x0, 0x228, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xf2, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@loopback, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x73, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x3, 0x1}, 0x1, 0x10001}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'geneve1\x00', 'macvlan1\x00', {0xff}, {}, 0x2, 0x2, 0x12}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700010000000000000a000000060001002a"], 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRESDEC], 0x14}}, 0x20000805) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1.192942031s ago: executing program 5 (id=3122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) accept4$ax25(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0x5, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x80000000, 0xca, 0x3, 0x2000, 0x1}, 0x50) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 1.184644857s ago: executing program 6 (id=3123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getuid() (async) r5 = getuid() r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x4208, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000050}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x3cc, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {0x19}, [@typed={0x4, 0x104}, @generic="079a834b727ab94b7838ed4ca0fb80ad550e0e56b8def5ff465cffdd78e4c94f6c933e7d03a80c8eb1d9cd64d1a5a4cb5ec516e31d6bdf35bef124b20f87a52d77c752ad9e0ece448fd77a58c3646b8b9c6b6bf906011ab6c2e78c8785d791cf13908a6abeab51edb21d1dbc077e6d3c543a27613ba33c5145dd3144647ac3096d5e17a98481d935b29906512281a74c48a3f01d4ae4ff5c3e97dc3a75963223a6e48bf68b6951581b81d887fe1981ef3a03a087fefd2ff5a31ac73dd91c10830869e1ec1e2bb32f751e1d4df2f541bb3ed179677a7202447c759573204529e98f2e024b4ca039dad1f1990f946149cda4075e5f", @typed={0x4, 0xea}, @nested={0x28a, 0xc9, 0x0, 0x1, [@generic="04493423aa3eecf06abc7c5f0ddb96a4fd96f75243c5c7e60c9468f17ed6e4c76292d364e3ad2c0236d41c747cdf99f2facdfbbe8ddcddedae347c106750f459a86f2853a3e941212dfde049debd3b2f01d1986d99868e9c2b024b3c2537b571e689f151d2d06c309714af3066efc1e9ee9c37edee7509f7660fcc9a5f4f72459b5d4f7b307b931c980f028cd2919350d4819feb2f937c51631cd0cd436454a2780d1b048f1c662d0540cfb166eca3deac769ec70827b14bf3550b2a0adbc3", @nested={0x4, 0x927}, @nested={0x4, 0x73}, @typed={0x8, 0x120, 0x0, 0x0, @uid=r3}, @generic="b2523d59391ab48bd560ff1279ddcca4040df558bf2395c08f9ece6bb10012596816315f3bb3229b66c371ec973a60afe126a37fc79d7e4bf3a46066d4b2deba17164f0449914dcb8d2e5a782179c7dee35b9eee8ede14a5bfc33100df6933ee5705d02feaf61f930774fe057dfabcb9aa80f586b9cca9f2e1a78b913b2dc261a9e9d6", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x7fff}, @generic="cf13956fc9ccb82d0328569578b0a5e76f376ef526457b59eec5643c2bcb0d99a08bfcde5617e37a0ba10bb3b0c812d2b3d5a127a14d3d7677d9f038fdcd2c94396eb67fd03fee947342a39b9e80a8846024fb3e1347fba46ccff80e24812edb1d6a8ea3900c90af581b0f7347daf27a4a803eccb1ded76dd9383ed11154c8", @generic="df1344ccf97cdf9348cd2c9a0ebbef39c7a4534e74d29445ae07b6f850f43f85feff1fb67ff660015a6156edff7da34bcc16f77991b81cfd4400019b7ac1857a29ba5e70315a4f4cc06efc2ab9b13284b51b5565bdc09707b40fc4e98a370c6957b8c4472de900712eb134acaa8c7fb6086fa20e49a79bea0ae76140611f52a7c8846167b9040f851b3f4b42b15527f216c3ef4864b0d03481", @typed={0xc, 0xf9, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x4, 0x3b}, @nested={0x24, 0x121, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x3a, 0x0, 0x0, @uid=r5}]}, @typed={0x8, 0x8a, 0x0, 0x0, @pid=r8}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 830.101795ms ago: executing program 4 (id=3126): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000004c0)=0x10000, 0x4) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@default, @netrom, @remote, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x4f, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@ptr={0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0xe, 0x5}, {0x10, 0x5}]}, @enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x3}, {0x6, 0x7}, {0x5, 0x7}, {0x9, 0x7fff}, {0xa, 0x5}, {0x10, 0x9}]}]}, {0x0, [0x5f]}}, &(0x7f0000000440)=""/121, 0x87, 0x79, 0x0, 0x6}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r1}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x10) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000100)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 772.682478ms ago: executing program 6 (id=3127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x130}, 0x8000) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8000000000d) 768.505894ms ago: executing program 1 (id=3128): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000001380)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac655644e3b90b6632c513a82b234f5810f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6533b95f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f20200000000000000fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cd7a7d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a649f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa004d7bc09decde7d704246e5102fb35eb91e772aebf9718d7cfcaf26fd1900d8775ef373e8e2c5bf3685f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b5125d84e1d52447f393fbdf7e1278a257eb153d6b6cf62cce0abee3b0b36bfbfcc397821c30f154aa903c53df2794d02ba4bf788f4e85364243d71526bca768e73e291185d80a5ed99bb", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) 702.076421ms ago: executing program 4 (id=3129): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x215, 0x30000}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0xba01, 0x0, 0x400c014}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfc100000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) 669.635997ms ago: executing program 1 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "040500", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000001c0), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) pwrite64(r6, &(0x7f0000000400)="f651ba0d8620fa02f65c4f7495807adc567deab1377c39b755841a0932253b1bc1d34c343c09b8583a02abb603d0e0ce095f6b05cbf942a0d0244276886957ae7a8994fbefb29e4574c409d5c361f2b83f3a734ddabbe2c5edc29215650f03460acc6d775a6445ea3f54d7a847037ec50181798822f4084b0e5cde32bfdfee4af8b4f2b87e67c8493e71d4a2aa0d8e9fa98e3778f8e03963db", 0x99, 0x3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x70bd2c, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x6, 0x0, 0x0, @uid=0xee00}]}, 0x28}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x40}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 669.078949ms ago: executing program 6 (id=3131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x40000) 536.672354ms ago: executing program 1 (id=3132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x3, [@const={0xd, 0x0, 0x0, 0xa, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @fwd={0x4}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x5, 0x9}]}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x5, 0x8, 0x4}, {0xe, 0x1, 0x7}, {0x2, 0x7, 0x3}, {0xd, 0x4, 0x5}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0xe, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x4}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/38, 0x10f, 0x26, 0x0, 0xff}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x5, 0x100009, 0x20041, r0, 0x8, '\x00', 0x0, r1, 0x3, 0x2, 0x1, 0x1}, 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x6, 0x9, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x201a, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 536.376387ms ago: executing program 0 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x4e0, 0x0, 0x2d0, 0xffffffff, 0x0, 0x228, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xf2, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@loopback, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x73, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x3, 0x1}, 0x1, 0x10001}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'geneve1\x00', 'macvlan1\x00', {0xff}, {}, 0x2, 0x2, 0x12}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRESDEC], 0x14}}, 0x20000805) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 536.251123ms ago: executing program 6 (id=3134): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) 500.077483ms ago: executing program 4 (id=3135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) (async) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000030900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000095080001400000000018000380140001006e657464657673696d30"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 464.608003ms ago: executing program 1 (id=3136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0xfffd, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYRES16=r1], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="a6", 0x1, 0x4040000, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040), 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000002c0)=0x14) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/74, 0x3a, 0x99bcb88da02506c2, 0x0, 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x80, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfffb, 0x23}, {0xffff, 0x5}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2913}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4a4cf330}, @TCA_CAKE_FWMARK={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 380.570661ms ago: executing program 5 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0xe000, 0x1000, 0x6, 0x1}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x2a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x3, 0x0, &(0x7f00000003c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000002060300000000f3ff0000000a0008050500040003000000100007800c000180080001400000000010000300686173683a69702c6d616300"], 0x3c}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x220, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x600}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e00000002060108ebff000000000000000001080c09008008000640000000000500010006000000050005000a0000000500040000000000f5ff010073797a310000000013000300686173683a6e65742c69668063650000"], 0x58}}, 0x20040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req={0x0, 0x0, 0x10001, 0x3}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) r7 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x300, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f00000005c0)={0x4, {{0x2, 0x4e21, @private=0xa010101}}}, 0x88) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x60}}, 0x4851) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="1d87c6c5e988f61a8c21704cd5277f83024996ce71e98548f5b3faaec5", 0x1d}, {&(0x7f0000000240)="e9432c04fddc37c9aead301c314be9c26a01503bef60e5204dc6392815831220b6928e2969c69254930cd48cb8183a00d0ff80040ece5e5ec10191501a5f9ca53d17ac6da91fdae295bc3dc3c12f8291a7d229a84c483f008a10f13106f2ee0dac835f671a5300ddee42a41b0fa03077942800388b3540f3d756abc03aa4248d7f1bb693b651b82e0e04c813c4cb9a6307ab2fafb2fd2a4776baffd4eaf9848ee1ad21410ecc6a099547e0823950", 0xae}, {&(0x7f0000000300)="eb5471cab0b273", 0x7}, {&(0x7f0000000340)="8e8ad6862c80598ff9808b525d7f3e2cb0372f17c573e4b074b394ac3229358691c38e051fd34d89f6736d8d5d2309c6f7b7f70a7686c76721480f3e70bc34ef0ee3c49c1fb4bac91a2b7da8be80bbdf62d3b95682dd27b6bfb75912", 0x5c}], 0x4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 191.700668ms ago: executing program 0 (id=3138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) 191.512386ms ago: executing program 4 (id=3139): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000840)=""/4090, 0xe52}], 0x1}, 0x12041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) 191.203403ms ago: executing program 6 (id=3140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8c4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) pread64(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000140007800800114000bd00000500150000000000050005000a000000050001000700000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8c4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) pread64(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000140007800800114000bd00000500150000000000050005000a000000050001000700000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) (async) 190.197092ms ago: executing program 0 (id=3141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000850000005e0000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0xd1, 0x6, 0x1000}]}, 0x10) 189.989387ms ago: executing program 4 (id=3142): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c00018000"], 0x24}}, 0x20008000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c00018000"], 0x24}}, 0x20008000) (async) 189.257124ms ago: executing program 1 (id=3143): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) 177.863493ms ago: executing program 0 (id=3144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004000000000000009508001500040000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 108.77898ms ago: executing program 5 (id=3145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r2, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) 106.937524ms ago: executing program 4 (id=3146): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) 27.70333ms ago: executing program 1 (id=3147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000420000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4010) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0xa, 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, r1, 0x20, 0x34, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) 0s ago: executing program 5 (id=3148): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x99}]}]}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) kernel console output (not intermixed with test programs): 7.1626': attribute type 4 has an invalid length. [ 195.000355][T11570] __nla_validate_parse: 80 callbacks suppressed [ 195.000371][T11570] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1626'. [ 195.022822][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1627'. [ 195.032427][ T5150] Bluetooth: hci10: command tx timeout [ 195.038381][T11571] netlink: 'syz.7.1626': attribute type 1 has an invalid length. [ 195.047016][T11571] netlink: 'syz.7.1626': attribute type 4 has an invalid length. [ 195.056172][T11571] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1626'. [ 195.069381][T11480] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.080402][T11480] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.159818][T11480] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.169809][T11480] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.185112][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1629'. [ 195.270591][T11480] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.282504][T11480] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.461990][T11480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.489825][T11480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.508462][T11480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.524426][T11480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.642019][T11487] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 195.661681][T11487] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 195.678646][T11487] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.690703][T11487] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 195.857750][T11480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.898030][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.910741][T11480] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.937263][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.945003][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.970864][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.978166][ T7421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.045636][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.070326][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.077627][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.097226][T11616] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1637'. [ 196.141748][T11616] vlan2: entered allmulticast mode [ 196.168191][T11616] gretap0: entered allmulticast mode [ 196.196123][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.203441][ T7423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.301015][T11625] netlink: 'syz.7.1640': attribute type 27 has an invalid length. [ 196.377440][T11487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.509070][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1641'. [ 