last executing test programs: 6m9.057895616s ago: executing program 3 (id=577): r0 = socket$netlink(0x10, 0x3, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000000)={{}, "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"}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001040)={'vlan0\x00', 0x0}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001080)="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") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001180)={'veth1_macvtap\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4, 0x2, {0x0, 0xf0, 0x4}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=@ipv6_getmulticast={0x14, 0x3a, 0x302, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000013c0), 0x2, 0x0) connect$inet6(r3, &(0x7f0000001400)={0xa, 0x4e21, 0x2, @remote, 0x5}, 0x1c) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001480), 0x8) splice(0xffffffffffffffff, &(0x7f0000001440)=0x1, r8, &(0x7f00000014c0)=0x10000, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup/syz0\x00', 0x1ff) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000001580)=0x4, 0x4) bind$can_j1939(r3, &(0x7f00000015c0)={0x1d, r9, 0x2, {0x1, 0xff, 0x3}, 0x1}, 0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r10, 0x5, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x8005) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000001780)={0x0, 0x1000, "e33aa4c135d13e1aacec86c46a05b41d33770eef2a3e61ca01b8f069d17e63159dcd80b792f654ae8d06190774ec42511c9fa5009b71e3278f02d3825390f4e47794d49cb317fa7fda31964f2dbd115567aee2daafd7910c7e37633ad59e25200c0bf06a32d28d9ba54949aad20562aef7af56076b42038eb1a117cd5f3f6e9e45a7f460ffaf075dd95130bfa56ca804359128d1b538b9af51f16d3c52f3356014f429272062dad3851902b1711ce59546fde863739a364eed779d41fc26a3cc6f2c715b2d2aaa518eeedd9e80cd10603c2b96c34377862e2382c2df1b9d470b8672559a2fcfe53d772fc511e87d6e79ca301bbbe850c54867d1d0b1dda325793c3eac7c10adcdab0ae07d189ee9a03d683d5a9acb5bb7c7c4c5410b0e90c490aa23f4756a205bb0c9061b6d6f06388844a785968343f84a5260b8d53c08cd8afd0194ff97bba287a81a7d62f61d6e9eb8a964178d0b204d2d9f3378f2f6cad168c9b582b5bf3e1658106d6c8f4beab65f7c7b4687438239b70b40c8cafd2af8c9f60e4a93d532361a386ca3440a70836e23f33a4d52615de4b4c563a525e05916900d66e0f3ee68937586c8651be395a639bd55cce38e16ed5d5d319e38823587588846ab98734fd123872581e4e3fe4f3b563bb9867e549e70c4956475cee7012827a94793b8491f726d1e820513ed39c966519c9a70624c39767aca799a5bdf55f1e6c1f544bc33fd1592bb2e50951fa374017153ff9ff732b9cf066cd7cd6bb0a1e38a2c70317b434e80b45a5701e27b9214498a23adb96cb7dc5c1606a5534e0745be760a06ecc3454df26c8f4f16fc0a49daaa83810f99e0470aa3d952d85d6b99e9cc25cc3ab4639d7da714fd4877b9dfc1168a40ce487a3eeaf3608783e0330e3ddbf1103fd013b4b40c4e47976ff6aabc77fdc139eebac03338efe71843bfa65147d13c8f7a03f220b77a4807f86bbd3d71ff6d9ff6b05c678a3cefa196a3ef27597e335f3607303701e779e5dd5ff388ae2724f1e9f1e764f08229a5449b56eac1e357a5ce2f69020c79047929fadce10043093a8cafbf11b86527e263f087b3766ef57b4febe896af0ee159c7b86481f7443134d13e11b85efabfc290fea22b1ca48e8ed5d03a9d16cd13f90173e55b105a93b33e226a1efb66de743715c2e42fc79bdc7f7d9f59cb8fd0d56e0aef9684be72d8bc7522f017e5cc8ec3791bf7a8558e618db17f31aae0428f32f737f5a193e9927cbf722e4237bf203dec24ff1dc65346eab6e945227ba42f0976b65136254370f8a650bd82974b492c6e8e655efea5dcb650b1dea2d6a7907c5b4db17295ffdbc2f2f6e9eb88e211bc7b207c7b88587d0c6340a751409c6c1ddd2a32aa93363f9ffed12d62f9b070f328f2c9bbe5425d5d8c35f2d473f14c997ee8a84c1fc70b6b32d58fe2658f948790dacfd069d67fc15514dbf54e0b619fb8bd6a428c5b52d9818a2018e59639e10e64fdf4471555bbf6bff69c5c4afb18ccb728a97043fe526a34af6cfecf3c20abbb79135a7a05205ca47031e8a0a7db88b15c549114d453f94818f4266f25c655cbe5da40f26fed4f305140ad056f02c4eb6ef6474cc01a5cb8ec08774bf23116816365d30e2ce1fc73cd85441a3ab25236ae23ca80bffdc612ff4cc8cff2364e352d5c3c1207b54598bc4cd2ad4854764938e9e00d3fbcfe5a54b8f5af04fc164519d73ecfb33f5f709dfde8d05acb9c3d3606bc57a1f74b4e3307d9c37c9f2b1b0624bbd3065354b3de7caa911f669de569c67d1f30181ebf6ee1bc8b340c3fd0307a88ae410f5e538c092b6d880044cd4ccf3d08cd2f1dbc9e17e4f0a2058fe016e975ec925a0ab98b0792ca7499d59713241838fe46a35bb078c5028e966fb7790c0116122ebc6c41297077f936fc8cbcbc1d9406b5e06e5dd559cb0398623c28cb490d64c03b90f827d57f36de2bd6c2290c74c3adff088e4b006f966da5f0071284d5219155f9cfb91c704d66167192bef8874d4f4c1a6f3364b9524f74376576bea7ff3d9c20dd8f1c9d3efc26e4b9ebce14ce7dd835b0a2196070c16f6df18e77419af03c2f0434fa85e2fc330be6acc1d14b72b28eb3d5bc090e47ef9c5afc5a024157e09170afac08cdf3567d512c682bcbaca3123675c7f3bd8ef50344686b59d680c9fd6245894d089059f142c67964703406473e14ec3c2a0420c049d428bb15316fc40edeb4510d8030c28baa1fb48c912c371b84b702bd9d8b9f52f86675968a7c95302369129b0c7f170398d30c8244034b4fa7b805fe8911cc5d25939c555cc9bb63abe1bb6bbc55cd7eb4279ce7e54a5ca9ddbd0e60454228cb093f6130b96df5a4eb95fb886325cd9a775683278cc60465ce885990f8218f84ec38fea7aaf4bc4c58d40c94da01d18bf78b93faf985b41403fe426494c80bbffadd3e011ead29765ea8886235acdd6438db385cf7a928387c80edb6f87e9670b9bbeeb248e67f13f7f0f6bc607d9ebf247d1aff076ae0dd397e9f3f1b2983da8e3e6fe11045605f0822104733d72eec2476ab16d4da1db557f58e491ed572c981962ca4d0a5a44427e54608c64156c7052bc9b2617fa3cce8a231f1399b36e6467d2608e1450ab3c515d7695b82f565cf18978db54aeb77edaf9e1edbdcb0928c46151ce09790557a15410543565e9c9b2d61cc731868d3489b84c0fa9d6cb7f4a1b9f7f19ed6633ba732a736dc554de4413ea8d3151d6d6aee2492f71a9eda9b8e68b1e4f9072dd64681908d85de4ca2813fb488195192a623d8a4f717299dd505ef5436897ddce98335208f6b8a35cb6fa1ec01263c7577ce3ff60726b3f0e80efdc9b1f179e155edce53cd6a11546940083dfe6355b377b042463197e3147ecb7c579b28486ffad6bd9c6500e26fa9a20decba46f603786893d1b7a1c8bc6465109c5204df51b0dcd88b7c29bc1e8a52e29f575e587a0130f48df7629b5322076d2193f2f05278f06f2547b7ed624f7249d3abf37b7f7bb9d3655e5ec65dd129ee1756b2ac31003ab72e77cd1f770cf1b74a2228d5a542b73f452504a032c45643923b3727478799a904f0bd2817d6a92d4b2329ba5a1b3e64cf33d52f4eb459d8c825694641d77d8a31120f1e36ada810acb52f48afe6db440ba25ae303e03ed79b7d437cfd74628e94fac596dec472ecd59f92335b9af8e37a62b83694742d9f5b59f6cb280b7356a21bd5c02b466b36898fb656476aae7ec7755deefd8c68e8b331bbafae8783451d480223daa012c675dd503c4c6d3c3b516471bfdd4de7a42b9ae3bd54ab00cac87e940501979cc108457a3d5bd29e92d009139975d978052a85d6724f6af8ed540b9522c0d13c06758b73d029d117308b4ecb917ba1be5359180b5283a28c01063d8c4bebd37c3fc2f1746703268f84d504ea96a00d389587efc76dfd8b89bf05877ccca55e8e09a411de040feab98be3a027a46f94fcb10f902edc8070f3a7c051293aff664be78d1310e033f1769b660dc3a2aa7cc3c5f1444584c3c427e1886200f77e31410a4ab4e617c598f8228932677c8a807d69dd7375f66f02cca01a56b8061ad5b3d67370776435162f054ebcb9af5cbaaf1d1a8297e42d8dec3f0b4c54a9907fcb1c71cc834d56d160283d3471a0f9df8f67fcff5a2c26cfa25ccbbceea68b4ceed3a551d6593422eaf6d2ef3185ee0f956572f9be5c9248a0f1603a1a6703b6e2b5048dda8aea00ac3e1eeceeaaa18c4d93a29dd3e2ca008eb3958b313a3a1daeab0ea00f0ecaeb355eb8a80649af50e41892c7d1c518dffe1a01ffc00820f3efd7ece647416e2e7f17b66823d0eeacccaf9c9702317c0059ded29a8d89f3e1ddcf5c020bad58394359061e18860c2854633e3fbf42e16da9a513332d3aae9b340ee81a1aebc77a036d078c0233bbd575d44682db2d9f5f42fd13475b7e5233adc88d062ed011ad679bd4ef8507ba74ae7bfbdcb6b83cb3a160185ddaf05d04cb5cd24acb46ca09d2f7e166305889cf57679ab44980c1b960f52302ca50646bcb64068f32b6c71fb31cbf83f3821bb9ec492d9c1cff64a7798d12a8af5dcb5a461ef5285006c741c66767bd2918f46b9f95e7bf3d89116e46ca862110c94ab352c370f2da1f4f063be017074b0e8721c2da45f25d63b9cbb6fedc4dad07e14b12ed5e0d042c98b672cf24149936e299f8195cc35897ac661bd4224c8ae3a12ab3413a0f672b029330e52d9d2b082bb23537e867558f50e53b4a96936a035a89681754b2a7c36870f27fa9fdcace48e631bbfdaf871776503a09f48358a79249de19e62586eb1758ea259d3aebca134fe4bd59bbe3ae40055527edfd2a846d065c3b8e0cbde9aab24e076edb00856c21cabca018cf8e0af2ea5a59e25dae8acbdaa11c80cc0e19badbea278a7e55d0e2d5a9d87b85a1b893c0cd73778a0d58ce8f5fb9a400521694adc749cb580c177b7760a18c0d7d93b381d2b4bb66ba98c08710616a0c945a729683fef8c10aa8da1a4fc2cb1f00eef263069c06add65a76f5682b1c4b9286a4c289ed0ed29c1776b185e61d69977538a8d20a3e7b9cedc44ffca7374d439858a53ac111f62b70efbe55df0ef2312c9147c6705ed86626d95d43d7f7761f7b8543f3f29cdc19543fa2fadf2678c0a2678bf37e6906ebc138be1ea245f1f645f567f172185446545ef97ab0e85603eb7137bdbf2bc4dfabf11f41bf64693ce8845e5c46058436adc2699b7b4e4e9f575358623b9c16ae21a12fb2d7ba0396090e5ff1e65b151983ff9f2124f8ae6b6d5bb7ef318209d1887eab63b0074c974f1f2f94bcf97e4582064a8b3c705d3d05b7f4c52524bbb510e2d749aa6cd2d78766ab6239e513f08aef2721c5aaebce4dbb67b985c9492676743f21dff481e620a10e228a9089c99047bf2204481caf39ff31d4319d6b9ef65e94a6ae372330d93ca00f90345770078c5936bce4c05fb1de232b5bd1da41dfc3b22f48b92e423867715fcdbc6c6088e9b4a335355b30eb31841f41a0a4bd64662c0007e35310761537af0717a0e884b9521be2fbdd9d5c60c9893dfcfcf57108a0348a181459971c56645beb34ef91e12807a914f4b92123cef5efb009dec015d9be4d2211b71049d2015f056a5e95535c2c615ed279e6431854753e03a76361198546abe3c5c35880552a1c4c1c206d3b041f93b58c9da5461d91e67dec4bde42d998fa5a07f054bf63a025aa28d6da9f776279faddca71c0044496939dbb659144a291b9048829a58e44041e19084b1d189d64963a7ae06f829a159de19820a679c7059b3244e6c77ba089a983196dbe3632bbb4b7e45a0e55cbf6efef308f9dbba1c9781bd1476221241ddb821bfa1374fa67b91d349b6e0e657b92c7d67d51dfc080c7e2d5adbb722d133cbc3415eb121e717bc8491fe842ee83b38dacd3b6f9532f3e75f6019a8a9a34286ce42f5d7f437d4940eadee3c7c233525bc9ef2400ff1f346f3f6417c192ccc95d1d6210b8e4c6e2b41f9b3d506b65f02b965471ff725254176f4d348a6dc98557065cdcc96e9daecf37fb154081effcf80d3faffb6988d09d10fb018d22151d2baeb579bd27e799b25b48b6faffb7d4cbc9068d7632650f03ec2963a7605ab0179d5a86b63c50fc275f4018d7114dd5a797b3aecd1fe9fce559aa742b7b195a20e8e2abe3ea2542a1ea39aceda05b3fba65f0b769a204923c1e8fbd483adfe679df58b163658c97c6d73801e8eb6d4351f75a1bf2697c4edabf43bdf9"}, &(0x7f00000027c0)=0x1008) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002800)=@assoc_value={r12, 0x8}, &(0x7f0000002840)=0x8) sendmsg$xdp(r8, &(0x7f0000002d00)={&(0x7f0000002880)={0x2c, 0xc, r1, 0x27}, 0x10, &(0x7f0000002c80)=[{&(0x7f00000028c0)="93da447d925a365b5020a1c4845861378a2ec44963189c37d759ca564a44680b4e75e5e86f53fa4ff0b17839d77287", 0x2f}, {&(0x7f0000002900)="60a69167e182f645ec8e5f702bb5df8dda364758105d42f1c0dff1f13d2cf4dd408873c7e0399ea9fc2e4a15006915691e2633eed504dff647057ed8e663021379b6e0cd611f15c07fdf9643f35d69f515d3b7cd61d475998aa0c70612f906a5ff2bbc43dd442d33f5a99c4c124a841695056819e29de25cadde9401dfce7ca2df709c53f51f9020ef7cc746ec0a864b9d1472b95700b7c8ba2ec5580e3cd0dd43b50e685bc40f74e7a9822277b91ccb9fd9ffed54fefa87ae133ffa6f6635244ab7c1ab3c57306037b63b521338f79102430b590df28ef31c1669a32b16f76958955d53dbfd3d25ce5c36b16b9ef3be43af5c818a17", 0xf6}, {&(0x7f0000002a00)="b29939c71b98fb489ce2c38339c5e6b313c472a6afd6a425bd26d4e52bc2e123cf5522a47e11a97cfe36477845cd8256d7a083bd078912405141588ec2edbd44397fb57bf095acbd9026a5412a1c4f437b8feca16bbb087056804e6b0fef4dbb95201733f0567735c5ce2156317186958c2dea1c2f24b45a", 0x78}, {&(0x7f0000002a80)="2a76f6887baba39c04e6154e1c227c9a7ff2a0cf861086f45c8fe519fd6526d9a3f246ef600853d893c1b21eff4ce291a254e610732e594072695cb8c0ee99f88d9e65f9ad9396227eb77482bb5642a1f2e73a18166c5c7ad956df147cfb1b2737d41d0799399e26bf578aeeec1d3575d65bcc4d37da100891703906fef9eb86300bfe1f2c504a464b1dd00e87ff49a6c42c6c040ba72b107ebbd6b201520fc0d712281affe00920e71cb7063b84635f45a4ac6b3c617fd951375855270f596ca2c8656e46da3001ba48354d5ca369dd8f661cb8148f7de7c1ca667a952de420f531db95", 0xe4}, {&(0x7f0000002b80)="175560621baf01bd62d16254dbdb1b054ccd127d30ad7d1ddf7e98233265867d6b16100d653dce41c81dc920f2b6c5c1a306195034754f11519f5ee8e8d405e86c585ea35ed0de3388f9b9b3c5cff64b4736fdb7c7f2b71a446618ed71b13b356c3a780f5be37c32763dbad15aa34ae0a96c03cd0a882370253ed544e8f7aa6d3b4856f8bf85194f1047c8f40c84607f8b3146a328035ed68d758d24877bfc331f44614d7cbb0d61464a4080e6c9ae73c10067e870e786ed9ea4beb31b184ba19a76b4df216ac3fe4b17087360d13a331d59deaeb94947dd7151d398c981a604abef48a0b1eb8462346ae0ee33", 0xed}], 0x5}, 0x4040000) bind$bt_l2cap(r8, &(0x7f0000002d40)={0x1f, 0xd46c, @any, 0x5}, 0xe) 6m8.310603592s ago: executing program 3 (id=585): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="080004"], 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m8.306477316s ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r1, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x2000000000000000) 6m8.0690491s ago: executing program 3 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0xa8, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x12c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x40, 0x2, 0xffff92c3, {{0x60, 0x4, 0x3, 0x6, 0x180, 0x67, 0x0, 0x8, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0x81, 0x0, 0x5, [0x0, 0x6, 0x0, 0x9, 0x8, 0x9]}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x3, [0x2, 0x6]}, @timestamp_addr={0x44, 0x34, 0x8, 0x1, 0x0, [{@broadcast, 0xfffffffc}, {@loopback}, {@local}, {@multicast2, 0x1}, {@empty, 0x7ff}, {@loopback, 0x1}]}, @cipso={0x86, 0x44, 0x3, [{0x1, 0x12, "b4a417adcd70103c02c41f6c79f0a8cb"}, {0x7, 0x8, "4f32983616a1"}, {0x6, 0x3, "ee"}, {0x1, 0xe, "a90aa4c0b1cde0edf351020c"}, {0x1, 0x9, "fc40a11af57958"}, {0x2, 0xa, "b6e83c4ef03a08ef"}]}, @timestamp_prespec={0x44, 0x2c, 0xf3, 0x3, 0x1, [{@loopback, 0x6}, {@empty, 0x12}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x10}, {@remote}]}, @ssrr={0x89, 0x17, 0x61, [@private=0xa010102, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xfe, [@dev={0xac, 0x14, 0x14, 0x17}, @loopback, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0xfe, 0x0, 0x1, [0x7, 0x3]}, @timestamp_addr={0x44, 0x3c, 0xc1, 0x1, 0x8, [{@empty, 0x8}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010100, 0x9}, {@loopback, 0x6}, {@remote, 0xd47}, {@empty, 0x101}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x342}]}, @timestamp_addr={0x44, 0x2c, 0x7b, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0xe9}, {@broadcast, 0x8}, {@local}]}]}}}}}) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x6, 0xf9, 0x6, 0x800, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x700, 0x7800, 0x40, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r9, &(0x7f0000000480)='?', 0x590, 0x0, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x1ec, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2f3caafb3ca14d93}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x181) 6m7.620835073s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x5, 0x0, 0x0, {0x8}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r6, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x0, 0xa, 0xba}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x1, 0xc, 0x639}, @NL80211_MESHCONF_HT_OPMODE={0x0, 0x16, 0x14}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x5, 0x0, 0x0, {0x8}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r6, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x0, 0xa, 0xba}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x1, 0xc, 0x639}, @NL80211_MESHCONF_HT_OPMODE={0x0, 0x16, 0x14}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) 6m7.279852201s ago: executing program 3 (id=603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5m51.775607688s ago: executing program 32 (id=603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m38.937377147s ago: executing program 1 (id=2631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket(0x18, 0x0, 0x2) bind$netlink(r4, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9c44) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r5, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r5, 0x84522000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r6, 0xe93f6000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x9, 0x4) socket$tipc(0x1e, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x300, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502, 0x3, 0x0, 0xfd}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in=@multicast2, 0x0, 0x4}]}]}, 0x23c}}, 0x0) 2m37.735477743s ago: executing program 1 (id=2645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000370000009500000700000000cc3cb6e5e9752feb5fc4aabe6e03f2c842a887419c91cf4512b05bc639c060137bc38708d8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000030000000000000000000072e7d73d3cf12c9400000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r4, 0x10, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r3, 0xffffffffffffffff, 0x1d, 0x0, 0x0, @void, @value=r4, @void, @void, r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) shutdown(r5, 0x1) 2m37.502144807s ago: executing program 1 (id=2648): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 2m37.389521984s ago: executing program 1 (id=2652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000500020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 2m37.227280298s ago: executing program 1 (id=2655): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000f70000000000000a0000000400000014000100ff010000000000000000000006000001"], 0x2c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000039007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r9}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 2m36.246242016s ago: executing program 1 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x70, 0x3b, 0x0, @rand_addr=' \x01\x00', @local, {[@dstopts={0x3a, 0xc, '\x00', [@ra={0x5, 0x2, 0x1ff}, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x37, 0x48, "d0f17c0fb8df811d03e53803d344fd02ae464442899c10dd03684ea44b5095479b6a2ca91acfbbbb0b25e7e76c524ee79a0a618e56459353ed83436f8432b45d2315ce40eecb184f"}]}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8000a26}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/83, 0x53}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x20, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xe8, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x7522baf14b90fe}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000500)=""/171, 0x40f00, 0x28, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x2, 0x8, 0xfffffffc, 0x9334}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[r7, r8], &(0x7f0000000b40)=[{0x3, 0x1, 0x7, 0x7}, {0x4, 0x3, 0x8, 0x4}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x2, 0xc, 0x8}, {0x5, 0x2, 0x1, 0x4}, {0x2, 0x5, 0xd, 0x3}], 0x10, 0x2dd4, @void, @value}, 0x94) 2m22.58702311s ago: executing program 0 (id=2844): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, r4}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@phonet={0x23, 0x24, 0x3, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="999d51070b9b64a90ba05b088276ea83c00d272b38e9092a67975f96aec838d76aa9", 0x22}], 0x1, &(0x7f0000000380)=[{0x100, 0x112, 0x9, "48a5c98d89385e923299b6bce347d1e5d5c108ceb05b4997a812087c17e78b44ab9f6dec250934b4e7e48ae271c3defd07d8f44051110ef995e4729d5afbb2f27994b266fe562b867e5f3150b8b15f087f04b26b31aa0dc6759af2b9a426f4f9c1aa6511623d6f2267b0d6bf6831314b17e1c8d20e2d001fd34a29c3672f1ccc6da58d818f2b4ca131c3fad11471f873c96f184a8647982fe27df9749af9ede78cfd5f66526a4832443633c89e27ed37fa1a8d380840770e08f8fd22646c6f53a8f3bbfbacbbadc7fe8c1d75d38655310eb01761260db4441c807fbfdd8545243febb14d597c82ee5b8e3d9da4"}, {0xe8, 0x10b, 0x7, "764fa0c656a493a4675d5e707e51a2f0542a73e72752c4a1414ccc0280cd8e84bb08be608a76d0cebcd01abde371e3e79ee89eea87a6c4d8f6266675ac495439458003b5ca78fe7d20b1451d289b5cd0027c3118d4a8bdd64266328f1b2b1043cf61814bbc5b143e1de28daff52e6303dc07b9cb1e1c2465333391a4a60391739940decb604d8b9dc83a019379f0847543aee6b06a5dc844cff79df73d7921caee20ce0e3835be780998c08b4e2ce564725786d107479462b971fa7ffdcdde3cdbf6b242a507679ddb71af051888415fcbe0d6063013"}, {0x48, 0x114, 0x7fff, "4f99510a70eed8afc1ef2db6961d7f87b7adbf29ee4dc257ec84ce23da3261b0cf050fa6ed03b71c5612c310207c645248"}, {0x10, 0x113, 0x2}, {0x58, 0x1, 0x1, "8d579d7cf5cd79b0bf6cb8c53edbf3608bf1556e6cc5ef0c4890aa89f9f2091daf5bb6348ea0e5335d64ad18624b784137548a5b544895d4f3e3b1c5cf596620ab1ee72fbf18548a"}, {0xe8, 0x91, 0xfff, "a07dc9b038465b7dcbc03c232b88a5a12e41e58aff7e0b2721830a6610babd63a903f594a4a7484e521ec6e994c6f70d4a2cbdf93aacda0d4a3f752d3c8d2364d70be13b3d01a48ccd71abd739b3b5bd3a811345886132160a9a6e60309f1d1b587d4ee37fa4da112c20adc302e4b747c80b75744ec5fffd802c47b816d5dac0b753d6386c0c7798e497a4369325fdd2a98f1b03882e855d506af1cb6c7370ce7f9961fd06757cec71e60736ff7a9b08b5dd1cda2ef5dced37841c603885cbdc07bcc54172fba41ee8279eaffe62e0ceef23"}, {0xb8, 0x109, 0x200, "94b2fbdaa5ea86291e5698ec211d0862f7ebe9b08da7d846aa34c8a2b4ffd2e9cb2e9ccecd443815e34ad997dca7de9e8f76484dc71de97ec65e3295393ba04c3aeabe57dd425b02fb3d40f52cc73c5221f0f3c52f06d77408c9990e7ada28b2a985bd405a21fd17b493d8695c99926fc1b5087d0f73aed64282572dbf367502eeb650b37298bbcb0f19c674f836a4ff96ba1396f66fad6dc5a82065556b3c0b7c78d317375bd9c1"}, {0xc8, 0x10d, 0x401, "20b575480229db899f0bd46e96add7c1175d63530f5b63817ec47be23e6c8c36cc63a654a7cc85c3f07725d7295cf7e293b2f7ad7c949af6ad0badfbdcb760d5e09f74d3ac7324f7cd8bb2b67e36e0b334c6981ffcf591d46b26a7f76c33673d335268e67d908948966aaa5fff73e0b72a3d6645fe7073a395148ac33e399a61beda8cc8c06d44cca0fa563955c405e932fb7b4d2bdec17e0e7b73f5d7963e06edb2353eb3c00c995b4c735b3a50b00c19b9a84ddc"}, {0xa0, 