last executing test programs: 2m1.741846396s ago: executing program 4 (id=1068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = gettid() r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4a23, 0x1c5, @empty, 0x5}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00850000000000756574680000000004000013000000000063237c9362f67bfe373ca285bd293f6dc2ffff14d92581637d4ff10679773fecb33e036eda0dc3ecf51367f300cdbe305779568c038570891c0764b4db17d6b823e8276d67c31023f7d08413913cc2b1353a008aaa28ba7ae761ad16ebf55554c94d9ff428277d248d9b75f6bf1c875db9dcd4ff126a1d8a18", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) socket$rds(0x15, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071106c000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) close(r9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtclass={0x2c, 0x28, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0xfff1, 0x7}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) socket$kcm(0x11, 0x3, 0x0) 2m1.596443944s ago: executing program 1 (id=1069): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000580)=0xc) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0xfffffffffffffef6) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000300)=""/215, 0xd7}], 0x5, &(0x7f0000000480)=""/129, 0x81}, 0x12003) 2m1.534702208s ago: executing program 4 (id=1070): accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x2000, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000050) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f00000002c0), &(0x7f0000000400)=r6}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000049c0)=ANY=[@ANYBLOB="2800000040000701feffffff00000000017c0000040042800c0001800600f92a88210da17d705e7d"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m0.926160105s ago: executing program 4 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbf9, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c11}, 0x4040140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa822d8289a454b4dcd43353fde6d388"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b2a771cd499e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "47f6d7d885692f8a555ec5d9c60398b8"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4a4c92e41ef427f57640833d879a3658"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ee42a7fa76373a32916741bbd3c12e0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "ea9515f1a517e9cf15c19a8989350a14"}]}, 0xb8}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = getpid() sendmmsg$unix(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8f", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r7}}}], 0x20, 0x80}}], 0x1, 0x0) syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/mnt\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x2, 0xfe, 0x0, {0x0, 0x0, 0x0, r8, 0x5d821}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x24008880) 2m0.739094193s ago: executing program 4 (id=1080): gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x400, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x10448) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000280)="a5", 0x1}], 0x1}}], 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf251000000008000100", @ANYRES32, @ANYBLOB="050010"], 0x44}, 0x1, 0x0, 0x0, 0x8854}, 0x24000040) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000a30000000060a0b04000000000000000002000007040004800900010073797a30000000000900020073797a3220000019140000001100010000000000000000000100000af35286e566c1b6f934dd9a2c6349fb58a68a52"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800070303000200140000004514000000000000082f9078ac141c0cffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1020000590780000"], 0x36) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m0.554385641s ago: executing program 3 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYBLOB="e00000026401010000000000100000000000000b"], 0x30}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="00012dbd7000fcdbdf250900000008000400ff03000008000300020000000800030005000000080002000000000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x92}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYBLOB="e00000026401010000000000100000000000000b"], 0x30}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="00012dbd7000fcdbdf250900000008000400ff03000008000300020000000800030005000000080002000000000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x92}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) 2m0.304315106s ago: executing program 3 (id=1084): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40890, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @mcast1}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f0000000300)={r5, 0x10, 0x7}, 0x8) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x0, 0x0, 0x0, 0x2, 0x9b, &(0x7f0000001c40)=""/155, 0x0, 0x80, '\x00', 0x0, @fallback=0x1e}, 0x94) 2m0.191056551s ago: executing program 1 (id=1085): r0 = socket$inet(0x2, 0x6, 0x945a) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x66, &(0x7f0000000000)='ip6tnl0\x00', 0x0, 0x2, 0x3}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000ffffffff8500000028000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff80ffb702000008000000b703000002000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x80000977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m59.625999026s ago: executing program 0 (id=1086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x83}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x83}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) 1m59.337751875s ago: executing program 0 (id=1087): r0 = socket(0x1e, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="100000000000000000000000000000000000000048f94b242d897afa0f6acb9cb0e7bc9cf963be4d2e4008f2b0c086b10acc4b66fc72d53f52617b9d4533d1670a9aabfec0898835ab597011e8472172c26abb32dc0d011e272c20d390c0a40b1eb1056814b59d127a1dbcc1f78749dc4a628226118b90decf78f420a8a1cb6de0cdbee22277da793b68a2850f8e0ed98200"/156, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1) ppoll(&(0x7f0000000180)=[{r7, 0x4a6}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08"], 0x80}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000090601010010000000000000070000090900020073797a310000000005000126ce72055c1083856e8900070000000800094000000005040008807cadf4cbd8755602e502b6535254f61f7ad5420716373633704ed2e6c1cccf335ba5d27a1152810528ddd377c88e6bbdb33ad0292d5168d1675f2893712b357b4333b22f82cb52f40e4e88dfae7908de67d43b4ac65400a3217d2235957ff5ad06bbd10939cb51e4d4b9ce605b2da5668140732c7e136d3e88327454a6f9d6"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000008000740010000012c0006801400040000000000000000000000000000000001140005000000000000710e"], 0xc0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1m59.082965687s ago: executing program 1 (id=1089): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sendfile(r4, r3, 0x0, 0x401) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m59.08195962s ago: executing program 2 (id=1090): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000240)=@xdp={0x2c, 0x0, r1, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x2004c856) 1m59.013114095s ago: executing program 0 (id=1091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x2, 0x70bd68, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x10}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r0, 0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r0, 0x0, 0x4}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYRES64=r2], 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0xcdbf0d3388237035, 0x10}, {0xffe4, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xd}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000000}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x99, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xfffffffd}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x2b1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x98}}, 0x20004015) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6}) (async) ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6}) unshare(0x22020600) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 1m58.94322729s ago: executing program 3 (id=1092): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x9, 0x4, 0xa8}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a311100000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a311100000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32=r1, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea8"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 1m58.871368663s ago: executing program 1 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x600) 1m58.812737556s ago: executing program 2 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x20) unshare(0x2a060400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) 1m58.788312032s ago: executing program 0 (id=1095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r4 = socket(0x26, 0x3, 0x800) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f00000002c0)=@phonet={0x23, 0xae, 0x0, 0x1}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)="acf0d7fce281467101ffea08f266a98eab20249cdf9dbfab0cf34c0eae96a94d45fc50dec45d24665c1edcf2179c1b98ebf86fadeccbc6a876353516be2e9f26fbfaca9d79ceaff3fe8b7108d1fdf923a5d9d032ab50e1981f7569494bb68c493444c752320bdf974e537be97a3209", 0x6f}, {&(0x7f0000000440)="ef28974e3747ef16a58b8458ca5c04a56eb8fdde5d0c3507a263ca8c9bc33422db7bc93bcb1aff084da125cbe2da6159669daac90a0e40c79287ea24b03aeb56324896a393670621728f071256d7dfb22825c76d5d30591e2b4eb6fe798d72190bce4d2120", 0x65}, {&(0x7f00000004c0)="fab32aa240c63f69e66b20ea153436a9d11627b321bc41117687fe07e596c8e83ff26435c304b56f2c8b327490471963f8080dd780a1aa47bb76c3f633f0206e91f9cd39f82bf455945109c6994044293324658272c58a936f33ad407ed41eec6c48127a06e2145cf35e826ec8836c3867e8dc8ba443bf4ce02904d1a23afd14da59f797cc642b4059eabcf5152e5e98536371e4e40619bf13326525369dbeaa8d75f90d91b44ff70915dc37e1a3cbb2ec713336f9449273", 0xb8}, {&(0x7f0000000580)="ccff19096d6f3a0701d977a9b91645ad13be350e6a43199181a8d0a3a5defa6ce928ae4d73e3f25f8ad181ca65ecca8b31fe7c664f3c8374719ec984d01896efb960ec841fec7def25e85b194ac8bb698be35ffb4b2f1b9d055ba5f6a7084dcdfa04152275c121bba2ef64517d580a24352f9aad0573567ba91780c16f19f0fe04a0762e654a801e7dd62853f96b600e75b46aea8805d8991886f7ea62a86c2230f6cad2f2769ba59249623537781e6af437f91adf9e2730b9346d", 0xbb}, {&(0x7f0000000640)="52245e163a51d09951edfafa50349749c2ab4a43a43ae71ccdc0a12678854fdd39877ba02121aaa701fa1b312a026a9ed8908a8b92bc9a9da51215a67cadbea5f5e1a2e058d901c8aba0d35df53e5d10b87c6bc0fea57b75413700247f5079ebc1968eabdd", 0x65}], 0x5, &(0x7f0000000740)=[{0x18, 0x29, 0x7, "4b807601c85c"}], 0x18}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x98, 0x1e0, 0x0, 0x310, 0x310, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 1m58.737104081s ago: executing program 3 (id=1096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0x211, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x200048c4) 1m58.686975797s ago: executing program 1 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcfffb1408"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000340)={@val, @void, @llc={@llc={0x7e, 0xfc, "6dfb", "f9e533a784a761904feaa7cf61db4a7fe25b40e3cd9dfbd6014d65857d414029899f28f11c47736b5fc7b9573f4497a480489915f9d2e837c2f81bb91700b8cffa46daab1c359885639fe892736d28399cdf719b951d9eda3ba6965adce1b8d1fa849f6362c287222b8b961afa89beb5e4a7ab5f9a138c4773d56b"}}}, 0x83) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2404c004) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socket(0x11, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$sock(r6, &(0x7f00000006c0)={&(0x7f0000000240)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="658fba1ee32a67e5f6ed4fc331c6e9daedd91b85297a6d1274bbc5d8c167ea20b3651b0541134768cd1a0cecc9ff16ed19848c965168e7ed944e330fd009bdae251bb30854decf56955f14c0", 0x4c}, {&(0x7f0000000340)="f6466ea32d2d366ac1dd98880f1eb1c3f218ea930601815cd50ebe8ee7d37a8625bd96ec0a3ecaeb6b802f7e216ae31df026f38c53269d46208071f040de4a4f320d8abf5517f2e24dd04025b92837d8bf488e5ee3a69b6b989879b52fa9ef21f47d1ad17e147ee0dbae6ee8f4b245794d311023976d5a098b21cd7e55d3793abc8ffbef62f1c6", 0x87}, {&(0x7f0000000400)="2b3d0176657a1a7a82be91721fbccb31dc9b29953c9e54621e2911ca50753a16dd04a8a8ce2d02830139d0842870401997102b545e4ec2b4a6f4c543f91baab5dd8a74c169553f385fc23aaa7768ce6917d8f73dff8c9785e339c29c16f93cac432ce864bd1218f57387ca592aed34d98af5d8028dc0733a7c9a35c5bdb06000170dd48d1f14e459efb03a0d0a31acade97107ef6adfe5b0edbceeb92995", 0x9e}, {&(0x7f00000004c0)="b39bdf4d496a1f06690471aeae407daf91fdd3c42816", 0x16}, {&(0x7f0000000580)="e18afaee80545121539fb9c6dec7887dc379106c6c5333ee7c8473d112454626ea23b642a7cf66a9b72e7d753ae5b9719ea2eec63a1c64b47a3f07633ed9b8d7770d239af756699e33f7d3f0", 0x4c}], 0x5, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0x30}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m58.629646278s ago: executing program 3 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000ec0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x60, 0x0, @wg=@data={0x4, 0x6, 0x9, "c89ad4bdec297dfea24fab7de9d60c891c8787965d4e403ae791e5b72d4612e82bec29048506a23db228cf347b04b29e64f0bf409606d7510bd787f3645cdac2d2fc949e40678df2"}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "7c469ce520d86f314e81332d39fe3c0104d3ae4cfa3ab623", "faba3356eb556226ad5913db363bb092dfaf2990cce595da7b08b7d7fac1c181"}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140e000ee010c00018008000140e0000002050014002000000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x6, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) 1m58.614981832s ago: executing program 2 (id=1099): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000780)={0x1d, r1}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000700)={&(0x7f0000000040), 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/184, 0xb8}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000500)=""/85, 0x55}], 0x8, &(0x7f0000000600)=""/223, 0xdf}, 0x40000044) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 1m58.474689212s ago: executing program 3 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000300", @ANYRES32=r2], 0x34}}, 0x4008000) unshare(0x6a040000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000004f100000800090002"], 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040049) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000400)='GPL\x00', 0x410080, &(0x7f0000000600)={@_ha_fsid={[0x9, 0xfffffffe]}, {0xff, 0x400, 0x9938, 0xf}}, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x80}) openat$cgroup_procs(r6, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x358, 0x238, 0x238, 0x358, 0x238, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x36a41ab9, 0x0, 0x0, 0x7], 0x0, [], 0x1, 0x2, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="640000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d000300"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m58.473250538s ago: executing program 2 (id=1101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x2a060400) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x6, 'xfrm0\x00', {0x2}, 0x6}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) (fail_nth: 1) 1m58.187642952s ago: executing program 2 (id=1102): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9463, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xe, 0xfed, &(0x7f0000001cc0)=""/4077, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x830, 0x0, 0x678, 0x350, 0x1d0, 0x350, 0x760, 0x760, 0x760, 0x760, 0x760, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xff], 'virt_wifi0\x00', 'hsr0\x00', {}, {}, 0x2, 0x0, 0x6}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [0xffffff00], [], 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}, {}, 0x3b, 0x0, 0x0, 0x12}, 0x0, 0x138, 0x180, 0x7400, {}, [@common=@srh1={{0x90}, {0x0, 0x92, 0x9, 0x7, 0x6, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff0001fe, 0x0, 0x0, 0xffffffff], 0x400, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x38, 0x12, 0xd7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x401, 0x1ff], 0x9, 0x2, 0x0, [@local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @empty}], 0x9}}, @common=@frag={{0x30}, {[0x80000000, 0x7], 0x7, 0xa}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0xff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="d04ec40b6e73b2bd37d173525e32d231d7a9a4ec17f51119722d4076533dba13aa9210abc56f876d58b2c2f4dc209f8923d2d1782115b04fa2cde21e5abbf4d69df8c213b86168b37294df3572fe", 0x4e) 1m58.152888702s ago: executing program 2 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmsg(r3, &(0x7f0000001840)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000200)=""/130, 0x82}, {0x0}], 0x2}, 0x20) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000440)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a0001002000000b00000014000100fc0200"/35], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4}, 0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x98}}, 0x20040040) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x3, 0x1}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="c3100000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100ff00000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x58}}, 0x8000) 1m57.625589837s ago: executing program 4 (id=1104): r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="4efa74510d39973d5922e0059f63980e", 0x10}, {&(0x7f0000000040)="da56650426d68c1c76ab0479fb33be711e9c4bcb36a6ea528c45587fe51eff5fa850d93c76b729328649651867906f590d24d8b093c517ce5c2159570c1d9882da2e39bbdced89139fab303cca7ef017e5415553a5ccc5d20d9381b11efd4a1ad9", 