196.602927][T11480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.639934][T11640] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1643'. [ 196.751308][T11640] bond2: (slave gre0): Device is not bonding slave [ 196.769143][T11640] bond2: option active_slave: invalid value (gre0) [ 196.797878][T11640] bond2 (unregistering): Released all slaves [ 196.825863][T11653] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1646'. [ 196.913547][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.935532][ T5150] Bluetooth: hci9: command tx timeout [ 196.966957][T11656] xt_hashlimit: invalid interval [ 196.976688][T11480] veth0_vlan: entered promiscuous mode [ 197.000288][T11480] veth1_vlan: entered promiscuous mode [ 197.090576][T11480] veth0_macvtap: entered promiscuous mode [ 197.111758][T11480] veth1_macvtap: entered promiscuous mode [ 197.163419][ T5150] Bluetooth: hci10: command tx timeout [ 197.194321][T11480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.213680][T11666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1649'. [ 197.239849][T11480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.254568][T11665] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1649'. [ 197.459129][ T7421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.512591][ T7421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.532657][ T7421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.555313][ T7421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.691206][ T7424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.710187][ T7424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.795983][T11487] veth0_vlan: entered promiscuous mode [ 197.811038][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.814399][T11678] netlink: 'syz.8.1652': attribute type 2 has an invalid length. [ 197.840457][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.850706][T11487] veth1_vlan: entered promiscuous mode [ 197.967281][T11487] veth0_macvtap: entered promiscuous mode [ 198.004788][T11487] veth1_macvtap: entered promiscuous mode [ 198.042039][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.082639][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.116954][ T7456] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.152617][T11690] macvlan0: entered promiscuous mode [ 198.172071][T11690] batadv0: entered promiscuous mode [ 198.179181][T11690] debugfs: 'hsr1' already exists in 'hsr' [ 198.185118][T11690] Cannot create hsr debugfs directory [ 198.190928][T11690] hsr1: entered allmulticast mode [ 198.202262][T11690] macvlan0: entered allmulticast mode [ 198.208216][T11690] veth1_vlan: entered allmulticast mode [ 198.214946][T11690] batadv0: entered allmulticast mode [ 198.222345][T11690] macvlan0: left promiscuous mode [ 198.237031][T11690] batadv0: left promiscuous mode [ 198.257485][ T7456] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.276031][ T7456] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.420903][ T7456] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.485903][ T116] IPVS: starting estimator thread 0... [ 198.583314][T11703] IPVS: using max 29 ests per chain, 69600 per kthread [ 198.584032][ T10] IPVS: starting estimator thread 0... [ 198.650830][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.669058][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.719391][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.723350][T11712] IPVS: using max 30 ests per chain, 72000 per kthread [ 198.741784][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.973238][T11727] netlink: 'syz.1.1660': attribute type 3 has an invalid length. [ 199.014077][ T5150] Bluetooth: hci9: command tx timeout [ 199.183141][ T5150] Bluetooth: hci10: command tx timeout [ 199.233390][T11743] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 199.458362][T11749] hsr_slave_1 (unregistering): left promiscuous mode [ 199.522736][T11761] netlink: 'syz.9.1670': attribute type 10 has an invalid length. [ 199.539379][T11761] batadv0: entered promiscuous mode [ 199.544999][T11761] batadv0: entered allmulticast mode [ 199.551154][T11761] bridge0: port 3(batadv0) entered blocking state [ 199.559525][T11761] bridge0: port 3(batadv0) entered disabled state [ 199.569683][T11761] bridge0: port 3(batadv0) entered blocking state [ 199.576288][T11761] bridge0: port 3(batadv0) entered forwarding state [ 199.834900][ T1009] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 199.844226][ T1009] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 199.918608][T11785] xt_hashlimit: invalid interval [ 200.044861][T11792] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 200.236605][T11808] __nla_validate_parse: 13 callbacks suppressed [ 200.236626][T11808] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1684'. [ 200.433442][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1685'. [ 200.641743][T11833] xt_hashlimit: invalid interval [ 200.735486][T11837] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1692'. [ 200.984783][T11849] lo: entered allmulticast mode [ 201.002408][T11859] Bluetooth: MGMT ver 1.23 [ 201.005034][T11849] tunl0: entered allmulticast mode [ 201.024808][T11849] gre0: entered allmulticast mode [ 201.059652][T11849] erspan0: entered allmulticast mode [ 201.083924][T11849] ip_vti0: entered allmulticast mode [ 201.092867][T11849] ip6_vti0: entered allmulticast mode [ 201.094072][T11759] Bluetooth: hci9: command tx timeout [ 201.125667][T11849] sit0: entered allmulticast mode [ 201.154841][T11849] ip6tnl0: entered allmulticast mode [ 201.162807][T11849] ip6gre0: entered allmulticast mode [ 201.174668][T11849] syz_tun: entered allmulticast mode [ 201.185618][T11849] ip6gretap0: entered allmulticast mode [ 201.197819][T11849] vcan0: entered allmulticast mode [ 201.205351][T11849] bond0: entered allmulticast mode [ 201.211997][T11849] team0: entered allmulticast mode [ 201.219368][T11849] dummy0: entered allmulticast mode [ 201.230185][T11849] nlmon0: entered allmulticast mode [ 201.236462][T11849] caif0: entered allmulticast mode [ 201.244149][T11849] batadv0: entered allmulticast mode [ 201.249667][T11849] veth0: entered allmulticast mode [ 201.255599][T11759] Bluetooth: hci10: command tx timeout [ 201.261873][T11849] veth1: entered allmulticast mode [ 201.267196][T11849] wg0: entered allmulticast mode [ 201.272321][T11849] wg1: entered allmulticast mode [ 201.277594][T11849] wg2: entered allmulticast mode [ 201.282630][T11849] veth0_to_bridge: entered allmulticast mode [ 201.289050][T11849] veth1_to_bridge: entered allmulticast mode [ 201.295552][T11849] bridge_slave_1: entered allmulticast mode [ 201.301550][T11849] veth0_to_bond: entered allmulticast mode [ 201.307535][T11849] bond_slave_0: entered allmulticast mode [ 201.313503][T11849] veth1_to_bond: entered allmulticast mode [ 201.319450][T11849] bond_slave_1: entered allmulticast mode [ 201.328194][T11849] veth0_to_team: entered allmulticast mode [ 201.339111][T11849] team_slave_0: entered allmulticast mode [ 201.346960][T11849] veth1_to_team: entered allmulticast mode [ 201.353102][T11849] team_slave_1: entered allmulticast mode [ 201.359013][T11849] veth0_to_batadv: entered allmulticast mode [ 201.366506][T11849] batadv_slave_0: entered allmulticast mode [ 201.372525][T11849] veth1_to_batadv: entered allmulticast mode [ 201.378812][T11849] batadv_slave_1: entered allmulticast mode [ 201.384928][T11849] xfrm0: entered allmulticast mode [ 201.390400][T11849] veth0_to_hsr: entered allmulticast mode [ 201.396401][T11849] hsr_slave_0: entered allmulticast mode [ 201.402806][T11849] veth1_to_hsr: entered allmulticast mode [ 201.411278][T11849] hsr_slave_1: entered allmulticast mode [ 201.419813][T11849] hsr0: entered allmulticast mode [ 201.427770][T11849] veth1_virt_wifi: entered allmulticast mode [ 201.439620][T11849] veth0_virt_wifi: entered allmulticast mode [ 201.451048][T11849] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 201.459426][T11849] veth1_vlan: entered allmulticast mode [ 201.468293][T11849] veth0_vlan: entered allmulticast mode [ 201.483857][T11849] vlan0: entered allmulticast mode [ 201.489104][T11849] vlan1: entered allmulticast mode [ 201.494063][T11759] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.501280][T11759] Bluetooth: hci2: command 0x0406 tx timeout [ 201.508093][T11759] Bluetooth: hci3: command 0x0406 tx timeout [ 201.510277][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 201.521852][T11849] macvlan0: entered allmulticast mode [ 201.534661][T11849] macvlan1: entered allmulticast mode [ 201.542327][T11849] ipvlan0: entered allmulticast mode [ 201.550299][T11849] ipvlan1: entered allmulticast mode [ 201.556849][T11849] veth1_macvtap: entered allmulticast mode [ 201.566849][T11849] veth0_macvtap: entered allmulticast mode [ 201.581653][T11849] macvtap0: entered allmulticast mode [ 201.591071][T11849] macsec0: entered allmulticast mode [ 201.600505][T11849] geneve0: entered allmulticast mode [ 201.609732][T11849] geneve1: entered allmulticast mode [ 201.618141][T11849] netdevsim netdevsim7 ÿÿÿÿÿÿ: entered allmulticast mode [ 201.628549][T11849] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 201.638844][T11849] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 201.652162][T11849] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 201.671747][T11849] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 201.685807][T11849] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 201.695688][T11849] vti0: entered allmulticast mode [ 201.700870][T11849] bridge1: entered allmulticast mode [ 201.706363][T11849] bridge2: entered allmulticast mode [ 201.711794][T11849] bridge3: entered allmulticast mode [ 201.717659][T11849] bridge4: entered allmulticast mode [ 201.723406][T11849] hsr1: entered allmulticast mode [ 201.729117][T11849] bridge0: entered allmulticast mode [ 201.738445][T11849] mac80211_hwsim hwsim21 t: entered allmulticast mode [ 201.746203][T11849] bridge5: entered allmulticast mode [ 201.756766][ T7421] netdevsim netdevsim7 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.783024][ T7421] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.834994][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1704'. [ 201.841659][ T7421] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.877074][ T7421] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.901934][T11883] xt_hashlimit: invalid interval [ 202.045926][T11889] netlink: 'syz.8.1708': attribute type 2 has an invalid length. [ 202.048513][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 202.067433][T11889] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1708'. [ 202.165839][T11897] tipc: Enabling of bearer rejected, failed to enable media [ 202.330584][T11905] bond2: option mode: invalid value (133) [ 202.338817][T11905] bond2 (unregistering): Released all slaves [ 202.369211][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 202.555689][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1719'. [ 202.679660][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1724'. [ 202.727877][T11938] bond0: entered promiscuous mode [ 202.735661][T11938] bond_slave_0: entered promiscuous mode [ 202.742170][T11938] bond_slave_1: entered promiscuous mode [ 202.749739][T11938] bond0: left promiscuous mode [ 202.755391][T11938] bond_slave_0: left promiscuous mode [ 202.760975][T11938] bond_slave_1: left promiscuous mode [ 202.928590][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 203.581680][T11987] net_ratelimit: 15 callbacks suppressed [ 203.581700][T11987] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.594451][T11987] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.954898][T12015] netlink: 'syz.7.1752': attribute type 1 has an invalid length. [ 204.059169][T12019] GUP no longer grows the stack in syz.7.1754 (12019): 200000003000-20000000a000 (200000001000) [ 204.071053][T12019] CPU: 1 UID: 0 PID: 12019 Comm: syz.7.1754 Not tainted syzkaller #0 PREEMPT(full) [ 204.071079][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.071091][T12019] Call Trace: [ 204.071100][T12019] [ 204.071107][T12019] dump_stack_lvl+0x189/0x250 [ 204.071149][T12019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.071171][T12019] ? __pfx__printk+0x10/0x10 [ 204.071188][T12019] ? find_vma+0xe7/0x160 [ 204.071228][T12019] __get_user_pages+0x2470/0x2a00 [ 204.071257][T12019] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 204.071307][T12019] ? rcu_is_watching+0x15/0xb0 [ 204.071335][T12019] __gup_longterm_locked+0xde4/0x1660 [ 204.071366][T12019] ? try_grab_folio_fast+0x1bf/0x6a0 [ 204.071402][T12019] ? gup_fast_fallback+0x1b86/0x22d0 [ 204.071438][T12019] gup_fast_fallback+0x1d65/0x22d0 [ 204.071500][T12019] ? __pfx_gup_fast_fallback+0x10/0x10 [ 204.071523][T12019] ? __mutex_lock+0x335/0x1350 [ 204.071557][T12019] ? is_valid_gup_args+0x11f/0x200 [ 204.071584][T12019] ? get_user_pages_fast+0x4d/0xb0 [ 204.071611][T12019] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 204.071650][T12019] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 204.071668][T12019] ? wait_for_space+0x248/0x2d0 [ 204.071700][T12019] iov_iter_get_pages2+0x5e/0xa0 [ 204.071735][T12019] __se_sys_vmsplice+0x548/0x10d0 [ 204.071775][T12019] ? futex_private_hash_put+0x4b/0x280 [ 204.071808][T12019] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 204.071842][T12019] ? __pfx_futex_wake+0x10/0x10 [ 204.071863][T12019] ? restore_signal_shadow_stack+0x3b7/0x480 [ 204.071892][T12019] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 204.071973][T12019] ? do_syscall_64+0xbe/0xfa0 [ 204.072001][T12019] do_syscall_64+0xfa/0xfa0 [ 204.072023][T12019] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.072046][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.072064][T12019] ? clear_bhb_loop+0x60/0xb0 [ 204.072087][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.072104][T12019] RIP: 0033:0x7fa5b3f8eec9 [ 204.072133][T12019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.072149][T12019] RSP: 002b:00007fa5b4d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 204.072177][T12019] RAX: ffffffffffffffda RBX: 00007fa5b41e5fa0 RCX: 00007fa5b3f8eec9 [ 204.072192][T12019] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 204.072205][T12019] RBP: 00007fa5b4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.072218][T12019] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 204.072230][T12019] R13: 00007fa5b41e6038 R14: 00007fa5b41e5fa0 R15: 00007ffed4f204d8 [ 204.072264][T12019] [ 204.819202][T12060] tipc: Started in network mode [ 204.833101][T12060] tipc: Node identity , cluster identity 4711 [ 204.839208][T12060] tipc: Failed to obtain node identity [ 204.866123][T12060] tipc: Enabling of bearer rejected, failed to enable media [ 205.009545][T12065] syzkaller0: entered promiscuous mode [ 205.018538][T12065] syzkaller0: entered allmulticast mode [ 205.037134][T12071] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 205.330595][T12084] __nla_validate_parse: 10 callbacks suppressed [ 205.330614][T12084] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1770'. [ 205.839041][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1773'. [ 207.099813][T12126] netlink: 14436 bytes leftover after parsing attributes in process `syz.8.1781'. [ 207.110578][T12126] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 207.255547][T12130] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.339630][T12130] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.440568][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 207.440786][T12130] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.450121][T12138] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 207.569088][T12130] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.649575][T12145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.769932][ T7453] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.807183][ T7417] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.860861][ T7417] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.870963][ T7417] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.918750][T12155] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.013877][T12158] netlink: 'syz.9.1794': attribute type 10 has an invalid length. [ 208.031952][T12158] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 208.055644][T12158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.160590][T12168] tipc: Started in network mode [ 