0x107, 0x1, "d21ca906c4c9bb6f0402a3426133d22d47b909530d439451ebbf1aa31df8363e7216c6f3319cd0da08f1626340be092a9b16f5bc17c7e64eea323419c6a591107208b4ce68c544b4b0693e331ee021f05db619d4d09b8661d8bf892cd12fea069fbe966919f6d1e1ae6398fe96e9da1a4b088066d3ed3386f25cdc1ff1676d57e278f7abfcc0e2aec4e087bb930a370e"}], 0x5a0}}], 0x1, 0x4000000) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendmmsg$inet6(r5, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x4004000) 2m22.472914233s ago: executing program 0 (id=2847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="01000000a7cf"], 0x80}, 0x2, 0x0, 0x0, 0x10000800}, 0x4000087) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003003e80060000000040c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) bind$unix(r4, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2m22.042332784s ago: executing program 0 (id=2853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 2m21.64015402s ago: executing program 0 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) 2m21.422328089s ago: executing program 0 (id=2857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000018000000000000005000000851000000500000085000000bb000000a70000000000000018814d363300000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20008800) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000080), 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4, 0x10}}]}, 0x30}}, 0x0) 2m21.157765084s ago: executing program 0 (id=2860): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x27}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r5, 0x0, 0x3}, 0x18) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000380)=@caif=@dbg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000240)=""/45, 0x2d}], 0x6, &(0x7f00000006c0)=""/20, 0x14}, 0x3}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000900)=""/239, 0xef}, {&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000a80)=""/160, 0xa0}, {&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001c40)=""/223, 0xdf}, {&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/184, 0xb8}], 0x9, &(0x7f0000001fc0)=""/20, 0x14}, 0x9}, {{&(0x7f0000002000)=@in6, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/206, 0xce}], 0x1}, 0x401}], 0x3, 0x12003, &(0x7f00000022c0)={r6, r7+60000000}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m21.134515951s ago: executing program 33 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x70, 0x3b, 0x0, @rand_addr=' \x01\x00', @local, {[@dstopts={0x3a, 0xc, '\x00', [@ra={0x5, 0x2, 0x1ff}, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x37, 0x48, "d0f17c0fb8df811d03e53803d344fd02ae464442899c10dd03684ea44b5095479b6a2ca91acfbbbb0b25e7e76c524ee79a0a618e56459353ed83436f8432b45d2315ce40eecb184f"}]}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8000a26}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/83, 0x53}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x20, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xe8, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x7522baf14b90fe}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000500)=""/171, 0x40f00, 0x28, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x2, 0x8, 0xfffffffc, 0x9334}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[r7, r8], &(0x7f0000000b40)=[{0x3, 0x1, 0x7, 0x7}, {0x4, 0x3, 0x8, 0x4}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x2, 0xc, 0x8}, {0x5, 0x2, 0x1, 0x4}, {0x2, 0x5, 0xd, 0x3}], 0x10, 0x2dd4, @void, @value}, 0x94) 2m6.150292375s ago: executing program 34 (id=2860): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x27}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r5, 0x0, 0x3}, 0x18) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000380)=@caif=@dbg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000240)=""/45, 0x2d}], 0x6, &(0x7f00000006c0)=""/20, 0x14}, 0x3}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000900)=""/239, 0xef}, {&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000a80)=""/160, 0xa0}, {&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001c40)=""/223, 0xdf}, {&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/184, 0xb8}], 0x9, &(0x7f0000001fc0)=""/20, 0x14}, 0x9}, {{&(0x7f0000002000)=@in6, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/206, 0xce}], 0x1}, 0x401}], 0x3, 0x12003, &(0x7f00000022c0)={r6, r7+60000000}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m44.617517004s ago: executing program 2 (id=3174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 1m43.53631839s ago: executing program 2 (id=3188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x9f6, 0x7, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="a9bd750832cfc86604c99fd8b4e214b235dd9abc5ce56e1cf289f221ab1c001584ffa59981c51be4b9c50725a0726f53cbd67b78e0d375f7223bf0ba93ea0a82baf091ff898544ea59cf7f903c60e9c8c2c9edeb15ce6e2f8ff9af4f41436524a623911114da605f4d5710f9523e479403b46c962eaf2e7534ed7c7a0f979fb589e295535c2d54e6249cb04d04b1f67c21221b187893f97a079219d52b244a90718198bf476ba40f16a487e896b7b32ea642dd58ac430097b13da9224d2b9d86ce4ffa172d5cea935c0f0ccb"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m43.242297634s ago: executing program 2 (id=3193): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async) 1m43.000097715s ago: executing program 2 (id=3198): r0 = socket$inet(0x2, 0x2000000000003, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) 1m42.217426436s ago: executing program 2 (id=3208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r2, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m42.039891606s ago: executing program 2 (id=3212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000240)}, &(0x7f0000000300)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m26.950324934s ago: executing program 35 (id=3212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000240)}, &(0x7f0000000300)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m24.394536013s ago: executing program 6 (id=3477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)={r3, 0xff, 0x6, "d990ecf76405"}, 0xe) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r3, 0x10}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m24.22358903s ago: executing program 6 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) 1m23.90570093s ago: executing program 6 (id=3485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1m23.706514959s ago: executing program 6 (id=3487): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) (rerun: 64) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x126, 0x8, 0x1, 0x100, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m23.237946191s ago: executing program 6 (id=3493): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000c00)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7b9c}, @device_b, @broadcast, @from_mac=@broadcast, {0xb, 0xf29}}, 0x2480, 0x5f, @default, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x83, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0xa26, 0xff}}}, 0x3a) accept4(r3, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) 1m22.51680573s ago: executing program 6 (id=3504): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m7.301643547s ago: executing program 36 (id=3504): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.474177598s ago: executing program 5 (id=4152): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003}, 0x10) write(r0, &(0x7f00000000c0)="2400000012005fe914f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250700bd5af160b41e96047374656d5f753a6f626a6563745f723a64e71baa93a9e4d2fe6f6c5f6465766963655f743a7330000000050001000100000008000400ffffffff98600200fe8800000000000000000000000001011400060076657468305f746f5f7465616d000000140c0300fc00"/138], 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004010) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000280)={0x6, 'veth1_to_batadv\x00', {0x6c33}, 0xc19}) 2.236770965s ago: executing program 5 (id=4156): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "c653eb788ca744ab49b0bc8b7c38c5386a9f8fc329b0c08aa1974b55df51358e", "becc2b963fc758b093f0c3162721cc2c6db0e11fe93cb921e31b7afc9848f9f8", "9d5e255e876cef6a5e8b322ceb9f9f59f92f7b7e5f4cb64b0dba0d27e79083f6", "f1c9a32e2ff71a89cd1b6471db6af48500491adb8c4b1c0a8fdf46f4f3168fee", "6a5ac82f1f76e71cf5cc5d665c6006929a314c0c4e1c2a4c43afe8074197b481", "11f18e6d4f5d4f4e717b780f", 0x200, 0xc, 0x8, 0x9, 0xd1ba}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) (async) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) 1.959255189s ago: executing program 8 (id=4158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.958576551s ago: executing program 4 (id=4159): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x0, 0x1, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x804) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2ec15575afe867fdba546430ca1a47eb15c48f98e1e25b4e1b179f8897fc1fbbfc164b92054405964c6c9d2f2ca1430c84c3ceb4810d0311a5c28fa9c1eb7511923f6ae58949e6b92e94d667097384d0a22e25eb0a373d318f0a", 0x5a}, {&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23453dbfacd515ac06ddfbc2118d3b887ef740f6ea6a1e81d4642d3f", 0xdb}, {&(0x7f0000002380)="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", 0xecb}], 0x3}}], 0x1, 0x880) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000180000000000000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000401100147f3d0d6d010014217c660348114e368cec82f940665a32e8442da003e50776a5e64ae40b5fb4ae0719f3fbb10f108ec34e5fdd46030bd0c6326145fd55f097c85122"], 0x64}}, 0x0) 1.793019192s ago: executing program 5 (id=4162): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000100fdffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060010007600000074321229f2cd11a4955f93c2583442a083f0ca156bb887d3afb048f3de5e742f40305e9303de12b26e1fb72af42f26ecb46c49b0f2be21075f29c7a39b0f4834fe543d240b43a1f90c4e3a10346475beb68cf492c303d21cae23723f92bcf1170a05e282e9663e17491f748e273e0a65c2be12536c1db7bba0ca4a2634bbdb7500"/163], 0x30}, 0x1, 0x0, 0x0, 0x8844}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r4, 0x10e, 0x8, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005640), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000005740)={0x0, 0x0, &(0x7f0000005700)={&(0x7f00000056c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf899600000008000300", @ANYRES32=r7, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x4044842}, 0x80) 1.750837422s ago: executing program 4 (id=4163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810028bd550a000000000000000008000300b6baae826d1af12978bf915582ca1d967fc8b81ce7f56892e4aa7f39c5f8d04e3063074169b25c5fd1da0e6a375dff89c3a118926700b5664193d7a8c1426f8f43a6b5ee93de8b3e7186825bf5d1f2462917d829a93f997dabf5f7902e493e498b3b04d4f3b7555e3a59d85b1bb6af8b547e0000691646f7af3b", @ANYRES32=r5, @ANYRES64=r4], 0x28}, 0x1, 0x0, 0x0, 0x10000080}, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x20}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) read(r0, &(0x7f0000000540)=""/5, 0x5) 1.654193286s ago: executing program 8 (id=4164): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 1.641797721s ago: executing program 9 (id=4165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (fail_nth: 2) 1.606001554s ago: executing program 8 (id=4166): r0 = socket(0x2, 0x80805, 0xffff0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/101, 0x65}, {&(0x7f0000000300)=""/37, 0x25}], 0x9}, 0x146) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x68, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x24004000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041004}, 0x80) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000006c0)={'pim6reg1\x00', {0x2, 0x4e24, @broadcast}}) 1.490171217s ago: executing program 5 (id=4167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x3, [@var={0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {0x2}, {0x0, 0x4}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}, {0x0, [0x0]}}, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) read(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0xfffffffffffffffd, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r5}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f00000029c0)}, 0x40) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@gettaction={0x1d4, 0x32, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x969d}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6352}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc16}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2180}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7996}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x469}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x1d4}}, 0x0) 1.458812319s ago: executing program 8 (id=4168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0), 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x6, 0x2, 0x3ff, 0xdcfb}, 0x14) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000343a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c94400002b000000000000000000fe8000000000000000000000000000bbd4a3fb00a4eabd2328e91b4263dcc6e90c16c35a91c94ad02be9b5a5726f8e6f32c37feb1e60c59ff6f29e11438758cb93d5dc53caf8d2d331d2a4908930e76ffe1f5e2102ab32d10000000000000000"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xc, 0x3}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4000000) 1.047353814s ago: executing program 9 (id=4171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000002090006006c797a310000000008400b00736970000800094000000003180003801400018008000100e0000002bcc6bff5ae676651e700000000000000040100060007408b6873cd5f2bdefa"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240011030000000000000000010000000400ae80"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000380)={0x0, 'gre0\x00', {0x2}, 0x40}) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000200406fd0100"/20], 0x14}}, 0x0) 958.930707ms ago: executing program 8 (id=4172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="36a247c5838673c3bb10ba8bcb4cd4da1dac2147ee668a4a65549d8f63a3f2dd497e450391f0394c176d662d10df0a71be75bbf145cf802c7fa35b048c8270d7978e9bc39f728b8796", @ANYRES16=r1, @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0xc, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xc}]}]}]}]}, 0x28}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="880000005fd51a62a7c78772bc5840aa1000010400e620008e38cf098180962e83559776", @ANYRES32=r9, @ANYBLOB="7b13000000000000600012800b00010067656e65766500005000028005000a0000000000050004000300000005000d00020000000400060005000c00010000000800010002000000050008000000000008000100000000000800020000000000050008000000000008001f0006000000"], 0x88}}, 0x4000800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54e0ca80f5d08b83e8d1ee811ed0b700000010081fff00"/34, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574617000000042fe0280140006002001000000000000000000000000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000640)=ANY=[@ANYBLOB="9f000000001c0000001c00000007c0ec8e23fd4e57e95088a2bcbca1a3000000030000000000000802000000050200000000000e05000000000000000000005f614f0000000000000000"], 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 850.220099ms ago: executing program 7 (id=4173): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) 849.974056ms ago: executing program 4 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000005000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000003d75fcff736d36554d360000fcffffffbf91000000000000b70200000200000085000000819fd048b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 800.277863ms ago: executing program 9 (id=4175): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 785.229034ms ago: executing program 5 (id=4176): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c040}, 0x8004) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r6, 0x8941, 0x0) 674.207737ms ago: executing program 7 (id=4177): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071117b000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 660.583001ms ago: executing program 9 (id=4178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) 561.443084ms ago: executing program 4 (id=4179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0000000000000000000b001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 486.197939ms ago: executing program 5 (id=4180): socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 484.540666ms ago: executing program 7 (id=4181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (fail_nth: 3) 367.318982ms ago: executing program 4 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x400, 0xffffffff, 0x138, 0x228, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}}]}, @REJECT={0x28}}, {{@ipv6={@dev, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) sendmsg$key(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001d80)={0x2, 0x0, 0xf8, 0x0, 0x54, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1a, 0x18, 0x5, 0x81, 0xc3, "63e16bd9b18f80ace25d845ce53df76a1115fe1926f215ea44156dd15d4b62e81e57774c04c11064578b88b26e174e6e5dc1e402705c7bdeb85af40e0f7410bfbdbcdc3b1540fe17ff4a49de060c639d2739f5c6b3c3ce0e0f83580f41022d74cfb14b8f763bada3f691fc30bdaa2845fb3fd39510efc651f33b282fab0b10a2d9c609148ae25d33b80870cb99b8675c2914f24397fe9278f0056247eb40bca9905e510f06a07ac9d7e8c1a9db0cd76a814c22f7d4bc07d7b5d6af9cd45ca7e0e43f23"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bbe, 0x80000000, {0x6, 0x32, 0x3, 0x81, 0x0, 0x80000000, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_ident={0x2, 0xb, 0x7ff, 0x0, 0x8000}, @sadb_key={0x1c, 0x8, 0x6c0, 0x0, "f2fe9b41e97634682e55963b2fd86a94306004277d1faa44ed5932bea9a198e069f8f4ca8716362bf90bc030c0b47e1f268d8cbe834e801eb7cec6fe54739ba35799ec82593c5a3d6e8fea2b0c894a48de7cc39893e75f59d75995a712ef20637c4f983f4120dcbf357314c5ae1a52dc734a54dca0889322403e00549bacf3e1a9d238f1bea660f5f0cf5b2abc3bb3036486a0df29361db5e1cdc3e818bac635b6477564b63bcb71d9ce08a6c7477db266aa69d9132b9bc32962ecee4c2ec8c9ddfeb68b84a9afe83c9a301cd87e3a3a26b4e106979de97e"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_key={0x8, 0x8, 0x1b0, 0x0, "f0d1fb05cebad14d2eeca6e490a3b14d6fa1af28c32fe979c415a6756adc86305163ce943ab9769555841fffcfb9c8140e4488c8758f"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_address={0x3, 0x2, 0xd7, 0x80, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x14, 0xbd, 0x4, 0x1}]}, 0x2a0}}, 0xc0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000bc0)=""/4112, 0x1010}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}}], 0x1, 0x2100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160002000000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000ac1414aa000000000000000000000000000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a41ca83aac0c0000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000003210000008001e00000000002c0013007f000001000000000000000000000000000000000000000000000000000000010000"], 0x12c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000001c00)={0x14c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x5}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0xa4, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x80]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) 274.189842ms ago: executing program 7 (id=4183): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}]}, 0x48}}, 0x8c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 222.364075ms ago: executing program 9 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) r4 = openat$cgroup_procs(r1, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) r5 = accept(r0, 0x0, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/104, 0x68, 0x0, &(0x7f0000000380)=""/206, 0xce}, &(0x7f0000000200)=0x40) pread64(r4, &(0x7f0000000040)=""/75, 0x4b, 0x3) sendfile(r2, r2, 0x0, 0x401) sendfile(r4, r4, 0x0, 0x5) 151.345407ms ago: executing program 7 (id=4185): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 120.957985ms ago: executing program 4 (id=4186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x3, [@var={0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {0x2}, {0x0, 0x4}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}, {0x0, [0x0]}}, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) read(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0xfffffffffffffffd, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r5}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f00000029c0)}, 0x40) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@gettaction={0x1d4, 