0x61}, {&(0x7f00000000c0)="167f794ce81bd14da0624464becd03efc0ea7cde316422ec550c12e6f832b5570ee78bed11a05f19b88ca4cb0fe3b8153f99ada7289a0408e7ae1222b4de301637943b8314cf8c973f5278cd829151adaa5da061a663128c70a3c2541d1898ed461218f0380da901d5236da8e3e63b2202049e871ab408edd4b0575dece5786327924a69e7f726a3c2a2056afdea5b62d5ed588dde0edff70c856375", 0x9c}, {&(0x7f0000000180)="db115d23a89dfdff7accbad45d1ee40d174caabce222e5d55b8919d4dbef3a14bbd1cbc8be33a7d2", 0x28}, {&(0x7f00000001c0)="354ed319d85d5aee6bb0d8e52d857e114cbfaf9dc4ea62e10d34a6b93d8e214402f98eee376cf110735393ef867477a3f552a7ae1a1bc7f14493cdb33e3b559add26", 0x42}, {&(0x7f0000000240)="3eddfe3a6ad7850fe8bba5a554a6f03f274750eea3f845332a617794d7cd9d5eab4c7225a9045a8b77b08e44700ca4e57ab4575ad837ceabe99ff963394fde597f11367d646849ff24278ddbd3bbc8314705beee007ca6131190e526aaa8f6c18758e95fb8af4b257639cfc793", 0x6d}, {&(0x7f00000002c0)="ff30a5d42325435d108eb25aaa640a2449f3d5f5c1b1e65b5d247db74a0831e49f31f3ce93860e9bb6bfb2b06e7bf55004982c56e76a0bf10e8f7605b0432fdd7ce534a811add20fc86f4b1e24664e91929e13e058b54e2c3dda126266be40a788ad4cea69bcebbb3dd479859ecce834014384c113d309514bb85aa5dd50f4f35e437d2deafe986882a8351513eff27a51c2b244d1d926", 0x97}], 0x7, &(0x7f0000000400)=[{0x30, 0x13, 0xe9d9, "4bc4529c4047f9f96e0507583a98d685c555349656f6a1a529b261f78a4679"}, {0x50, 0x108, 0x3, "9bbf7b70ff8b83657f39979f866cf199a1beb7f231819d20659e92681ea2cc1fdc5e4ecf6fe4d770590e65de03de9ad677b734d699de4cfcbd2a4b44"}, {0x20, 0x29, 0x8, "903d7e9bb09d4b39db59"}, {0x20, 0x114, 0x0, "5a8207cd8714e29616b11c"}, {0x68, 0x10d, 0x7, "e08083bcc3c5b5c0e479c7a90a09deb1b825e87cc750dcf2efdfdf7c60511aa37d7505dac9779ce2c8c337ee7d4cf5c4465f662d5e10d3841e068cb8c4c15d0c3f0800604fcfd4f3f29b7c10044d03ae4b"}, {0xa0, 0x113, 0x9, "a2cd9f4f2e8cd260b708a7e1c31b89c5e9ae4f3d6903b3fa92c50502e0bd844af3885d3d74494a0c2919b4dba90dfaebf34cd8cc7dbf7c8b0df61babf3d565c5100a3209fd586e3af65aea8f2252452bc1988ae0e6ff432024956598c8f4e0b2799abc3a099b42948ddbcae586156c474ea77b5c31e82df3b683cb6914ea3e22da24ede11432915a92c0548f61a628"}], 0x1c8}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x85) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r2, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fff, 0x57}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x1, 0x0, 0x0, 0xfff, 0x37bd, 0xffff, 0xfffc]}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c002}, 0x40000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040819}, 0x20040088) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x40085) sendmsg$nl_route_sched(r0, &(0x7f0000003b00)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ac0)={&(0x7f0000000ec0)=@delchain={0x2bec, 0x65, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xffe0}, {0x5, 0xb}, {0x6, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1754, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_FW_ACT={0x1a4, 0x4, [@m_ctinfo={0x104, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xa}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10c}]}, {0xc8, 0x6, "ce96970f61827d0afe1975a0282883ba2ff96e2c40ec2efb4a0c0cd0740f9e2798a46e557fb6c7cb9ba7f9b6e92f79be5634472709d5f034c9a1f9ca69b0343577191f6bc23a71d8fce10db61242e6602c1aa9edf7fec77d01609a712f8fc3bd2c74c8e67c57436caff7904b3e8e85a8776ac6685efc864dfe6cc0393c16d90558b2748c39258f875d35e89a8fd5591925f94641e62c283805ecea63d63a191fac20864c090c4a08ced25d313308a3709218840fcf7969bb06084ffc811944b7d58f4266"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x9c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0xfffffff7, 0x0, 0x0, 0x1}, 0x4}}]}, {0x53, 0x6, "777ce3e3b179e34172989ea779030cee7f518ea8931da9af6e853df05a9d1b8ae6333d4025bc053075493d1c91543640ee0f840d47439b83fac29bd02a51f19c14e61250e270c24a8514a1dbefe896"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_POLICE={0x1064, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffff, 0x5, 0x0, 0x2, 0x3, 0xf, 0xedd, 0x3, 0x2, 0x6cc, 0xffffffff, 0x2560dd14, 0x3, 0x400, 0xd54, 0x9, 0x5, 0x9, 0xffffffff, 0x622, 0x8, 0x1, 0x4, 0x7fff, 0xe9b, 0x3ff, 0x40, 0x6, 0x2, 0x4, 0x4, 0x101, 0x4, 0x5, 0x3fe0000, 0x5, 0x5, 0x5, 0xd, 0x6, 0x200, 0x7, 0x2, 0x5ea, 0x6, 0x4, 0xffffffff, 0x3a, 0x2, 0x7f, 0x0, 0x3, 0x6, 0x7ff, 0x3, 0x9, 0x1, 0x665, 0xe, 0xfffffff7, 0xa, 0x5, 0xffffffff, 0xfffffff7, 0x0, 0x80, 0x3, 0x5, 0x64, 0x3, 0x0, 0x6, 0xe66e, 0x9, 0x3, 0x821, 0x7, 0xffff, 0x2, 0x9, 0x7, 0x1, 0x10000, 0x9, 0x70, 0x80000001, 0xb7, 0x29c, 0x7fffffff, 0x1, 0x1, 0x3, 0xe, 0x0, 0x5, 0xe, 0x7, 0x9, 0x1, 0xffff0000, 0x3, 0x0, 0xfffff491, 0x1, 0x8, 0xf87, 0x200, 0x4, 0x9, 0xfcfd, 0x1ff, 0x1, 0x5, 0xed, 0x6e9, 0xd8, 0x4, 0x6, 0x1, 0x375e, 0x9, 0xa2, 0x6, 0x52a, 0x5, 0x6, 0x2, 0x9, 0x8, 0x8000, 0x81, 0x3, 0x5, 0xfffffff8, 0x2, 0x7, 0x0, 0x3, 0xff, 0x4, 0x9, 0x0, 0x7, 0x3, 0x5, 0x7, 0x1, 0x1, 0x2c0, 0x7ff, 0x6, 0x7, 0x4, 0x1000, 0x2, 0x26, 0x1092, 0x4, 0x3, 0x80000001, 0x10, 0x81, 0xa, 0x1, 0x9, 0x800, 0x5, 0x5, 0x5, 0xf2b, 0x7, 0x5, 0x1, 0x9, 0x3, 0x2, 0x9, 0xfff, 0x6, 0xa, 0x9, 0x7, 0x3, 0xd, 0xfffff800, 0x777b34f7, 0x4, 0x6, 0x4, 0xa41, 0x5, 0xee8, 0x1cdc, 0x84, 0x0, 0x80000000, 0xfffffe00, 0x5, 0x9, 0x4, 0x7, 0x3ff, 0x9, 0x8001, 0x7, 0x4, 0x9, 0x8, 0x7, 0x7, 0x4, 0x3, 0x10, 0x17ad, 0x3, 0x1, 0x4, 0xfffff15e, 0x9, 0xc, 0x37e, 0x1, 0x1, 0xffef, 0x4, 0x8, 0x8040, 0x1, 0x800, 0x7, 0x80000000, 0x4, 0x9, 0x1, 0x5276, 0x80, 0x3, 0x40, 0x7ff, 0xfffffffb, 0x10, 0xa217, 0x4, 0x1000, 0x90000, 0x72, 0x2, 0x6, 0x1, 0x5, 0x5, 0x7, 0xae, 0x8, 0xc33]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x10000, 0x7, 0x9, {0x6, 0x1, 0x8, 0x87e, 0x7, 0x933}, {0x6, 0x2, 0x23, 0xae, 0x4, 0x4}, 0x100, 0xfffffff7, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x14, 0x72de, 0x40, 0x3, 0xffff, 0x6, 0x4, 0x2, 0x200, 0x0, 0xd, 0x7fffffff, 0x6, 0x81, 0x2, 0x0, 0x399, 0x8000, 0x8001, 0x80000000, 0x10000, 0x1000, 0x4, 0x0, 0x4, 0x6, 0x1, 0xcf3, 0x5, 0x3, 0x0, 0x1dd, 0x1, 0x319b, 0x9, 0x2, 0x9, 0x4e, 0x8, 0xc, 0x2, 0x48, 0xfffffff8, 0x3, 0x8000, 0x10000, 0x7fffffff, 0x8, 0x7, 0xffff, 0xffffffff, 0x6, 0x6, 0xb, 0x0, 0x0, 0xf9a2, 0xffffffff, 0x8, 0xbdec, 0xa267, 0x3, 0x9, 0x6b, 0x9, 0x8, 0x5, 0x2a, 0x5, 0xfffffffd, 0x7fff, 0x7, 0x531, 0xa, 0x38, 0x8, 0x1, 0x6, 0xffffffff, 0xff1, 0x100, 0x1, 0x3, 0x5, 0x2, 0x0, 0xe6, 0x4, 0xc, 0xff, 0x6, 0x81, 0xfffff89a, 0x7ff, 0x7, 0x1, 0x7, 0x8, 0x5, 0x10001, 0x81, 0x78a, 0x3, 0x9, 0x8, 0x2, 0x8, 0x100, 0x2, 0x40, 0x7, 0x7, 0x2, 0xc, 0xfffffffd, 0x200, 0xb, 0xff, 0x100, 0x6, 0xfffffff7, 0x0, 0x3, 0x100, 0x9, 0x1, 0x8, 0x81, 0xfffffffc, 0xc, 0x0, 0x6, 0x7fff, 0x7, 0x8, 0xfffffffc, 0x1, 0x0, 0x7, 0x1000, 0x0, 0xfff, 0x7, 0x1, 0x2, 0x2, 0x8, 0xffff, 0x0, 0x6, 0x1, 0x80000000, 0x6, 0xfffffffc, 0x76d8b30e, 0x0, 0x2000, 0x9, 0x101, 0x8, 0xffffffff, 0x40, 0x2, 0x7f, 0x5, 0x2, 0x41, 0x3, 0xe, 0x0, 0x6, 0x71, 0x1000, 0xc, 0x0, 0xbd6d, 0xd13, 0x79, 0x1, 0x6, 0x2, 0x1000, 0x3, 0x81, 0x3, 0x7, 0x3, 0xffffff81, 0x4, 0x92, 0xe7, 0x8, 0x5, 0x1, 0x6d2b, 0xfffffffc, 0x80000000, 0x9, 0xfffffffa, 0x22a, 0x7, 0x9, 0x2, 0x6, 0x10000, 0x2, 0x5, 0x6, 0x0, 0x7, 0x2, 0x6321, 0x464bd3f0, 0xfffffff9, 0x7, 0x300000, 0x5, 0x8, 0x7, 0x3, 0x7, 0x6, 0x7fffffff, 0x7, 0xf9, 0x3, 0x1, 0x8b3, 0x401, 0x3, 0x6f3f, 0x10, 0x400, 0x1, 0xb59, 0x8, 0x0, 0x1, 0x56f, 0x1d0, 0x7, 0x4e, 0x3, 0xf, 0x0, 0xc, 0x0, 0x3, 0x0, 0x1f, 0x5, 0x80, 0x5, 0x2, 0x26e, 0x64]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x6, 0x42, 0x0, 0x3ff, 0x1, 0x7, 0x489d, 0x7ff, 0x200, 0x1, 0x6, 0x35, 0x7, 0xe, 0x0, 0xffff, 0x8, 0x4, 0x3, 0x101, 0x4, 0x2, 0x35c, 0x2, 0x3, 0x800, 0x6, 0x4, 0x80000001, 0x3, 0x4, 0x101, 0x4e, 0x5, 0x3, 0x9, 0x10000, 0x3, 0x3, 0x0, 0x2, 0x3, 0x18bc, 0x242b8cdf, 0x4, 0x64dd, 0x800, 0x40000, 0x5, 0x3, 0x1, 0x3e, 0x7, 0x1, 0x5, 0x400, 0x7, 0x20a3, 0x587, 0x6, 0x401, 0x8, 0x14, 0x80000001, 0x7, 0x218d2407, 0x7, 0xe5ab, 0x7, 0x3, 0x578, 0x7, 0x9, 0x5, 0x3, 0x8000, 0x5, 0x81, 0x3, 0xb423, 0x7, 0x5, 0x3, 0x6, 0x2, 0x1, 0x1, 0x0, 0x6, 0x4, 0x81, 0x4, 0x3, 0x2, 0x8, 0x9, 0x3, 0xffffffff, 0x3, 0xc, 0x17c, 0x7ff, 0x83f, 0x9, 0x401, 0x4cadaaca, 0xd, 0x9, 0x5, 0x0, 0x6, 0x8000, 0x6, 0x1, 0x2, 0x4, 0x1, 0x7, 0x1, 0xef, 0x2d8b, 0x3, 0x6, 0x858, 0x4, 0xffff, 0xe, 0x849, 0x1, 0x40, 0xfffffff8, 0x5, 0xaebb, 0x0, 0x5, 0x1, 0xbd6, 0x3, 0x425c, 0x3, 0x0, 0x6, 0x8, 0x1, 0x5, 0x4, 0x2, 0x7, 0xfffffffa, 0x7fffffff, 0x1, 0x7, 0x1, 0x9, 0x0, 0x5, 0x2b9, 0x1, 0x1, 0x9, 0x9, 0x10001, 0x0, 0x7fff, 0x3, 0x7, 0x2, 0x1, 0x2, 0x1, 0x7, 0x7fffffff, 0x4d, 0x0, 0x0, 0x6, 0x4, 0x9, 0x6, 0x4, 0xa656, 0x40000000, 0xffffffff, 0x7, 0x1, 0x7, 0xa503, 0xd, 0x3, 0x2, 0x68, 0xffffffa6, 0x5, 0x1000, 0x0, 0x1, 0x10000, 0xffffffff, 0x8, 0x7fffffff, 0x6, 0x401, 0x40, 0x4, 0x679, 0x6, 0x3e3, 0x6, 0x9, 0x4b, 0x9, 0x2, 0x3, 0x7fffffff, 0x81, 0x6, 0x5, 0x0, 0x6cb8990, 0x2a, 0xbb, 0x50, 0x4ad3, 0xfffffff8, 0x9, 0x6, 0xfffffffa, 0x6, 0x1d83, 0x1, 0x0, 0x4, 0x0, 0x4, 0x9, 0x58, 0xf, 0x4, 0x2, 0x7ff, 0x100, 0x2, 0x81, 0x400000, 0x1, 0x3, 0x7, 0x0, 0x9, 0x0, 0x8, 0x6, 0x800, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000000, 0x1722f169, 0xaba4, 0x6b52, 0x4, 0x3, 0x0, 0x8, 0x8000, 0x80, 0x8, 0x6, 0x8, 0x9, 0x2, 0x9, 0x9, 0x80, 0x8, 0x0, 0x8, 0x5, 0x7, 0xd98af28a, 0x22e9, 0x6, 0x101, 0x9, 0x992, 0x8e71, 0x2, 0xfffffff9, 0x907ea6f, 0x1, 0x2, 0xf8b5, 0x0, 0xac, 0x7, 0x9, 0x9, 0x8001, 0x9, 0x3, 0xfffffff8, 0x10001, 0x5, 0x6fe, 0xfe, 0x3, 0x7, 0x7, 0xbf, 0x3, 0x2, 0x795, 0x3, 0x9, 0x8851, 0x6, 0x400, 0x401, 0xfffffffb, 0xaa9a, 0x10001, 0x7, 0xec000000, 0x482, 0x355f7c4f, 0x8, 0xfaf0, 0xb, 0x3, 0xc, 0x8, 0x4c, 0x0, 0x9, 0x1, 0x7, 0xb37c, 0x2, 0x1, 0xf1, 0x4, 0x5, 0x7, 0x9, 0x9, 0x5, 0x40, 0x401, 0x0, 0x9, 0xffff1970, 0x10, 0x1, 0x101, 0x2, 0x9, 0x401, 0x4, 0x9, 0xffffffff, 0x3, 0x2, 0x0, 0x5, 0x1, 0x7, 0x7f, 0x1, 0xa, 0x8e84e07a, 0xcc, 0xffffffff, 0x5, 0x0, 0x8, 0xb0000000, 0xfffffffa, 0x472a4afa, 0x6, 0x27, 0x1, 0x9, 0x1, 0x7fff, 0x10000, 0x4, 0x5, 0x1, 0x5, 0x153, 0xe7, 0x0, 0x952a, 0x0, 0x80000001, 0x0, 0x94, 0xf67, 0x40, 0x4, 0x2fe1be4, 0x5, 0x3ff, 0x6, 0x9, 0x6f, 0xffff, 0x8, 0x5, 0xfffffffd, 0xffffffff, 0x6, 0x4, 0x6, 0x9, 0x7, 0xffffffa9, 0x80000000, 0x6, 0x7ff, 0x8, 0x401, 0x5, 0xfffffff7, 0x5, 0x737c, 0x8383, 0x100000, 0x2, 0x7fff, 0x6, 0x4, 0x1, 0x0, 0x7, 0x200, 0xccfc, 0x101, 0x5, 0x51, 0x3, 0x1000, 0x5, 0x7, 0x6, 0xc, 0x3, 0x2, 0xffff, 0x992d, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfffffff9, 0x88, 0x10, 0x5, 0x9, 0x401, 0xfffffffe, 0x5, 0xffffffff, 0x0, 0x9, 0x4, 0x0, 0xfffffffd, 0x2, 0xa0ad, 0x8, 0xfffffff8, 0xffff, 0x8, 0xc, 0xd0e, 0x4, 0x200, 0x0, 0x14, 0x5, 0xda65, 0x6, 0x80000001, 0x5, 0x3, 0x0, 0x6, 0x6, 0x2, 0x4, 0x9, 0x6d, 0xff, 0x0, 0x1, 0x89f6, 0x4, 0x1, 0x3, 0x8001, 0x1ff, 0xe7ce, 0xb9d, 0x2, 0x9, 0x80000000, 0xb96c]}]}, @TCA_FW_ACT={0x538, 0x4, [@m_simple={0x114, 0xd, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '\f)@+&_\x00'}]}, {0xd9, 0x6, "ff99163695808b249411155c93d3e368eaa1ebbf58db69c76317d4ef576c03de9cc6ef4f022b063bf7f8b7234fdecaf3cbd82e5ffddd8a4e9a6d120d6ec23ebe4a4537048dd4bf30d5a0831015a52399552aa43a024b9012ab6417c92e24a13a51b31ee8c522a4d0ae6e79dbb794be692c4adfe6e0572a1950a70539de7b3d1a1a401ecf09d93b368e6763ef88ec27286b92634c0954d7b56096a731cc0ac7a5b175834c52bfccdc429b905783757b105c306749d6add370a293e1614cacf54ad64222aad07eb33e486c725014318612dac42a3aeb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_csum={0x94, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x1, 0x10000000, 0x46ba751e}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x3ff, 0x10000000, 0x800, 0x5}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x10, 0x6, 0x3, 0x6}, 0x11}}]}, {0x12, 0x6, "52eb46dfeb2a3430460d568adc6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x134, 0x6, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x6000, 0x2, 0xe, 0x2}, {0x300, 0xc, 0x9, 0x4}, {0x34, 0x5, 0x2, 0xa}, {0x40b, 0x5, 0x2, 0xffffff7f}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xfffffff4, 0xffffffffffffffff, 0x6, 0x6}}]}, {0xbe, 0x6, "ed1a7882306e98d3075a79cd618c136fc7bed82a541651ac0af20f2f125d9ede53c7e9804d9b123bac3b3749cb49744f06c16b9f4bf95015bb59fea1ed72e526212ce8695c3455cf37ae3bf854cbcd83a2fcf003364200bb11e449bc79934f4e88d16d54e84b28e4c374c1f45ae7a80e302939380f1e7f9787c931bb6672b7c65f671649415604cfb812b74b8c79ecee8db27573df71b89b2317553bcf12cda07687a20edad1c4ebfc3fd00de69d9e39065fd3ad9ac5584d6138"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x118, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x833a}]}, {0xe3, 0x6, "4e772b84865d1b26937cdfb02901298e4f1d15f9b4a27905faec3c31dac6a5e927bd0e904f9a290dded4a6e99f74ba285bf1c01efbbca4ce573bb31b884b10e871976a0a431ae994b947d2df977eedceadd932ea3d81e8e4d1b1939194c48fe36989780d720297cd025a0e4d59b4096125cf33520522ad8b3584bb0dc2314ce62effe28a53a4e01dc585463e12a6d9b5789a519cebf6a5756cd41dc2dadc5268a58ec2807acc837af635dc3757aedc0314cbedc5ff8bba594813263e0e08b6966c25e122635a7640cd8bf7fc6e6133d80af6f08d5b827b3bf933ee5b4b15d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x140, 0x7, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe5, 0xf0c6, 0x7, 0x7fffffff, 0x1}, @multicast2, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x8, 0x2389367c, 0x7}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x5, 0x800, 0x2}, @rand_addr=0x64010100, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc7e, 0x4, 0x8, 0x6, 0x4}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x9}, @dev={0xac, 0x14, 0x14, 0x32}, @local, 0xff000000}}]}, {0x4f, 0x6, "c999109bcab3857f18185240dd6aa985d94867054a64e2a84f1fe76711c74d09d449c64b5b047601d815ae79345a8a29791ebaf21b753d2120cffcef353ba174a6c5dfe59769c11300eadd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1110, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x10f4, 0x2, [@m_bpf={0x1034, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xbc, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x78, 0x6, "cb40fa235a24d79918244dd5bbe620e26fbb5d04ba23d8e3f0b6ad89caf5aaa395ed9ba73821521fdd09750166fa9bdd2af47fa38037c92208f243a4128d59f8dba34fa7b93fdd0978e4a110c200f8414309718ea1de34d455bec0d62c8e0db0e982052dc920903d4c2fef7d783bd5b9af436812"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3f, 0xff}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x324, 0x2, [@TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_FW_ACT={0x2e8, 0x4, [@m_nat={0x88, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x0, 0x8, 0x0, 0xffffe38c}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9de0, 0xc23, 0x7, 0x4, 0x6}, @broadcast, @private=0xa010100, 0xff000000}}]}, {0xe, 0x6, "7044d73f8f2fea119d8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xa4, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x81}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10001}]}, {0x5f, 0x6, "b91fac6cd89f3e6336642802a520c06bb82752646efa02ce5de23ccebc97b37ac8023e4b21d73db1022a5859fdc6c11bc9fcd89d37b0c8b64df852c4b8109d146ef230ace246fe27b79aa72a14ba7fe261631fcb7da69793c52d0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xf4, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xbf, 0x6, "3f837e2f8871ccb5efc914f84e8a14c50f09b137dd55429f3a5d5ee08b00f0ff33dc59481a90abf2e85a62444e10a880ee6c6d94554a7c5a39b93cfc625753560424e0efaec109fce277fdf025bdbc024534e49087e4b9f28b6a2815ebc61d41963d7f0a892a840147c2d3acf4da9c5c9f1848b73e99f7f25ca6fe58e322366237e6ae26acc769ce40b698062a533b9ca1b8041fae8efbc1e706d29d05a7141be54b27a0d675d2e2203bb00640d20c4fa14994b145ea94554e0bca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xc4, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x95, 0x6, "24160d3d5b77fcdf85deb1deecc5be9dbcd070269f4855d9ab3805d2591fc112414e0165fb15e144e3ccf9ddacc1e6cbb11e825360296c97fd96905403512189ce55d5a4e2c04c84d221cdfe9d373dd80f82a5e92c995b1ea3a6bf86e57584b556a3dcbafcb63833b0d108606995fc92741ef62e1392bc589052da5e30bb1c9166736ea5b912e521480773c6d4ead4f5de"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}]}, 0x2bec}, 0x1, 0x0, 0x0, 0x880}, 0xc0c0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b80), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003c40)={'tunl0\x00', &(0x7f0000003bc0)={'erspan0\x00', r6, 0x10, 0x1, 0xfffff801, 0x10000, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0xb6, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @generic={0x94, 0x6, "119f4dc1"}, @lsrr={0x83, 0x7, 0xed, [@empty]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003c80)={@local, @rand_addr, 0x0}, &(0x7f0000003cc0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003f00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003d00)={0x1b0, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x80, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x80}, 0x1, 0x0, 0x0, 0x8d5}, 0x4000080) r10 = accept4$inet(0xffffffffffffffff, &(0x7f00000040c0), &(0x7f0000004100)=0x10, 0x1000) sendmsg$nl_generic(r5, &(0x7f0000004440)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004400)={&(0x7f0000004140)={0x2c0, 0x41, 0x100, 0x70bd2c, 0x25dfdbfe, {0x18}, [@nested={0x26, 0x21, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x15e, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x49}, @generic="f3e3869603293f57b7cfc53d46e4f241bf14"]}, @typed={0x4, 0x14e}, @nested={0xc0, 0xe, 0x0, 0x1, [@typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@remote}, @generic="6c0fdf8343eea896bcf2372d82", @generic="1f5c9378761b0a44dbe0b3ffc4c223b7d93dcc2319aa8101fba53bb71e95e9bd95244db1a5224a6d07027052ae9a93946d3971eeb95557128378afc235fb9a78862480915c3da260921e3c422d0d420eaa28792054b909d386bbb7b675b2538bfe7c4e6af6129d05b721dbdb23008f73fb19f498d3039641c4de7dd3c74f016741a71d3bf4385c522322c8b5e5d2e47175b827c6e8314201a2513c"]}, @typed={0x8, 0x111, 0x0, 0x0, @fd=r10}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x3}, @generic, @nested={0xc8, 0x9f, 0x0, 0x1, [@nested={0x4, 