208.173446][T12168] tipc: Node identity 0e7016c7d538, cluster identity 4711 [ 208.181298][T12168] tipc: Enabled bearer , priority 0 [ 208.190637][T12168] syzkaller0: entered promiscuous mode [ 208.197010][T12168] syzkaller0: entered allmulticast mode [ 208.217915][T12170] netlink: 'syz.9.1799': attribute type 11 has an invalid length. [ 208.226445][T12170] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1799'. [ 208.231770][T12168] tipc: Resetting bearer [ 208.237727][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1800'. [ 208.258085][T12175] netlink: 576 bytes leftover after parsing attributes in process `syz.9.1799'. [ 208.267389][T12166] tipc: Enabled bearer , priority 0 [ 208.270254][T12176] netlink: 576 bytes leftover after parsing attributes in process `syz.9.1799'. [ 208.289980][T12165] tipc: Disabling bearer [ 208.298605][T12167] tipc: Resetting bearer [ 208.319459][T12167] tipc: Disabling bearer [ 208.419463][T12179] netlink: 'syz.7.1802': attribute type 2 has an invalid length. [ 208.436357][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1801'. [ 208.445803][T12179] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1802'. [ 208.617420][T12185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.648401][T12196] xt_hashlimit: invalid interval [ 208.749302][T12185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.889162][T12185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.999334][T12185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.073640][ T7421] netdevsim netdevsim7 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.093949][ T7421] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.114057][ T7421] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.125941][ T7421] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.284662][ T7417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.325975][ T7417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.406404][ T7421] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.465917][ T6698] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.526318][ T7421] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.560357][ T7421] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.603410][ T7421] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.619573][ T7421] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.873553][T12246] xt_hashlimit: invalid interval [ 209.950989][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 209.960113][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 209.969265][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 209.984291][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 209.992121][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 210.446312][T12293] xt_hashlimit: invalid interval [ 210.635694][T12304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.679795][T12304] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 210.686585][T12251] chnl_net:caif_netlink_parms(): no params data found [ 210.790638][T12304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.027584][T12251] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.052616][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.077212][T12251] bridge_slave_0: entered allmulticast mode [ 211.083226][T12333] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 211.096988][T12251] bridge_slave_0: entered promiscuous mode [ 211.126716][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.153176][T12251] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.178413][T12341] xt_hashlimit: invalid interval [ 211.181167][T12251] bridge_slave_1: entered allmulticast mode [ 211.215473][T12251] bridge_slave_1: entered promiscuous mode [ 211.464013][T12251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.488577][T12251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.506478][T12354] __nla_validate_parse: 14 callbacks suppressed [ 211.506496][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1849'. [ 211.650837][T12251] team0: Port device team_slave_0 added [ 211.661355][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.705273][T12356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.720069][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.746551][T12356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.820523][T12251] team0: Port device team_slave_1 added [ 212.009733][T12251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.020595][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.048046][T12251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.063559][ T52] Bluetooth: hci11: command tx timeout [ 212.078463][T12251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.085795][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.113958][T12251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.138394][T12384] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1858'. [ 212.244394][T12251] hsr_slave_0: entered promiscuous mode [ 212.261442][T12251] hsr_slave_1: entered promiscuous mode [ 212.282137][T12251] debugfs: 'hsr0' already exists in 'hsr' [ 212.294673][T12251] Cannot create hsr debugfs directory [ 212.584234][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1864'. [ 212.587283][T12251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.681390][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1867'. [ 212.757243][T12251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.787121][T12418] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1868'. [ 212.870701][T12251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.032613][T12251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.169509][T12442] veth0_to_bond: left allmulticast mode [ 213.356047][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1880'. [ 213.367163][T12251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.404474][T12251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.443782][T12251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.486822][T12251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.573346][T12465] netlink: 'syz.7.1887': attribute type 1 has an invalid length. [ 213.852426][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 213.861972][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 214.058715][T12251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.153132][ T52] Bluetooth: hci11: command tx timeout [ 214.281371][T12251] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.309721][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1900'. [ 214.385585][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.393125][ T7418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.411234][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.418490][ T7418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.457604][T12517] bond2 (unregistering): Released all slaves [ 215.086629][ T7424] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.128901][ T7424] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.150845][ T7424] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.160921][ T7424] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.245372][T12552] bridge0: port 3(ipvlan2) entered blocking state [ 215.263150][T12552] bridge0: port 3(ipvlan2) entered disabled state [ 215.285327][T12552] ipvlan2: entered allmulticast mode [ 215.303257][T12552] bridge0: entered allmulticast mode [ 215.312030][T12552] ipvlan2: left allmulticast mode [ 215.317648][T12552] bridge0: left allmulticast mode [ 215.436457][T12251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.559297][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1910'. [ 215.791154][ T7417] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 215.827173][T12572] sctp: [Deprecated]: syz.9.1913 (pid 12572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.827173][T12572] Use struct sctp_sack_info instead [ 215.998702][T12251] veth0_vlan: entered promiscuous mode [ 216.009930][T12596] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 216.030949][T12596] netlink: 'syz.1.1919': attribute type 2 has an invalid length. [ 216.031876][T12251] veth1_vlan: entered promiscuous mode [ 216.146303][T12601] netlink: 'syz.8.1918': attribute type 58 has an invalid length. [ 216.213427][ T52] Bluetooth: hci11: command tx timeout [ 216.407337][T12251] veth0_macvtap: entered promiscuous mode [ 216.442731][T12597] Set syz1 is full, maxelem 6117 reached [ 216.445961][T12251] veth1_macvtap: entered promiscuous mode [ 216.471387][T12613] pim6reg: entered allmulticast mode [ 216.511621][T12251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.547529][T12251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.600112][T12620] lo: entered promiscuous mode [ 216.623539][T12620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.656423][ T7418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.712645][ T7418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.739260][ T7418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.785811][ T7418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.840998][ T7418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.859403][ T7418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.907222][ T7423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.915941][ T7423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.946453][T12633] Cannot find add_set index 0 as target [ 217.025732][T12640] block nbd1: NBD_DISCONNECT [ 217.030753][T12640] block nbd1: Send disconnect failed -32 [ 217.049777][T12640] block nbd1: shutting down sockets [ 217.119915][T12646] __nla_validate_parse: 6 callbacks suppressed [ 217.119934][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1934'. [ 217.525708][ T5909] IPVS: starting estimator thread 0... [ 217.536320][T12668] tipc: Started in network mode [ 217.541229][T12668] tipc: Node identity ac1414aa, cluster identity 4711 [ 217.550414][T12668] tipc: Enabled bearer , priority 10 [ 217.625897][T12675] netlink: 1260 bytes leftover after parsing attributes in process `syz.9.1941'. [ 217.637420][T12669] IPVS: using max 32 ests per chain, 76800 per kthread [ 217.843296][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1942'. [ 217.852715][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1942'. [ 217.865247][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1942'. [ 217.904128][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1942'. [ 218.091617][T12702] bond1: ARP target 1.0.0.0 is already present [ 218.102806][T12702] bond1: option arp_ip_target: invalid value (1) [ 218.123882][T12702] bond1 (unregistering): Released all slaves [ 218.273943][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1953'. [ 218.292542][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1952'. [ 218.302505][ T52] Bluetooth: hci11: command tx timeout [ 218.544350][ T5833] tipc: Node number set to 2886997162 [ 218.666905][T12739] tipc: Enabled bearer , priority 0 [ 218.709247][T12739] syzkaller0: entered promiscuous mode [ 218.741225][T12739] syzkaller0: entered allmulticast mode [ 218.776999][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1960'. [ 218.928185][T12739] tipc: Resetting bearer [ 218.945354][T12736] tipc: Resetting bearer [ 218.972176][T12736] tipc: Disabling bearer [ 219.295721][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1967'. [ 219.642230][T12789] tipc: Enabled bearer , priority 0 [ 219.650584][T12789] syzkaller0: entered promiscuous mode [ 219.662700][T12789] syzkaller0: entered allmulticast mode [ 219.710371][T12789] tipc: Resetting bearer [ 219.725698][T12794] netlink: 'syz.8.1975': attribute type 2 has an invalid length. [ 219.763184][T12787] tipc: Resetting bearer [ 219.796001][T12787] tipc: Disabling bearer [ 219.800677][T12797] xt_hashlimit: invalid interval [ 219.945150][T12805] openvswitch: netlink: Message has 4 unknown bytes. [ 219.952806][T12805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.993314][T12802] nbd1: detected capacity change from 0 to 127 [ 220.010130][ T52] block nbd1: Receive control failed (result -32) [ 220.271375][T12825] unsupported nlmsg_type 40 [ 220.320655][T12831] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.331142][T12831] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.369430][T12832] Unsupported ieee802154 address type: 0 [ 220.382226][T12831] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.392709][T12831] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.438504][T12831] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.449141][T12831] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.518816][T12831] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.529009][T12831] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.596716][ T7424] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.605235][ T7424] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.626652][ T7417] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.635164][ T7417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.650637][ T7417] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.659054][ T7417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.674535][ T7424] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.683326][ T7424] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.882493][T12840] netlink: 'syz.8.1989': attribute type 2 has an invalid length. [ 221.001015][T12845] macvtap1: entered promiscuous mode [ 221.011387][T12845] macvtap1: entered allmulticast mode [ 221.020721][T12845] bond0: entered promiscuous mode [ 221.027746][T12845] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 221.035432][T12845] team0: Device macvtap1 failed to register rx_handler [ 221.045249][T12845] bond0: left promiscuous mode [ 221.122566][T12847] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.135626][T12847] smc: net device gre0 applied user defined pnetid SYZ1 [ 221.441301][T12860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.586713][T12869] netlink: 'syz.8.2000': attribute type 2 has an invalid length. [ 221.859210][T12885] netlink: 'syz.8.2006': attribute type 1 has an invalid length. [ 221.902544][T12887] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 222.155631][T12902] netlink: 'syz.8.2012': attribute type 2 has an invalid length. [ 222.164107][T12902] __nla_validate_parse: 7 callbacks suppressed [ 222.164123][T12902] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2012'. [ 222.394857][T12916] No such timeout policy "syz1" [ 222.601298][T12928] syzkaller0: entered promiscuous mode [ 222.607297][T12928] syzkaller0: entered allmulticast mode [ 222.618647][T12934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.625982][T12934] IPv6: NLM_F_CREATE should be set when creating new route [ 222.633273][T12934] IPv6: NLM_F_CREATE should be set when creating new route [ 222.676527][T12934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.737539][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2025'. [ 223.109491][T12959] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.2028'. [ 224.059925][T12955] 8021q: VLANs not supported on ip6gre0 [ 224.328599][T12983] xt_hashlimit: invalid interval [ 224.453615][T12978] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 224.534902][T12993] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2039'. [ 224.646603][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2040'. [ 224.922300][T13013] netlink: 'syz.1.2046': attribute type 2 has an invalid length. [ 224.930190][T13013] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2046'. [ 224.963208][T12969] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 224.988036][T13015] xt_hashlimit: invalid interval [ 225.085581][T13021] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2050'. [ 225.096307][T13021] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2050'. [ 225.175895][T13026] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2049'. [ 225.203812][T13029] xt_policy: too many policy elements [ 225.497933][T13052] netlink: 'syz.8.2058': attribute type 21 has an invalid length. [ 225.513140][T13052] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2058'. [ 225.566028][T13056] tipc: Started in network mode [ 225.577228][T13056] tipc: Node identity 3e262d09915d, cluster identity 4711 [ 225.587358][T13056] tipc: Enabled bearer , priority 0 [ 225.595991][T13056] syzkaller0: entered promiscuous mode [ 225.601990][T13056] syzkaller0: entered allmulticast mode [ 225.640542][T13056] tipc: Resetting bearer [ 225.667429][T13055] tipc: Resetting bearer [ 