0x32, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x969d}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6352}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc16}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2180}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7996}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x469}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x1d4}}, 0x0) 22.395541ms ago: executing program 9 (id=4187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) 8.641667ms ago: executing program 7 (id=4188): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xf, 0x3, 0x9, 0x7fffffff, 0x3, 0xa0, 0x40004}, 0x1c) 0s ago: executing program 8 (id=4189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000005}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000040}, 0x24008090) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40600}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)=0x0) sendmsg$nl_generic(r5, &(0x7f00000016c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000000580)={0x10e4, 0x40, 0x100, 0x70bd2c, 0x25dfdbfc, {0x3}, [@typed={0x8, 0x11c, 0x0, 0x0, @pid=r6}, @typed={0x4, 0x24}, @typed={0x4, 0x11d}, @typed={0x8, 0x43, 0x0, 0x0, @u32=0x9}, @generic="89b97b7f7206a982c5ed938cdc45ceb199d66ca94a85f93ed26def33f44930d514793c06431146c58f7d1e", @generic="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", @generic="02f23d1521ac379e6fbf56ca5be4059dd26572e94ca560c5a5ba5a990228ba9228043ce0cfc55c049c669045cb416a3c1502bbecb57e0cb5aaa5908a5ac2c111a0dab2220a4dd969a873841394285de52c0224b32e85cd6d7775dad33ae85f2bc91777cfa18029b6f3a4015e7e05593373d7ceff4da2989eb5ea3cb62be1", @typed={0xc, 0x134, 0x0, 0x0, @u64=0x1}]}, 0x10e4}, 0x1, 0x0, 0x0, 0xc0040d0}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r5) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xd4, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe74}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbd7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8020}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001940), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r9, 0x104, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000810) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001dc0)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000001e00)={'pim6reg1\x00'}) r11 = accept4(r5, 0x0, &(0x7f0000001e80), 0x80800) sendmsg$nl_generic(r5, &(0x7f0000002080)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002040)={&(0x7f0000001ec0)={0x144, 0x2c, 0x200, 0x70bd29, 0x25dfdbff, {0x12}, [@nested={0x130, 0x2, 0x0, 0x1, [@nested={0x4, 0x69}, @typed={0x8, 0x108, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0xd5}, @generic="08b25364716b617aefb48d7fc1ca4a33faa8f1ea80af5d231bedcd5c7195944943a19018394f16e277572aeb24f54aa23632b5aa669a34f2ff44906a5a1d69b2f82bfa3afa4f9da48d929ec532c8a4f1a388596e85fa54076843f8799204bf1dbb233cdc5a5f6c270e6931cb998fc342fb98e97a6e927fe0c2b2dcfc4afbe941862063b1eefd4ca77d0c0c5e7bae033f5e9995e868a53ad2fd221f8da19218b42dbb47dbbff290b027936658363a08c90eea4058b6a2de7e04146d7fce5b7ceeb4f43ca46344e3eb7d1a5455ce09a76817b14a57f08ee44d39586ef1a3c7207b427ced64586ff8b1dd320dda1a9acb4608c9ceac", @typed={0x8, 0xe0, 0x0, 0x0, @u32=0x80000001}, @nested={0x4, 0x140}, @typed={0x8, 0xfa, 0x0, 0x0, @fd=r11}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002100), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x3c, r12, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48d4) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x82080010}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r13, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041010}, 0x0) kernel console output (not intermixed with test programs): lid length. [ 349.541064][T13833] openvswitch: netlink: EtherType 0 is less than min 600 [ 349.845492][T13818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.185420][T13861] netlink: 'syz.5.2611': attribute type 1 has an invalid length. [ 351.162876][T13911] __nla_validate_parse: 14 callbacks suppressed [ 351.162898][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2624'. [ 351.255297][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2624'. [ 351.261571][T13917] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2627'. [ 351.321102][T13911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2624'. [ 351.339803][T13917] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2627'. [ 351.393534][T13917] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2627'. [ 351.694913][T13925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.804035][T13936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2633'. [ 352.020068][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'. [ 352.049956][T13944] nbd: nbd0 already in use [ 352.062403][T13945] openvswitch: netlink: IP tunnel TTL not specified. [ 352.436141][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'. [ 352.464721][T13960] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2640'. [ 352.879356][T13974] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 353.419499][T13993] xt_CT: No such helper "pptp" [ 354.367479][T14039] xt_CT: No such helper "pptp" [ 354.868914][T14073] nbd: nbd0 already in use [ 354.931375][T14075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.939272][ T6380] tipc: Subscription rejected, illegal request [ 355.122551][T14079] netlink: 'syz.5.2680': attribute type 29 has an invalid length. [ 355.571116][T14084] xt_CT: No such helper "pptp" [ 356.082855][T14128] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 356.246553][T14142] __nla_validate_parse: 12 callbacks suppressed [ 356.246576][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2702'. [ 356.540633][T14157] bridge3: entered promiscuous mode [ 356.551623][T14157] bridge3: entered allmulticast mode [ 356.603367][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 356.626783][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 356.640707][T14162] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2710'. [ 356.646363][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 357.444085][T14197] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2721'. [ 357.729438][T14210] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 357.762416][T14210] team0: Device veth0_macvtap failed to register rx_handler [ 357.878004][T14219] netlink: 'syz.0.2728': attribute type 21 has an invalid length. [ 357.887149][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 358.077756][T14226] syzkaller0: entered promiscuous mode [ 358.083313][T14226] syzkaller0: entered allmulticast mode [ 358.084347][T14227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 358.091572][T14226] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 358.141277][T14227] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.305616][T14235] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2734'. [ 358.420504][T14239] unknown channel width for channel at 909000KHz? [ 358.428136][T14239] unknown channel width for channel at 909000KHz? [ 358.435178][T14239] unknown channel width for channel at 909000KHz? [ 358.443716][T14239] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 358.450539][T14239] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 358.483143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b777400: rx timeout, send abort [ 358.586260][T14241] xt_CT: No such helper "pptp" [ 358.744327][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 358.832297][T14253] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.923608][T14259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2742'. [ 358.991575][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b777400: abort rx timeout. Force session deactivation [ 359.480233][T14280] xt_CT: No such helper "pptp" [ 359.843683][T14298] netlink: 'syz.5.2757': attribute type 10 has an invalid length. [ 359.902026][T14298] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.224935][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.234334][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.258661][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.276035][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.290120][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.991259][T14313] veth1_macvtap: left promiscuous mode [ 360.996983][T14313] macsec0: entered allmulticast mode [ 361.036943][T14318] veth1_macvtap: entered promiscuous mode [ 361.042759][T14318] veth1_macvtap: entered allmulticast mode [ 361.068260][T14318] macsec0: left allmulticast mode [ 361.073474][T14318] veth1_macvtap: left allmulticast mode [ 361.195595][T14324] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 361.243247][T14299] chnl_net:caif_netlink_parms(): no params data found [ 361.323178][T14327] openvswitch: netlink: EtherType 0 is less than min 600 [ 361.327722][T14328] __nla_validate_parse: 3 callbacks suppressed [ 361.327739][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2764'. [ 361.341619][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 361.359646][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 361.576500][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.584085][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.592817][T14299] bridge_slave_0: entered allmulticast mode [ 361.601586][T14299] bridge_slave_0: entered promiscuous mode [ 361.619247][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.626927][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.634485][T14299] bridge_slave_1: entered allmulticast mode [ 361.641764][T14299] bridge_slave_1: entered promiscuous mode [ 361.702659][T14340] syzkaller0: entered promiscuous mode [ 361.708719][T14340] syzkaller0: entered allmulticast mode [ 361.724795][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.788269][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.872878][T14299] team0: Port device team_slave_0 added [ 361.893103][T14299] team0: Port device team_slave_1 added [ 361.970954][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2768'. [ 362.078780][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.110536][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.154943][T14354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2770'. [ 362.179059][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.241555][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.264077][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.324687][ T5838] Bluetooth: hci6: command tx timeout [ 362.361048][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.388732][T14361] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2772'. [ 362.420165][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2771'. [ 362.588341][T14299] hsr_slave_0: entered promiscuous mode [ 362.595840][T14299] hsr_slave_1: entered promiscuous mode [ 362.602438][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.613796][T14299] Cannot create hsr debugfs directory [ 362.654213][T14369] netlink: 'syz.2.2774': attribute type 7 has an invalid length. [ 362.800511][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2776'. [ 363.120176][T14387] netlink: 'syz.4.2781': attribute type 10 has an invalid length. [ 363.157723][T14299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.176124][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 363.189625][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 363.216739][T14387] team0: Device hsr_slave_0 failed to register rx_handler [ 363.319517][T14299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.432548][T14299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.479473][T14396] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 363.547465][T14396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.623538][T14299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.904158][T14299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.928325][T14299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.957498][T14299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.994646][T14299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.223140][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.275244][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.299140][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.306429][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.342899][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.350170][T10945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.405032][ T5838] Bluetooth: hci6: command tx timeout [ 364.795613][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.860239][T14299] veth0_vlan: entered promiscuous mode [ 364.872591][T14299] veth1_vlan: entered promiscuous mode [ 364.915607][T14299] veth0_macvtap: entered promiscuous mode [ 364.928003][T14299] veth1_macvtap: entered promiscuous mode [ 364.951732][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.968921][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.982830][T14299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.992040][T14299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.003287][T14299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.012680][T14299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.144310][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.154605][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.189720][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.206893][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.699356][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771efc00: rx timeout, send abort [ 366.048750][T14480] openvswitch: netlink: Flow key attr not present in new flow. [ 366.051474][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.199546][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771eec00: rx timeout, send abort [ 366.208176][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771efc00: abort rx timeout. Force session deactivation [ 366.362016][T14488] syzkaller0: entered promiscuous mode [ 366.373929][T14488] syzkaller0: entered allmulticast mode [ 366.478852][T14497] __nla_validate_parse: 11 callbacks suppressed [ 366.478873][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2818'. [ 366.494445][ T5838] Bluetooth: hci6: command tx timeout [ 366.547695][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 366.556930][T14492] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2817'. [ 366.608645][T14492] 8021q: VLANs not supported on tunl0 [ 366.649117][T14492] netlink: 'syz.4.2817': attribute type 1 has an invalid length. [ 366.685283][T14492] netlink: 'syz.4.2817': attribute type 1 has an invalid length. [ 366.707866][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771eec00: abort rx timeout. Force session deactivation [ 366.949211][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2821'. [ 367.040165][T14526] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 367.160861][T14532] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 367.302965][T14537] syzkaller0: entered promiscuous mode [ 367.308780][T14537] syzkaller0: entered allmulticast mode [ 367.341506][T14543] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2831'. [ 367.380138][T14546] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.400238][T14543] gretap0: entered promiscuous mode [ 367.423412][T14547] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2831'. [ 367.451531][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'. [ 367.582114][T14554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.589565][T14554] IPv6: NLM_F_CREATE should be set when creating new route [ 367.697226][T14561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2838'. [ 367.707288][T14561] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 367.717377][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 367.726918][T14561] bond0: entered allmulticast mode [ 367.732192][T14561] @ÿ: entered allmulticast mode [ 367.737635][T14561] bond_slave_1: entered allmulticast mode [ 368.247263][T14588] pim6reg: entered allmulticast mode [ 368.564203][ T5838] Bluetooth: hci6: command tx timeout [ 368.686543][T14607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.743132][T14607] batadv_slave_0: entered promiscuous mode [ 368.854742][T14608] syzkaller0: entered promiscuous mode [ 368.860276][T14608] syzkaller0: entered allmulticast mode [ 369.259242][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.271824][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.281954][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.291417][T14620] netlink: 'syz.5.2858': attribute type 4 has an invalid length. [ 369.300485][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.313367][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.558298][T10941] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.650238][T10941] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.778630][T10941] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.818188][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.827454][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.836224][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.851423][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.862202][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.937465][T10941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.981638][T14621] chnl_net:caif_netlink_parms(): no params data found [ 370.237879][T14621] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.256567][T14621] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.270381][T14643] netlink: 'syz.2.2863': attribute type 15 has an invalid length. [ 370.271098][T14621] bridge_slave_0: entered allmulticast mode [ 370.279346][T14643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2863'. [ 370.299343][T14621] bridge_slave_0: entered promiscuous mode [ 370.311295][T14621] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.318750][T14621] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.327691][T14621] bridge_slave_1: entered allmulticast mode [ 370.336764][T14621] bridge_slave_1: entered promiscuous mode [ 370.455994][T14621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.469205][T14621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.479204][T10941] bridge_slave_1: left allmulticast mode [ 370.485576][T10941] bridge_slave_1: left promiscuous mode [ 370.492665][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.516520][T10941] bridge_slave_0: left allmulticast mode [ 370.522692][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.941513][T10941] bond2 (unregistering): (slave erspan0): Releasing active interface [ 371.000196][T10941] bond5 (unregistering): (slave gretap1): Releasing active interface [ 371.020157][T10941] batman_adv: batadv0: Removing interface: gretap3 [ 371.368421][ T5841] Bluetooth: hci0: command tx timeout [ 371.458597][T10941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.469513][T10941] bond0 (unregistering): Released all slaves [ 371.580957][T10941] bond1 (unregistering): Released all slaves [ 371.701490][T10941] bond2 (unregistering): (slave veth3): Releasing active interface [ 371.711373][T10941] bond2 (unregistering): Released all slaves [ 371.725729][T10941] bond3 (unregistering): Released all slaves [ 371.853106][T10941] bond4 (unregistering): Released all slaves [ 371.870950][T10941] bond5 (unregistering): Released all slaves [ 371.887163][T10941] bond6 (unregistering): Released all slaves [ 371.927705][ T5841] Bluetooth: hci3: command tx timeout [ 372.020614][T10941] bond7 (unregistering): (slave veth5): Releasing active interface [ 372.030387][T10941] bond7 (unregistering): Released all slaves [ 372.046319][T10941] bond8 (unregistering): Released all slaves [ 372.170516][T14621] team0: Port device team_slave_0 added [ 372.270109][T14621] team0: Port device team_slave_1 added [ 372.306677][T10941] tipc: Left network mode [ 372.347687][T10941] IPVS: stopping backup sync thread 12553 ... [ 372.424020][T14621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.431035][T14621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.476305][T14621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.497603][T14634] chnl_net:caif_netlink_parms(): no params data found [ 372.527011][T14621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.534412][T14621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.560797][T14621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.677908][T14683] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 372.795401][T14621] hsr_slave_0: entered promiscuous mode [ 372.802063][T14621] hsr_slave_1: entered promiscuous mode [ 372.812991][T14621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.820716][T14621] Cannot create hsr debugfs directory [ 373.190547][T14634] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.198194][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.205640][T14634] bridge_slave_0: entered