0xe6}, @generic="6a38064604d5a2c0bc3fc456d169b6156109089cb5dce54e9441eddbedbb1a64abda3efa0986c58093cc54b9e8550664ecbe4bb94071aa7e425e2f88f564bc20e8d6e352e24bb66e2329a10f1a8f5964ffb7153c8c30fdd06bc317fc83b45630556ec60fb7d3f69b158f0e1b7bd3d0d005d1f8d8708b9f4fbbd2154dd663d0b0e716082c2ce03d11d9fb4c3b9998d4fbd0006c2c31761e1d6156a4af0a29d4349ea01ef3a381a6f92a1845bc7b72c31723f40a9ae43aff0809a88b51876b71f6"]}, @generic="fd92e9a939aca592b54b638d4bf50ffff253be8ea1b43a2c023127705a453f37d37988f8db93a783f18595b584155600ab66bb3ef42aeb9d509032afe169116cd76aad9d09dc70b66ba86f22eda0d45c2c6fe6fd675697233d912754ec8e33b90525a54c11b318339f0ca66aeee1b5faffa02b5890c7d853237bb4e9572210aadbf3620563a7469516903a9ac2e4b3d04b3cf612e99a5e231a5aac82c5824c6cb441bf1459d3eebae2d9f7e509e56c4a4c6cb71fd3e9fc2fd394932989d2153daeb8fa3cd310f2121bef45d0d3", @typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@mcast2}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000004480)={0x0, 0xe, 0x10}, &(0x7f00000044c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000004500)={r12, 0xb1, "e44bfeb56f39d7577a27face7ec69498fe3f977b2830271f6fbaab194d947af1a15101297cd89aca8f9b41693016d4c800fa3c16bf3819c76cfe06f8e9bfa756ca2136f5b60c4584f922f7e57141914dff5ebe06d9a53c6fb88b4d9eb846f275aa2844a3215581c941e0c6b95690087bbb69bb0315387b63b51f7b5f31ba4883acef478f081f8eb335df136c32cbdf380bd9bc3e0294bf52dfe2ca43c0bbf01629c5c875af3203c52923b6e807e8b50cd5"}, &(0x7f00000045c0)=0xb9) syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004640)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000046c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000047c0)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x4c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000004980)={&(0x7f0000004800), 0xc, &(0x7f0000004940)={&(0x7f0000004880)={0x94, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x44, 0xa8, @random="a660cf5043523464576095945f077b2e15c6f9a217950e6bd2f637c8d2b10f627e48a9aa01f2741fb31df67ad10b5d8b3f6c9d880ed7873343dfc8f66f92a6fd"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400a0}, 0x48000) 1m57.574360643s ago: executing program 4 (id=1105): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) close(0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, 0x2, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x24040884) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x14, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0xfffffff, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x60600) (async) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) 1m57.323620634s ago: executing program 0 (id=1106): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000840}, 0x8001) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000240)={&(0x7f0000000200)=[{0xffffffff00000000, 0xf}], 0x1, 0x10, 0x1e1, 0x8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x40) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000440)={0x1, 0x4, 0xf1, 0x2, 0x6a}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair(0x10, 0x4, 0x6, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000600)=0xb, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r8) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r11, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0xffffff7f, 0x1}}) bind$xdp(r9, &(0x7f0000000840)={0x2c, 0x7, r12, 0x5, r9}, 0x10) getsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb4, r4, 0xe02, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xaf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000090}, 0x20008010) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r13, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r3, 0x73b250972c037dba, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000000f80)={0x32c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x11b, 0x2a, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0x51, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x1}}, @challenge={0x10, 0x1, 0xc7}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x2, 0x0, {0x9, 0x354, 0x0, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x1, 0xb}}, @chsw_timing={0x68, 0x4, {0x5}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @perr={0x84, 0x94, {0x2, 0x8, [{{}, @device_a, 0x9, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x13}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x1f}, {{0x0, 0x1}, @broadcast, 0xe1bc, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x26}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x3b}]}}, @ht={0x2d, 0x1a, {0x4871efedfdc9c4a5, 0x1, 0x0, 0x0, {0x81, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x6, 0x3}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xc, 0x34, @random="ab61ddf83ff0a44c"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="91fa40128010"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x77, 0x2a, [@ibss={0x6, 0x2, 0x7}, @tim={0x5, 0x65, {0x9, 0xab, 0x0, "b139596768fef3667a7387bd665f382922e7d009f7ca6f55f313c638e5b932c65b23e0523bbce0c02c8442475c93a26e4ae54203fdd83804eef7bd0837bff88b8d3ebad8a22941983fdb471417d6a980ac94336ede95f0f2e69a4d9b0ea89cf190ec"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x136, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x4}}, @gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0x3, 0x8, 0x69, 0x4f07}}, @mic={0x8c, 0x10, {0x159, "62e7f0f5336d", @short="66ca3554bd4f500e"}}, @cf={0x4, 0x6, {0x7, 0x8, 0x34, 0x8}}, @ssid={0x0, 0xc, @random="8ff56988d23ec18656ed4d48"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5, 0x49}}, @perr={0x84, 0xe9, {0xc, 0xf, [{{}, @device_a, 0xf, @void, 0x18}, {{}, @device_b, 0x3, @void, 0x15}, {{}, @broadcast, 0x4, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0x2, @value, 0xb}, {{0x0, 0x1}, @broadcast, 0xfffff6cc, @value=@broadcast, 0x25}, {{}, @device_a, 0x5, @void, 0x2d}, {{}, @device_b, 0x38, @void, 0x2e}, {{}, @broadcast, 0x136, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0xa}, {{0x0, 0x1}, @device_b, 0x300234ef, @value=@broadcast, 0x6}, {{}, @device_b, 0x4, @void, 0xd}, {{}, @device_a, 0x10001, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x101, @value=@device_b, 0x36}, {{0x0, 0x1}, @broadcast, 0xb994, @value, 0x24}, {{}, @device_b}]}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1m57.275375466s ago: executing program 1 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x5, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x29}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0x8000, [{0x3, 0x2, 0x7}, {0x6, 0x3, 0x6bb}, {0x3, 0x0, 0x1}, {0x100, 0x2, 0xe}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000003c0)=""/44, 0x8c, 0xfffffffffffffece, 0x1, 0x175}, 0x28) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1c", 0xffffffffffffff1f, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x480}, 0x20040010) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) sendto$inet6(r0, &(0x7f0000000180)="f8", 0x1, 0x20000040, 0x0, 0x0) 1m43.146985612s ago: executing program 0 (id=1108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000100001002bbd70000001000064010101000000000000000000000000fc010000000000000000000000000001000107144e230005020000003a000000664858c0202ad714879c5aa1444f0e382720e29053afe5ed3c931e9daa5287b99770124741850a12e6a346fa6ecbb808a7c01fb93085d32b5a56093dcd2ef56191563ab597ac1eb48964828aa78a06a3b45d798c2928993bcb65012bec958adb9fcadd0cd1fe2c6c0a0d18c5ac09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d26c0000007f000001000000000000000000000000fdffffffffffffff92010000000000000600000000000000ffff0000000000001c250800000000000100000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000400000000000000feffffffffffffff02000000fcffffff000000002abd7000053500000200010020000000000000000a001000000000000000000008001f0002000000"], 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000080)) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 1m32.320411479s ago: executing program 32 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x5, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x29}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0x8000, [{0x3, 0x2, 0x7}, {0x6, 0x3, 0x6bb}, {0x3, 0x0, 0x1}, {0x100, 0x2, 0xe}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000003c0)=""/44, 0x8c, 0xfffffffffffffece, 0x1, 0x175}, 0x28) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1c", 0xffffffffffffff1f, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x480}, 0x20040010) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) sendto$inet6(r0, &(0x7f0000000180)="f8", 0x1, 0x20000040, 0x0, 0x0) 1m1.810407656s ago: executing program 33 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmsg(r3, &(0x7f0000001840)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000200)=""/130, 0x82}, {0x0}], 0x2}, 0x20) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000440)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a0001002000000b00000014000100fc0200"/35], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4}, 0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000dae85c775c0a060a010400000000000000000a0000010900010073797a310000000044000480300001800b00010074617267657400002000028009000100444e415400000000080002400000000008000001800a000100696e6e65720000000900020073797a0d93ad8b0626abf2001100010000000100000a16dac1d6446f31ae828d98edc8f5795e14456c0f87eb66ed04bf6fa797793c64b53603ed0bee908512c3913f7919a254a798ea56ef57abd9ebb46979950dabb9231b81b9b800612240dd63e2ba2e330c28c81f0f4f21ab601173f4e265c32a85bd1e3c39c89cd155cd08be51ef83569e89fac05a2f88c51aa256a11f27b520402cecba5650a70da75426b56b68488c44df56131ad39b54a63931ab1e81e033540b95f20e3c652c947ec751e05bab6925f34d15a749042a0c07e5a21890b313057e3b664e014a3a2f8e5e073d92eeec67cb18b6eadd18fe462b39af0ead4c80f0b555d03159c1a7369415edca167928108067b26501c7e8baa423f225b1d4ba5f336cd7b8e1e3e0e7a3c4ac029ed91c137c3263f879fe9e8c1e95c5c3440a0bf3433d4c7a6532ee4eac755a1aa5ce879bb2684188f3f8ad48026e060cfb51a21d09491d8cba5a6e95920a4160b287aa9d156a17242f7c1ec996b7f6d5005240a10ba14be8c6b91526e31f7c7335405073ff3b38d3efbb1d3f8b77880300ad0f320b16c193f03e043baaa2a1efc0d6a1ab1d50409fd4be69afa275f3f39a2e443d8b5e4cdf13de68c3b8bacc3f1d1be99aa2d70bfec4821722b6cab02887feb59eb52774d588ae5e4ff1c0bc151b6f7c006458cf23234a7ad7ab128328bcbbc4bc2a2295fa8557256a58638f99f6b4d60bb86a9ad04b0b282afaf830a62c602feae019d58729a6680b7a3ae8"], 0x98}}, 0x20040040) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x3, 0x1}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="c3100000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100ff00000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x58}}, 0x8000) 28.323766133s ago: executing program 34 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000300", @ANYRES32=r2], 0x34}}, 0x4008000) unshare(0x6a040000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000004f100000800090002"], 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040049) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000400)='GPL\x00', 0x410080, &(0x7f0000000600)={@_ha_fsid={[0x9, 0xfffffffe]}, {0xff, 0x400, 0x9938, 0xf}}, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x80}) openat$cgroup_procs(r6, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x358, 0x238, 0x238, 0x358, 0x238, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x36a41ab9, 0x0, 0x0, 0x7], 0x0, [], 0x1, 0x2, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="640000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d000300"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 0s ago: executing program 35 (id=1105): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) close(0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, 0x2, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x24040884) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x14, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0xfffffff, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x60600) (async) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 55.292035][ T5604] cgroup: Unknown subsys name 'net' [ 55.375057][ T5604] cgroup: Unknown subsys name 'cpuset' [ 55.382137][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.415495][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.818972][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.829674][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.837029][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.837237][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.844668][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.858318][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.859084][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.874113][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.881965][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.889773][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.922241][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.929654][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.936839][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.944166][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.945001][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.951455][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.959395][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.966112][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.979108][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.986384][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.986733][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.002499][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.011683][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.011998][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.030202][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.776247][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.783626][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.790759][ T5619] bridge_slave_0: entered allmulticast mode [ 60.797474][ T5619] bridge_slave_0: entered promiscuous mode [ 60.804949][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.812057][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.819240][ T5616] bridge_slave_0: entered allmulticast mode [ 60.825929][ T5616] bridge_slave_0: entered promiscuous mode [ 60.841476][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.848716][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.855967][ T5619] bridge_slave_1: entered allmulticast mode [ 60.862411][ T5619] bridge_slave_1: entered promiscuous mode [ 60.874329][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.881415][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.888691][ T5616] bridge_slave_1: entered allmulticast mode [ 60.895221][ T5616] bridge_slave_1: entered promiscuous mode [ 60.928909][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.941053][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.985454][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.999302][ T5619] team0: Port device team_slave_0 added [ 61.008712][ T5619] team0: Port device team_slave_1 added [ 61.016330][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.067027][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.074101][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.100587][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.112714][ T5616] team0: Port device team_slave_0 added [ 61.142493][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.149538][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.176834][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.188885][ T5616] team0: Port device team_slave_1 added [ 61.253529][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.260605][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.286889][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.309425][ T5619] hsr_slave_0: entered promiscuous mode [ 61.315549][ T5619] hsr_slave_1: entered promiscuous mode [ 61.326226][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.333340][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.359464][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.370314][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.377536][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.384720][ T5628] bridge_slave_0: entered allmulticast mode [ 61.391147][ T5628] bridge_slave_0: entered promiscuous mode [ 61.403014][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.410222][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.417684][ T5629] bridge_slave_0: entered allmulticast mode [ 61.424293][ T5629] bridge_slave_0: entered promiscuous mode [ 61.439237][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.446452][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.453690][ T5628] bridge_slave_1: entered allmulticast mode [ 61.460246][ T5628] bridge_slave_1: entered promiscuous mode [ 61.472080][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.479594][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.486852][ T5629] bridge_slave_1: entered allmulticast mode [ 61.493363][ T5629] bridge_slave_1: entered promiscuous mode [ 61.538005][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.556648][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.564094][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.571230][ T5627] bridge_slave_0: entered allmulticast mode [ 61.578365][ T5627] bridge_slave_0: entered promiscuous mode [ 61.591450][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.607303][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.625326][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.632486][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.640050][ T5627] bridge_slave_1: entered allmulticast mode [ 61.646728][ T5627] bridge_slave_1: entered promiscuous mode [ 61.662207][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.674159][ T5616] hsr_slave_0: entered promiscuous mode [ 61.680188][ T5616] hsr_slave_1: entered promiscuous mode [ 61.686548][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 61.692285][ T5616] Cannot create hsr debugfs directory [ 61.706197][ T5628] team0: Port device team_slave_0 added [ 61.730293][ T5628] team0: Port device team_slave_1 added [ 61.742297][ T5629] team0: Port device team_slave_0 added [ 61.750034][ T5629] team0: Port device team_slave_1 added [ 61.757011][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.785419][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.801391][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.808430][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.834720][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.862877][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.869895][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.896330][ T50] Bluetooth: hci0: command tx timeout [ 61.896622][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.913085][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.920051][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.946027][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.972790][ T50] Bluetooth: hci1: command tx timeout [ 61.974576][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.985277][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.011314][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.023472][ T5627] team0: Port device team_slave_0 added [ 62.047651][ T5627] team0: Port device team_slave_1 added [ 62.053365][ T5618] Bluetooth: hci2: command tx timeout [ 62.053474][ T50] Bluetooth: hci3: command tx timeout [ 62.064401][ T5618] Bluetooth: hci4: command tx timeout [ 62.102421][ T5628] hsr_slave_0: entered promiscuous mode [ 62.108744][ T5628] hsr_slave_1: entered promiscuous mode [ 62.114792][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 62.120510][ T5628] Cannot create hsr debugfs directory [ 62.129994][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.137178][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.163489][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.194080][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.201133][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.227258][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.251459][ T5629] hsr_slave_0: entered promiscuous mode [ 62.257693][ T5629] hsr_slave_1: entered promiscuous mode [ 62.263751][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 62.269477][ T5629] Cannot create hsr debugfs directory [ 62.311623][ T5627] hsr_slave_0: entered promiscuous mode [ 62.317765][ T5627] hsr_slave_1: entered promiscuous mode [ 62.323913][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 62.329689][ T5627] Cannot create hsr debugfs directory [ 62.410140][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.418656][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.438255][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.446912][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.454746][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.463733][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.483406][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.491875][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.557573][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.565894][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.573938][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.582133][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.590258][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.598551][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.615803][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.624806][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.666627][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.675312][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.688012][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.696533][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.704500][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.712963][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.725308][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.734157][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.778656][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.787626][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.795584][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.804201][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.811800][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.820120][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.834174][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.842773][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.894644][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.915112][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.923796][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.931492][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.940137][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.948360][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.957026][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.970040][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.978529][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.003720][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.011995][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.031088][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.038642][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.056621][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.063746][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.075685][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.099373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.106805][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.115440][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.122512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.139392][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.170386][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.201149][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.208340][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.216875][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.224064][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.278742][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.317038][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.356681][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.369792][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.385840][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.393008][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.439873][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.447032][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.461513][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.468752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.491010][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.498258][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.880675][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.899570][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.971490][ T5616] veth0_vlan: entered promiscuous mode [ 63.977649][ T50] Bluetooth: hci0: command tx timeout [ 63.999243][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.032089][ T5616] veth1_vlan: entered promiscuous mode [ 64.052944][ T50] Bluetooth: hci1: command tx timeout [ 64.091437][ T5616] veth0_macvtap: entered promiscuous mode [ 64.109628][ T5616] veth1_macvtap: entered promiscuous mode [ 64.127585][ T5628] veth0_vlan: entered promiscuous mode [ 64.133398][ T50] Bluetooth: hci3: command tx timeout [ 64.138807][ T50] Bluetooth: hci4: command tx timeout [ 64.144439][ T5618] Bluetooth: hci2: command tx timeout [ 64.187460][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.206343][ T5628] veth1_vlan: entered promiscuous mode [ 64.228692][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.248514][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.257180][ T113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.266734][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.291038][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.306877][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.316111][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.381773][ T5628] veth0_macvtap: entered promiscuous mode [ 64.392180][ T5619] veth0_vlan: entered promiscuous mode [ 64.402043][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.403289][ T5628] veth1_macvtap: entered promiscuous mode [ 64.415844][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.429268][ T5627] veth0_vlan: entered promiscuous mode [ 64.437588][ T5619] veth1_vlan: entered promiscuous mode [ 64.447614][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.468571][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.472993][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.477311][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.494290][ T5627] veth1_vlan: entered promiscuous mode [ 64.504570][ T5629] veth0_vlan: entered promiscuous mode [ 64.519292][ T1179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.530729][ T1179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.544147][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.563333][ T1179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.572532][ T5629] veth1_vlan: entered promiscuous mode [ 64.580081][ T5619] veth0_macvtap: entered promiscuous mode [ 64.594440][ T1179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619774][ T5619] veth1_macvtap: entered promiscuous mode [ 64.654718][ T5627] veth0_macvtap: entered promiscuous mode [ 64.674951][ T5627] veth1_macvtap: entered promiscuous mode [ 64.684347][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.702829][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.715950][ T5629] veth0_macvtap: entered promiscuous mode [ 64.732080][ T5629] veth1_macvtap: entered promiscuous mode [ 64.739748][ T1179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750514][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763686][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.775795][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.784830][ T1179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.794077][ T1179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.806178][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.824568][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.844618][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.855782][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.864265][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.901742][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.922132][ T1179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953335][ T1179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.970041][ T1179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.996190][ T1179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.005142][ T1179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016779][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.034604][ T1179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.041621][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.064398][ T1179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088415][ T1179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.138864][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.152715][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.184173][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.216238][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.240888][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270128][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.298595][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.324951][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.329036][ T5817] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 65.387675][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.395148][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.431075][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.441567][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.501361][ T5823] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 65.516900][ T1179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.553978][ T1179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.583255][ T1179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.597043][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.610905][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.628717][ T1179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.673015][ T5833] syzkaller0: entered promiscuous mode [ 65.678609][ T5833] syzkaller0: entered allmulticast mode [ 65.685672][ T5837] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 65.699282][ T5836] syz_tun: entered allmulticast mode [ 65.791831][ T5840] pimreg: entered allmulticast mode [ 65.962143][ T5835] syz_tun: left allmulticast mode [ 66.053390][ T5618] Bluetooth: hci0: command tx timeout [ 66.063272][ T5857] sock: sock_set_timeout: `syz.4.15' (pid 5857) tries to set negative timeout [ 66.133192][ T5618] Bluetooth: hci1: command tx timeout [ 66.159342][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 66.212771][ T50] Bluetooth: hci4: command tx timeout [ 66.218247][ T4938] Bluetooth: hci3: command tx timeout [ 66.224813][ T5618] Bluetooth: hci2: command tx timeout [ 66.314963][ T5879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.399140][ T5881] syzkaller0: entered promiscuous mode [ 66.405084][ T5881] syzkaller0: entered allmulticast mode [ 66.416834][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 66.449038][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 66.469812][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 66.511942][ T5888] Zero length message leads to an empty skb [ 66.566746][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 67.369956][ T5943] IPVS: Scheduler module ip_vs_ not found [ 67.388745][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 67.570664][ T5965] openvswitch: netlink: IP tunnel dst address not specified [ 67.702476][ T5950] Illegal XDP return value 4291538944 on prog (id 12) dev N/A, expect packet loss! [ 67.720868][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 67.769330][ T5978] xfrm0: entered allmulticast mode [ 67.784802][ T5978] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 67.789869][ T5990] netlink: 64 bytes leftover after parsing attributes in process `syz.4.53'. [ 67.942834][ T5990] nbd0: detected capacity change from 0 to 1 [ 67.977190][ T5995] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 67.977689][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.998151][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.006667][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.015213][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.024278][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.032523][ T5624] ldm_validate_partition_table(): Disk read failed. [ 68.039822][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.043864][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'. [ 68.048409][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.064710][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.073410][ T5618] block nbd0: Receive control failed (result -32) [ 68.080226][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.084095][ T6000] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 68.088140][ T5624] Dev nbd0: unable to read RDB block 0 [ 68.101734][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.109822][ T5624] nbd0: unable to read partition table [ 68.116327][ T5624] nbd0: partition table beyond EOD, truncated [ 68.133146][ T5618] Bluetooth: hci0: command tx timeout [ 68.140191][ T5995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 68.158066][ T5995] netlink: 'syz.0.54': attribute type 6 has an invalid length. [ 68.166724][ T5995] netlink: 'syz.0.54': attribute type 6 has an invalid length. [ 68.188715][ T6011] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 68.213517][ T5618] Bluetooth: hci1: command tx timeout [ 68.253521][ T6013] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 68.277932][ T6013] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 68.292978][ T50] Bluetooth: hci4: command tx timeout [ 68.298450][ T50] Bluetooth: hci3: command tx timeout [ 68.308326][ T5618] Bluetooth: hci2: command tx timeout [ 68.404723][ T6022] C: renamed from veth1_to_team (while UP) [ 68.445468][ T6022] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 68.464063][ T6022] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 68.896647][ T6057] 8021q: VLANs not supported on ip6tnl0 [ 69.078595][ T6074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.112432][ T6076] pim6reg: entered allmulticast mode [ 69.121438][ T6080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.358435][ T6095] syzkaller0: entered promiscuous mode [ 69.377279][ T6095] syzkaller0: entered allmulticast mode [ 69.741733][ T6123] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 69.866201][ T6143] ip6gre1: entered promiscuous mode [ 69.883378][ T6143] ip6gre1: entered allmulticast mode [ 70.068617][ T6156] syzkaller0: entered promiscuous mode [ 70.074920][ T6156] syzkaller0: entered allmulticast mode [ 70.337281][ T6178] validate_nla: 4 callbacks suppressed [ 70.337297][ T6178] netlink: 'syz.3.102': attribute type 28 has an invalid length. [ 70.389818][ T6178] geneve0: entered promiscuous mode [ 70.397141][ T6178] geneve0: left promiscuous mode [ 70.433569][ T6164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.443298][ T6165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.562200][ T6195] syzkaller0: entered promiscuous mode [ 70.575839][ T6195] syzkaller0: entered allmulticast mode [ 71.032030][ T6241] veth3: entered promiscuous mode [ 71.143586][ T6247] team1: entered promiscuous mode [ 71.163937][ T6247] team1: entered allmulticast mode [ 71.169475][ T6247] 8021q: adding VLAN 0 to HW filter on device team1 [ 71.190173][ T6250] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 71.212446][ T6250] team2: entered promiscuous mode [ 71.217792][ T6250] team2: entered allmulticast mode [ 71.224259][ T6250] 8021q: adding VLAN 0 to HW filter on device team2 [ 71.326453][ T6260] __nla_validate_parse: 27 callbacks suppressed [ 71.326473][ T6260] netlink: 48 bytes leftover after parsing attributes in process `syz.3.127'. [ 71.385525][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 71.413802][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.420241][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.476505][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 71.809436][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 71.821785][ T6307] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 71.844249][ T6307] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 71.860101][ T6298] netlink: 'syz.2.135': attribute type 8 has an invalid length. [ 71.869200][ T6307] ipt_ECN: cannot use operation on non-tcp rule [ 71.877169][ T29] audit: type=1107 audit(1782225835.235:2): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 71.954804][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.990820][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.342029][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 72.404665][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 72.528404][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 72.543329][ T6350] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 72.597497][ T6358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.148'. [ 72.651998][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 72.672475][ T6350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.687741][ T6354] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 72.697636][ T6354] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 72.713117][ T6362] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 72.726425][ T6373] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 72.727103][ T6349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'. [ 72.961778][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 73.005468][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.030164][ T6406] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 73.101898][ T6411] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 73.118746][ T6411] tipc: Started in network mode [ 73.123919][ T6411] tipc: Node identity , cluster identity 4711 [ 73.130059][ T6411] tipc: Failed to obtain node identity [ 73.137284][ T6411] tipc: Enabling of bearer rejected, failed to enable media [ 73.437250][ T6436] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 73.445970][ T6436] netlink: 'syz.0.170': attribute type 8 has an invalid length. [ 73.780764][ T1179] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.793856][ T1179] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.805855][ T1179] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.823620][ T1179] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.842578][ T6454] syzkaller0: entered promiscuous mode [ 73.848560][ T6454] syzkaller0: entered allmulticast mode [ 73.863964][ T6461] veth4: entered allmulticast mode [ 73.880945][ T6453] tc action pedit 'at' offset 20 out of bounds [ 74.038119][ T6474] raw_sendmsg: syz.4.178 forgot to set AF_INET. Fix it! [ 74.307651][ T6500] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 74.401487][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.654749][ T6534] xt_hashlimit: size too large, truncated to 1048576 [ 74.673884][ T6536] syzkaller0: entered promiscuous mode [ 74.680141][ T6536] syzkaller0: entered allmulticast mode [ 74.689299][ T6531] netlink: 'syz.0.193': attribute type 20 has an invalid length. [ 74.700714][ T6531] netlink: 'syz.0.193': attribute type 21 has an invalid length. [ 75.289944][ T6567] pim6reg1: entered promiscuous mode [ 75.310881][ T6567] pim6reg1: entered allmulticast mode [ 76.050877][ T6620] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 76.351865][ T833] cfg80211: failed to load regulatory.db [ 76.445016][ T6649] openvswitch: netlink: Flow key attr not present in new flow. [ 76.640810][ T6670] __nla_validate_parse: 16 callbacks suppressed [ 76.640827][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 76.730214][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 76.916029][ T6680] IPVS: Scheduler module ip_vs_ not found [ 77.027372][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'. [ 77.057025][ T6692] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 77.075456][ T6695] bridge_slave_0: left allmulticast mode [ 77.090329][ T6695] bridge_slave_0: left promiscuous mode [ 77.101263][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.110410][ T6700] netlink: 108 bytes leftover after parsing attributes in process `syz.0.246'. [ 77.123914][ T6695] bridge_slave_1: left allmulticast mode [ 77.130027][ T6695] bridge_slave_1: left promiscuous mode [ 77.137402][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.149308][ T6695] bond0: (slave bond_slave_0): Releasing backup interface [ 77.161991][ T6695] bond0: (slave bond_slave_1): Releasing backup interface [ 77.206246][ T6695] team0: Port device team_slave_0 removed [ 77.239867][ T6695] team0: Port device team_slave_1 removed [ 77.261092][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.268864][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.280870][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.291590][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.304401][ T6695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.353018][ T6692] bond2: entered promiscuous mode [ 77.354306][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.382949][ T6692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.411655][ T6704] bond2: (slave bridge1): making interface the new active one [ 77.419622][ T6704] bridge1: entered promiscuous mode [ 77.425956][ T6704] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 77.555463][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 77.573876][ T6720] ipvlan2: entered allmulticast mode [ 77.579388][ T6720] batadv0: entered allmulticast mode [ 77.589097][ T6720] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 77.634603][ T6718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.253'. [ 77.650291][ T6718] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.661737][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 77.679478][ T6718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.775265][ T6726] IPVS: Scheduler module ip_vs_ not found [ 77.922044][ T6739] can: request_module (can-proto-0) failed. [ 78.479807][ T6770] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 78.563800][ T6770] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 78.620812][ T6770] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 78.635466][ T6773] IPVS: Scheduler module ip_vs_ not found [ 78.946443][ T6783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.273'. [ 79.076177][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'. [ 79.502249][ T6806] syzkaller0: entered promiscuous mode [ 79.511154][ T6806] syzkaller0: entered allmulticast mode [ 81.138622][ T6841] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 81.154741][ T6841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.171026][ T6841] bond2: (slave veth5): Enslaving as an active interface with a down link [ 81.187997][ T6841] bond2: (slave dummy0): making interface the new active one [ 81.196823][ T6841] dummy0: entered promiscuous mode [ 81.202267][ T6841] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 82.414813][ T6796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.514472][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'. [ 82.575731][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 82.600250][ T6854] syzkaller0: entered promiscuous mode [ 82.612378][ T6854] syzkaller0: entered allmulticast mode [ 82.638947][ T6855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.639451][ T6855] netlink: 'syz.0.289': attribute type 21 has an invalid length. [ 82.689941][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 82.706505][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 82.817257][ T6872] x_tables: duplicate entry at hook 1 [ 82.855213][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.296'. [ 82.934549][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 83.182134][ T6898] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 83.190176][ T6898] netlink: 'syz.2.306': attribute type 11 has an invalid length. [ 83.199212][ T6898] netlink: 1424 bytes leftover after parsing attributes in process `syz.2.306'. [ 83.211628][ T6898] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.306'. [ 83.221121][ T6898] openvswitch: netlink: Flow key attr not present in new flow. [ 83.235396][ T24] IPVS: starting estimator thread 0... [ 83.241021][ T6891] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 83.332813][ T6901] IPVS: using max 59 ests per chain, 141600 per kthread [ 84.405587][ T6925] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 84.577912][ T6911] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.639953][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 84.846338][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.158930][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.175517][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.194299][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.242305][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.254177][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.267601][ T6957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.280771][ T6957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.297314][ T6957] veth1_vlan: left promiscuous mode [ 85.303925][ T6957] veth0_vlan: left promiscuous mode [ 85.309652][ T6957] veth0_vlan: entered promiscuous mode [ 85.317166][ T6957] veth1_vlan: entered promiscuous mode [ 85.325724][ T6957] veth1_macvtap: left promiscuous mode [ 85.332228][ T6957] veth0_macvtap: left promiscuous mode [ 85.339281][ T6957] veth0_macvtap: entered promiscuous mode [ 85.345994][ T6957] veth1_macvtap: entered promiscuous mode [ 85.357247][ T6957] 8021q: adding VLAN 0 to HW filter on device eth0 [ 85.365870][ T6957] 8021q: adding VLAN 0 to HW filter on device eth1 [ 85.374543][ T6957] 8021q: adding VLAN 0 to HW filter on device eth2 [ 85.382474][ T6957] 8021q: adding VLAN 0 to HW filter on device eth3 [ 85.390993][ T6957] ip6gre1: left promiscuous mode [ 85.397021][ T6957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.407138][ T6957] bond2: left promiscuous mode [ 85.412116][ T6957] bridge1: left promiscuous mode [ 85.466440][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.473647][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.501630][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.508820][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.547017][ T6984] netlink: 'syz.3.326': attribute type 28 has an invalid length. [ 85.555439][ T113] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.564937][ T113] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.585777][ T113] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.594341][ T113] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.608963][ T113] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.618100][ T113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.629846][ T113] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.638216][ T113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.696110][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.331'. [ 85.759848][ T7010] FAULT_INJECTION: forcing a failure. [ 85.759848][ T7010] name failslab, interval 1, probability 0, space 0, times 1 [ 85.774536][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(full) [ 85.774551][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.774562][ T7010] Call Trace: [ 85.774569][ T7010] [ 85.774574][ T7010] dump_stack_lvl+0xe8/0x150 [ 85.774597][ T7010] should_fail_ex+0x40c/0x560 [ 85.774608][ T7010] should_failslab+0xa8/0x100 [ 85.774621][ T7010] ? skb_clone+0x212/0x3a0 [ 85.774632][ T7010] kmem_cache_alloc_noprof+0x87/0x650 [ 85.774646][ T7010] skb_clone+0x212/0x3a0 [ 85.774655][ T7010] __netlink_deliver_tap+0x413/0x860 [ 85.774671][ T7010] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.774683][ T7010] netlink_deliver_tap+0x19c/0x1b0 [ 85.774695][ T7010] netlink_sendskb+0x68/0x140 [ 85.774707][ T7010] netlink_rcv_skb+0x2a4/0x4a0 [ 85.774719][ T7010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.774731][ T7010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.774746][ T7010] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.774759][ T7010] netlink_unicast+0x7bb/0x940 [ 85.774773][ T7010] netlink_sendmsg+0x813/0xb40 [ 85.774787][ T7010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.774801][ T7010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 85.774810][ T7010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.774821][ T7010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.774834][ T7010] ____sys_sendmsg+0x9b9/0xa20 [ 85.774849][ T7010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.774862][ T7010] ? lock_release+0x4b/0x3c0 [ 85.774878][ T7010] ? import_iovec+0x73/0xa0 [ 85.774891][ T7010] ___sys_sendmsg+0x2a5/0x360 [ 85.774903][ T7010] ? rcu_is_watching+0x15/0xb0 [ 85.774913][ T7010] ? get_pid_task+0x20/0x1f0 [ 85.774922][ T7010] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.774935][ T7010] ? rcu_is_watching+0x15/0xb0 [ 85.774949][ T7010] ? __fget_files+0x2a/0x420 [ 85.774959][ T7010] ? __fget_files+0x3a2/0x420 [ 85.774971][ T7010] __x64_sys_sendmsg+0x1b1/0x290 [ 85.774984][ T7010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.774999][ T7010] ? rcu_is_watching+0x15/0xb0 [ 85.775008][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.775016][ T7010] do_syscall_64+0x174/0x580 [ 85.775029][ T7010] ? trace_irq_disable+0x3b/0x140 [ 85.775041][ T7010] ? clear_bhb_loop+0x40/0x90 [ 85.775051][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.775059][ T7010] RIP: 0033:0x7f672159ce59 [ 85.775073][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.775080][ T7010] RSP: 002b:00007f671f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.775091][ T7010] RAX: ffffffffffffffda RBX: 00007f6721815fa0 RCX: 00007f672159ce59 [ 85.775097][ T7010] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 85.775103][ T7010] RBP: 00007f671f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.775108][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.775113][ T7010] R13: 00007f6721816038 R14: 00007f6721815fa0 R15: 00007ffefd422b78 [ 85.775123][ T7010] [ 87.770632][ T6948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.786742][ T7022] netlink: 92 bytes leftover after parsing attributes in process `syz.4.334'. [ 87.855418][ T7026] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 87.951000][ T7031] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 88.038132][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 88.066203][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 88.081407][ T7043] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 88.081988][ T7032] Bluetooth: MGMT ver 1.23 [ 88.092364][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 88.260401][ T7054] FAULT_INJECTION: forcing a failure. [ 88.260401][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 88.275647][ T7054] CPU: 0 UID: 0 PID: 7054 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT(full) [ 88.275671][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.275679][ T7054] Call Trace: [ 88.275685][ T7054] [ 88.275692][ T7054] dump_stack_lvl+0xe8/0x150 [ 88.275714][ T7054] should_fail_ex+0x40c/0x560 [ 88.275732][ T7054] should_failslab+0xa8/0x100 [ 88.275753][ T7054] __kmalloc_noprof+0xe8/0x750 [ 88.275772][ T7054] ? fib6_info_alloc+0x30/0xf0 [ 88.275786][ T7054] ? rcu_is_watching+0x15/0xb0 [ 88.275803][ T7054] fib6_info_alloc+0x30/0xf0 [ 88.275817][ T7054] ip6_route_info_create+0x149/0x890 [ 88.275837][ T7054] addrconf_f6i_alloc+0x38b/0x630 [ 88.275854][ T7054] ? addrconf_f6i_alloc+0xfd/0x630 [ 88.275870][ T7054] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 88.275896][ T7054] ? __kasan_kmalloc+0x93/0xb0 [ 88.275915][ T7054] ? __kmalloc_cache_noprof+0x318/0x660 [ 88.275934][ T7054] ? ipv6_add_addr+0x55e/0x1110 [ 88.275953][ T7054] ? __kmalloc_cache_noprof+0x157/0x660 [ 88.275972][ T7054] ipv6_add_addr+0x59c/0x1110 [ 88.275993][ T7054] ? __pfx_ipv6_add_addr+0x10/0x10 [ 88.276013][ T7054] ? ipv6_mc_up+0x3cf/0x580 [ 88.276030][ T7054] inet6_addr_add+0x43c/0xb50 [ 88.276053][ T7054] inet6_rtm_newaddr+0x9f3/0xdf0 [ 88.276074][ T7054] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 88.276091][ T7054] ? __dev_queue_xmit+0x29b/0x37f0 [ 88.276109][ T7054] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 88.276126][ T7054] ? rcu_is_watching+0x15/0xb0 [ 88.276142][ T7054] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 88.276156][ T7054] ? lock_release+0x4b/0x3c0 [ 88.276175][ T7054] ? bpf_lsm_capable+0x9/0x20 [ 88.276189][ T7054] ? security_capable+0x7e/0x2c0 [ 88.276211][ T7054] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 88.276228][ T7054] rtnetlink_rcv_msg+0x802/0xc00 [ 88.276248][ T7054] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 88.276265][ T7054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.276283][ T7054] ? ref_tracker_free+0x689/0x830 [ 88.276300][ T7054] ? __pfx_ref_tracker_free+0x10/0x10 [ 88.276320][ T7054] netlink_rcv_skb+0x226/0x4a0 [ 88.276341][ T7054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.276360][ T7054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.276385][ T7054] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.276406][ T7054] netlink_unicast+0x7bb/0x940 [ 88.276429][ T7054] netlink_sendmsg+0x813/0xb40 [ 88.276452][ T7054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.276474][ T7054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 88.276489][ T7054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.276507][ T7054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.276525][ T7054] ____sys_sendmsg+0x9b9/0xa20 [ 88.276549][ T7054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.276570][ T7054] ? lock_release+0x4b/0x3c0 [ 88.276590][ T7054] ? import_iovec+0x73/0xa0 [ 88.276610][ T7054] ___sys_sendmsg+0x2a5/0x360 [ 88.276635][ T7054] ? rcu_is_watching+0x15/0xb0 [ 88.276649][ T7054] ? get_pid_task+0x20/0x1f0 [ 88.276664][ T7054] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.276684][ T7054] ? rcu_is_watching+0x15/0xb0 [ 88.276708][ T7054] ? __fget_files+0x2a/0x420 [ 88.276724][ T7054] ? __fget_files+0x3a2/0x420 [ 88.276743][ T7054] __x64_sys_sendmsg+0x1b1/0x290 [ 88.276763][ T7054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.276788][ T7054] ? rcu_is_watching+0x15/0xb0 [ 88.276803][ T7054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.276818][ T7054] do_syscall_64+0x174/0x580 [ 88.276838][ T7054] ? trace_irq_disable+0x3b/0x140 [ 88.276856][ T7054] ? clear_bhb_loop+0x40/0x90 [ 88.276872][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.276887][ T7054] RIP: 0033:0x7ff70ab9ce59 [ 88.276900][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.276910][ T7054] RSP: 002b:00007ff70ba1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.276926][ T7054] RAX: ffffffffffffffda RBX: 00007ff70ae15fa0 RCX: 00007ff70ab9ce59 [ 88.276937][ T7054] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 88.276946][ T7054] RBP: 00007ff70ba1e090 R08: 0000000000000000 R09: 0000000000000000 [ 88.276955][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.276964][ T7054] R13: 00007ff70ae16038 R14: 00007ff70ae15fa0 R15: 00007ffed8cec628 [ 88.276981][ T7054] [ 88.714627][ T7052] tipc: Started in network mode [ 88.719725][ T7052] tipc: Node identity a203380c4dd9, cluster identity 4711 [ 88.727087][ T7052] tipc: Enabled bearer , priority 0 [ 88.739203][ T7055] syzkaller0: entered promiscuous mode [ 88.757534][ T7055] syzkaller0: entered allmulticast mode [ 88.792452][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.347'. [ 88.816676][ T7052] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.845503][ T7052] tipc: Resetting bearer [ 88.875594][ T7051] tipc: Resetting bearer [ 88.920194][ T7051] tipc: Disabling bearer [ 89.084974][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 89.207148][ T7096] xt_hashlimit: size too large, truncated to 1048576 [ 89.281471][ T7106] FAULT_INJECTION: forcing a failure. [ 89.281471][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 89.312977][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.3.357 Not tainted syzkaller #0 PREEMPT(full) [ 89.312998][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.313007][ T7106] Call Trace: [ 89.313013][ T7106] [ 89.313020][ T7106] dump_stack_lvl+0xe8/0x150 [ 89.313042][ T7106] should_fail_ex+0x40c/0x560 [ 89.313096][ T7106] should_failslab+0xa8/0x100 [ 89.313121][ T7106] __kmalloc_cache_noprof+0x88/0x660 [ 89.313140][ T7106] ? sctp_inet6addr_event+0x358/0x710 [ 89.313163][ T7106] sctp_inet6addr_event+0x358/0x710 [ 89.313183][ T7106] ? ieee80211_ifa6_changed+0xd1/0x3c0 [ 89.313205][ T7106] notifier_call_chain+0x1a5/0x3d0 [ 89.313229][ T7106] ? atomic_notifier_call_chain+0x26/0x180 [ 89.313250][ T7106] atomic_notifier_call_chain+0xda/0x180 [ 89.313271][ T7106] ipv6_add_addr+0xe18/0x1110 [ 89.313295][ T7106] ? __pfx_ipv6_add_addr+0x10/0x10 [ 89.313315][ T7106] ? ipv6_mc_up+0x3cf/0x580 [ 89.313332][ T7106] inet6_addr_add+0x43c/0xb50 [ 89.313355][ T7106] inet6_rtm_newaddr+0x9f3/0xdf0 [ 89.313377][ T7106] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 89.313394][ T7106] ? __dev_queue_xmit+0x29b/0x37f0 [ 89.313412][ T7106] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 89.313434][ T7106] ? rcu_is_watching+0x15/0xb0 [ 89.313451][ T7106] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 89.313467][ T7106] ? lock_release+0x4b/0x3c0 [ 89.313487][ T7106] ? bpf_lsm_capable+0x9/0x20 [ 89.313500][ T7106] ? security_capable+0x7e/0x2c0 [ 89.313523][ T7106] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 89.313541][ T7106] rtnetlink_rcv_msg+0x802/0xc00 [ 89.313562][ T7106] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 89.313579][ T7106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.313596][ T7106] ? ref_tracker_free+0x689/0x830 [ 89.313614][ T7106] ? __pfx_ref_tracker_free+0x10/0x10 [ 89.313634][ T7106] netlink_rcv_skb+0x226/0x4a0 [ 89.313655][ T7106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.313674][ T7106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.313700][ T7106] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.313722][ T7106] netlink_unicast+0x7bb/0x940 [ 89.313745][ T7106] netlink_sendmsg+0x813/0xb40 [ 89.313768][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.313789][ T7106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 89.313805][ T7106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.313822][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.313843][ T7106] ____sys_sendmsg+0x9b9/0xa20 [ 89.313868][ T7106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.313888][ T7106] ? lock_release+0x4b/0x3c0 [ 89.313909][ T7106] ? import_iovec+0x73/0xa0 [ 89.313928][ T7106] ___sys_sendmsg+0x2a5/0x360 [ 89.313947][ T7106] ? rcu_is_watching+0x15/0xb0 [ 89.313961][ T7106] ? get_pid_task+0x20/0x1f0 [ 89.313975][ T7106] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.313997][ T7106] ? rcu_is_watching+0x15/0xb0 [ 89.314021][ T7106] ? __fget_files+0x2a/0x420 [ 89.314038][ T7106] ? __fget_files+0x3a2/0x420 [ 89.314058][ T7106] __x64_sys_sendmsg+0x1b1/0x290 [ 89.314085][ T7106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.314110][ T7106] ? rcu_is_watching+0x15/0xb0 [ 89.314124][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.314137][ T7106] do_syscall_64+0x174/0x580 [ 89.314155][ T7106] ? trace_irq_disable+0x3b/0x140 [ 89.314173][ T7106] ? clear_bhb_loop+0x40/0x90 [ 89.314188][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.314202][ T7106] RIP: 0033:0x7f4cd2f9ce59 [ 89.314216][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.314228][ T7106] RSP: 002b:00007f4cd3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.314244][ T7106] RAX: ffffffffffffffda RBX: 00007f4cd3215fa0 RCX: 00007f4cd2f9ce59 [ 89.314255][ T7106] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 89.314264][ T7106] RBP: 00007f4cd3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 89.314273][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.314281][ T7106] R13: 00007f4cd3216038 R14: 00007f4cd3215fa0 R15: 00007ffd0bd3c138 [ 89.314296][ T7106] [ 89.322178][ T7110] syzkaller0: entered promiscuous mode [ 89.736989][ T7110] syzkaller0: entered allmulticast mode [ 89.795509][ T7133] xt_bpf: check failed: parse error [ 89.897562][ T7138] atomic_op ffff888079a1f198 conn xmit_atomic 0000000000000000 [ 90.273590][ T7153] syzkaller0: entered promiscuous mode [ 90.296002][ T7153] syzkaller0: entered allmulticast mode [ 90.316706][ T7153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.335762][ T7163] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.460255][ T7169] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 90.495250][ T7169] bond2 (unregistering): Released all slaves [ 90.543003][ T7187] netlink: 'syz.2.376': attribute type 13 has an invalid length. [ 90.577248][ T7187] netlink: 'syz.2.376': attribute type 17 has an invalid length. [ 90.604629][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 90.681106][ T7196] tipc: Trying to set illegal importance in message [ 90.709574][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 90.728548][ T5618] block nbd0: Receive control failed (result -107) [ 90.740571][ T7201] block nbd0: reconnected socket [ 90.754575][ T7201] netlink: 'syz.4.374': attribute type 13 has an invalid length. [ 90.766848][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 90.817433][ T7187] xfrm0: left allmulticast mode [ 90.828094][ T7187] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 90.864546][ T7196] bond1: entered promiscuous mode [ 90.870104][ T7190] ip6tnl0: entered promiscuous mode [ 91.254829][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 91.375056][ T7244] vlan0: entered promiscuous mode [ 91.447807][ T7246] sch_fq: defrate 379977728 ignored. [ 91.721778][ T7274] 8021q: VLANs not supported on sit0 [ 91.725817][ T7277] netlink: 'syz.2.397': attribute type 58 has an invalid length. [ 92.150633][ T7313] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 92.658470][ T7341] x_tables: duplicate underflow at hook 1 [ 92.759322][ T7296] syz.2.401 (7296) used greatest stack depth: 17944 bytes left [ 92.790492][ T7348] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 92.805404][ T7351] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20004 [ 92.835522][ T7348] bond2: (slave geneve0): making interface the new active one [ 92.851267][ T7348] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 92.869775][ T57] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.909145][ T7348] bond2 (unregistering): (slave geneve0): Releasing active interface [ 92.966762][ T7348] bond2 (unregistering): Released all slaves [ 93.028487][ T7367] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 93.044131][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.185936][ T7373] bond3: (slave bridge3): making interface the new active one [ 93.204551][ T7373] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 93.241963][ T7367] __nla_validate_parse: 5 callbacks suppressed [ 93.241979][ T7367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.416'. [ 93.297866][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 93.394019][ T7367] netlink: 324 bytes leftover after parsing attributes in process `syz.0.416'. [ 93.413868][ T7393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.438606][ T7381] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 93.450149][ T57] dummy0: left promiscuous mode [ 93.520365][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.557426][ T7381] bond2: entered promiscuous mode [ 93.582476][ T7381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.726605][ T7407] bond2: (slave bridge2): making interface the new active one [ 93.734543][ T7407] bridge2: entered promiscuous mode [ 93.740801][ T7407] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 93.762157][ T7406] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 93.778241][ T7406] bond4 (unregistering): Released all slaves [ 94.190029][ T7447] syzkaller0: entered promiscuous mode [ 94.198076][ T7458] openvswitch: netlink: IP tunnel dst address not specified [ 94.225348][ T7447] syzkaller0: entered allmulticast mode [ 94.287783][ T7465] netlink: 240 bytes leftover after parsing attributes in process `syz.3.432'. [ 94.301784][ T7465] netlink: 64 bytes leftover after parsing attributes in process `syz.3.432'. [ 94.390080][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 94.610778][ T7484] 8021q: VLANs not supported on vxcan0 [ 94.626810][ T7487] syzkaller0: entered promiscuous mode [ 94.637368][ T7487] syzkaller0: entered allmulticast mode [ 94.802958][ T7498] netlink: 'syz.2.443': attribute type 33 has an invalid length. [ 94.892386][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 94.960901][ T7493] tc_dump_action: action bad kind [ 95.141324][ T7509] veth3: entered allmulticast mode [ 95.164599][ T7509] bond2: (slave veth3): Enslaving as an active interface with an up link [ 95.300171][ T7533] syzkaller0: entered promiscuous mode [ 95.316550][ T7533] syzkaller0: entered allmulticast mode [ 95.375593][ T7533] tipc: Started in network mode [ 95.399128][ T7533] tipc: Node identity 1aafde9f2226, cluster identity 4711 [ 95.413698][ T7533] tipc: Enabled bearer , priority 0 [ 95.444478][ T7533] tipc: Resetting bearer [ 95.477024][ T7531] tipc: Resetting bearer [ 95.491892][ T7531] tipc: Disabling bearer [ 95.696285][ T5716] IPVS: starting estimator thread 0... [ 95.724423][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 95.762282][ T7557] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 95.781035][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'. [ 95.791066][ T7557] netlink: 'syz.2.459': attribute type 5 has an invalid length. [ 95.798988][ T7557] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.459'. [ 95.803027][ T7559] IPVS: using max 46 ests per chain, 110400 per kthread [ 95.926518][ T7537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 95.947882][ T7537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.249920][ T5724] IPVS: starting estimator thread 0... [ 96.352733][ T7597] IPVS: using max 47 ests per chain, 112800 per kthread [ 96.514051][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.906701][ T7648] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 96.925946][ T7648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.952261][ T7652] bond3: (slave dummy0): making interface the new active one [ 96.960648][ T7652] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 96.970678][ T7652] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 96.971086][ T7656] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 96.994920][ T7656] dummy0: entered promiscuous mode [ 97.002060][ T7656] bond3: (slave dummy0): Releasing active interface [ 97.015891][ T7654] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 97.305654][ T7676] IPVS: Scheduler module ip_vs_ not found [ 97.392940][ T7679] netlink: 'syz.1.478': attribute type 16 has an invalid length. [ 97.404558][ T7679] warning: `syz.1.478' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.530749][ T7695] hsr_slave_1 (unregistering): left promiscuous mode [ 97.546757][ T7702] macsec1: entered allmulticast mode [ 97.555698][ T7702] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 97.566212][ T7702] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 97.579291][ T7702] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 97.597083][ T7702] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 97.608455][ T833] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 97.638080][ T7708] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 97.919397][ T7725] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 98.176879][ T7747] validate_nla: 3 callbacks suppressed [ 98.176897][ T7747] netlink: 'syz.0.499': attribute type 30 has an invalid length. [ 98.217737][ T7747] bond4: option arp_missed_max: invalid value (0) [ 98.227271][ T7747] bond4: option arp_missed_max: allowed values 1 - 255 [ 98.239701][ T7747] bond4 (unregistering): Released all slaves [ 98.359511][ T7762] tipc: Enabled bearer , priority 10 [ 98.501456][ T7753] __nla_validate_parse: 14 callbacks suppressed [ 98.501474][ T7753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.501'. [ 98.521452][ T7753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 98.545939][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.562000][ T7769] IPVS: Scheduler module ip_vs_ not found [ 98.891965][ T7801] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.517'. [ 99.202729][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 99.320904][ T7833] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 99.368208][ T7833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.525'. [ 99.490728][ T833] tipc: Node number set to 4024055820 [ 99.609892][ T7848] netlink: 'syz.2.528': attribute type 61 has an invalid length. [ 99.638597][ T7848] netlink: 'syz.2.528': attribute type 62 has an invalid length. [ 99.687450][ T7831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.524'. [ 99.743563][ T7834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.765611][ T7831] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.101022][ T7872] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.536'. [ 100.136413][ T7874] IPVS: Scheduler module ip_vs_ not found [ 100.475996][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 100.591923][ T7908] bridge2: entered allmulticast mode [ 101.140195][ T833] IPVS: starting estimator thread 0... [ 101.146495][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 101.151635][ T7906] netlink: 52 bytes leftover after parsing attributes in process `syz.0.546'. [ 101.175394][ T7906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.206080][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.252847][ T7960] erspan0: entered