225.714074][T13055] tipc: Disabling bearer [ 226.132315][T13080] bond2: invalid ARP target 0.0.0.0 specified for addition [ 226.140635][T13080] bond2: option arp_ip_target: invalid value (0) [ 226.151668][T13080] bond2 (unregistering): Released all slaves [ 226.176495][T13093] netlink: 'syz.5.2073': attribute type 2 has an invalid length. [ 226.299568][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout [ 226.493863][T13116] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 226.554348][T13121] netlink: 'syz.7.2082': attribute type 10 has an invalid length. [ 226.562342][T13121] bridge_slave_1: left allmulticast mode [ 226.564751][T13119] netlink: 'syz.8.2081': attribute type 1 has an invalid length. [ 226.573148][T13121] bridge_slave_1: entered allmulticast mode [ 226.582263][T13121] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 226.592620][T13119] nbd: error processing sock list [ 226.598266][T13119] block nbd2: shutting down sockets [ 226.645203][T13124] netlink: 'syz.5.2083': attribute type 1 has an invalid length. [ 226.681976][T13128] team0: Cannot enslave team device to itself [ 226.994729][T13155] xt_hashlimit: invalid interval [ 227.076191][T13161] netlink: 'syz.1.2094': attribute type 26 has an invalid length. [ 227.097122][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 227.290373][T13182] __nla_validate_parse: 9 callbacks suppressed [ 227.290391][T13182] netlink: 1136 bytes leftover after parsing attributes in process `syz.5.2102'. [ 227.306294][T13182] openvswitch: netlink: Flow key attr not present in new flow. [ 227.338810][T13186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.529064][T13197] xt_hashlimit: invalid interval [ 227.597218][T13201] sctp: [Deprecated]: syz.7.2108 (pid 13201) Use of int in max_burst socket option. [ 227.597218][T13201] Use struct sctp_assoc_value instead [ 227.612513][T13201] netlink: 'syz.7.2108': attribute type 1 has an invalid length. [ 227.940039][T13224] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2114'. [ 227.952162][T13224] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2114'. [ 228.069565][T13221] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2112'. [ 228.225375][T13237] netlink: 'syz.1.2115': attribute type 3 has an invalid length. [ 228.234191][T13237] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2115'. [ 228.244939][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 228.255461][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 228.284902][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 228.298272][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 228.311909][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2116'. [ 228.398635][T13246] xt_hashlimit: invalid interval [ 228.976055][T13279] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 228.989570][T13279] 0ªî{X¹¦: entered allmulticast mode [ 228.998993][T13279] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 229.017074][T13283] netlink: 'syz.1.2126': attribute type 21 has an invalid length. [ 229.031652][T13281] syzkaller1: entered promiscuous mode [ 229.037919][T13281] syzkaller1: entered allmulticast mode [ 229.592021][T13323] bridge0: port 3(vlan2) entered blocking state [ 229.598736][T13323] bridge0: port 3(vlan2) entered disabled state [ 229.609093][T13323] vlan2: entered allmulticast mode [ 229.614660][T13323] bridge0: entered allmulticast mode [ 229.621968][T13323] vlan2: left allmulticast mode [ 229.627132][T13323] bridge0: left allmulticast mode [ 229.893805][ T10] IPVS: starting estimator thread 0... [ 229.951413][T13352] SET target dimension over the limit! [ 229.958772][T13352] SET target dimension over the limit! [ 229.966128][T13352] SET target dimension over the limit! [ 229.972180][T13352] SET target dimension over the limit! [ 229.983304][T13348] IPVS: using max 31 ests per chain, 74400 per kthread [ 230.644777][T13393] syzkaller0: entered promiscuous mode [ 230.650271][T13393] syzkaller0: entered allmulticast mode [ 230.660976][T13393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 231.327671][T13436] nbd: must specify at least one socket [ 232.550081][T13445] __nla_validate_parse: 18 callbacks suppressed [ 232.550100][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 232.572223][T13449] validate_nla: 2 callbacks suppressed [ 232.572241][T13449] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 232.610899][T13450] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 232.670160][T13454] netlink: 'syz.5.2184': attribute type 19 has an invalid length. [ 232.678599][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 232.698341][ T7421] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.698475][T13454] netlink: 'syz.5.2184': attribute type 19 has an invalid length. [ 232.710219][ T7421] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.715555][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 232.734771][ T7421] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.747486][ T7421] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.880674][T13470] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 233.062089][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.087796][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.402014][T13500] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2197'. [ 233.406037][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2198'. [ 233.908295][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 233.918289][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 233.927439][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 233.937940][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 233.948906][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 234.145026][T13521] chnl_net:caif_netlink_parms(): no params data found [ 234.221828][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.229197][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.236870][T13521] bridge_slave_0: entered allmulticast mode [ 234.244301][T13521] bridge_slave_0: entered promiscuous mode [ 234.252106][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.259808][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.267445][T13521] bridge_slave_1: entered allmulticast mode [ 234.275228][T13521] bridge_slave_1: entered promiscuous mode [ 234.309493][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.321593][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.353746][T13521] team0: Port device team_slave_0 added [ 234.361840][T13521] team0: Port device team_slave_1 added [ 234.389710][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.397461][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.424844][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.437762][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.444913][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.471610][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.522457][T13521] hsr_slave_0: entered promiscuous mode [ 234.529940][T13521] hsr_slave_1: entered promiscuous mode [ 234.537856][T13521] debugfs: 'hsr0' already exists in 'hsr' [ 234.544191][T13521] Cannot create hsr debugfs directory [ 234.717765][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2211'. [ 234.765173][T13521] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 234.776753][T13521] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 234.797467][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2211'. [ 234.858259][T13521] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 234.880717][T13521] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 234.969649][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2213'. [ 234.990272][T13546] netlink: 'syz.7.2213': attribute type 11 has an invalid length. [ 234.999955][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2213'. [ 235.009428][T13546] netlink: 'syz.7.2213': attribute type 11 has an invalid length. [ 235.142008][T13521] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 235.183201][T13521] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.264519][T13521] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 235.277004][T13521] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.294790][T13561] tipc: Enabled bearer , priority 10 [ 235.301929][T13562] tipc: Enabling of bearer rejected, already enabled [ 235.319017][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 235.398649][T13555] syzkaller0: entered promiscuous mode [ 235.430469][T13555] syzkaller0: entered allmulticast mode [ 235.494874][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2216'. [ 235.554954][T13576] tipc: Enabling of bearer rejected, failed to enable media [ 235.709487][T13586] netlink: 'syz.7.2226': attribute type 24 has an invalid length. [ 235.987376][ T5836] Bluetooth: hci12: command tx timeout [ 236.413090][ T9] tipc: Node number set to 3678934727 [ 236.954552][T13598] tipc: Enabled bearer , priority 0 [ 236.963948][T13598] syzkaller0: entered promiscuous mode [ 236.969487][T13598] syzkaller0: entered allmulticast mode [ 237.050436][T13598] tipc: Resetting bearer [ 237.061871][T13521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.078567][T13597] tipc: Resetting bearer [ 237.091111][T13604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.117068][T13597] tipc: Disabling bearer [ 237.144952][T13521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.167409][T13521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.186719][T13521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.347191][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.388641][T13521] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.409971][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.417207][ T7417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.459217][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.466436][ T7423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.684175][T13628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.690581][T13628] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 237.720984][T13628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.731163][T13628] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 237.785535][T13628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.792699][T13628] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 237.843078][T13628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.856078][T13628] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 237.915620][T13628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.921769][T13628] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.951047][T13521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.968270][T13628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 237.985882][T13628] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 238.005281][T13657] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.017025][T13657] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.050439][T13628] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 238.055527][ T5836] Bluetooth: hci12: command tx timeout [ 238.061524][T13628] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 238.097923][T13657] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.118519][T13657] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.147165][T13628] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 238.155020][T13628] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 238.168323][T13628] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 238.176330][T13628] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 238.198380][T13657] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.210402][T13657] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.242375][T13628] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 238.259859][T13628] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 238.289713][T13628] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 238.312838][T13628] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 238.322750][T13657] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.345006][T13657] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.388017][T13628] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 238.426647][T13628] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 238.492005][T13521] veth0_vlan: entered promiscuous mode [ 238.512537][ T7423] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.521049][ T7423] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.530024][T13628] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 238.536698][T13628] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 238.562796][T13521] veth1_vlan: entered promiscuous mode [ 238.570805][ T7423] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.580690][ T7423] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.590814][ T7423] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.602420][ T7423] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.624380][ T7453] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.633805][ T7453] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.700056][T13521] veth0_macvtap: entered promiscuous mode [ 238.710957][T13521] veth1_macvtap: entered promiscuous mode [ 238.742318][T13521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.764394][T13521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.783791][ T7423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.795543][ T7423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.809765][ T7423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.830089][ T7423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.063994][ T7418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.072375][ T7418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.186474][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.214380][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.396756][T13710] __nla_validate_parse: 1 callbacks suppressed [ 239.396776][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2253'. [ 239.592120][T13719] xt_connbytes: Forcing CT accounting to be enabled [ 239.642532][T13723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2257'. [ 239.652099][ T9] IPVS: starting estimator thread 0... [ 239.686941][T13727] netlink: 'syz.5.2259': attribute type 1 has an invalid length. [ 239.695233][T13727] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2259'. [ 239.743689][T13724] IPVS: using max 34 ests per chain, 81600 per kthread [ 240.116624][T13754] netlink: 'syz.7.2268': attribute type 4 has an invalid length. [ 240.147455][T13757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2267'. [ 240.207881][T13759] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.366376][T13773] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2273'. [ 240.388393][T13776] netlink: 64985 bytes leftover after parsing attributes in process `syz.7.2274'. [ 240.429440][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2274'. [ 240.442295][T13776] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2274'. [ 240.463137][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2274'. [ 240.677773][T13797] netlink: 'syz.5.2279': attribute type 1 has an invalid length. [ 240.929685][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'. [ 240.952578][T13810] netlink: 'syz.5.2284': attribute type 28 has an invalid length. [ 240.961143][T13810] netlink: 'syz.5.2284': attribute type 3 has an invalid length. [ 240.991093][T13806] bond1 (unregistering): Released all slaves [ 241.337631][T13822] syzkaller0: entered promiscuous mode [ 241.343385][T13822] syzkaller0: entered allmulticast mode [ 241.454832][T13834] nbd: illegal input index -8454144 [ 241.507238][ T30] audit: type=1107 audit(1760320879.121:2): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 241.890815][T13868] policy can only be matched on NF_INET_PRE_ROUTING [ 241.989511][T13868] unable to load match [ 242.074252][T13874] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 242.081756][T13874] bridge_slave_1: left allmulticast mode [ 242.088018][T13874] bridge_slave_1: left promiscuous mode [ 242.098102][T13874] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.110102][T13874] bridge_slave_0: left allmulticast mode [ 242.117834][T13874] bridge_slave_0: left promiscuous mode [ 242.124278][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.270785][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 242.281436][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 