allmulticast mode [ 373.212862][T14634] bridge_slave_0: entered promiscuous mode [ 373.287115][T10941] hsr_slave_0: left promiscuous mode [ 373.299737][T10941] hsr_slave_1: left promiscuous mode [ 373.308155][T10941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.323206][T10941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.375180][T10941] veth1_macvtap: left promiscuous mode [ 373.381478][T10941] veth1_vlan: left promiscuous mode [ 373.414336][T10941] veth0_vlan: left promiscuous mode [ 373.444009][ T5841] Bluetooth: hci0: command tx timeout [ 374.010203][ T5841] Bluetooth: hci3: command tx timeout [ 374.097023][T10941] team0 (unregistering): Port device team_slave_1 removed [ 374.141728][T10941] team0 (unregistering): Port device team_slave_0 removed [ 374.482512][T14634] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.490712][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.498319][T14634] bridge_slave_1: entered allmulticast mode [ 374.512607][T14634] bridge_slave_1: entered promiscuous mode [ 374.564716][T14710] syzkaller0: entered promiscuous mode [ 374.570369][T14710] syzkaller0: entered allmulticast mode [ 374.730696][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.750091][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.878359][T14634] team0: Port device team_slave_0 added [ 374.936175][T14634] team0: Port device team_slave_1 added [ 375.029603][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.050478][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.112042][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.183259][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.211121][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.272321][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.417769][T14737] bond0: left allmulticast mode [ 375.422722][T14737] @ÿ: left allmulticast mode [ 375.427856][T14737] bond_slave_1: left allmulticast mode [ 375.445702][T14737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.525015][ T5841] Bluetooth: hci0: command tx timeout [ 375.561811][T14634] hsr_slave_0: entered promiscuous mode [ 375.576007][T14634] hsr_slave_1: entered promiscuous mode [ 375.582558][T14634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.591085][T14634] Cannot create hsr debugfs directory [ 376.044042][T14761] __nla_validate_parse: 3 callbacks suppressed [ 376.044062][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 376.097726][ T5838] Bluetooth: hci3: command tx timeout [ 376.222182][T14765] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 376.411117][T14634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.445514][T14634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.499619][T14634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.525156][T14777] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 376.547113][T14634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.633085][T14621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.648486][T14621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.656094][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2896'. [ 376.670931][T14621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.682911][T14621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.708017][T14780] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2896'. [ 376.902058][T14634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.972726][T14634] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.012172][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.019483][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.051857][T14621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.075282][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.082505][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.163307][T14621] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.210872][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.218162][T10946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.268544][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.275818][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.311853][T14634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.604236][ T5838] Bluetooth: hci0: command tx timeout [ 377.685520][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2905'. [ 377.696324][T14804] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2905'. [ 377.895261][T14812] netlink: 'syz.2.2907': attribute type 7 has an invalid length. [ 377.921262][T14810] gretap0: left promiscuous mode [ 378.165657][ T5838] Bluetooth: hci3: command tx timeout [ 378.520730][T14810] wg2: left promiscuous mode [ 378.744562][T14810] batadv_slave_0: left promiscuous mode [ 379.251789][T14810] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.260930][T14810] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.270085][T14810] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.279479][T14810] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.294601][T14810] veth3: left promiscuous mode [ 379.310153][T14810] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.319426][T14810] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.328617][T14810] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.337954][T14810] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.441780][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.470563][T14621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.209328][T14634] veth0_vlan: entered promiscuous mode [ 380.233171][T14634] veth1_vlan: entered promiscuous mode [ 380.302002][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 380.312915][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 380.323043][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 380.337249][T14634] veth0_macvtap: entered promiscuous mode [ 380.357430][T14634] veth1_macvtap: entered promiscuous mode [ 380.442442][T14621] veth0_vlan: entered promiscuous mode [ 380.453562][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.479338][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.493362][T14621] veth1_vlan: entered promiscuous mode [ 380.507720][T14634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.517665][T14634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.527818][T14634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.536757][T14634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.651758][T14621] veth0_macvtap: entered promiscuous mode [ 380.677226][T14621] veth1_macvtap: entered promiscuous mode [ 380.734196][T14621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.779249][T14621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.802791][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.807762][T14621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.820281][T14621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.820555][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.830588][T14621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.846543][T14621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.858333][T14859] xt_cluster: node mask cannot exceed total number of nodes [ 381.003255][T10946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.032196][T10946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.131934][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.164011][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.228038][T14868] netlink: 'syz.2.2921': attribute type 10 has an invalid length. [ 381.279791][T14868] team0: Device veth1_macvtap failed to register rx_handler [ 381.319082][T10940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.335833][T10940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.467158][T14874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 381.635646][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2924'. [ 381.955293][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 381.980896][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2931'. [ 382.660253][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2940'. [ 382.738447][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2940'. [ 383.061501][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.071496][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.085965][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.142304][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2943'. [ 383.164794][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.172629][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.642573][T14933] infiniband syz2: set active [ 383.658687][T14933] infiniband syz2: added team_slave_0 [ 383.990218][T14933] RDS/IB: syz2: added [ 384.002513][T14933] smc: adding ib device syz2 with port count 1 [ 384.053548][T14933] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 384.070533][T14938] chnl_net:caif_netlink_parms(): no params data found [ 384.324875][T14955] netlink: 'syz.5.2948': attribute type 21 has an invalid length. [ 384.332942][T14955] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2948'. [ 384.453211][T14964] netlink: 'syz.5.2948': attribute type 21 has an invalid length. [ 384.481470][T14964] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2948'. [ 384.563146][T14955] netlink: 'syz.5.2948': attribute type 4 has an invalid length. [ 384.584783][T14955] netlink: 'syz.5.2948': attribute type 5 has an invalid length. [ 384.602243][T14955] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2948'. [ 384.613042][T14964] netlink: 'syz.5.2948': attribute type 4 has an invalid length. [ 384.632240][T14964] netlink: 'syz.5.2948': attribute type 5 has an invalid length. [ 384.643533][T14964] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2948'. [ 384.668749][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.693357][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.714660][T14938] bridge_slave_0: entered allmulticast mode [ 384.726662][T14938] bridge_slave_0: entered promiscuous mode [ 384.749809][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.767259][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.784088][T14938] bridge_slave_1: entered allmulticast mode [ 384.809541][T14938] bridge_slave_1: entered promiscuous mode [ 385.055724][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.078380][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.100051][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.111409][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.119386][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.151891][T14938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.197556][T14938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.224052][ T5841] Bluetooth: hci2: command tx timeout [ 385.409347][T14938] team0: Port device team_slave_0 added [ 385.424408][T14938] team0: Port device team_slave_1 added [ 385.594507][T14938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.611761][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.641822][T14938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.707194][T14938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.734120][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.793843][T14938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.811177][T14994] netlink: 'syz.4.2956': attribute type 3 has an invalid length. [ 385.963051][T14938] hsr_slave_0: entered promiscuous mode [ 385.970329][T14938] hsr_slave_1: entered promiscuous mode [ 385.977253][T14938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.985660][T14938] Cannot create hsr debugfs directory [ 386.744737][T15016] netlink: 'syz.5.2964': attribute type 10 has an invalid length. [ 386.766819][T14938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.802966][T15016] netlink: 'syz.5.2964': attribute type 30 has an invalid length. [ 386.860505][T14938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.902235][T15016] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 386.984716][T14938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.086544][T14938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.207068][ T5841] Bluetooth: hci7: command tx timeout [ 387.233500][T14973] chnl_net:caif_netlink_parms(): no params data found [ 387.285978][ T5841] Bluetooth: hci2: command tx timeout [ 387.329175][T15030] macvlan1: entered promiscuous mode [ 387.346928][T15030] macvlan1: left promiscuous mode [ 387.874366][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.881778][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.896110][T14973] bridge_slave_0: entered allmulticast mode [ 387.916960][T14973] bridge_slave_0: entered promiscuous mode [ 387.937328][T14938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.968880][T14938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.988543][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.013336][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.021193][T14973] bridge_slave_1: entered allmulticast mode [ 388.029902][T14973] bridge_slave_1: entered promiscuous mode [ 388.070871][T14938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.119713][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.133519][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.153915][T14938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.333631][T14973] team0: Port device team_slave_0 added [ 388.386705][T14973] team0: Port device team_slave_1 added [ 388.507117][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.523709][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.573130][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.601016][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.618658][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.681285][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.899663][T14973] hsr_slave_0: entered promiscuous mode [ 388.913697][T14973] hsr_slave_1: entered promiscuous mode [ 388.921019][T14973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.929761][T14973] Cannot create hsr debugfs directory [ 389.180966][T14938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.284059][ T5841] Bluetooth: hci7: command tx timeout [ 389.365345][ T5841] Bluetooth: hci2: command tx timeout [ 389.430347][T14938] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.475292][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.482548][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.565405][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.572665][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.662365][T14973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.677321][T14973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 389.693354][T14973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 389.709005][T14973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 389.990164][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.041271][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.078227][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.085521][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.111058][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.118297][T10945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.265131][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.283699][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.299489][T14973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.326693][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.338964][T14938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.363472][T15065] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 390.447872][T15065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 390.585708][T14938] veth0_vlan: entered promiscuous mode [ 390.644192][T14938] veth1_vlan: entered promiscuous mode [ 390.675731][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.697302][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.721422][T15096] __nla_validate_parse: 6 callbacks suppressed [ 390.721442][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'. [ 390.751114][T14938] veth0_macvtap: entered promiscuous mode [ 390.790456][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.806099][T14938] veth1_macvtap: entered promiscuous mode [ 390.824214][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.882741][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.895174][T14938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.932525][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.946423][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 390.958878][T14938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.011431][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 391.047197][T14938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.057447][T14938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.074242][T14938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.083086][T14938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.103214][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.114313][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 391.136493][T15065] xfrm0 speed is unknown, defaulting to 1000 [ 391.369426][ T5838] Bluetooth: hci7: command tx timeout [ 391.444557][ T5838] Bluetooth: hci2: command tx timeout [ 391.475043][T10940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.483190][T10940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.597870][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.612568][T15125] delete_channel: no stack [ 391.632885][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.011150][T14973] veth0_vlan: entered promiscuous mode [ 392.090948][T14973] veth1_vlan: entered promiscuous mode [ 392.271943][T14973] veth0_macvtap: entered promiscuous mode [ 392.318518][T14973] veth1_macvtap: entered promiscuous mode [ 392.388197][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.462172][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.515180][T14973] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.548686][T14973] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.569828][T14973] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.595879][T14973] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.904241][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.926092][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.020992][T10946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.049318][T10946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.363365][T15181] netlink: 'syz.7.2949': attribute type 23 has an invalid length. [ 393.449176][ T5838] Bluetooth: hci7: command 0x0419 tx timeout [ 393.610394][T15185] pim6reg1: entered promiscuous mode [ 393.618800][T15189] netlink: 'syz.6.3019': attribute type 1 has an invalid length. [ 393.627010][T15185] pim6reg1: entered allmulticast mode [ 393.655176][T15189] netlink: 'syz.6.3019': attribute type 2 has an invalid length. [ 393.950854][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3027'. [ 394.335262][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 394.843266][T15240] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3039'. [ 394.891639][T15242] tipc: Started in network mode [ 394.909532][T15242] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 394.930419][T15242] tipc: Enabled bearer , priority 12 [ 394.959173][T15247] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3041'. [ 395.176654][T15251] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3043'. [ 395.514049][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3050'. [ 396.044116][ T5891] tipc: Node number set to 10070698 [ 396.182580][T15276] xfrm0 speed is unknown, defaulting to 1000 [ 396.756283][T15314] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3064'. [ 397.231657][T15335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3072'. [ 397.310532][T15336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3072'. [ 397.319135][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.732874][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3073'. [ 397.753241][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3073'. [ 397.785163][T15352] x_tables: duplicate entry at hook 2 [ 398.007102][T15362] xt_connbytes: Forcing CT accounting to be enabled [ 398.162773][T15367] netlink: 'syz.4.3085': attribute type 2 has an invalid length. [ 398.606847][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 398.649089][T15384] macvlan2: entered promiscuous mode [ 399.696382][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3107'. [ 399.740443][T15430] xfrm1: entered promiscuous mode [ 399.754845][T15430] xfrm1: entered allmulticast mode [ 399.911734][T15440] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3111'. [ 399.924352][T15440] nbd: illegal input index -8454144 [ 400.015369][T15444] x_tables: unsorted entry at hook 2 [ 400.102384][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3114'. [ 400.260560][T15457] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.3116'. [ 400.375660][T15457] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.383411][T15457] team0: Device ipvlan2 is already an upper device of the team interface [ 401.079841][T15501] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 401.564621][ T5891] IPVS: starting estimator thread 0... [ 401.684348][T15529] IPVS: using max 27 ests per chain, 64800 per kthread [ 401.874529][T15536] can: request_module (can-proto-0) failed. [ 402.375707][T15523] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 402.535516][T15560] sctp: [Deprecated]: syz.2.3150 (pid 15560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.535516][T15560] Use struct sctp_sack_info instead [ 402.572729][T15560] netlink: 'syz.2.3150': attribute type 10 has an invalid length. [ 402.600052][T15560] sctp: [Deprecated]: syz.2.3150 (pid 15560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.600052][T15560] Use struct sctp_sack_info instead [ 402.635067][T15560] netlink: 'syz.2.3150': attribute type 4 has an invalid length. [ 402.731348][T15565] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 402.782716][T15563] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 404.891175][T15581] xt_bpf: check failed: parse error [ 404.909965][T15583] netlink: 'syz.5.3156': attribute type 26 has an invalid length. [ 404.990873][T15583] __nla_validate_parse: 3 callbacks suppressed [ 404.990893][T15583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3156'. [ 405.063541][T15583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3156'. [ 405.131848][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 405.335359][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3162'. [ 405.394553][T15602] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3165'. [ 405.439219][T15598] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.450451][T15598] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.460558][T15598] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.462089][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'. [ 405.469794][T15598] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.515874][T15598] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.525160][T15598] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.534142][T15598] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.543102][T15598] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.793227][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3171'. [ 405.809717][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3169'. [ 405.859609][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 405.913198][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 406.019216][T15633] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.043313][T15633] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 406.410251][T15660] ÿ: renamed from dummy0 (while UP) [ 406.431707][T15664] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 406.706854][T15671] openvswitch: netlink: Message has -1 unknown bytes. [ 406.739089][T15674] Bluetooth: MGMT ver 1.23 [ 407.062891][T15682] xt_hashlimit: invalid interval [ 407.118119][T15682] raw_sendmsg: syz.4.3187 forgot to set AF_INET. Fix it! [ 407.248683][T15684] nbd: socks must be embedded in a SOCK_ITEM attr [ 407.319465][T15699] xt_CT: No such helper "pptp" [ 408.149656][T15739] netlink: 'syz.6.3204': attribute type 32 has an invalid length. [ 408.184312][T15738] netlink: 'syz.6.3204': attribute type 32 has an invalid length. [ 408.566878][T15755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.812565][T15765] bridge1: entered promiscuous mode [ 408.829680][T15771] netlink: 'syz.7.3216': attribute type 3 has an invalid length. [ 408.851123][T15765] bridge1: entered allmulticast mode [ 408.858312][T15771] netlink: 'syz.7.3216': attribute type 1 has an invalid length. [ 408.910699][T15773] netlink: 'syz.5.3217': attribute type 29 has an invalid length. [ 408.935395][T15773] netlink: 'syz.5.3217': attribute type 29 has an invalid length. [ 408.960653][T15773] netlink: 'syz.5.3217': attribute type 29 has an invalid length. [ 409.120474][T15786] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 409.156015][T15787] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 409.662357][T15819] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 409.698276][ T5841] block nbd2: Receive control failed (result -32) [ 410.191550][T15841] 8021q: VLANs not supported on ip6_vti0 [ 410.305846][T15849] netem: incorrect gi model size [ 410.311236][T15849] netem: change failed [ 410.345542][T15848] netlink: 'syz.5.3242': attribute type 1 has an invalid length. [ 410.357260][T15853] __nla_validate_parse: 8 callbacks suppressed [ 410.357280][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 410.375958][T15848] netlink: 'syz.5.3242': attribute type 10 has an invalid length. [ 410.407308][T15848] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3242'. [ 410.487904][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3245'. [ 410.514883][T15858] netlink: 'syz.6.3246': attribute type 2 has an invalid length. [ 410.637302][T15858] block nbd3: server does not support multiple connections per device. [ 410.672566][T15858] block nbd3: shutting down sockets [ 410.759340][T15867] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 410.804707][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 411.120643][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 411.783151][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3266'. [ 411.804408][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3266'. [ 411.897757][ T30] audit: type=1804 audit(1747827132.720:68): pid=15921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3266" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=371 res=1 errno=0 [ 411.944556][ T30] audit: type=1800 audit(1747827132.740:69): pid=15921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3266" name="cgroup.controllers" dev="tmpfs" ino=371 res=0 errno=0 [ 411.993000][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'. [ 412.009861][T15917] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3269'. [ 412.369034][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3278'. [ 413.561577][T15998] validate_nla: 3 callbacks suppressed [ 413.561597][T15998] netlink: 'syz.5.3297': attribute type 6 has an invalid length. [ 413.602320][T15987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.612731][T15987] bridge0: port 3(bond1) entered blocking state [ 413.619881][T15987] bridge0: port 3(bond1) entered disabled state [ 413.628100][T15987] bond1: entered allmulticast mode [ 413.664613][T15987] bond1: entered promiscuous mode [ 413.689931][T15987] bridge0: port 3(bond1) entered blocking state [ 413.696443][T15987] bridge0: port 3(bond1) entered forwarding state [ 413.720618][T10945] bridge0: port 3(bond1) entered disabled state [ 413.886574][T16012] netlink: 'syz.4.3300': attribute type 5 has an invalid length. [ 415.339090][T16093] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 415.469066][T16091] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.771045][T16117] __nla_validate_parse: 12 callbacks suppressed [ 415.771069][T16117] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3337'. [ 415.815736][T16116] syzkaller0: entered promiscuous mode [ 415.821296][T16116] syzkaller0: entered allmulticast mode [ 415.897475][T16120] netlink: 'syz.6.3340': attribute type 3 has an invalid length. [ 416.362754][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3344'. [ 416.384719][T16137] openvswitch: netlink: Flow key attr not present in new flow. [ 417.650248][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3355'. [ 417.848880][T16177] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 417.863453][T16174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3360'. [ 417.904719][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3358'. [ 418.305234][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3364'. [ 418.333457][T16195] netlink: 'syz.5.3364': attribute type 21 has an invalid length. [ 418.350301][T16202] netlink: 'syz.5.3364': attribute type 21 has an invalid length. [ 418.359876][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 418.407695][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 418.419434][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 418.426855][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 418.498457][T16206] netlink: 'syz.7.3368': attribute type 33 has an invalid length. [ 419.188120][T16233] netlink: 'syz.6.3379': attribute type 5 has an invalid length. [ 419.401524][T16241] netlink: 'syz.4.3382': attribute type 10 has an invalid length. [ 419.411894][T16241] veth1_macvtap: left promiscuous mode [ 419.643354][T16247] delete_channel: no stack [ 420.754350][T16283] xt_CT: No such helper "pptp" [ 421.089924][T16300] __nla_validate_parse: 7 callbacks suppressed [ 421.089948][T16300] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3404'. [ 421.111871][T16302] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3405'. [ 421.134583][T16302] x_tables: duplicate underflow at hook 1 [ 421.756627][T16329] tipc: Started in network mode [ 421.761683][T16329] tipc: Node identity , cluster identity 4711 [ 421.773403][T16329] tipc: Started in network mode [ 421.792098][T16318] xt_CT: No such helper "pptp" [ 421.820845][T16329] tipc: Node identity , cluster identity 4711 [ 421.885934][T16316] xfrm0 speed is unknown, defaulting to 1000 [ 422.054260][T16335] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3417'. [ 422.063446][T16335] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3417'. [ 422.920853][T16388] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3432'. [ 422.960811][T16388] gretap0: entered promiscuous mode [ 422.975288][T16389] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3432'. [ 423.009263][T16389] 0ªî{X¹¦: renamed from gretap0 [ 423.049998][T16389] 0ªî{X¹¦: left promiscuous mode [ 423.059179][T16389] 0ªî{X¹¦: entered allmulticast mode [ 423.070915][T16389] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 423.087615][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 423.174816][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3436'. [ 423.196402][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3436'. [ 423.242550][T16405] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 423.340382][T16410] veth0: entered promiscuous mode [ 423.372364][T16408] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3439'. [ 423.658506][T16428] Bluetooth: MGMT ver 1.23 [ 424.177790][T16409] veth0: left promiscuous mode [ 424.231917][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 424.242443][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 424.260144][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 424.277429][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 424.295287][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 424.365530][T16450] netlink: 'syz.7.3454': attribute type 1 has an invalid length. [ 424.561674][T16457] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 424.585505][T16457] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 424.838802][T16469] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.886169][T16469] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.895101][T16469] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.088465][T16483] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.088590][T16446] xfrm0 speed is unknown, defaulting to 1000 [ 425.509273][T16446] chnl_net:caif_netlink_parms(): no params data found [ 425.631807][T16499] xt_nat: multiple ranges no longer supported [ 425.997376][T16516] sctp: [Deprecated]: syz.6.3472 (pid 16516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.997376][T16516] Use struct sctp_sack_info instead [ 426.043368][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.072662][T16446] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.101553][T16446] bridge_slave_0: entered allmulticast mode [ 426.130832][T16446] bridge_slave_0: entered promiscuous mode [ 426.200664][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.222339][T16446] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.245249][T16446] bridge_slave_1: entered allmulticast mode [ 426.254572][T16446] bridge_slave_1: entered promiscuous mode [ 426.319719][T16532] tipc: Started in network mode [ 426.335078][T16532] tipc: Node identity , cluster identity 4711 [ 426.367470][T16532] tipc: Failed to obtain node identity [ 426.394385][T16532] tipc: Enabling of bearer rejected, failed to enable media [ 426.408123][ T5841] Bluetooth: hci8: command tx timeout [ 426.440499][T16537] __nla_validate_parse: 12 callbacks suppressed [ 426.440520][T16537] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3479'. [ 426.480273][T16446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.517134][T16446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.699184][T16547] netlink: 'syz.4.3483': attribute type 10 has an invalid length. [ 426.728948][T16446] team0: Port device team_slave_0 added [ 426.761839][T16547] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.876027][T16446] team0: Port device team_slave_1 added [ 427.080083][T16561] IPv6: Can't replace route, no match found [ 427.101400][T16446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.109219][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.161676][T16446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.161854][T16570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3490'. [ 427.175604][T16446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.189305][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.216405][T16446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.440161][T16578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.471474][T16572] netlink: 'syz.4.3491': attribute type 11 has an invalid length. [ 427.487827][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3495'. [ 427.505182][T16446] hsr_slave_0: entered promiscuous mode [ 427.521285][T16446] hsr_slave_1: entered promiscuous mode [ 427.532781][T16446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.541468][T16446] Cannot create hsr debugfs directory [ 427.740895][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 427.876874][T16594] netlink: 'syz.7.3500': attribute type 2 has an invalid length. [ 428.053069][T16600] netlink: 952 bytes leftover after parsing attributes in process `syz.4.3503'. [ 428.071653][T16601] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.085764][T16601] IPv6: NLM_F_REPLACE set, but no existing node found! [ 428.168980][T16446] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 428.216048][T16446] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.223509][T16606] nbd: must specify at least one socket [ 428.240821][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3506'. [ 428.252215][T16446] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.305574][T16446] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 428.490488][ T5841] Bluetooth: hci8: command tx timeout [ 428.695776][T16623] lo: entered allmulticast mode [ 428.786071][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'. [ 428.828454][T16446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.858351][T16623] lo: left allmulticast mode [ 428.937621][T16446] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.008863][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.016153][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.085719][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.094090][T10940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.319126][T16644] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.549233][T16649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3517'. [ 429.585108][T16649] tipc: Enabled bearer , priority 0 [ 429.604962][T16651] netlink: 'syz.5.3518': attribute type 32 has an invalid length. [ 429.638638][T16648] tipc: Disabling bearer [ 429.683056][T16654] batadv0: entered promiscuous mode [ 429.707209][T16654] team0: entered promiscuous mode [ 429.707976][T16656] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3519'. [ 429.725824][T16654] team_slave_0: entered promiscuous mode [ 429.732854][T16654] team_slave_1: entered promiscuous mode [ 429.757467][T16654] hsr1: entered promiscuous mode [ 429.762781][T16654] hsr1: entered allmulticast mode [ 429.789838][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 429.792951][T16654] batadv0: entered allmulticast mode [ 429.819347][T16654] team0: entered allmulticast mode [ 429.833046][T16654] team_slave_0: entered allmulticast mode [ 429.853410][T16654] team_slave_1: entered allmulticast mode [ 429.859974][T16663] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 430.187929][T16446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.564924][ T5841] Bluetooth: hci8: command tx timeout [ 431.039665][T16446] veth0_vlan: entered promiscuous mode [ 431.107815][T16446] veth1_vlan: entered promiscuous mode [ 431.215287][T16446] veth0_macvtap: entered promiscuous mode [ 431.272178][T16446] veth1_macvtap: entered promiscuous mode [ 431.356536][T16446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.377976][T16446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.418125][T16446] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.443417][T16446] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.447298][T16719] __nla_validate_parse: 1 callbacks suppressed [ 431.447317][T16719] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3535'. [ 431.460637][T16446] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.479797][T16446] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.501380][T16719] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3535'. [ 431.524241][T16719] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3535'. [ 431.801813][T15635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.835791][T15635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.945661][T15635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.975823][T15635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.441154][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3544'. [ 432.493520][T16758] siw: device registration error -23 [ 432.647146][ T5841] Bluetooth: hci8: command tx timeout [ 433.063449][T16789] sctp: [Deprecated]: syz.5.3553 (pid 16789) Use of int in maxseg socket option. [ 433.063449][T16789] Use struct sctp_assoc_value instead [ 433.138102][T16785] xt_CT: No such helper "netbios-ns" [ 433.372821][T16794] can: request_module (can-proto-0) failed. [ 433.479925][T16804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.640176][T16811] x_tables: unsorted entry at hook 3 [ 433.759511][T16806] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.906456][T16824] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3565'. [ 433.976249][T16826] bond0: entered promiscuous mode [ 433.982139][T16828] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 433.990581][T16826] bond_slave_0: entered promiscuous mode [ 434.003602][T16826] bond_slave_1: entered promiscuous mode [ 434.089014][T16826] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 434.502783][T16851] IPVS: Unknown mcast interface: vcan0 [ 434.632027][T16860] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3576'. [ 434.687991][T16806] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.829616][T16806] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.996091][T16806] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.033347][T16871] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3580'. [ 435.153673][T16873] syz_tun: entered allmulticast mode [ 435.250466][T16806] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.279237][T16806] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.337505][T16806] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.352735][T16872] syz_tun: left allmulticast mode [ 435.360836][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3582'. [ 435.384232][T16806] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.394651][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3582'. [ 435.445203][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3582'. [ 436.411060][T16927] sctp: [Deprecated]: syz.4.3597 (pid 16927) Use of int in maxseg socket option. [ 436.411060][T16927] Use struct sctp_assoc_value instead [ 436.498294][T16927] __nla_validate_parse: 4 callbacks suppressed [ 436.498315][T16927] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3597'. [ 436.530118][T16933] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3598'. [ 