promiscuous mode [ 101.264258][ T7954] IPVS: using max 55 ests per chain, 132000 per kthread [ 101.416375][ T7968] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.564'. [ 101.641730][ T7988] syzkaller0: entered promiscuous mode [ 101.666563][ T7988] syzkaller0: entered allmulticast mode [ 101.985740][ T8014] tipc: Enabling of bearer rejected, failed to enable media [ 102.077301][ T8019] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 102.329671][ T8013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.329879][ T8022] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 102.376820][ T8046] syzkaller0: entered promiscuous mode [ 102.392736][ T8046] syzkaller0: entered allmulticast mode [ 102.459566][ T8056] tipc: Enabled bearer , priority 0 [ 102.528748][ T8056] syzkaller0: entered promiscuous mode [ 102.541674][ T8056] syzkaller0: entered allmulticast mode [ 102.551317][ T8062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.601384][ T8056] tipc: Resetting bearer [ 102.630723][ T8055] tipc: Resetting bearer [ 102.659149][ T8055] tipc: Disabling bearer [ 102.780787][ T8077] vxcan2: entered allmulticast mode [ 103.276849][ T8123] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 103.347207][ T8105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.369215][ T8105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.440814][ T8129] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 103.546557][ T8137] __nla_validate_parse: 6 callbacks suppressed [ 103.546575][ T8137] netlink: 7 bytes leftover after parsing attributes in process `syz.0.606'. [ 103.578065][ T8137] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 103.609351][ T8147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.619649][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 103.801643][ T8163] FAULT_INJECTION: forcing a failure. [ 103.801643][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.820347][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.0.613 Not tainted syzkaller #0 PREEMPT(full) [ 103.820370][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.820379][ T8163] Call Trace: [ 103.820385][ T8163] [ 103.820391][ T8163] dump_stack_lvl+0xe8/0x150 [ 103.820411][ T8163] should_fail_ex+0x40c/0x560 [ 103.820426][ T8163] _copy_to_user+0x31/0xb0 [ 103.820443][ T8163] simple_read_from_buffer+0xe1/0x170 [ 103.820461][ T8163] proc_fail_nth_read+0x1bb/0x230 [ 103.820481][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.820499][ T8163] ? rw_verify_area+0x24a/0x4c0 [ 103.820518][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.820535][ T8163] vfs_read+0x213/0xa80 [ 103.820554][ T8163] ? __pfx___mutex_lock+0x10/0x10 [ 103.820574][ T8163] ? __pfx_vfs_read+0x10/0x10 [ 103.820594][ T8163] ? __fget_files+0x3a2/0x420 [ 103.820609][ T8163] ? __fget_files+0x2a/0x420 [ 103.820628][ T8163] ksys_read+0x150/0x270 [ 103.820647][ T8163] ? __pfx_ksys_read+0x10/0x10 [ 103.820666][ T8163] ? rcu_is_watching+0x15/0xb0 [ 103.820682][ T8163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.820697][ T8163] do_syscall_64+0x174/0x580 [ 103.820716][ T8163] ? trace_irq_disable+0x3b/0x140 [ 103.820744][ T8163] ? clear_bhb_loop+0x40/0x90 [ 103.820760][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.820774][ T8163] RIP: 0033:0x7ff70ab5d68e [ 103.820788][ T8163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.820800][ T8163] RSP: 002b:00007ff70ba1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.820817][ T8163] RAX: ffffffffffffffda RBX: 00007ff70ba1e6c0 RCX: 00007ff70ab5d68e [ 103.820828][ T8163] RDX: 000000000000000f RSI: 00007ff70ba1e0a0 RDI: 0000000000000005 [ 103.820837][ T8163] RBP: 00007ff70ba1e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.820845][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.820853][ T8163] R13: 00007ff70ae16038 R14: 00007ff70ae15fa0 R15: 00007ffed8cec628 [ 103.820869][ T8163] [ 104.080392][ T8169] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 104.089360][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 104.098325][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 104.145327][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 104.145687][ T8171] syzkaller0: entered promiscuous mode [ 104.159743][ T8171] syzkaller0: entered allmulticast mode [ 104.199495][ T8175] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 104.219943][ T8174] netlink: 88 bytes leftover after parsing attributes in process `syz.4.618'. [ 104.377854][ T8177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.619'. [ 104.394612][ T8177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.434243][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.484686][ T8179] ip6tnl0: left promiscuous mode [ 104.571035][ T8179] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 104.666796][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'. [ 104.707921][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'. [ 104.852439][ T8201] geneve2: entered promiscuous mode [ 104.876594][ T8201] geneve2: entered allmulticast mode [ 104.941231][ T8205] syzkaller0: entered promiscuous mode [ 104.963305][ T8205] syzkaller0: entered allmulticast mode [ 105.070463][ T5618] block nbd0: Receive control failed (result -107) [ 105.077452][ T8218] block nbd0: reconnected socket [ 105.084146][ T8218] netlink: 'syz.4.629': attribute type 13 has an invalid length. [ 105.136416][ T8223] : entered promiscuous mode [ 105.147815][ T8225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.630'. [ 105.321690][ T8233] syzkaller1: entered promiscuous mode [ 105.331056][ T8233] syzkaller1: entered allmulticast mode [ 105.399597][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.407012][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.495980][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.507683][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.552201][ T8233] ip6gre1: left allmulticast mode [ 105.570216][ T8233] syzkaller1: left promiscuous mode [ 105.577007][ T8233] syzkaller1: left allmulticast mode [ 105.591242][ T8236] batadv_slave_1: entered promiscuous mode [ 105.649278][ T8234] dummy0: left promiscuous mode [ 105.672108][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.681043][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.689790][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.701094][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.720353][ T8243] veth0: entered promiscuous mode [ 105.731765][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.748487][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.757928][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.767067][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.791046][ T8242] veth0: left promiscuous mode [ 105.910537][ T8265] netlink: 'syz.1.643': attribute type 9 has an invalid length. [ 105.919668][ T8265] netlink: 'syz.1.643': attribute type 6 has an invalid length. [ 106.019091][ T8269] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.371059][ T8302] syzkaller1: entered promiscuous mode [ 106.377065][ T8302] syzkaller1: entered allmulticast mode [ 106.487094][ T8310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.494611][ T8310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.502424][ T8310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.510196][ T8310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.570732][ T8307] net_ratelimit: 3 callbacks suppressed [ 106.570748][ T8307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 106.595743][ T8307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.806592][ T8317] syzkaller0: entered promiscuous mode [ 106.817647][ T8317] syzkaller0: entered allmulticast mode [ 106.988554][ T8329] syzkaller0: entered promiscuous mode [ 106.994665][ T8329] syzkaller0: entered allmulticast mode [ 107.041308][ T8340] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 107.072371][ T8340] bond3 (unregistering): Released all slaves [ 107.400889][ T8353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.418415][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.941985][ T8367] syzkaller0: entered promiscuous mode [ 107.947780][ T8367] syzkaller0: entered allmulticast mode [ 108.821603][ T8386] __nla_validate_parse: 11 callbacks suppressed [ 108.821603][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 108.821621][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 109.974247][ T8333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.072768][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 110.101284][ T8404] netlink: 'syz.1.678': attribute type 2 has an invalid length. [ 110.121488][ T8404] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 110.138566][ T8410] (: renamed from macsec0 (while UP) [ 110.141743][ T8404] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 110.198783][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 110.200734][ T8415] bond3: Unable to set down delay as MII monitoring is disabled [ 110.232125][ T8415] bond3 (unregistering): Released all slaves [ 110.284745][ T8423] batman_adv: batadv0: Adding interface: ipvlan2 [ 110.291850][ T8423] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.318080][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.329579][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.341441][ T8423] batman_adv: batadv0: Interface activated: ipvlan2 [ 110.457991][ T8434] netlink: 'syz.2.688': attribute type 15 has an invalid length. [ 110.480430][ T8443] netlink: 'syz.4.692': attribute type 3 has an invalid length. [ 110.567889][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.609265][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.650180][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.688079][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.698641][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.712528][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 110.817283][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.829955][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.934361][ T8461] : renamed from bond_slave_0 [ 110.941592][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.954585][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.976306][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.017864][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.290263][ T8484] sctp: [Deprecated]: syz.3.702 (pid 8484) Use of int in max_burst socket option. [ 111.290263][ T8484] Use struct sctp_assoc_value instead [ 111.480756][ T8506] IPVS: Scheduler module ip_vs_ not found [ 111.494279][ T8503] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 111.621039][ T8503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.633882][ T8519] IPVS: Scheduler module ip_vs_ not found [ 111.687524][ T8504] bond3: (slave gretap1): making interface the new active one [ 111.705282][ T8504] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 111.948665][ T8540] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 112.162575][ T8563] syzkaller0: entered promiscuous mode [ 112.168292][ T8563] syzkaller0: entered allmulticast mode [ 112.176716][ T8562] tipc: Started in network mode [ 112.181635][ T8562] tipc: Node identity 9e1caea17a0a, cluster identity 4711 [ 112.196800][ T8562] tipc: Enabled bearer , priority 0 [ 112.216307][ T8563] tipc: Enabling of bearer rejected, already enabled [ 112.267834][ T8559] tipc: Resetting bearer [ 112.289687][ T8559] tipc: Disabling bearer [ 112.486414][ T8580] tipc: Enabled bearer , priority 0 [ 112.517578][ T8589] xt_TCPMSS: Only works on TCP SYN packets [ 112.536303][ T8589] netlink: 'syz.1.732': attribute type 21 has an invalid length. [ 112.552726][ T8589] netlink: 'syz.1.732': attribute type 20 has an invalid length. [ 112.650648][ T8583] tipc: Disabling bearer [ 112.814091][ T8609] bond4 (unregistering): Released all slaves [ 112.835911][ T8616] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.898680][ T8652] __nla_validate_parse: 163 callbacks suppressed [ 113.898699][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 114.011337][ T8656] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 114.039420][ T8656] bond3 (unregistering): Released all slaves [ 114.055320][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 114.148881][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.760'. [ 114.425059][ T8705] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 114.441456][ T8705] pim6reg0: linktype set to 805 [ 114.485308][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 114.538812][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.769'. [ 114.539553][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.769'. [ 114.777138][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 117.484151][ T8710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.498143][ T8752] netlink: 1544 bytes leftover after parsing attributes in process `syz.3.776'. [ 117.695805][ T8765] bond4: ARP target 9.0.0.0 is already present [ 117.735571][ T8765] bond4: option arp_ip_target: invalid value (9) [ 117.742219][ T8780] sctp: [Deprecated]: syz.3.781 (pid 8780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.742219][ T8780] Use struct sctp_sack_info instead [ 117.776277][ T8765] bond4 (unregistering): Released all slaves [ 117.796149][ T8789] netlink: 596 bytes leftover after parsing attributes in process `syz.0.786'. [ 117.810479][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 117.826825][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.839168][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 118.239251][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.247909][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.260570][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.309423][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.321311][ T8801] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.344391][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.351548][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.369139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.376422][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.678519][ T8832] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 118.790442][ T8840] bridge_slave_0: left allmulticast mode [ 118.815540][ T8840] bridge_slave_0: left promiscuous mode [ 118.823065][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.823345][ T8835] IPVS: Scheduler module ip_vs_ not found [ 118.836945][ T6203] udevd[6203]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.867613][ T8840] bridge_slave_1: left allmulticast mode [ 118.889897][ T8840] bridge_slave_1: left promiscuous mode [ 118.905719][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.935111][ T8840] bond0: (slave bond_slave_0): Releasing backup interface [ 118.964929][ T8840] bond0: (slave bond_slave_1): Releasing backup interface [ 118.987739][ T8840] team0: Port device team_slave_0 removed [ 119.005910][ T8840] team0: Port device team_slave_1 removed [ 119.007446][ T8859] __nla_validate_parse: 5 callbacks suppressed [ 119.007461][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.803'. [ 119.015164][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.042780][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.056392][ T8840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.121411][ T8860] team0: Mode changed to "activebackup" [ 119.821006][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 120.084480][ T8931] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 120.162956][ T8931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.210970][ T8940] bond5: (slave ip6erspan0): making interface the new active one [ 120.225405][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.824'. [ 120.251407][ T8940] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 120.255948][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 120.297757][ T8942] tipc: New replicast peer: 172.30.0.4 [ 120.299816][ T8951] netlink: 'syz.1.829': attribute type 7 has an invalid length. [ 120.308077][ T8942] tipc: Enabled bearer , priority 10 [ 120.349277][ T8951] netlink: 'syz.1.829': attribute type 8 has an invalid length. [ 120.351507][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 120.376522][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 120.384024][ T8956] tipc: Disabling bearer [ 120.504514][ T8948] syzkaller1: entered promiscuous mode [ 120.510096][ T8948] syzkaller1: entered allmulticast mode [ 120.618818][ T8966] syzkaller0: entered promiscuous mode [ 120.629880][ T8966] syzkaller0: entered allmulticast mode [ 120.638054][ T8966] tc action pedit offset 4096 out of bounds [ 120.700737][ T8979] syzkaller0: entered promiscuous mode [ 120.708635][ T8979] syzkaller0: entered allmulticast mode [ 121.714351][ T8993] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.839'. [ 123.377618][ T8958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.636690][ T9025] netlink: 'syz.4.847': attribute type 5 has an invalid length. [ 123.874483][ T9041] netlink: 56 bytes leftover after parsing attributes in process `syz.3.852'. [ 123.905459][ T9041] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 124.035302][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 124.371487][ T9051] netlink: 'syz.2.853': attribute type 30 has an invalid length. [ 124.445975][ T9051] bond6: option arp_missed_max: invalid value (0) [ 124.452727][ T9051] bond6: option arp_missed_max: allowed values 1 - 255 [ 124.467896][ T9051] bond6 (unregistering): Released all slaves [ 124.494917][ T9054] netlink: 'syz.4.855': attribute type 12 has an invalid length. [ 124.523596][ T9054] veth0_macvtap: left promiscuous