242.311015][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 242.320554][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 242.328717][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 242.660758][T13898] netlink: 'syz.4.2307': attribute type 17 has an invalid length. [ 242.677314][T13898] gretap0: entered promiscuous mode [ 242.752633][T13898] gretap0: left promiscuous mode [ 242.810437][T13884] chnl_net:caif_netlink_parms(): no params data found [ 243.170923][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.181153][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.190031][T13884] bridge_slave_0: entered allmulticast mode [ 243.198453][T13884] bridge_slave_0: entered promiscuous mode [ 243.214859][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.223160][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.230438][T13884] bridge_slave_1: entered allmulticast mode [ 243.239238][T13884] bridge_slave_1: entered promiscuous mode [ 243.300575][T13884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.319883][T13939] netlink: 'syz.7.2318': attribute type 2 has an invalid length. [ 243.329929][T13939] nbd: must specify a device to reconfigure [ 243.341677][T13940] Cannot find add_set index 2 as target [ 243.343606][T13941] Cannot find add_set index 2 as target [ 243.365254][T13884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.450439][T13884] team0: Port device team_slave_0 added [ 243.470077][T13884] team0: Port device team_slave_1 added [ 243.566745][T13884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.583540][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.614649][T13884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.629974][T13884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.637619][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.687339][T13884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.707057][T13948] syzkaller1: entered promiscuous mode [ 243.717181][T13948] syzkaller1: entered allmulticast mode [ 243.825069][T13970] 8021q: VLANs not supported on wg0 [ 243.838794][T13884] hsr_slave_0: entered promiscuous mode [ 243.845513][T13884] hsr_slave_1: entered promiscuous mode [ 243.851725][T13884] debugfs: 'hsr0' already exists in 'hsr' [ 243.858111][T13884] Cannot create hsr debugfs directory [ 244.129247][T13981] bond1: entered allmulticast mode [ 244.137086][T13981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.147013][T13981] bridge0: port 3(bond1) entered blocking state [ 244.153741][T13981] bridge0: port 3(bond1) entered disabled state [ 244.161986][T13981] bond1: entered promiscuous mode [ 244.167840][T13981] bridge0: port 3(bond1) entered blocking state [ 244.174316][T13981] bridge0: port 3(bond1) entered forwarding state [ 244.199384][ T7424] bridge0: port 3(bond1) entered disabled state [ 244.329754][T13884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.351713][T13991] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 244.377620][ T52] Bluetooth: hci13: command tx timeout [ 244.403802][T13991] veth1_to_bond: entered allmulticast mode [ 244.416988][T13991] __nla_validate_parse: 16 callbacks suppressed [ 244.417003][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 244.444993][T13884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.467323][T13993] netlink: 'syz.4.2333': attribute type 8 has an invalid length. [ 244.469650][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 244.515414][T13994] bond0: (slave bond_slave_1): Releasing backup interface [ 244.561639][T13994] veth1_to_bond (unregistering): left allmulticast mode [ 244.638359][T13884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.725267][T13884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.748177][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2336'. [ 244.942602][T14009] syzkaller1: entered promiscuous mode [ 244.952008][T14012] netlink: 'syz.7.2342': attribute type 23 has an invalid length. [ 244.953366][T14009] syzkaller1: entered allmulticast mode [ 244.976433][T14009] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 245.081225][T13884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.109237][T13884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.145698][T13884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.157524][T13884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.284956][T14021] syzkaller0: entered promiscuous mode [ 245.290880][T14021] syzkaller0: entered allmulticast mode [ 245.297624][ T30] audit: type=1107 audit(1760320882.911:3): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.-TÂk¥ù$&Õ#®áºAK#`pÒ\ï J#†h3ZôÕXç!Eý5Eª*&n,esΫ' [ 245.517354][T14041] netlink: 'syz.4.2349': attribute type 6 has an invalid length. [ 245.576382][T14043] netlink: 'syz.4.2349': attribute type 6 has an invalid length. [ 246.455646][ T52] Bluetooth: hci13: command tx timeout [ 246.660242][T14045] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 246.834382][T13884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.881536][T13884] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.926173][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.933407][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.999526][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.006753][ T7418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.592386][T13884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.687871][T13884] veth0_vlan: entered promiscuous mode [ 247.717243][T13884] veth1_vlan: entered promiscuous mode [ 247.769936][T13884] veth0_macvtap: entered promiscuous mode [ 247.784130][T13884] veth1_macvtap: entered promiscuous mode [ 247.811803][T13884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.846633][T13884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.863479][T14069] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 247.865497][ T7417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.870085][T14069] Bluetooth: hci13: Error when powering off device on rfkill (-4) [ 247.890818][ T7417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.970737][ T7417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.016404][ T7417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.149514][ T7418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.166198][T14110] TCP: TCP_TX_DELAY enabled [ 248.174388][ T7418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.243276][ T30] audit: type=1800 audit(1760320885.851:4): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2367" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1585 res=0 errno=0 [ 248.293607][ T7418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.301473][ T7418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.571187][T14130] tipc: Enabled bearer , priority 0 [ 248.588612][T14130] syzkaller0: entered promiscuous mode [ 248.594514][T14130] syzkaller0: entered allmulticast mode [ 248.608963][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 248.636651][T14130] tipc: Resetting bearer [ 248.674393][T14129] tipc: Resetting bearer [ 248.714287][T14129] tipc: Disabling bearer [ 248.728884][T14137] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 248.757128][T14140] syzkaller1: entered promiscuous mode [ 248.783344][T14140] syzkaller1: entered allmulticast mode [ 249.008745][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 249.021674][T14159] netlink: 'syz.4.2381': attribute type 1 has an invalid length. [ 249.036026][T14159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2381'. [ 249.078059][T14159] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2381'. [ 249.110308][T14154] "syz.4.2381" (14154) uses obsolete ecb(arc4) skcipher [ 249.254866][T14173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2385'. [ 249.392006][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 249.409682][T14187] xt_l2tp: missing protocol rule (udp|l2tpip) [ 249.416930][T14185] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2390'. [ 249.438413][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2389'. [ 249.459206][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2392'. [ 249.676460][T14205] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2397'. [ 249.696265][T14205] erspan0: entered promiscuous mode [ 249.783066][T14213] tipc: Started in network mode [ 249.788154][T14213] tipc: Node identity b6fe69d5b05f, cluster identity 4711 [ 249.795784][T14213] tipc: Enabled bearer , priority 0 [ 249.803960][T14213] syzkaller0: entered promiscuous mode [ 249.809641][T14213] syzkaller0: entered allmulticast mode [ 249.819730][T14213] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 249.840146][T14213] tipc: Resetting bearer [ 249.867434][T14213] tipc: Resetting bearer [ 249.881817][T14213] tipc: Disabling bearer [ 250.261924][T14231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.268582][T14231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.468610][T14243] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 250.481809][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 250.482236][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.502144][T14245] netlink: 'syz.0.2406': attribute type 9 has an invalid length. [ 250.509891][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.510600][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.517009][T14246] netlink: 'syz.0.2406': attribute type 9 has an invalid length. [ 250.557239][T14248] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.576088][T14253] netlink: 'syz.1.2408': attribute type 18 has an invalid length. [ 250.611614][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.625927][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.634338][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.643250][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.651347][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.659349][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.669900][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.678399][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.686593][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.695050][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.703129][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.711178][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.719195][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.727392][T14248] wlan1 speed is unknown, defaulting to 1000 [ 250.883590][ T9] IPVS: starting estimator thread 0... [ 250.891437][T14262] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.912397][T14266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2411'. [ 250.989465][T14265] IPVS: using max 28 ests per chain, 67200 per kthread [ 251.165337][T14277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2414'. [ 251.202644][T14275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2414'. [ 251.318896][T14284] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 251.327318][T14284] netlink: 'syz.4.2418': attribute type 3 has an invalid length. [ 251.336668][T14284] netlink: 'syz.4.2418': attribute type 235 has an invalid length. [ 251.345781][T14286] netlink: 'syz.1.2419': attribute type 6 has an invalid length. [ 251.478857][T14286] syz.1.2419: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 251.502560][T14286] CPU: 1 UID: 0 PID: 14286 Comm: syz.1.2419 Not tainted syzkaller #0 PREEMPT(full) [ 251.502586][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.502614][T14286] Call Trace: [ 251.502622][T14286] [ 251.502631][T14286] dump_stack_lvl+0x189/0x250 [ 251.502660][T14286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.502688][T14286] ? __pfx__printk+0x10/0x10 [ 251.502707][T14286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.502732][T14286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.502759][T14286] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 251.502787][T14286] warn_alloc+0x214/0x310 [ 251.502819][T14286] ? __pfx_warn_alloc+0x10/0x10 [ 251.502858][T14286] ? __get_vm_area_node+0x28f/0x300 [ 251.502882][T14286] ? nf_tables_newset+0x1330/0x2540 [ 251.502910][T14286] __vmalloc_node_range_noprof+0x690/0x12d0 [ 251.502965][T14286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.502990][T14286] ? nf_tables_newset+0x1330/0x2540 [ 251.503017][T14286] ? rcu_is_watching+0x15/0xb0 [ 251.503039][T14286] ? nf_tables_newset+0x1330/0x2540 [ 251.503063][T14286] __kvmalloc_node_noprof+0x674/0x910 [ 251.503092][T14286] ? nf_tables_newset+0x1330/0x2540 [ 251.503120][T14286] ? nft_set_lookup+0x128/0x150 [ 251.503146][T14286] ? nft_hash_privsize+0x3f/0xf0 [ 251.503171][T14286] nf_tables_newset+0x1330/0x2540 [ 251.503210][T14286] ? __pfx_nf_tables_newset+0x10/0x10 [ 251.503259][T14286] ? __nla_parse+0x40/0x60 [ 251.503289][T14286] nfnetlink_rcv+0x11d9/0x2590 [ 251.503355][T14286] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 251.503401][T14286] ? ref_tracker_free+0x63a/0x7d0 [ 251.503455][T14286] ? __netlink_deliver_tap+0x807/0x850 [ 251.503475][T14286] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.503514][T14286] netlink_unicast+0x82f/0x9e0 [ 251.503553][T14286] ? __pfx_netlink_unicast+0x10/0x10 [ 251.503584][T14286] ? netlink_sendmsg+0x642/0xb30 [ 251.503602][T14286] ? skb_put+0x11b/0x210 [ 251.503627][T14286] netlink_sendmsg+0x805/0xb30 [ 251.503657][T14286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.503690][T14286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.503718][T14286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.503736][T14286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.503758][T14286] __sock_sendmsg+0x21c/0x270 [ 251.503789][T14286] ____sys_sendmsg+0x505/0x830 [ 251.503818][T14286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.503851][T14286] ? import_iovec+0x74/0xa0 [ 251.503874][T14286] ___sys_sendmsg+0x21f/0x2a0 [ 251.503900][T14286] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.503963][T14286] ? __fget_files+0x2a/0x420 [ 251.503979][T14286] ? __fget_files+0x3a0/0x420 [ 251.504006][T14286] __x64_sys_sendmsg+0x19b/0x260 [ 251.504032][T14286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.504072][T14286] ? do_syscall_64+0xbe/0xfa0 [ 251.504099][T14286] do_syscall_64+0xfa/0xfa0 [ 251.504119][T14286] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.504140][T14286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.504158][T14286] ? clear_bhb_loop+0x60/0xb0 [ 251.504180][T14286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.504198][T14286] RIP: 0033:0x7ff0cf58eec9 [ 251.504216][T14286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.504232][T14286] RSP: 002b:00007ff0d03dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.504250][T14286] RAX: ffffffffffffffda RBX: 00007ff0cf7e5fa0 RCX: 00007ff0cf58eec9 [ 251.504264][T14286] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 251.504276][T14286] RBP: 00007ff0cf611f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.504288][T14286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.504300][T14286] R13: 00007ff0cf7e6038 R14: 00007ff0cf7e5fa0 R15: 00007ffc77e442a8 [ 251.504334][T14286] [ 251.884441][T14286] Mem-Info: [ 251.887621][T14286] active_anon:6973 inactive_anon:0 isolated_anon:0 [ 251.887621][T14286] active_file:3076 inactive_file:39964 isolated_file:0 [ 251.887621][T14286] unevictable:768 dirty:50 writeback:0 [ 251.887621][T14286] slab_reclaimable:13298 slab_unreclaimable:129744 [ 251.887621][T14286] mapped:75026 shmem:1406 pagetables:1488 [ 251.887621][T14286] sec_pagetables:0 bounce:0 [ 251.887621][T14286] kernel_misc_reclaimable:0 [ 251.887621][T14286] free:1178289 free_pcp:15126 free_cma:0 [ 251.936337][T14286] Node 0 active_anon:27928kB inactive_anon:0kB active_file:12304kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:300104kB dirty:196kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17060kB pagetables:5784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.968453][T14286] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.014054][T14286] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.045087][T14286] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 252.050938][T14286] Node 0 DMA32 free:803924kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27864kB inactive_anon:0kB active_file:12304kB inactive_file:159660kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:44384kB local_pcp:27436kB free_cma:0kB [ 252.085100][T14286] lowmem_reserve[]: 0 0 1 1 1 [ 252.089873][T14286] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.122423][T14286] lowmem_reserve[]: 0 0 0 0 0 [ 252.127567][T14286] Node 