436.745626][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3599'. [ 436.747381][T16943] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3597'. [ 436.758000][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3599'. [ 436.978328][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3602'. [ 437.007328][T16950] netlink: 'syz.8.3602': attribute type 1 has an invalid length. [ 437.015758][T16950] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3602'. [ 437.027101][T16950] netlink: 'syz.8.3602': attribute type 1 has an invalid length. [ 437.216410][T16961] netlink: 'syz.7.3607': attribute type 1 has an invalid length. [ 437.229646][T16961] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3607'. [ 437.562662][T16974] FAULT_INJECTION: forcing a failure. [ 437.562662][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 437.618405][T16974] CPU: 0 UID: 0 PID: 16974 Comm: syz.4.3613 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 437.618437][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.618449][T16974] Call Trace: [ 437.618458][T16974] [ 437.618466][T16974] dump_stack_lvl+0x189/0x250 [ 437.618506][T16974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.618534][T16974] ? __pfx__printk+0x10/0x10 [ 437.618559][T16974] ? __pfx___might_resched+0x10/0x10 [ 437.618579][T16974] ? fs_reclaim_acquire+0x7d/0x100 [ 437.618615][T16974] should_fail_ex+0x414/0x560 [ 437.618643][T16974] should_failslab+0xa8/0x100 [ 437.618672][T16974] __kmalloc_noprof+0xcb/0x4f0 [ 437.618697][T16974] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 437.618736][T16974] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 437.618774][T16974] genl_family_rcv_msg_doit+0xb8/0x300 [ 437.618812][T16974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 437.618844][T16974] ? rcu_is_watching+0x15/0xb0 [ 437.618867][T16974] ? apparmor_capable+0x137/0x1b0 [ 437.618898][T16974] ? bpf_lsm_capable+0x9/0x20 [ 437.618925][T16974] ? security_capable+0x7e/0x2e0 [ 437.618956][T16974] genl_rcv_msg+0x60e/0x790 [ 437.618993][T16974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.619020][T16974] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 437.619070][T16974] netlink_rcv_skb+0x219/0x490 [ 437.619094][T16974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.619126][T16974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.619180][T16974] ? down_read+0x1ad/0x2e0 [ 437.619211][T16974] genl_rcv+0x28/0x40 [ 437.619238][T16974] netlink_unicast+0x75b/0x8d0 [ 437.619274][T16974] netlink_sendmsg+0x805/0xb30 [ 437.619309][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.619338][T16974] ? aa_sock_msg_perm+0x94/0x160 [ 437.619370][T16974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.619392][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.619416][T16974] __sock_sendmsg+0x219/0x270 [ 437.619443][T16974] ____sys_sendmsg+0x505/0x830 [ 437.619479][T16974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.619518][T16974] ? import_iovec+0x74/0xa0 [ 437.619551][T16974] ___sys_sendmsg+0x21f/0x2a0 [ 437.619582][T16974] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.619657][T16974] ? __fget_files+0x2a/0x420 [ 437.619682][T16974] ? __fget_files+0x3a0/0x420 [ 437.619722][T16974] __x64_sys_sendmsg+0x19b/0x260 [ 437.619753][T16974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.619803][T16974] ? do_syscall_64+0xba/0x210 [ 437.619834][T16974] do_syscall_64+0xf6/0x210 [ 437.619858][T16974] ? clear_bhb_loop+0x60/0xb0 [ 437.619878][T16974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.619895][T16974] RIP: 0033:0x7f44c198e969 [ 437.619914][T16974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.619931][T16974] RSP: 002b:00007f44c27cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.619954][T16974] RAX: ffffffffffffffda RBX: 00007f44c1bb5fa0 RCX: 00007f44c198e969 [ 437.619967][T16974] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 437.619978][T16974] RBP: 00007f44c27cb090 R08: 0000000000000000 R09: 0000000000000000 [ 437.619988][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.620000][T16974] R13: 0000000000000000 R14: 00007f44c1bb5fa0 R15: 00007ffea93a9ad8 [ 437.620035][T16974] [ 438.270457][T16995] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 438.292411][T16996] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.3622'. [ 438.405099][T17002] sctp: [Deprecated]: syz.8.3624 (pid 17002) Use of int in max_burst socket option deprecated. [ 438.405099][T17002] Use struct sctp_assoc_value instead [ 438.970757][T17027] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3632'. [ 439.264872][T17014] xfrm0 speed is unknown, defaulting to 1000 [ 439.444978][T17046] netlink: 'syz.5.3640': attribute type 13 has an invalid length. [ 439.452982][T17046] netlink: 'syz.5.3640': attribute type 58 has an invalid length. [ 439.456242][T17040] netlink: 'syz.8.3637': attribute type 3 has an invalid length. [ 439.512470][T17048] geneve1: entered promiscuous mode [ 439.525808][T17048] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 439.809000][T17062] FAULT_INJECTION: forcing a failure. [ 439.809000][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 439.852682][T17062] CPU: 1 UID: 0 PID: 17062 Comm: syz.8.3645 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 439.852712][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.852723][T17062] Call Trace: [ 439.852730][T17062] [ 439.852739][T17062] dump_stack_lvl+0x189/0x250 [ 439.852774][T17062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.852801][T17062] ? __pfx__printk+0x10/0x10 [ 439.852828][T17062] ? __pfx___might_resched+0x10/0x10 [ 439.852847][T17062] ? fs_reclaim_acquire+0x7d/0x100 [ 439.852883][T17062] should_fail_ex+0x414/0x560 [ 439.852911][T17062] should_failslab+0xa8/0x100 [ 439.852941][T17062] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 439.852969][T17062] ? __alloc_skb+0x112/0x2d0 [ 439.852998][T17062] __alloc_skb+0x112/0x2d0 [ 439.853034][T17062] netlink_ack+0x146/0xa50 [ 439.853054][T17062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.853105][T17062] netlink_rcv_skb+0x2a0/0x490 [ 439.853130][T17062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.853161][T17062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.853215][T17062] ? down_read+0x1ad/0x2e0 [ 439.853254][T17062] genl_rcv+0x28/0x40 [ 439.853281][T17062] netlink_unicast+0x75b/0x8d0 [ 439.853317][T17062] netlink_sendmsg+0x805/0xb30 [ 439.853353][T17062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.853382][T17062] ? aa_sock_msg_perm+0x94/0x160 [ 439.853408][T17062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.853431][T17062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.853456][T17062] __sock_sendmsg+0x219/0x270 [ 439.853482][T17062] ____sys_sendmsg+0x505/0x830 [ 439.853517][T17062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.853557][T17062] ? import_iovec+0x74/0xa0 [ 439.853590][T17062] ___sys_sendmsg+0x21f/0x2a0 [ 439.853621][T17062] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.853694][T17062] ? __fget_files+0x2a/0x420 [ 439.853719][T17062] ? __fget_files+0x3a0/0x420 [ 439.853758][T17062] __x64_sys_sendmsg+0x19b/0x260 [ 439.853789][T17062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.853837][T17062] ? do_syscall_64+0xba/0x210 [ 439.853865][T17062] do_syscall_64+0xf6/0x210 [ 439.853888][T17062] ? clear_bhb_loop+0x60/0xb0 [ 439.853913][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.853932][T17062] RIP: 0033:0x7f4c3578e969 [ 439.853950][T17062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.853967][T17062] RSP: 002b:00007f4c365e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.853990][T17062] RAX: ffffffffffffffda RBX: 00007f4c359b5fa0 RCX: 00007f4c3578e969 [ 439.854004][T17062] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 439.854016][T17062] RBP: 00007f4c365e9090 R08: 0000000000000000 R09: 0000000000000000 [ 439.854028][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.854041][T17062] R13: 0000000000000000 R14: 00007f4c359b5fa0 R15: 00007ffff6fa56a8 [ 439.854077][T17062] [ 440.356680][T17074] syzkaller0: entered promiscuous mode [ 440.383400][T17074] syzkaller0: entered allmulticast mode [ 440.737926][T17088] xfrm1: entered promiscuous mode [ 440.743037][T17088] xfrm1: entered allmulticast mode [ 440.992513][T17103] syz_tun: entered allmulticast mode [ 441.066615][T17103] syz_tun (unregistering): left allmulticast mode [ 441.306648][T17116] netem: change failed [ 441.367511][T17117] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 441.414943][T17122] syzkaller0: entered promiscuous mode [ 441.427230][T17122] syzkaller0: entered allmulticast mode [ 441.587733][T10940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.607459][T10940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.616307][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.705577][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.918256][T17146] FAULT_INJECTION: forcing a failure. [ 441.918256][T17146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.002741][T17146] CPU: 0 UID: 0 PID: 17146 Comm: syz.7.3671 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 442.002774][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.002785][T17146] Call Trace: [ 442.002793][T17146] [ 442.002802][T17146] dump_stack_lvl+0x189/0x250 [ 442.002834][T17146] ? __lock_acquire+0xaac/0xd20 [ 442.002865][T17146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.002893][T17146] ? __pfx__printk+0x10/0x10 [ 442.002914][T17146] ? __might_fault+0xb0/0x130 [ 442.002955][T17146] should_fail_ex+0x414/0x560 [ 442.002982][T17146] _copy_from_user+0x2d/0xb0 [ 442.003011][T17146] ___sys_sendmsg+0x158/0x2a0 [ 442.003042][T17146] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.003079][T17146] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 442.003137][T17146] ? __fget_files+0x2a/0x420 [ 442.003163][T17146] ? __fget_files+0x3a0/0x420 [ 442.003202][T17146] __sys_sendmmsg+0x227/0x430 [ 442.003244][T17146] ? __pfx___sys_sendmmsg+0x10/0x10 [ 442.003284][T17146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.003331][T17146] ? ksys_write+0x1f0/0x250 [ 442.003352][T17146] ? rcu_is_watching+0x15/0xb0 [ 442.003381][T17146] __x64_sys_sendmmsg+0xa0/0xc0 [ 442.003410][T17146] do_syscall_64+0xf6/0x210 [ 442.003438][T17146] ? clear_bhb_loop+0x60/0xb0 [ 442.003462][T17146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.003481][T17146] RIP: 0033:0x7fb5ceb8e969 [ 442.003500][T17146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.003518][T17146] RSP: 002b:00007fb5cfa72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.003541][T17146] RAX: ffffffffffffffda RBX: 00007fb5cedb5fa0 RCX: 00007fb5ceb8e969 [ 442.003556][T17146] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 442.003570][T17146] RBP: 00007fb5cfa72090 R08: 0000000000000000 R09: 0000000000000000 [ 442.003582][T17146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.003594][T17146] R13: 0000000000000000 R14: 00007fb5cedb5fa0 R15: 00007ffd219a2f98 [ 442.003628][T17146] [ 442.484827][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.540824][T17166] lo: entered allmulticast mode [ 442.555832][T17165] lo: left allmulticast mode [ 442.732174][T17176] __nla_validate_parse: 10 callbacks suppressed [ 442.732197][T17176] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3682'. [ 442.969491][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3685'. [ 442.979642][T17181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.989553][T17183] netlink: 'syz.7.3685': attribute type 1 has an invalid length. [ 443.002175][T17183] netlink: 'syz.7.3685': attribute type 1 has an invalid length. [ 443.012579][T17183] netlink: 'syz.7.3685': attribute type 2 has an invalid length. [ 443.021089][T17183] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3685'. [ 443.032283][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3685'. [ 443.041586][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3685'. [ 443.559840][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.570926][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.579888][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.588572][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.597194][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.745933][T17200] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3690'. [ 443.770860][T17203] netlink: 'syz.4.3691': attribute type 12 has an invalid length. [ 443.801662][T17203] netlink: 'syz.4.3691': attribute type 29 has an invalid length. [ 443.819822][T17203] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3691'. [ 443.833408][T17203] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3691'. [ 444.229237][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.248060][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 444.267476][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 444.289190][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 444.312631][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 444.367976][T17196] xfrm0 speed is unknown, defaulting to 1000 [ 444.376356][T17212] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 444.414809][T17212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3694'. [ 444.441071][T17220] xt_l2tp: unknown flags: 18 [ 445.021419][T17196] chnl_net:caif_netlink_parms(): no params data found [ 445.082466][T17236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.108370][T17236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.133082][T17236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.140526][T17241] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3703'. [ 445.151181][T17236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.247550][T17238] macvlan2: entered promiscuous mode [ 445.253438][T17216] xfrm0 speed is unknown, defaulting to 1000 [ 445.364038][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.690086][ T5838] Bluetooth: hci5: command tx timeout [ 445.995622][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.002859][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.042852][T17196] bridge_slave_0: entered allmulticast mode [ 446.056674][T17196] bridge_slave_0: entered promiscuous mode [ 446.122728][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.139208][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.167659][T17196] bridge_slave_1: entered allmulticast mode [ 446.196731][T17196] bridge_slave_1: entered promiscuous mode [ 446.223667][T17284] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 446.411871][ T5838] Bluetooth: hci9: command tx timeout [ 446.539732][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.578377][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.806598][T17196] team0: Port device team_slave_0 added [ 446.825440][T17216] chnl_net:caif_netlink_parms(): no params data found [ 446.872053][T17196] team0: Port device team_slave_1 added [ 447.128548][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.144333][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.191643][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.246614][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.263400][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.291281][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.446841][T17285] xfrm0 speed is unknown, defaulting to 1000 [ 447.467686][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.475974][T17216] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.483319][T17216] bridge_slave_0: entered allmulticast mode [ 447.492407][T17216] bridge_slave_0: entered promiscuous mode [ 447.509892][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.518103][T17216] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.527460][T17216] bridge_slave_1: entered allmulticast mode [ 447.538152][T17216] bridge_slave_1: entered promiscuous mode [ 447.764130][ T5838] Bluetooth: hci5: command tx timeout [ 447.776645][T17196] hsr_slave_0: entered promiscuous mode [ 447.797936][T17196] hsr_slave_1: entered promiscuous mode [ 447.810399][T17196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.818395][T17196] Cannot create hsr debugfs directory [ 447.842676][T17216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.911836][T17323] __nla_validate_parse: 3 callbacks suppressed [ 447.911859][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3724'. [ 447.965909][T17216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.105647][T17216] team0: Port device team_slave_0 added [ 448.127067][T17326] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3725'. [ 448.216997][T17216] team0: Port device team_slave_1 added [ 448.332296][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3726'. [ 448.441090][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3726'. [ 448.452457][T17330] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3726'. [ 448.477167][T17216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.490034][ T5838] Bluetooth: hci9: command tx timeout [ 448.498974][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.526174][T17216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.569243][T17216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.576647][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.614622][T17216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.893034][T17216] hsr_slave_0: entered promiscuous mode [ 448.917310][T17216] hsr_slave_1: entered promiscuous mode [ 448.931122][T17216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.970022][T17216] Cannot create hsr debugfs directory [ 449.181783][T17353] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 449.307272][T17347] syzkaller1: entered promiscuous mode [ 449.312807][T17347] syzkaller1: entered allmulticast mode [ 449.846122][ T5838] Bluetooth: hci5: command tx timeout [ 449.923464][T17216] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 449.979318][T17216] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 450.071505][T17216] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 450.162252][T17216] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 450.222733][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3745'. [ 450.261548][T17196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.304796][T17196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.354370][T17196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 450.379130][T17392] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3746'. [ 450.415134][T17196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.572028][ T5838] Bluetooth: hci9: command tx timeout [ 450.598601][T17216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.747712][T17216] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.788899][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.796196][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.832941][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.840260][T15644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.885181][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.972897][T17394] xfrm0 speed is unknown, defaulting to 1000 [ 450.988896][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.111218][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.118527][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.242021][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.249311][T15644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.924703][ T5838] Bluetooth: hci5: command tx timeout [ 452.017912][T17433] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3755'. [ 452.094974][T17433] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3755'. [ 452.430424][T17216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.531735][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.646474][ T5838] Bluetooth: hci9: command tx timeout [ 452.964078][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.004584][T17464] netlink: set zone limit has 8 unknown bytes [ 453.091835][T17468] netlink: 'syz.4.3762': attribute type 1 has an invalid length. [ 453.125338][T17468] netlink: 'syz.4.3762': attribute type 1 has an invalid length. [ 453.184296][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.224616][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.252626][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.263980][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.392023][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.400061][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3763'. [ 453.473245][T17482] netlink: 'syz.8.3766': attribute type 10 has an invalid length. [ 453.491513][T17196] veth0_vlan: entered promiscuous mode [ 453.536550][T17482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.580855][T17482] batadv0: entered promiscuous mode [ 453.616027][T17482] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 453.628266][T17486] netlink: 'syz.8.3766': attribute type 1 has an invalid length. [ 453.637061][T17486] netlink: 15 bytes leftover after parsing attributes in process `syz.8.3766'. [ 453.741377][T17196] veth1_vlan: entered promiscuous mode [ 453.771535][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3768'. [ 453.872763][T17216] veth0_vlan: entered promiscuous mode [ 453.905941][T17497] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 453.954625][T17497] netlink: 'syz.8.3769': attribute type 10 has an invalid length. [ 453.966783][T17216] veth1_vlan: entered promiscuous mode [ 453.985632][T17497] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3769'. [ 454.039220][T17497] team0: Port device geneve0 added [ 454.047808][T17196] veth0_macvtap: entered promiscuous mode [ 454.080704][T17196] veth1_macvtap: entered promiscuous mode [ 454.112794][T17504] 8021q: VLANs not supported on ip6_vti0 [ 454.221407][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.310260][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.385550][T17216] veth0_macvtap: entered promiscuous mode [ 454.468760][T17196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.498282][T17196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.501209][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3777'. [ 454.508031][T17196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.538763][T17196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.545405][T17509] xt_CT: No such helper "pptp" [ 454.580200][T17216] veth1_macvtap: entered promiscuous mode [ 454.688284][T17216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.732886][T17216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.817231][T17216] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.853875][T17216] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.874243][T17216] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.883008][T17216] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.105926][T17539] netlink: 'syz.4.3784': attribute type 3 has an invalid length. [ 455.123206][T15638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.132572][T15638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.181980][T17541] xt_NFQUEUE: number of total queues is 0 [ 455.311531][T15641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.344478][T15641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.419817][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.445347][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.502427][T15641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.536264][T15641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.560549][T17550] netlink: 'syz.7.3788': attribute type 1 has an invalid length. [ 456.166967][T17568] xt_hashlimit: size too large, truncated to 1048576 [ 456.394841][T17572] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 456.946095][T17594] Bluetooth: MGMT ver 1.23 [ 457.147942][T15638] bond0: (slave bond_slave_0): interface is now down [ 457.178798][T15638] bond0: (slave bond_slave_1): interface is now down [ 457.203269][T17604] netlink: 'syz.9.3802': attribute type 1 has an invalid length. [ 457.207355][T15638] bond0: now running without any active interface! [ 457.589049][T17625] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 458.112580][T17654] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.150843][T17654] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.253012][T17670] __nla_validate_parse: 11 callbacks suppressed [ 458.253035][T17670] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3819'. [ 458.254482][T17654] tipc: Resetting bearer [ 458.277031][T17671] netlink: 'syz.4.3815': attribute type 16 has an invalid length. [ 458.291774][T17671] netlink: 'syz.4.3815': attribute type 17 has an invalid length. [ 458.310842][T17654] tipc: Resetting bearer [ 458.377862][T17666] sit0: entered promiscuous mode [ 458.407322][T17666] netlink: 'syz.9.3819': attribute type 1 has an invalid length. [ 458.417780][T17666] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3819'. [ 458.459083][T15641] tipc: Resetting bearer [ 458.557062][T17671] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.564397][T17671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.611705][T17671] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.619036][T17671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.768520][T17676] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3820'. [ 458.819847][T17662] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3815'. [ 458.991964][T17695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.226134][T17706] netlink: 'syz.4.3831': attribute type 39 has an invalid length. [ 459.602802][T17718] lo: entered promiscuous mode [ 459.629122][T17718] tunl0: entered promiscuous mode [ 459.639899][T17718] gre0: entered promiscuous mode [ 459.657733][T17718] gretap0: entered promiscuous mode [ 459.706090][T17718] erspan0: entered promiscuous mode [ 459.719429][T17718] ip_vti0: entered promiscuous mode [ 459.774743][T17727] ipt_ECN: cannot use operation on non-tcp rule [ 459.794998][T17731] : renamed from syz_tun (while UP) [ 460.068975][T17743] sctp: [Deprecated]: syz.9.3842 (pid 17743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.068975][T17743] Use struct sctp_sack_info instead [ 460.328305][T17756] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 460.365803][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3847'. [ 460.376467][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3847'. [ 460.729415][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3855'. [ 460.751990][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.762106][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.784420][T17776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3855'. [ 460.795604][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.797684][T17781] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3857'. [ 460.863082][T17777] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 460.977725][T17776] netlink: 'syz.5.3855': attribute type 4 has an invalid length. [ 460.989806][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.016338][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.036299][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.071979][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.092222][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.125855][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.148006][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.169504][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.180072][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.189822][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.200972][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.250208][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.264672][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.282054][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.327682][T17777] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.808887][T17818] netlink: 'syz.8.3865': attribute type 10 has an invalid length. [ 461.823543][T17817] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3866'. [ 461.832073][T17818] team0: Device hsr_slave_0 failed to register rx_handler [ 462.403533][T17843] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 463.079742][T17876] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 463.272203][T17879] __nla_validate_parse: 3 callbacks suppressed [ 463.272221][T17879] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3885'. [ 463.273887][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3886'. [ 463.341006][T17880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3885'. [ 463.494612][T17890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.502961][T17890] batadv_slave_0: entered promiscuous mode [ 463.596424][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3892'. [ 463.885551][T17913] syzkaller0: entered promiscuous mode [ 463.906066][T17913] syzkaller0: entered allmulticast mode [ 464.355648][T17938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.373452][T17938] batadv_slave_0: entered promiscuous mode [ 464.483578][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3907'. [ 464.498739][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3907'. [ 464.975119][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3915'. [ 465.087253][T17972] netlink: 'syz.9.3917': attribute type 1 has an invalid length. [ 465.114489][T17972] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3917'. [ 465.154399][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3917'. [ 465.268131][T17982] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3921'. [ 465.747990][T17993] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.179724][T18002] xt_socket: unknown flags 0x50 [ 466.856920][T18023] netlink: zone id is out of range [ 466.862108][T18023] netlink: zone id is out of range [ 466.932854][T18023] netlink: zone id is out of range [ 466.946946][T18023] netlink: zone id is out of range [ 466.952234][T18023] netlink: zone id is out of range [ 466.958287][T18023] netlink: zone id is out of range [ 466.963447][T18023] netlink: zone id is out of range [ 467.001787][T18023] netlink: zone id is out of range [ 467.007934][T18023] netlink: zone id is out of range [ 467.101937][T18029] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 467.610636][T18052] No such timeout policy "syz0" [ 467.684928][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.966785][T18061] syzkaller0: entered allmulticast mode [ 469.614657][T18090] __nla_validate_parse: 4 callbacks suppressed [ 469.614706][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3955'. [ 469.651055][T18093] IPv6: Can't replace route, no match found [ 469.658958][T18090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3955'. [ 469.678656][T18096] netlink: 'syz.9.3953': attribute type 2 has an invalid length. [ 469.708194][T18096] netlink: 'syz.9.3953': attribute type 30 has an invalid length. [ 470.181275][T18108] : entered allmulticast mode [ 470.298654][T18107] : left allmulticast mode [ 470.668522][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3963'. [ 470.742821][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3965'. [ 470.802649][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3965'. [ 470.848512][T18124] net_ratelimit: 396 callbacks suppressed [ 470.848532][T18124] openvswitch: netlink: Missing valid actions attribute. [ 470.870443][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.334239][T18135] xt_CT: No such helper "pptp" [ 471.632541][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3977'. [ 472.014709][T18165] vxcan1: entered allmulticast mode [ 472.121190][T18168] netlink: 'syz.5.3983': attribute type 11 has an invalid length. [ 472.234484][T18168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.551751][T18176] netlink: 'syz.5.3985': attribute type 1 has an invalid length. [ 472.864774][T18180] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 472.931112][T18180] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 472.948704][T18180] bond1: (slave vcan1): making interface the new active one [ 472.966856][T18180] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 473.003190][T18186] bridge0: port 3(batadv1) entered blocking state [ 473.064722][T18186] bridge0: port 3(batadv1) entered disabled state [ 473.071411][T18186] batadv1: entered allmulticast mode [ 473.120100][T18186] batadv1: entered promiscuous mode [ 473.510285][T15640] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 473.520475][T15640] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 473.554585][T18204] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3991'. [ 473.602290][T18205] xt_HMARK: spi-set and port-set can't be combined [ 474.027824][T18221] FAULT_INJECTION: forcing a failure. [ 474.027824][T18221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.063291][T18221] CPU: 1 UID: 0 PID: 18221 Comm: syz.5.3999 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 474.063324][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.063336][T18221] Call Trace: [ 474.063344][T18221] [ 474.063354][T18221] dump_stack_lvl+0x189/0x250 [ 474.063388][T18221] ? __lock_acquire+0xaac/0xd20 [ 474.063419][T18221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.063447][T18221] ? __pfx__printk+0x10/0x10 [ 474.063480][T18221] ? __might_fault+0xb0/0x130 [ 474.063520][T18221] should_fail_ex+0x414/0x560 [ 474.063549][T18221] _copy_from_user+0x2d/0xb0 [ 474.063577][T18221] ___sys_sendmsg+0x158/0x2a0 [ 474.063609][T18221] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.063693][T18221] ? __might_fault+0xb0/0x130 [ 474.063722][T18221] __sys_sendmmsg+0x227/0x430 [ 474.063757][T18221] ? __pfx___sys_sendmmsg+0x10/0x10 [ 474.063796][T18221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.063845][T18221] ? ksys_write+0x1f0/0x250 [ 474.063866][T18221] ? rcu_is_watching+0x15/0xb0 [ 474.063898][T18221] __x64_sys_sendmmsg+0xa0/0xc0 [ 474.063928][T18221] do_syscall_64+0xf6/0x210 [ 474.063956][T18221] ? clear_bhb_loop+0x60/0xb0 [ 474.063981][T18221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.064000][T18221] RIP: 0033:0x7fe62898e969 [ 474.064019][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.064044][T18221] RSP: 002b:00007fe6298a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.064066][T18221] RAX: ffffffffffffffda RBX: 00007fe628bb5fa0 RCX: 00007fe62898e969 [ 474.064080][T18221] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 474.064095][T18221] RBP: 00007fe6298a7090 R08: 0000000000000000 R09: 0000000000000000 [ 474.064107][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.064127][T18221] R13: 0000000000000000 R14: 00007fe628bb5fa0 R15: 00007ffe7047ffd8 [ 474.064169][T18221] [ 474.389740][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4002'. [ 474.624454][T18232] delete_channel: no stack [ 474.647094][T18231] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4004'. [ 474.862253][T18238] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4007'. [ 474.874675][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4008'. [ 474.925131][T18244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.957931][T18244] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4009'. [ 475.240998][T18254] FAULT_INJECTION: forcing a failure. [ 475.240998][T18254] name failslab, interval 1, probability 0, space 0, times 0 [ 475.277904][T18254] CPU: 0 UID: 0 PID: 18254 Comm: syz.8.4014 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 475.277935][T18254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.277947][T18254] Call Trace: [ 475.277956][T18254] [ 475.277965][T18254] dump_stack_lvl+0x189/0x250 [ 475.278002][T18254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.278030][T18254] ? __pfx__printk+0x10/0x10 [ 475.278057][T18254] ? __pfx___might_resched+0x10/0x10 [ 475.278083][T18254] should_fail_ex+0x414/0x560 [ 475.278110][T18254] should_failslab+0xa8/0x100 [ 475.278146][T18254] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 475.278173][T18254] ? __alloc_skb+0x112/0x2d0 [ 475.278204][T18254] __alloc_skb+0x112/0x2d0 [ 475.278233][T18254] netlink_sendmsg+0x5c6/0xb30 [ 475.278270][T18254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.278297][T18254] ? aa_sock_msg_perm+0x94/0x160 [ 475.278322][T18254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.278344][T18254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.278368][T18254] __sock_sendmsg+0x219/0x270 [ 475.278393][T18254] ____sys_sendmsg+0x52d/0x830 [ 475.278426][T18254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.278463][T18254] ? import_iovec+0x74/0xa0 [ 475.278505][T18254] ___sys_sendmsg+0x21f/0x2a0 [ 475.278534][T18254] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.278614][T18254] ? __might_fault+0xb0/0x130 [ 475.278645][T18254] __sys_sendmmsg+0x227/0x430 [ 475.278680][T18254] ? __pfx___sys_sendmmsg+0x10/0x10 [ 475.278725][T18254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.278783][T18254] ? ksys_write+0x1f0/0x250 [ 475.278805][T18254] ? rcu_is_watching+0x15/0xb0 [ 475.278836][T18254] __x64_sys_sendmmsg+0xa0/0xc0 [ 475.278867][T18254] do_syscall_64+0xf6/0x210 [ 475.278902][T18254] ? clear_bhb_loop+0x60/0xb0 [ 475.278928][T18254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.278955][T18254] RIP: 0033:0x7f4c3578e969 [ 475.278975][T18254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.278992][T18254] RSP: 002b:00007f4c365e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 475.279013][T18254] RAX: ffffffffffffffda RBX: 00007f4c359b5fa0 RCX: 00007f4c3578e969 [ 475.279027][T18254] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 475.279041][T18254] RBP: 00007f4c365e9090 R08: 0000000000000000 R09: 0000000000000000 [ 475.279053][T18254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.279065][T18254] R13: 0000000000000000 R14: 00007f4c359b5fa0 R15: 00007ffff6fa56a8 [ 475.279099][T18254] [ 475.667871][T17977] Set syz1 is full, maxelem 65536 reached [ 475.729266][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4017'. [ 476.574743][T18315] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4032'. [ 476.628242][T18315] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4032'. [ 476.655969][T18315] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4032'. [ 476.672363][T18317] xt_l2tp: invalid flags combination: c [ 476.869895][T18325] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4035'. [ 476.904185][T18327] netlink: 'syz.4.4037': attribute type 4 has an invalid length. [ 476.981610][T18335] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4036'. [ 477.063438][T18335] gretap0: entered promiscuous mode [ 477.547348][T18359] netlink: 'syz.5.4046': attribute type 1 has an invalid length. [ 477.612124][ T5892] IPVS: starting estimator thread 0... [ 477.621720][T18360] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.734825][T18364] IPVS: using max 28 ests per chain, 67200 per kthread [ 477.937289][T18376] netlink: 'syz.8.4051': attribute type 1 has an invalid length. [ 478.049216][T18378] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 478.061155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804aa46800: rx timeout, send abort [ 478.084232][T18378] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 478.094723][T18378] gretap1: entered promiscuous mode [ 478.125562][T18378] gretap1: entered allmulticast mode [ 478.271631][T18388] sit0: left promiscuous mode [ 478.427946][T18388] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.436151][T18388] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.463346][T18398] netlink: 'syz.7.4059': attribute type 1 has an invalid length. [ 478.569491][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804aa46800: abort rx timeout. Force session deactivation [ 478.807636][T18388] batadv_slave_0: left promiscuous mode [ 478.824103][T18388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.094506][T18388] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.115592][T18388] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.133336][T18388] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.142919][T18388] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.204467][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 493.444808][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 497.124205][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.386146][T18426] netlink: 'syz.8.4066': attribute type 1 has an invalid length. [ 500.714207][T18446] xt_addrtype: ipv6 does not support BROADCAST matching [ 500.751796][T18446] netlink: 'syz.4.4070': attribute type 2 has an invalid length. [ 501.029218][T18454] __nla_validate_parse: 9 callbacks suppressed [ 501.029238][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4075'. [ 501.048892][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4075'. [ 501.106944][T18456] xfrm1: entered allmulticast mode [ 501.313102][T18468] netlink: 'syz.7.4079': attribute type 1 has an invalid length. [ 501.819521][T18485] netlink: 'syz.5.4085': attribute type 23 has an invalid length. [ 501.823703][T18487] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4086'. [ 501.908661][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4085'. [ 502.124788][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4087'. [ 502.140101][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4085'. [ 502.750244][ T839] IPVS: starting estimator thread 0... [ 502.856561][T18522] IPVS: using max 23 ests per chain, 55200 per kthread [ 