mode [ 124.540841][ T9054] macvtap0: entered allmulticast mode [ 124.644868][ T9068] netlink: 9 bytes leftover after parsing attributes in process `syz.1.857'. [ 124.675769][ T9068] 0: renamed from hsr0 (while UP) [ 124.702084][ T9068] 0: entered allmulticast mode [ 124.722294][ T9068] hsr_slave_0: entered allmulticast mode [ 124.742772][ T9068] hsr_slave_1: entered allmulticast mode [ 124.757627][ T9068] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 124.840913][ T9075] Bluetooth: MGMT ver 1.23 [ 124.905645][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 124.914865][ T9076] netlink: 348 bytes leftover after parsing attributes in process `syz.0.859'. [ 124.925927][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 124.935124][ T9076] netlink: 348 bytes leftover after parsing attributes in process `syz.0.859'. [ 124.944861][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 124.981304][ T9089] netlink: 100 bytes leftover after parsing attributes in process `syz.3.863'. [ 125.019076][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 125.043872][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 125.100421][ T9097] xt_hashlimit: size too large, truncated to 1048576 [ 125.144169][ T9089] netlink: 'syz.3.863': attribute type 16 has an invalid length. [ 125.165476][ T9103] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 125.348765][ T9103] ip6tnl0: Caught tx_queue_len zero misconfig [ 125.430577][ T9109] syzkaller1: entered promiscuous mode [ 125.466662][ T9109] syzkaller1: entered allmulticast mode [ 125.472520][ T9125] IPVS: Scheduler module ip_vs_ not found [ 125.550316][ T9131] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 125.608946][ T9136] syzkaller0: entered promiscuous mode [ 125.624778][ T9136] syzkaller0: entered allmulticast mode [ 125.745897][ T9152] netlink: 'syz.2.878': attribute type 61 has an invalid length. [ 126.065880][ T9179] IPVS: Scheduler module ip_vs_ not found [ 126.145382][ T9190] geneve2: entered promiscuous mode [ 126.157786][ T1179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.158796][ T9190] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 126.174434][ T9190] netlink: 'syz.0.885': attribute type 6 has an invalid length. [ 126.182397][ T1179] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.209924][ T1179] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.240284][ T1179] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.356597][ T9209] trusted_key: syz.0.888 sent an empty control message without MSG_MORE. [ 126.636788][ T9232] IPVS: Scheduler module ip_vs_ not found [ 126.846329][ T9248] syzkaller0: entered promiscuous mode [ 126.851985][ T9248] syzkaller0: entered allmulticast mode [ 126.866467][ T9251] syzkaller0: entered promiscuous mode [ 126.872220][ T9251] syzkaller0: entered allmulticast mode [ 127.297474][ T9277] IPVS: Scheduler module ip_vs_ not found [ 127.359727][ T9285] netlink: 'syz.4.911': attribute type 13 has an invalid length. [ 127.388957][ T9285] netlink: 'syz.4.911': attribute type 17 has an invalid length. [ 127.431480][ T9294] netlink: 'syz.0.912': attribute type 8 has an invalid length. [ 127.928909][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.940083][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.967540][ T9285] batadv_slave_1: left promiscuous mode [ 127.980594][ T9285] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 128.068249][ T1179] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.091087][ T1179] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.100837][ T1179] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.124506][ T1179] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.434667][ T9346] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 128.442927][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.605989][ T9352] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 128.617290][ T9352] bond3 (unregistering): Released all slaves [ 128.690597][ T9360] SET target dimension over the limit! [ 128.789263][ T9371] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 128.832169][ T9371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.862107][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.872256][ T9373] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.885672][ T9373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.913208][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.922080][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.936045][ T9373] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.983110][ T9376] bond3: (slave macvlan0): making interface the new active one [ 128.993434][ T9376] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 129.020118][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.027414][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.039199][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.046463][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.067167][ T9388] __nla_validate_parse: 24 callbacks suppressed [ 129.067179][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 129.093209][ T9371] bond4: option mode: invalid value (10) [ 129.099979][ T9371] bond4 (unregistering): Released all slaves [ 129.113475][ T9376] dummy0: entered promiscuous mode [ 129.185744][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 129.198326][ T9398] nbd: must specify a size in bytes for the device [ 129.324425][ T9411] Cannot find del_set index 1 as target [ 129.329502][ T9406] syzkaller1: entered promiscuous mode [ 129.348369][ T9406] syzkaller1: entered allmulticast mode [ 129.505732][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.944'. [ 129.735867][ T9436] netlink: 368 bytes leftover after parsing attributes in process `syz.0.947'. [ 129.760106][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'. [ 129.770260][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'. [ 129.789711][ T9436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.947'. [ 130.027997][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 130.058416][ T9462] sit1: entered promiscuous mode [ 130.090632][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 130.099689][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 130.114603][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.125645][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.136871][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.148813][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.330077][ T9479] validate_nla: 3 callbacks suppressed [ 130.330095][ T9479] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 130.500724][ T9487] bond4: (slave veth7): Enslaving as an active interface with a down link [ 130.625666][ T9494] bond6: option lacp_rate: invalid value (128) [ 130.635115][ T9494] bond6 (unregistering): Released all slaves [ 130.914296][ T9516] bond2: (slave dummy0): Releasing active interface [ 130.937976][ T9516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.092033][ T9520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.146269][ T9543] IPv6: addrconf: prefix option has invalid lifetime [ 131.161412][ T9543] IPv6: addrconf: prefix option has invalid lifetime [ 131.177270][ T9546] syzkaller1: entered promiscuous mode [ 131.183284][ T9546] syzkaller1: entered allmulticast mode [ 131.470703][ T9574] netlink: 'syz.2.987': attribute type 15 has an invalid length. [ 131.541811][ T9574] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 131.621078][ T9574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.931253][ T9631] x_tables: duplicate underflow at hook 1 [ 132.169494][ T9595] dummy0: left promiscuous mode [ 132.190375][ T9595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 132.262454][ T9607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.527090][ T9655] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 132.536363][ T9654] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 133.236717][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.244227][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.877986][ T9677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.145977][ T9677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.274361][ T9677] veth3: left promiscuous mode [ 134.321413][ T9677] vxcan2: left allmulticast mode [ 134.367332][ T9683] netlink: 'syz.4.1012': attribute type 62 has an invalid length. [ 134.550191][ T9698] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 134.636555][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.698867][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.834145][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.884932][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.194323][ T9726] netlink: 'syz.0.1021': attribute type 6 has an invalid length. [ 135.827194][ T9742] __nla_validate_parse: 18 callbacks suppressed [ 135.827213][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 135.978965][ T9742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.058968][ T9752] bond4: entered promiscuous mode [ 136.103220][ T9752] bond4: entered allmulticast mode [ 136.149318][ T9742] bond4 (unregistering): Released all slaves [ 136.172142][ T9763] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 136.258761][ T9763] bond7: (slave bridge4): making interface the new active one [ 136.289096][ T9763] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 136.340678][ T9766] batadv_slave_0: entered promiscuous mode [ 136.389961][ T9772] 8021q: VLANs not supported on xfrm0 [ 136.554316][ T9776] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 136.621610][ T9776] 8021q: adding VLAN 0 to HW filter on device bond8 [ 136.780340][ T9773] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1032'. [ 136.875397][ T9773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.983885][ T9754] batadv_slave_0: left promiscuous mode [ 137.394479][ T9794] netlink: 'syz.3.1037': attribute type 97 has an invalid length. [ 138.089328][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 138.197831][ T9827] syzkaller0: entered promiscuous mode [ 138.204002][ T9827] syzkaller0: entered allmulticast mode [ 138.212314][ T9827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1041'. [ 138.233170][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 138.976552][ T9750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.988805][ T9760] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1030'. [ 139.166722][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 139.194505][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 139.245452][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 139.292807][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 139.377549][ T9846] syzkaller1: entered allmulticast mode [ 139.926660][ T9869] netlink: 'syz.1.1051': attribute type 2 has an invalid length. [ 139.941549][ T9861] syzkaller0: entered promiscuous mode [ 139.953392][ T9861] syzkaller0: entered allmulticast mode [ 139.981002][ T9870] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 141.039270][ T9890] __nla_validate_parse: 1 callbacks suppressed [ 141.039288][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'. [ 141.178165][ T9887] (: renamed from veth1 (while UP) [ 141.397199][ T9898] Cannot find add_set index 0 as target [ 141.506110][ T9908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1062'. [ 141.630629][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.700988][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 142.050717][ T9943] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.1071'. [ 142.210954][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 142.267618][ T9948] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.417878][ T9960] netlink: 'syz.2.1074': attribute type 142 has an invalid length. [ 142.712116][ T9969] syzkaller0: entered promiscuous mode [ 142.736794][ T9969] syzkaller0: entered allmulticast mode [ 142.780581][ T9972] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1076'. [ 142.878013][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1080'. [ 142.890158][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 142.960109][ T9978] syzkaller1: entered promiscuous mode [ 142.987996][ T9978] syzkaller1: entered allmulticast mode [ 143.162768][ T9989] erspan0: left promiscuous mode [ 143.338707][ T9989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.361174][ T9989] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.386090][ T9989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.515023][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.545103][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.666643][ T9989] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 143.707564][ T9991] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 143.721596][ T9991] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 143.748367][ T9991] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 143.808413][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.815618][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.873667][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.880841][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.031111][T10002] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 144.267654][T10005] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1087'. [ 144.319436][T10005] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 144.588756][T10011] vlan2: entered promiscuous mode [ 144.599505][T10022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1092'. [ 144.624437][T10011] bridge0: entered promiscuous mode [ 144.927186][T10032] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 144.979488][T10043] batadv0: entered promiscuous mode [ 145.022255][T10043] batadv0: entered allmulticast mode [ 145.044626][T10048] FAULT_INJECTION: forcing a failure. [ 145.044626][T10048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.059480][T10048] CPU: 0 UID: 0 PID: 10048 Comm: syz.2.1101 Not tainted syzkaller #0 PREEMPT(full) [ 145.059503][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.059512][T10048] Call Trace: [ 145.059526][T10048] [ 145.059533][T10048] dump_stack_lvl+0xe8/0x150 [ 145.059566][T10048] should_fail_ex+0x40c/0x560 [ 145.059586][T10048] _copy_from_user+0x2d/0xb0 [ 145.059606][T10048] do_ip_vs_set_ctl+0x35d/0xaf0 [ 145.059628][T10048] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 145.059649][T10048] ? rcu_is_watching+0x15/0xb0 [ 145.059672][T10048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.059694][T10048] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.059719][T10048] nf_setsockopt+0x26f/0x290 [ 145.059736][T10048] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.059752][T10048] do_sock_setsockopt+0x17c/0x1b0 [ 145.059771][T10048] __x64_sys_setsockopt+0x13d/0x1b0 [ 145.059788][T10048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.059801][T10048] do_syscall_64+0x174/0x580 [ 145.059819][T10048] ? trace_irq_disable+0x3b/0x140 [ 145.059847][T10048] ? clear_bhb_loop+0x40/0x90 [ 145.059862][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.059874][T10048] RIP: 0033:0x7f76cc59ce59 [ 145.059895][T10048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.059905][T10048] RSP: 002b:00007f76cd450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.059921][T10048] RAX: ffffffffffffffda RBX: 00007f76cc815fa0 RCX: 00007f76cc59ce59 [ 145.059930][T10048] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000004 [ 145.059939][T10048] RBP: 00007f76cd450090 R08: 000000000000002c R09: 0000000000000000 [ 145.059946][T10048] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 145.059954][T10048] R13: 00007f76cc816038 R14: 00007f76cc815fa0 R15: 00007ffebe240f98 [ 145.059971][T10048] [ 145.470869][T10058] sctp: [Deprecated]: syz.2.1103 (pid 10058) Use of int in max_burst socket option deprecated. [ 145.470869][T10058] Use struct sctp_assoc_value instead [ 146.086647][T10049] erspan0: entered promiscuous mode [ 146.095489][T10049] __nla_validate_parse: 2 callbacks suppressed [ 146.095525][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'. [ 146.375277][T10060] bridge5: port 1(vlan3) entered blocking state [ 146.737147][T10060] bridge5: port 1(vlan3) entered disabled state [ 146.976658][T10060] vlan3: entered allmulticast mode [ 147.665661][T10060] bridge5: entered allmulticast mode [ 151.051684][ C0] sched: DL replenish lagged too much [ 155.431254][T10060] vlan3: left allmulticast mode [ 155.810188][T10060] bridge5: left allmulticast mode [ 187.217482][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 187.228691][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 187.239643][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 249.684754][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 307.268686][T10065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.497370][ T30] INFO: task kworker/0:3:5631 blocked for more than 145 seconds. [ 309.510028][ T30] Not tainted syzkaller #0 [ 312.129705][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.915780][ T30] task:kworker/0:3 state:I stack:25112 pid:5631 tgid:5631 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 314.294137][ T30] Workqueue: 0x0 (events) [ 314.932222][ T30] Call Trace: [ 314.958227][ T30] [ 314.961206][ T30] __schedule+0x17d9/0x56c0 [ 316.242299][ T30] ? __pfx___schedule+0x10/0x10 [ 316.256925][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.261726][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.388829][ T30] ? lock_release+0x4b/0x3c0 [ 318.398502][ T30] ? wq_worker_sleeping+0x66/0x250 [ 318.817645][ T30] schedule+0x164/0x360 [ 319.386738][ T30] worker_thread+0xc12/0xfb0