1 Normal free:3893808kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17232kB local_pcp:8768kB free_cma:0kB [ 252.160864][T14286] lowmem_reserve[]: 0 0 0 0 0 [ 252.168056][T14303] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 252.168962][T14286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.188843][T14286] Node 0 DMA32: 637*4kB (ME) 256*8kB (UME) 124*16kB (M) 27*32kB (UME) 11*64kB (UM) 9*128kB (UM) 8*256kB (M) 2*512kB (UM) 13*1024kB (UME) 12*2048kB (UME) 184*4096kB (M) = 803924kB [ 252.207212][T14286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.220015][T14286] Node 1 Normal: 2*4kB (ME) 57*8kB (UME) 36*16kB (UME) 141*32kB (UME) 42*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893808kB [ 252.240076][T14286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.253105][T14286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.255420][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 252.262487][T14286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.285958][T14286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.295750][T14286] 44443 total pagecache pages [ 252.300601][T14286] 0 pages in swap cache [ 252.305280][T14286] Free swap = 124996kB [ 252.309577][T14286] Total swap = 124996kB [ 252.314793][T14286] 2097051 pages RAM [ 252.318798][T14286] 0 pages HighMem/MovableOnly [ 252.324402][T14286] 424543 pages reserved [ 252.328584][T14286] 0 pages cma reserved [ 252.682824][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 252.694054][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880812fcc00: rx timeout, send abort [ 252.726902][T14318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'. [ 253.195024][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880812fc800: rx timeout, send abort [ 253.417036][T14359] macvlan0: entered promiscuous mode [ 253.427943][T14359] batadv0: entered promiscuous mode [ 253.436864][T14359] debugfs: 'hsr1' already exists in 'hsr' [ 253.442701][T14359] Cannot create hsr debugfs directory [ 253.448728][T14359] hsr1: entered allmulticast mode [ 253.454153][T14359] macvlan0: entered allmulticast mode [ 253.459730][T14359] veth1_vlan: entered allmulticast mode [ 253.477694][T14359] batadv0: entered allmulticast mode [ 253.488588][T14359] macvlan0: left promiscuous mode [ 253.502133][T14359] batadv0: left promiscuous mode [ 253.703344][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880812fc800: abort rx timeout. Force session deactivation [ 253.833637][T14386] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 253.987289][T14395] tipc: Enabled bearer , priority 0 [ 254.004668][T14395] syzkaller0: entered promiscuous mode [ 254.012550][T14395] syzkaller0: entered allmulticast mode [ 254.058477][T14395] tipc: Resetting bearer [ 254.069702][T14394] tipc: Resetting bearer [ 254.089270][T14394] tipc: Disabling bearer [ 254.206483][T14413] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 254.215347][T14413] netlink: 'syz.4.2457': attribute type 2 has an invalid length. [ 254.373782][T14418] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 254.407240][T14427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.533863][T14470] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 255.740496][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755293][T14470] bond2: entered promiscuous mode [ 255.760903][T14470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.776239][T14473] tipc: Enabled bearer , priority 0 [ 255.837798][T14474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.845671][T14474] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 255.859508][T14480] netlink: 'syz.0.2476': attribute type 2 has an invalid length. [ 255.868076][T14480] __nla_validate_parse: 36 callbacks suppressed [ 255.868092][T14480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2476'. [ 255.884711][T14474] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 255.885185][T14479] netlink: 'syz.0.2476': attribute type 2 has an invalid length. [ 255.896519][T14479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2476'. [ 255.934820][T14474] bond2: (slave wireguard0): making interface the new active one [ 255.942789][T14474] wireguard0: entered promiscuous mode [ 255.950852][T14474] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 256.097804][T14476] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 256.106900][T14476] wireguard0: left promiscuous mode [ 256.124857][T14476] bond2 (unregistering): Released all slaves [ 256.158649][T14489] tipc: Started in network mode [ 256.164443][T14489] tipc: Node identity 769158a7378, cluster identity 4711 [ 256.171763][T14489] tipc: Enabled bearer , priority 0 [ 256.184547][T14473] tipc: Disabling bearer [ 256.259728][T14489] tipc: Resetting bearer [ 256.278210][T14504] xt_hashlimit: invalid interval [ 256.592656][T14523] netlink: 'syz.0.2489': attribute type 75 has an invalid length. [ 256.662643][T14527] lo: entered promiscuous mode [ 256.680196][T14527] netlink: 'syz.5.2491': attribute type 2 has an invalid length. [ 256.697374][T14527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.749337][T14533] netlink: 'syz.1.2490': attribute type 4 has an invalid length. [ 256.778694][T14485] tipc: Disabling bearer [ 256.971429][T14543] xt_hashlimit: invalid interval [ 257.070733][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 257.074679][T14555] atomic_op ffff88804dbaf998 conn xmit_atomic 0000000000000000 [ 257.172107][T14560] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 257.177083][T14558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.210317][T14560] bond1 (unregistering): Released all slaves [ 257.530868][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'. [ 257.597100][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 257.632287][T14591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2512'. [ 257.871102][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 257.883863][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 257.895660][T14609] netlink: 'syz.0.2518': attribute type 12 has an invalid length. [ 257.907744][T14600] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.919412][ T7423] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.919846][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 257.929688][ T7423] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.937292][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 257.955822][T14609] netlink: 'syz.0.2518': attribute type 12 has an invalid length. [ 257.958816][T14612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.975776][ T7423] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.985100][ T7423] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.316701][T14641] xt_hashlimit: size too large, truncated to 1048576 [ 258.407847][T14646] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 258.495108][T14656] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 258.511141][T14658] xt_hashlimit: invalid rate [ 258.938755][T14684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.049782][T14693] pim6reg: entered allmulticast mode [ 259.130569][T14699] tipc: Enabled bearer , priority 0 [ 259.149859][T14697] tipc: Disabling bearer [ 260.092084][T14736] gre1: entered promiscuous mode [ 260.098481][T14736] gre1: entered allmulticast mode [ 260.166011][T14743] bond2: option all_slaves_active: invalid value (222) [ 260.195543][T14743] bond2 (unregistering): Released all slaves [ 260.887869][T14788] __nla_validate_parse: 17 callbacks suppressed [ 260.887888][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 260.919580][T14788] macsec1: entered promiscuous mode [ 260.925979][T14788] bridge0: entered promiscuous mode [ 260.931366][T14788] macsec1: entered allmulticast mode [ 260.939167][T14788] bridge0: entered allmulticast mode [ 260.945712][T14788] bridge0: port 1(macsec1) entered blocking state [ 260.952590][T14788] bridge0: port 1(macsec1) entered disabled state [ 260.973670][T14793] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 261.011887][T14788] bridge0: left allmulticast mode [ 261.017862][T14788] bridge0: left promiscuous mode [ 261.090734][T14796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2578'. [ 261.285895][T14814] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.2582'. [ 261.306064][T14814] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 261.426916][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2586'. [ 261.464317][T14822] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2586'. [ 261.652675][T14822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.668530][T14822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.680403][T14822] bond0 (unregistering): Released all slaves [ 261.784957][T14845] Cannot find set identified by id 0 to match [ 261.927950][T14850] validate_nla: 2 callbacks suppressed [ 261.927967][T14850] netlink: 'syz.5.2594': attribute type 21 has an invalid length. [ 261.945288][T14850] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.953210][T14850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.960444][T14850] IPv6: NLM_F_CREATE should be set when creating new route [ 261.967745][T14850] IPv6: NLM_F_CREATE should be set when creating new route [ 261.975010][T14850] IPv6: NLM_F_CREATE should be set when creating new route [ 262.055628][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 262.079088][T14861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2597'. [ 262.107470][T14861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2597'. [ 262.117251][T14865] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2596'. [ 262.147420][T14867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2597'. [ 262.231794][T14869] netlink: 'syz.5.2598': attribute type 1 has an invalid length. [ 262.420471][T14878] netlink: 'syz.0.2600': attribute type 10 has an invalid length. [ 262.431697][T14878] bridge0: port 3(team0) entered blocking state [ 262.440691][T14878] bridge0: port 3(team0) entered disabled state [ 262.447496][T14878] team0: entered allmulticast mode [ 262.454030][T14878] team_slave_0: entered allmulticast mode [ 262.470712][T14878] team_slave_1: entered allmulticast mode [ 262.527705][T14878] team0: entered promiscuous mode [ 262.540379][T14878] team_slave_0: entered promiscuous mode [ 262.551704][T14878] team_slave_1: entered promiscuous mode [ 262.558402][T14878] bridge0: port 3(team0) entered blocking state [ 262.564832][T14878] bridge0: port 3(team0) entered forwarding state [ 262.584639][T14890] netlink: 'syz.5.2603': attribute type 5 has an invalid length. [ 262.709401][T14895] syzkaller0: entered promiscuous mode [ 262.722017][T14895] syzkaller0: entered allmulticast mode [ 262.859161][T14913] netlink: 'syz.0.2608': attribute type 7 has an invalid length. [ 262.877283][T14913] netlink: 'syz.0.2608': attribute type 8 has an invalid length. [ 262.902786][T14915] sctp: [Deprecated]: syz.5.2609 (pid 14915) Use of int in max_burst socket option. [ 262.902786][T14915] Use struct sctp_assoc_value instead [ 264.239988][T14922] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 264.263909][T14922] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 264.283587][T14922] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 264.452436][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 264.470831][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 264.483327][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 264.503180][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 264.513242][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 264.567261][T14931] wlan1 speed is unknown, defaulting to 1000 [ 264.620523][T14940] wlan1 speed is unknown, defaulting to 1000 [ 264.961462][T14959] veth0_macvtap: left promiscuous mode [ 265.104740][T14964] bond1 (unregistering): Released all slaves [ 265.159183][T14969] netlink: 'syz.5.2626': attribute type 1 has an invalid length. [ 265.363341][T14931] chnl_net:caif_netlink_parms(): no params data found [ 265.448084][T14989] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 265.532144][T14995] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.545914][T14995] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 265.556480][T14995] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 265.631693][T14998] dvmrp0: entered allmulticast mode [ 265.638309][T14931] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.645771][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.655601][T14931] bridge_slave_0: entered allmulticast mode [ 265.664102][T14931] bridge_slave_0: entered promiscuous mode [ 265.673929][T14931] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.681373][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.689541][T14931] bridge_slave_1: entered allmulticast mode [ 265.698429][T14931] bridge_slave_1: entered promiscuous mode [ 265.750035][T14931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.772400][T14931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.860244][T14931] team0: Port device team_slave_0 added [ 265.869569][T14931] team0: Port device team_slave_1 added [ 265.870288][ T7421] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 265.984554][T15009] __nla_validate_parse: 8 callbacks suppressed [ 265.984573][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2637'. [ 266.028007][T14931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.035543][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.122725][T14931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.155157][T14931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.172392][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.210057][T14931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.239230][T15029] syz_tun: entered allmulticast mode [ 266.318419][T15029] syz_tun: left allmulticast mode [ 266.384728][T15040] xt_hashlimit: invalid interval [ 266.418782][T15044] netlink: 'syz.5.2647': attribute type 8 has an invalid length. [ 266.580603][T14931] hsr_slave_0: entered promiscuous mode [ 266.601178][T14931] hsr_slave_1: entered promiscuous mode [ 266.614415][ T5836] Bluetooth: hci14: command tx timeout [ 266.623726][T14931] debugfs: 'hsr0' already exists in 'hsr' [ 266.633529][T14931] Cannot create hsr debugfs directory [ 266.906118][T15061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2653'. [ 267.112150][T14931] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.152916][T15076] xt_hashlimit: invalid interval [ 267.213643][T14931] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.262453][T14931] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.318473][T14931] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.611328][T14931] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.657521][T14931] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.710629][T14931] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.749739][T14931] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.755334][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2661'. [ 267.876019][ T6698] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8f [ 267.944732][T14931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.965026][T15109] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2664'. [ 267.995145][T14931] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.049298][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.056489][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.093889][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.101086][ T7417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.166378][T15122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2662'. [ 268.278152][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 268.452302][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'. [ 268.596578][T14931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.693255][ T5836] Bluetooth: hci14: command tx timeout [ 268.736875][T15145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2671'. [ 268.762048][T15145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2671'. [ 268.806773][T15144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2671'. [ 268.885457][ T6698] tipc: Subscription rejected, illegal request [ 269.059716][T14931] veth0_vlan: entered promiscuous mode [ 269.081588][T14931] veth1_vlan: entered promiscuous mode [ 269.147366][T14931] veth0_macvtap: entered promiscuous mode [ 269.169758][T14931] veth1_macvtap: entered promiscuous mode [ 