503.116604][T18516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.147767][T18516] batadv_slave_0: entered promiscuous mode [ 503.341163][T18537] syzkaller0: entered promiscuous mode [ 503.347562][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 503.364607][T18537] syzkaller0: entered allmulticast mode [ 503.570414][T18547] xt_CT: No such helper "pptp" [ 503.720181][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4099'. [ 503.877605][T18568] netlink: 'syz.7.4102': attribute type 13 has an invalid length. [ 503.886685][T18568] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4102'. [ 503.925727][T18568] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 503.982754][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4104'. [ 504.000757][T18571] net veth1_virt_wifi : renamed from virt_wifi0 [ 504.030468][ T5838] Bluetooth: hci9: link tx timeout [ 504.037144][ T5838] Bluetooth: hci9: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.506683][T18593] syzkaller0: entered promiscuous mode [ 504.512255][T18593] syzkaller0: entered allmulticast mode [ 504.681397][T18598] xt_CT: No such helper "pptp" [ 506.085658][ T5841] Bluetooth: hci9: command 0x0406 tx timeout [ 506.135686][T18638] tipc: Started in network mode [ 506.156388][T18638] tipc: Node identity 5, cluster identity 4711 [ 506.166330][T18638] tipc: Node number set to 5 [ 506.201519][T18632] bridge0: port 2(bridge_slave_1) entered listening state [ 506.242294][T18640] IPVS: Error connecting to the multicast addr [ 506.326579][T18644] __nla_validate_parse: 4 callbacks suppressed [ 506.326600][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4123'. [ 506.470570][T18649] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4126'. [ 506.552207][T18652] syzkaller0: entered promiscuous mode [ 506.579486][T18652] syzkaller0: entered allmulticast mode [ 506.662287][T18661] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4130'. [ 506.701456][T18657] team0: Device vti0 is of different type [ 506.900432][T18667] netlink: 'syz.9.4132': attribute type 1 has an invalid length. [ 506.909352][T18667] netlink: 'syz.9.4132': attribute type 1 has an invalid length. [ 507.057799][T18672] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4134'. [ 507.081419][T18673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.083852][T18672] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4134'. [ 507.121643][T18672] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4134'. [ 507.147744][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4136'. [ 507.211314][T18678] ipip0: entered promiscuous mode [ 507.398653][T18682] batadv_slave_0: entered promiscuous mode [ 507.897840][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4149'. [ 508.273354][T18716] xt_CT: No such helper "pptp" [ 508.282967][T18725] FAULT_INJECTION: forcing a failure. [ 508.282967][T18725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.304375][T18725] CPU: 1 UID: 0 PID: 18725 Comm: syz.8.4153 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 508.304406][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.304418][T18725] Call Trace: [ 508.304427][T18725] [ 508.304437][T18725] dump_stack_lvl+0x189/0x250 [ 508.304469][T18725] ? __lock_acquire+0xaac/0xd20 [ 508.304498][T18725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.304527][T18725] ? __pfx__printk+0x10/0x10 [ 508.304547][T18725] ? __might_fault+0xb0/0x130 [ 508.304588][T18725] should_fail_ex+0x414/0x560 [ 508.304616][T18725] _copy_from_user+0x2d/0xb0 [ 508.304646][T18725] kstrtouint_from_user+0xc4/0x170 [ 508.304674][T18725] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 508.304720][T18725] proc_fail_nth_write+0x88/0x240 [ 508.304749][T18725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.304785][T18725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.304816][T18725] vfs_write+0x27b/0xa90 [ 508.304863][T18725] ? __pfx_vfs_write+0x10/0x10 [ 508.304889][T18725] ? __fget_files+0x2a/0x420 [ 508.304921][T18725] ? __fget_files+0x3a0/0x420 [ 508.304945][T18725] ? __fget_files+0x2a/0x420 [ 508.304983][T18725] ksys_write+0x145/0x250 [ 508.305011][T18725] ? __pfx_ksys_write+0x10/0x10 [ 508.305039][T18725] ? do_syscall_64+0xba/0x210 [ 508.305072][T18725] do_syscall_64+0xf6/0x210 [ 508.305099][T18725] ? clear_bhb_loop+0x60/0xb0 [ 508.305125][T18725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.305145][T18725] RIP: 0033:0x7f4c3578d41f [ 508.305165][T18725] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 508.305183][T18725] RSP: 002b:00007f4c365e9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 508.305207][T18725] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c3578d41f [ 508.305222][T18725] RDX: 0000000000000001 RSI: 00007f4c365e90a0 RDI: 000000000000000c [ 508.305234][T18725] RBP: 00007f4c365e9090 R08: 0000000000000000 R09: 0000000000000000 [ 508.305247][T18725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 508.305259][T18725] R13: 0000000000000000 R14: 00007f4c359b5fa0 R15: 00007ffff6fa56a8 [ 508.305295][T18725] [ 508.652693][T18735] netlink: 'syz.8.4158': attribute type 1 has an invalid length. [ 508.755518][T18740] netlink: 'syz.9.4161': attribute type 1 has an invalid length. [ 508.763452][T18740] netlink: 'syz.9.4161': attribute type 1 has an invalid length. [ 508.806093][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 508.806127][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 508.812239][ T5835] Bluetooth: hci7: command 0x0419 tx timeout [ 508.990537][T18749] syzkaller0: entered promiscuous mode [ 509.018681][T18749] syzkaller0: entered allmulticast mode [ 509.032517][T18754] FAULT_INJECTION: forcing a failure. [ 509.032517][T18754] name failslab, interval 1, probability 0, space 0, times 0 [ 509.085074][T18754] CPU: 0 UID: 0 PID: 18754 Comm: syz.9.4165 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 509.085104][T18754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.085115][T18754] Call Trace: [ 509.085123][T18754] [ 509.085132][T18754] dump_stack_lvl+0x189/0x250 [ 509.085169][T18754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.085196][T18754] ? __pfx__printk+0x10/0x10 [ 509.085220][T18754] ? __pfx___might_resched+0x10/0x10 [ 509.085246][T18754] should_fail_ex+0x414/0x560 [ 509.085273][T18754] should_failslab+0xa8/0x100 [ 509.085302][T18754] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 509.085329][T18754] ? __alloc_skb+0x112/0x2d0 [ 509.085359][T18754] __alloc_skb+0x112/0x2d0 [ 509.085387][T18754] netlink_sendmsg+0x5c6/0xb30 [ 509.085422][T18754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.085450][T18754] ? aa_sock_msg_perm+0x94/0x160 [ 509.085475][T18754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.085499][T18754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.085522][T18754] __sock_sendmsg+0x219/0x270 [ 509.085548][T18754] ____sys_sendmsg+0x505/0x830 [ 509.085589][T18754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.085627][T18754] ? import_iovec+0x74/0xa0 [ 509.085658][T18754] ___sys_sendmsg+0x21f/0x2a0 [ 509.085688][T18754] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.085758][T18754] ? __fget_files+0x2a/0x420 [ 509.085784][T18754] ? __fget_files+0x3a0/0x420 [ 509.085824][T18754] __x64_sys_sendmsg+0x19b/0x260 [ 509.085855][T18754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.085913][T18754] ? do_syscall_64+0xba/0x210 [ 509.085943][T18754] do_syscall_64+0xf6/0x210 [ 509.085970][T18754] ? clear_bhb_loop+0x60/0xb0 [ 509.085994][T18754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.086014][T18754] RIP: 0033:0x7fabd1b8e969 [ 509.086033][T18754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.086049][T18754] RSP: 002b:00007fabd2ad8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.086072][T18754] RAX: ffffffffffffffda RBX: 00007fabd1db5fa0 RCX: 00007fabd1b8e969 [ 509.086087][T18754] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 509.086100][T18754] RBP: 00007fabd2ad8090 R08: 0000000000000000 R09: 0000000000000000 [ 509.086113][T18754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.086125][T18754] R13: 0000000000000000 R14: 00007fabd1db5fa0 R15: 00007ffcc55fd3e8 [ 509.086158][T18754] [ 509.576494][T18757] xt_CT: No such helper "pptp" [ 509.802143][T18785] netlink: 'syz.4.4174': attribute type 1 has an invalid length. [ 509.838559][T18785] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4174'. [ 509.870978][T18785] netlink: 'syz.4.4174': attribute type 1 has an invalid length. [ 509.936054][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 510.210945][ T5841] block nbd3: Receive control failed (result -32) [ 510.315637][T18808] ip6t_srh: unknown srh invflags 5F00 [ 510.564688][ T31] INFO: task syz.1.2672:14053 blocked for more than 143 seconds. [ 510.582712][ T31] Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 [ 510.603046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.621493][T18818] vlan2: entered promiscuous mode [ 510.629562][ T31] task:syz.1.2672 state:D stack:25496 pid:14053 tgid:14049 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 510.647860][T18818] bridge0: entered promiscuous mode [ 510.649995][ T31] Call Trace: [ 510.657496][ T31] [ 510.668118][T18815] xt_CT: No such helper "pptp" [ 510.671544][ T31] __schedule+0x16e2/0x4cd0 [ 510.680820][ T31] ? __lock_acquire+0xaac/0xd20 [ 510.689818][ T31] ? schedule+0x165/0x360 [ 510.719133][ T31] ? __pfx___schedule+0x10/0x10 [ 510.732760][ T31] ? schedule+0x91/0x360 [ 510.753185][ T31] schedule+0x165/0x360 [ 510.761877][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.781606][ T31] __mutex_lock+0x724/0xe80 [ 510.786615][ T31] ? __mutex_lock+0x51b/0xe80 [ 510.791730][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 510.798987][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 510.806470][ T31] ? __nlmsg_put+0xef/0x1b0 [ 510.811103][ T31] ? genlmsg_put+0x137/0x2e0 [ 510.818659][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 510.824973][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 510.831247][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 510.837368][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 510.843302][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 510.849736][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.856573][ T31] genl_rcv_msg+0x60e/0x790 [ 510.861222][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.870399][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 510.877617][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 510.882785][ T31] ? __copy_skb_header+0xa7/0x550 [ 510.884596][ T5841] Bluetooth: hci7: command 0x0419 tx timeout [ 510.889474][ T31] netlink_rcv_skb+0x219/0x490 [ 510.898945][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.906088][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.911581][ T31] ? down_read+0x1ad/0x2e0 [ 510.918445][ T31] genl_rcv+0x28/0x40 [ 510.922493][ T31] netlink_unicast+0x75b/0x8d0 [ 510.928117][ T31] netlink_sendmsg+0x805/0xb30 [ 510.932947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.938906][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 510.944610][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.949972][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.955960][ T31] __sock_sendmsg+0x219/0x270 [ 510.960667][ T31] ____sys_sendmsg+0x505/0x830 [ 510.967039][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.972367][ T31] ? import_iovec+0x74/0xa0 [ 510.977555][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 510.982282][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.004478][ T31] ? __fget_files+0x2a/0x420 [ 511.012880][ T31] ? __fget_files+0x3a0/0x420 [ 511.019432][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 511.024762][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.030292][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.035333][ T31] do_syscall_64+0xf6/0x210 [ 511.039980][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.046377][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.051094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.057647][ T31] RIP: 0033:0x7efcdf78e969 [ 511.062166][ T31] RSP: 002b:00007efce05a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.071053][ T31] RAX: ffffffffffffffda RBX: 00007efcdf9b6080 RCX: 00007efcdf78e969 [ 511.080192][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 511.088827][ T31] RBP: 00007efcdf810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.097417][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.106230][ T31] R13: 0000000000000000 R14: 00007efcdf9b6080 R15: 00007ffe1b1d2638 [ 511.114918][ T31] [ 511.158774][ T31] [ 511.158774][ T31] Showing all locks held in the system: [ 511.177655][ T31] 1 lock held by khungtaskd/31: [ 511.182641][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.193008][ T31] 2 locks held by getty/5590: [ 511.198131][ T31] #0: ffff8880304fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.209632][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 511.220774][ T31] 2 locks held by syz.3.603/7765: [ 511.227718][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.236827][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 511.247976][ T31] 3 locks held by kworker/u8:17/10941: [ 511.253472][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 511.267405][ T31] #1: ffffc9000b40fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 511.278610][ T31] #2: ffffffff8f2ea8d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 511.288458][ T31] 2 locks held by syz.1.2672/14053: [ 511.293801][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.302061][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 511.312234][ T31] 2 locks held by syz.0.2860/14630: [ 511.317781][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.328028][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 511.338875][ T31] 3 locks held by kworker/u8:28/15641: [ 511.344755][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 511.357059][ T31] #1: ffffc9000b1e7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 511.368831][ T31] #2: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 511.378445][ T31] 2 locks held by syz.2.3212/15756: [ 511.384335][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.392631][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 511.403497][ T31] 2 locks held by syz.6.3504/16604: [ 511.409277][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.418154][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 511.430590][ T31] 2 locks held by syz.4.4186/18814: [ 511.436600][ T31] #0: ffff888058a96208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 511.447690][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x960 [ 511.457176][ T31] 3 locks held by syz.9.4187/18818: [ 511.462404][ T31] #0: ffffffff8f80fb10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 511.472386][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 511.481784][ T31] #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 511.493176][ T31] [ 511.497279][ T31] ============================================= [ 511.497279][ T31] [ 511.506931][ T31] NMI backtrace for cpu 1 [ 511.506949][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 511.506973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.506984][ T31] Call Trace: [ 511.506993][ T31] [ 511.507002][ T31] dump_stack_lvl+0x189/0x250 [ 511.507032][ T31] ? __wake_up_klogd+0xd9/0x110 [ 511.507059][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.507087][ T31] ? __pfx__printk+0x10/0x10 [ 511.507120][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 511.507146][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 511.507165][ T31] ? _printk+0xcf/0x120 [ 511.507190][ T31] ? __pfx__printk+0x10/0x10 [ 511.507213][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.507237][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 511.507262][ T31] watchdog+0xfee/0x1030 [ 511.507290][ T31] ? watchdog+0x1de/0x1030 [ 511.507326][ T31] kthread+0x711/0x8a0 [ 511.507354][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.507378][ T31] ? __pfx_kthread+0x10/0x10 [ 511.507404][ T31] ? __pfx_kthread+0x10/0x10 [ 511.507426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.507448][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.507473][ T31] ? __pfx_kthread+0x10/0x10 [ 511.507496][ T31] ret_from_fork+0x4b/0x80 [ 511.507516][ T31] ? __pfx_kthread+0x10/0x10 [ 511.507539][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.507583][ T31] [ 511.507590][ T31] Sending NMI from CPU 1 to CPUs 0: [ 511.665145][ C0] NMI backtrace for cpu 0 [ 511.665163][ C0] CPU: 0 UID: 0 PID: 15639 Comm: kworker/u8:26 Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 511.665183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.665195][ C0] Workqueue: bat_events batadv_nc_worker [ 511.665220][ C0] RIP: 0010:mark_lock+0x3c/0x190 [ 511.665245][ C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 c4 b7 de 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 e0 26 1e 93 eb 48 83 3d db 46 [ 511.665258][ C0] RSP: 0018:ffffc9000b1cf8b8 EFLAGS: 00000007 [ 511.665272][ C0] RAX: 000000000000073f RBX: 0000000000000008 RCX: 0000000000000008 [ 511.665282][ C0] RDX: 0000000000000008 RSI: ffff88801bf84740 RDI: ffff88801bf83c00 [ 511.665293][ C0] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000000 [ 511.665303][ C0] R10: 0000000000000000 R11: ffffffff8b24c187 R12: 0000000000000000 [ 511.665313][ C0] R13: 0000000000000000 R14: ffff88801bf84760 R15: ffff88801bf84740 [ 511.665324][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 511.665338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.665348][ C0] CR2: 00007f44c1b80178 CR3: 000000007a846000 CR4: 00000000003526f0 [ 511.665365][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.665374][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.665384][ C0] Call Trace: [ 511.665391][ C0] [ 511.665400][ C0] __lock_acquire+0x68c/0xd20 [ 511.665424][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 511.665442][ C0] lock_acquire+0x120/0x360 [ 511.665462][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 511.665481][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 511.665499][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 511.665516][ C0] _raw_spin_lock_bh+0x36/0x50 [ 511.665533][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 511.665550][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 511.665568][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 511.665591][ C0] batadv_nc_worker+0x328/0x610 [ 511.665609][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 511.665625][ C0] process_scheduled_works+0xade/0x17a0 [ 511.665650][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.665681][ C0] worker_thread+0x8a0/0xda0 [ 511.665705][ C0] kthread+0x711/0x8a0 [ 511.665726][ C0] ? __pfx_worker_thread+0x10/0x10 [ 511.665740][ C0] ? __pfx_kthread+0x10/0x10 [ 511.665758][ C0] ? __pfx_kthread+0x10/0x10 [ 511.665775][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.665800][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.665819][ C0] ? __pfx_kthread+0x10/0x10 [ 511.665836][ C0] ret_from_fork+0x4b/0x80 [ 511.665853][ C0] ? __pfx_kthread+0x10/0x10 [ 511.665871][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.665892][ C0] [ 511.666353][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 511.953041][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00182-g293e38ff4e4c #0 PREEMPT(full) [ 511.964868][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.974939][ T31] Call Trace: [ 511.978318][ T31] [ 511.981258][ T31] dump_stack_lvl+0x99/0x250 [ 511.985871][ T31] ? __asan_memcpy+0x40/0x70 [ 511.990504][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.995724][ T31] ? __pfx__printk+0x10/0x10 [ 512.000331][ T31] panic+0x2db/0x790 [ 512.004252][ T31] ? __pfx_panic+0x10/0x10 [ 512.008682][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 512.014073][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 512.019458][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 512.025638][ T31] watchdog+0x102d/0x1030 [ 512.029981][ T31] ? watchdog+0x1de/0x1030 [ 512.034435][ T31] kthread+0x711/0x8a0 [ 512.038521][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.043212][ T31] ? __pfx_kthread+0x10/0x10 [ 512.047829][ T31] ? __pfx_kthread+0x10/0x10 [ 512.052431][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.057640][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.062849][ T31] ? __pfx_kthread+0x10/0x10 [ 512.067453][ T31] ret_from_fork+0x4b/0x80 [ 512.071882][ T31] ? __pfx_kthread+0x10/0x10 [ 512.076488][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.081276][ T31] [ 512.084588][ T31] Kernel Offset: disabled [ 512.088915][ T31] Rebooting in 86400 seconds..