269.226612][T14931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.246333][T14931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.275692][ T7423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.301211][ T7423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.331017][ T7423] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.403877][ T7423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.636401][T15197] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 269.648671][ T7417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.655165][T15193] gtp0: entered promiscuous mode [ 269.661554][T15193] gtp0: entered allmulticast mode [ 269.680847][T15197] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 269.680882][ T7417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.690792][T15197] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 269.811520][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.827546][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.001803][T15215] netlink: 'syz.4.2690': attribute type 11 has an invalid length. [ 270.033851][T15219] syzkaller1: entered promiscuous mode [ 270.045265][T15219] syzkaller1: entered allmulticast mode [ 270.091865][T15219] syzkaller0: entered promiscuous mode [ 270.105633][T15219] syzkaller0: entered allmulticast mode [ 270.139354][T15224] sctp: [Deprecated]: syz.6.2692 (pid 15224) Use of int in max_burst socket option. [ 270.139354][T15224] Use struct sctp_assoc_value instead [ 270.262459][T15232] xt_hashlimit: invalid interval [ 270.727042][T15262] netlink: 'syz.0.2703': attribute type 5 has an invalid length. [ 270.773436][ T5836] Bluetooth: hci14: command tx timeout [ 270.779981][T15264] openvswitch: netlink: Message has 4 unknown bytes. [ 270.787489][T15265] openvswitch: netlink: Message has 4 unknown bytes. [ 270.810191][T15264] tipc: Enabling of bearer rejected, failed to enable media [ 270.822153][T15265] tipc: Enabling of bearer rejected, failed to enable media [ 270.832345][T15267] xt_hashlimit: invalid interval [ 270.926195][T15275] syzkaller1: entered promiscuous mode [ 270.942044][T15275] syzkaller1: entered allmulticast mode [ 271.000384][T15282] __nla_validate_parse: 13 callbacks suppressed [ 271.000403][T15282] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2713'. [ 271.019632][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2713'. [ 271.080906][T15278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2711'. [ 271.547431][T15304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2719'. [ 271.752244][T15308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.766439][T15311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2722'. [ 271.917757][T15317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2723'. [ 271.927734][T15320] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2725'. [ 271.937676][T15320] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2725'. [ 272.197060][T15335] xt_CT: No such helper "syz1" [ 272.292237][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 272.483318][T15351] xt_hashlimit: invalid interval [ 272.488822][T15355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2733'. [ 272.500376][T15347] syzkaller0: entered promiscuous mode [ 272.506395][T15347] syzkaller0: entered allmulticast mode [ 272.658895][T15364] netlink: 'syz.1.2738': attribute type 1 has an invalid length. [ 272.726394][T15364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.786612][T15368] bond2: (slave veth5): Enslaving as an active interface with a down link [ 272.853228][ T5836] Bluetooth: hci14: command tx timeout [ 272.861438][T15364] bond2: (slave veth0_to_bond): making interface the new active one [ 272.881107][T15364] veth0_to_bond: entered promiscuous mode [ 272.909787][T15364] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 272.938051][T15382] netlink: 'syz.5.2743': attribute type 1 has an invalid length. [ 273.012390][T15389] netlink: 'syz.6.2744': attribute type 3 has an invalid length. [ 273.029867][T15389] netlink: 'syz.6.2744': attribute type 3 has an invalid length. [ 273.077474][T15391] rdma_op ffff8880247661f0 conn xmit_rdma 0000000000000000 [ 273.261820][T15399] netlink: 'syz.6.2748': attribute type 4 has an invalid length. [ 273.392074][T15410] openvswitch: netlink: Key type 30 is not supported [ 273.506869][T15418] tipc: Enabled bearer , priority 0 [ 273.519928][T15418] syzkaller0: entered promiscuous mode [ 273.536251][T15418] syzkaller0: entered allmulticast mode [ 273.563960][T15418] tipc: Resetting bearer [ 273.622082][T15417] tipc: Resetting bearer [ 273.632756][T15428] netlink: 'syz.6.2761': attribute type 1 has an invalid length. [ 273.694132][T15417] tipc: Disabling bearer [ 273.871603][T15439] gretap1: entered promiscuous mode [ 273.879494][T15439] gretap1: entered allmulticast mode [ 274.019767][T15451] netlink: 'syz.6.2768': attribute type 11 has an invalid length. [ 274.094173][T15454] netlink: 'syz.5.2765': attribute type 29 has an invalid length. [ 274.102649][T15454] netlink: 'syz.5.2765': attribute type 29 has an invalid length. [ 274.287263][T15462] tipc: Started in network mode [ 274.301026][T15462] tipc: Node identity fa2b7078f04e, cluster identity 4711 [ 274.311037][T15462] tipc: Enabled bearer , priority 0 [ 274.328746][T15462] syzkaller0: entered promiscuous mode [ 274.344435][T15462] syzkaller0: entered allmulticast mode [ 274.355115][T15467] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 274.433736][T15462] tipc: Resetting bearer [ 274.451159][T15460] tipc: Resetting bearer [ 274.492114][T15460] tipc: Disabling bearer [ 274.549438][T15480] wlan1 speed is unknown, defaulting to 1000 [ 274.976601][T15511] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.312180][T15532] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.640214][T15548] syzkaller0: entered promiscuous mode [ 275.660109][T15548] syzkaller0: entered allmulticast mode [ 275.689576][T15558] tipc: Enabled bearer , priority 0 [ 275.897044][ T52] Bluetooth: hci14: command 0x0405 tx timeout [ 275.971667][T15544] infiniband syz0: set down [ 275.980807][T15544] infiniband syz0: added ipvlan1 [ 276.014962][T15573] nbd: must specify at least one socket [ 276.073878][T15544] RDS/IB: syz0: added [ 276.088233][T15544] smc: adding ib device syz0 with port count 1 [ 276.122067][T15544] smc: ib device syz0 port 1 has no pnetid [ 276.187898][T15546] tipc: Resetting bearer [ 276.691529][T15595] __nla_validate_parse: 8 callbacks suppressed [ 276.691620][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2809'. [ 277.805324][T15546] tipc: Disabling bearer [ 277.818923][T15591] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 277.839372][T15593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.147491][T15601] syzkaller0: entered promiscuous mode [ 278.165447][T15601] syzkaller0: entered allmulticast mode [ 278.321426][T15621] tipc: Enabled bearer , priority 0 [ 278.348145][T15621] syzkaller0: entered promiscuous mode [ 278.363019][T15621] syzkaller0: entered allmulticast mode [ 278.401628][T15621] tipc: Resetting bearer [ 278.407864][T15621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.416288][T15621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.432645][T15621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.440821][T15621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.466396][T15620] tipc: Resetting bearer [ 278.531942][T15620] tipc: Disabling bearer [ 278.567127][T15627] tipc: Enabled bearer , priority 0 [ 278.576505][T15627] syzkaller0: entered promiscuous mode [ 278.582114][T15627] syzkaller0: entered allmulticast mode [ 278.605330][T15627] tipc: Resetting bearer [ 278.710468][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 278.866004][T15626] tipc: Resetting bearer [ 278.892323][T15626] tipc: Disabling bearer [ 278.932784][T15638] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.960864][T15638] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.081756][T15638] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.093155][T15638] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.171683][T15638] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.203115][T15638] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.290513][T15638] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.301459][T15638] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.403765][ T7417] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.433597][ T7417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.460684][ T7417] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.479873][T15659] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2824'. [ 279.483262][ T7417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.489478][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 279.537209][ T7417] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.546488][ T7417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.586051][ T7417] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.597253][ T7417] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.660961][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2825'. [ 279.698438][T15666] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2826'. [ 279.922123][T15675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2829'. [ 280.127560][T15684] netlink: 'syz.0.2832': attribute type 11 has an invalid length. [ 280.155005][T15680] geneve2: entered promiscuous mode [ 280.160941][T15680] geneve2: entered allmulticast mode [ 280.175010][ T7421] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 280.184752][ T7421] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 280.312054][T15693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.318662][T15693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 280.330388][T15680] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.367272][ T7421] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 280.408653][T15696] netlink: 'syz.0.2838': attribute type 13 has an invalid length. [ 280.509767][T15696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.727407][T15710] netlink: 'syz.4.2841': attribute type 3 has an invalid length. [ 280.747113][T15710] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2841'. [ 280.752773][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 280.916889][T15723] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2844'. [ 281.750034][T15680] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.762122][T15680] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 281.853992][T15680] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.864868][T15680] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 281.999060][T15680] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.023153][T15680] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 282.037856][T15741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 282.230278][ T7424] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 282.245889][ T7424] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.320490][ T7421] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 282.335213][ T7421] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.355476][ T7421] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 282.376579][ T7421] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.425206][ T7421] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 282.452448][ T7421] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.518690][T15762] xt_SECMARK: invalid mode: 9 [ 282.763706][T15777] nbd: socks must be embedded in a SOCK_ITEM attr [ 282.812175][T15765] xfrm1: entered allmulticast mode [ 282.934560][T15790] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2861'. [ 282.944761][T15790] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2861'. [ 283.061033][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 283.073307][T15797] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 283.269503][T15814] netlink: 'syz.1.2866': attribute type 30 has an invalid length. [ 283.342503][T15814] bond3: option arp_missed_max: invalid value (0) [ 283.349580][T15814] bond3: option arp_missed_max: allowed values 1 - 255 [ 283.359100][T15814] bond3 (unregistering): Released all slaves [ 283.721316][ T5908] IPVS: starting estimator thread 0... [ 283.729860][T15845] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 283.863170][T15848] IPVS: using max 27 ests per chain, 64800 per kthread [ 283.918838][T15856] netlink: 'syz.5.2883': attribute type 10 has an invalid length. [ 283.935757][T15859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2884'. [ 283.945001][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 283.954047][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 284.015139][T15856] team0: Port device dummy0 added [ 284.021192][T15845] syzkaller1: entered promiscuous mode [ 284.029614][T15845] syzkaller1: entered allmulticast mode [ 284.052568][T15863] veth1_macvtap: left promiscuous mode [ 284.095436][T15865] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2886'. [ 284.223738][ T7453] veth0_to_bond: left promiscuous mode [ 284.244092][T15869] gtp0: entered promiscuous mode [ 284.249091][T15869] gtp0: entered allmulticast mode [ 284.406760][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2891'. [ 284.657179][T15902] netlink: 'syz.0.2899': attribute type 2 has an invalid length. [ 284.671447][T15903] netlink: 'syz.0.2899': attribute type 2 has an invalid length. [ 284.850317][T15910] xt_l2tp: invalid flags combination: 0 [ 285.092065][T15926] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.185980][T15937] netlink: 'syz.4.2908': attribute type 2 has an invalid length. [ 285.194048][T15937] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2908'. [ 285.535914][T15961] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 286.177953][T16005] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.388558][T16021] syzkaller1: entered promiscuous mode [ 286.394360][T16021] syzkaller1: entered allmulticast mode [ 286.520086][T16032] syzkaller0: entered promiscuous mode [ 286.529918][T16032] syzkaller0: entered allmulticast mode [ 286.821442][T16048] netlink: 'syz.0.2942': attribute type 17 has an invalid length. [ 287.206490][T16059] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 287.286097][T16064] xt_hashlimit: invalid interval [ 287.293626][T16063] IPv6: sit2: Disabled Multicast RS [ 287.300048][T16063] sit2: entered allmulticast mode [ 287.432270][T16076] __nla_validate_parse: 10 callbacks suppressed [ 287.432292][T16076] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2951'. [ 287.501202][T16076] netlink: 'syz.1.2951': attribute type 11 has an invalid length. [ 287.556799][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2954'. [ 287.588757][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.606587][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2954'. [ 287.657895][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.690132][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.714371][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2954'. [ 287.717666][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.745681][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.777307][T16101] netlink: 'syz.0.2955': attribute type 11 has an invalid length. [ 287.792722][T16101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2955'. [ 287.839975][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.928660][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.951207][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.093573][T16117] xt_hashlimit: invalid interval [ 288.227251][T16119] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2963'. [ 288.247261][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2964'. [ 288.313762][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 288.337349][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2964'. [ 288.350101][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 288.367888][T16128] netlink: 'syz.6.2967': attribute type 1 has an invalid length. [ 288.511955][T16136] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 288.520032][T16149] netlink: 'syz.1.2971': attribute type 23 has an invalid length. [ 288.704926][T16159] netlink: 'syz.4.2972': attribute type 24 has an invalid length. [ 288.825819][T16134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.849397][T16134] bond1: (slave bond2): making interface the new active one [ 288.860380][T16134] bond1: (slave bond2): Enslaving as an active interface with an up link [ 288.895723][T16152] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 288.931624][T16155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.985217][T16161] syzkaller1: entered promiscuous mode [ 289.020365][T16161] syzkaller1: entered allmulticast mode [ 289.077665][T16172] netlink: 'syz.1.2975': attribute type 2 has an invalid length. [ 289.115510][T16172] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 289.200000][T16183] x_tables: duplicate underflow at hook 2 [ 289.239230][T16183] block nbd0: NBD_DISCONNECT [ 289.248252][T16183] block nbd0: Send disconnect failed -32 [ 289.255803][T16183] block nbd0: shutting down sockets [ 289.563396][T16194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.077195][T16230] IPVS: Scheduler module ip_vs_sip not found [ 290.474625][T16245] gtp0: entered promiscuous mode [ 290.479616][T16245] gtp0: entered allmulticast mode [ 290.631497][T16260] netlink: 'syz.5.3000': attribute type 1 has an invalid length. [ 290.736914][T16267] smc: net device vcan0 applied user defined pnetid SYZ1 [ 290.772370][T16271] tipc: Enabled bearer , priority 0 [ 290.795750][T16271] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 290.822166][T16271] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 290.838786][T16271] tipc: Resetting bearer [ 290.869768][T16271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.184221][T16300] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 291.718731][T16332] team0: Device gtp1 is of different type [ 291.843657][ T5932] tipc: Node number set to 111241685 [ 292.268073][T16365] netlink: 'syz.1.3033': attribute type 1 has an invalid length. [ 292.578863][T16393] __nla_validate_parse: 21 callbacks suppressed [ 292.578883][T16393] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3042'. [ 292.619559][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 292.723525][T16408] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3045'. [ 292.734823][T16408] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3045'. [ 292.750473][T16408] netlink: 'syz.6.3045': attribute type 6 has an invalid length. [ 292.752687][T16406] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 292.774921][T16406] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3046'. [ 292.907131][T16418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3052'. [ 292.923893][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'. [ 293.773305][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3065'. [ 293.938756][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3068'. [ 293.948829][T16472] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3068'. [ 293.986263][T16470] tipc: Enabled bearer , priority 0 [ 293.996966][T16474] pim6reg1: entered promiscuous mode [ 294.002296][T16474] pim6reg1: entered allmulticast mode [ 294.010495][T16470] syzkaller0: entered promiscuous mode [ 294.022280][T16470] syzkaller0: entered allmulticast mode [ 294.074825][T16470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.105814][T16470] tipc: Resetting bearer [ 294.127051][T16469] tipc: Resetting bearer [ 294.168833][T16469] tipc: Disabling bearer [ 294.709860][ T7453] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.738488][ T7453] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.782253][T16515] vlan0: entered promiscuous mode [ 294.828183][T16515] bridge0: entered promiscuous mode [ 294.841188][ T7453] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.859652][ T7453] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.878481][T16525] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 294.886571][T16531] net_ratelimit: 25 callbacks suppressed [ 294.886591][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.922059][T16524] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.981956][T16537] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 294.985002][T16524] bond0 (unregistering): Released all slaves [ 295.646880][T16574] "syz.6.3099" (16574) uses obsolete ecb(arc4) skcipher [ 295.861324][T16580] syzkaller0: entered allmulticast mode [ 296.037949][T16595] bond2: ARP target 1.0.0.0 is already present [ 296.044403][T16595] bond2: option arp_ip_target: invalid value (1) [ 296.052368][T16595] bond2 (unregistering): Released all slaves [ 296.168880][T16607] syzkaller1: entered promiscuous mode [ 296.176079][T16607] syzkaller1: entered allmulticast mode [ 296.433584][T16620] xt_TCPMSS: Only works on TCP SYN packets [ 296.933535][T16653] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 296.947227][T16653] bond3 (unregistering): Released all slaves [ 296.999969][T16649] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 297.032447][T16649] bond3 (unregistering): Released all slaves [ 297.616502][T16687] tipc: Enabling of bearer rejected, already enabled [ 297.690540][T16694] __nla_validate_parse: 18 callbacks suppressed [ 297.690561][T16694] netlink: 42 bytes leftover after parsing attributes in process `syz.5.3137'. [ 297.866193][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3144'. [ 297.893348][ T5836] Bluetooth: hci14: command 0x0405 tx timeout [ 297.980517][ T31] INFO: task syz.5.1036:9544 blocked for more than 143 seconds. [ 298.002990][ T31] Not tainted syzkaller #0 [ 298.031011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.048186][ T31] task:syz.5.1036 state:D stack:24328 pid:9544 tgid:9542 ppid:8911 task_flags:0x400140 flags:0x00080002 [ 298.064001][ T31] Call Trace: [ 298.067477][ T31] [ 298.070499][ T31] __schedule+0x1798/0x4cc0 [ 298.080049][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.082514][T16721] team0: Device vti0 is of different type [ 298.085051][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.085080][ T31] ? __pfx___schedule+0x10/0x10 [ 298.085122][ T31] ? schedule+0x91/0x360 [ 298.085149][ T31] schedule+0x165/0x360 [ 298.085176][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.085200][ T31] __mutex_lock+0x7e6/0x1350 [ 298.085232][ T31] ? __mutex_lock+0x5bb/0x1350 [ 298.085264][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 298.085291][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.085322][ T31] ? __nlmsg_put+0xef/0x1b0 [ 298.143177][ T31] ? genlmsg_put+0x137/0x2e0 [ 298.147798][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 298.153548][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 298.159623][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.165074][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 298.170816][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 298.176443][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 298.182557][ T31] genl_rcv_msg+0x60e/0x790 [ 298.187175][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.192200][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 298.198315][ T31] ? __asan_memcpy+0x40/0x70 [ 298.202972][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 298.208364][ T31] netlink_rcv_skb+0x205/0x470 [ 298.216673][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.221541][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.226621][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.231908][ T31] ? down_read+0x1ad/0x2e0 [ 298.236355][ T31] genl_rcv+0x28/0x40 [ 298.240334][ T31] netlink_unicast+0x82f/0x9e0 [ 298.246277][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 298.251590][ T31] ? netlink_sendmsg+0x642/0xb30 [ 298.256666][ T31] ? skb_put+0x11b/0x210 [ 298.260920][ T31] netlink_sendmsg+0x805/0xb30 [ 298.265807][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.271132][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.276131][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.281408][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.286782][ T31] __sock_sendmsg+0x21c/0x270 [ 298.291485][ T31] ____sys_sendmsg+0x505/0x830 [ 298.296417][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.301818][ T31] ? import_iovec+0x74/0xa0 [ 298.306358][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 298.311030][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.316973][ T31] ? __fget_files+0x2a/0x420 [ 298.321584][ T31] ? __fget_files+0x3a0/0x420 [ 298.326337][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 298.331301][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.336817][ T31] ? do_syscall_64+0xbe/0xfa0 [ 298.341496][ T31] do_syscall_64+0xfa/0xfa0 [ 298.346046][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.351237][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.357563][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.362273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.368396][ T31] RIP: 0033:0x7f582598eec9 [ 298.372810][ T31] RSP: 002b:00007f58268f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.381605][ T31] RAX: ffffffffffffffda RBX: 00007f5825be5fa0 RCX: 00007f582598eec9 [ 298.390132][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 298.398263][ T31] RBP: 00007f5825a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.406403][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.414522][ T31] R13: 00007f5825be6038 R14: 00007f5825be5fa0 R15: 00007ffd43423fc8 [ 298.422698][ T31] [ 298.426027][ T31] [ 298.426027][ T31] Showing all locks held in the system: [ 298.434904][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 298.440216][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.450327][ T31] 1 lock held by khungtaskd/31: [ 298.455472][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 298.466284][ T31] 2 locks held by getty/5591: [ 298.471056][ T31] #0: ffff88802fda20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 298.481151][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 298.491904][ T31] 3 locks held by kworker/u8:13/6698: [ 298.497685][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.509815][ T31] #1: ffffc9001b447ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.520870][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 298.530389][ T31] 2 locks held by syz.1.602/8067: [ 298.535545][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.543969][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.554487][ T31] 2 locks held by syz.5.1036/9544: [ 298.559597][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.567884][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 298.577951][ T31] 2 locks held by syz.4.1107/9784: [ 298.583479][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.591713][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 298.601807][ T31] 2 locks held by syz.6.1381/10717: [ 298.607130][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.616385][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.627046][ T31] 2 locks held by syz.3.1391/10758: [ 298.632259][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.640797][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.651353][ T31] 2 locks held by syz.2.1618/11542: [ 298.656883][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.665429][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.675946][ T31] 2 locks held by syz.9.1958/12746: [ 298.681141][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.689493][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.700303][ T31] 2 locks held by syz.8.2088/13144: [ 298.705931][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.719097][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.732767][ T31] 1 lock held by syz-executor/13521: [ 298.738387][ T31] 2 locks held by syz.7.2367/14108: [ 298.744105][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.752405][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 298.762795][ T31] 3 locks held by syz.5.3148/16721: [ 298.768347][ T31] #0: ffffffff8f9fb290 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 298.778467][ T31] #1: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 298.787763][ T31] #2: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 298.799066][ T31] 2 locks held by syz.6.3149/16724: [ 298.804306][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.812531][ T31] #1: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 298.821940][ T31] [ 298.825174][ T31] ============================================= [ 298.825174][ T31] [ 298.833757][ T31] NMI backtrace for cpu 0 [ 298.833775][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 298.833796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.833808][ T31] Call Trace: [ 298.833816][ T31] [ 298.833824][ T31] dump_stack_lvl+0x189/0x250 [ 298.833852][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.833873][ T31] ? __pfx__printk+0x10/0x10 [ 298.833906][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 298.833938][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 298.833967][ T31] ? __pfx__printk+0x10/0x10 [ 298.833989][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 298.834020][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 298.834049][ T31] watchdog+0xf60/0xfa0 [ 298.834073][ T31] ? watchdog+0x1e2/0xfa0 [ 298.834096][ T31] kthread+0x711/0x8a0 [ 298.834123][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.834140][ T31] ? __pfx_kthread+0x10/0x10 [ 298.834166][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.834187][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.834208][ T31] ? __pfx_kthread+0x10/0x10 [ 298.834235][ T31] ret_from_fork+0x4bc/0x870 [ 298.834257][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 298.834285][ T31] ? __switch_to_asm+0x39/0x70 [ 298.834307][ T31] ? __switch_to_asm+0x33/0x70 [ 298.834327][ T31] ? __pfx_kthread+0x10/0x10 [ 298.834361][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.834402][ T31] [ 298.834409][ T31] Sending NMI from CPU 0 to CPUs 1: [ 298.981843][ C1] NMI backtrace for cpu 1 [ 298.981861][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 298.981879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.981889][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 298.981914][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 298.981928][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 298.981944][ C1] RAX: b3bd893edac9a600 RBX: ffffffff81960c17 RCX: b3bd893edac9a600 [ 298.981957][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 298.981969][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 298.981981][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 298.981994][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 298.982005][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 298.982019][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.982030][ C1] CR2: 000000110c3c1713 CR3: 0000000073d02000 CR4: 00000000003526f0 [ 298.982046][ C1] Call Trace: [ 298.982054][ C1] [ 298.982060][ C1] default_idle+0x13/0x20 [ 298.982082][ C1] default_idle_call+0x73/0xb0 [ 298.982106][ C1] do_idle+0x1e7/0x510 [ 298.982128][ C1] ? __pfx_do_idle+0x10/0x10 [ 298.982154][ C1] cpu_startup_entry+0x44/0x60 [ 298.982171][ C1] start_secondary+0x101/0x110 [ 298.982194][ C1] common_startup_64+0x13e/0x147 [ 298.982225][ C1] [ 298.983335][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 298.983351][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 298.983374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.983386][ T31] Call Trace: [ 298.983400][ T31] [ 298.983409][ T31] dump_stack_lvl+0x99/0x250 [ 298.983432][ T31] ? __asan_memcpy+0x40/0x70 [ 298.983458][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.983478][ T31] ? __pfx__printk+0x10/0x10 [ 298.983510][ T31] vpanic+0x237/0x6d0 [ 298.983537][ T31] ? __pfx_vpanic+0x10/0x10 [ 298.983563][ T31] ? preempt_schedule_common+0x83/0xd0 [ 298.983592][ T31] panic+0xb9/0xc0 [ 298.983617][ T31] ? __pfx_panic+0x10/0x10 [ 298.983644][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 298.983675][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 298.983708][ T31] watchdog+0xf9f/0xfa0 [ 298.983733][ T31] ? watchdog+0x1e2/0xfa0 [ 298.983758][ T31] kthread+0x711/0x8a0 [ 298.983786][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.983805][ T31] ? __pfx_kthread+0x10/0x10 [ 298.983833][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.983854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.983875][ T31] ? __pfx_kthread+0x10/0x10 [ 298.983901][ T31] ret_from_fork+0x4bc/0x870 [ 298.983924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 298.983951][ T31] ? __switch_to_asm+0x39/0x70 [ 298.983973][ T31] ? __switch_to_asm+0x33/0x70 [ 298.983993][ T31] ? __pfx_kthread+0x10/0x10 [ 298.984019][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.984057][ T31] [ 299.294850][ T31] Kernel Offset: disabled [ 299.299155][ T31] Rebooting in 86400 seconds..