last executing test programs: 2m34.208894105s ago: executing program 32 (id=3954): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x1c4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x7f}, 0x18) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r10, @ANYRES16=r8, @ANYRES16=r7, @ANYRES64=r10], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r11, 0x0, 0x7f}, 0x18) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0d, 0xfac08, 0xfac00]}]]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 2m23.318460898s ago: executing program 0 (id=4287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r6, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x84, &(0x7f0000000180)={0x11, 0x11, r9, 0x1, 0x6}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000d92c0031b8ad7f04b7becb970600100000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 2m23.110649867s ago: executing program 0 (id=4292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m22.948122491s ago: executing program 0 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf8}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf8}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x44}}, 0x0) 2m22.825291197s ago: executing program 0 (id=4300): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m22.678771365s ago: executing program 0 (id=4303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0xffffffffffffff82}}], 0x18}}], 0x2, 0x40000c4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = accept4$ax25(r3, &(0x7f0000000340)={{}, [@default, @bcast, @rose, @netrom, @bcast, @remote, @netrom, @default]}, &(0x7f00000001c0)=0x48, 0x80800) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m22.623838899s ago: executing program 0 (id=4306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x200, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xb17}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x37c0}, {0x6, 0x11, 0xfffc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x901}, {0x6, 0x11, 0xa5e9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x4b}}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4048000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m12.601225909s ago: executing program 33 (id=4237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x5, 0x6, 0x4, 0xffd1, 0x8, 0x5, 0x1, {0x0, @in6={{0xa, 0x4e24, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, 0x0, 0x8, 0x8, 0x80000000, 0x40}}, &(0x7f0000000200)=0xb0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000001200)={r5, 0x9, 0xfff8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x1}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0x0, 0xffff}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r12, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @dev}]}) sendmmsg$alg(r11, &(0x7f0000000140), 0x4924b68, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000025000103000000000000000001000000b083f4c1e4a1ef30e07c773d9ac2f81e0f1a125ff3edabfa679fa6034cfb8f67efd598cd4e7aa1dca9835d06688942465820c660042f0d038034961b0984f4caf7d05a22400de413f9bb8680675aef86eb964532fc3494ed18a721d5464e5863591310a4f6f976214da43f5b094e519108f96ca14d7046bd8781d8a66c2856b52c7352f4edb68b391aef58c7a13a9fa52964d1048bdc2f1eff97aef5460d226fc81b36bef480954d609567ab"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r3, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x2, 0x3fc, 0xfffffffe, 0x33, 0xfffffffd, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 2m9.589218569s ago: executing program 5 (id=4468): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x24, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2m9.508829795s ago: executing program 5 (id=4469): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b4a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000010) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff23", 0x84}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) ioctl(r0, 0x9, &(0x7f00000000c0)="2c50fd679eedab316219482c5b46bc8c998a808f") recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) getsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 2m8.788453751s ago: executing program 5 (id=4471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m8.785848224s ago: executing program 5 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @multicast}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48005}, 0x8801) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="db27fc3601dd000000001400000006000000ffffa77dbe151522c22f00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) 2m8.773093775s ago: executing program 5 (id=4477): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 2m8.678343273s ago: executing program 5 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001540)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "83aebcda6441bf"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000004c0)={{r5, 0x7, 0x800, 0x4119, 0x4e2, 0x8, 0x0, 0x8, 0xfffffffc, 0xb08b, 0x3, 0x7, 0x1, 0x4, 0x3}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m8.440693045s ago: executing program 3 (id=4483): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b009440ba4c00000800000020000000ffffffff", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}]}}]}, 0x45c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000072cfb052c925f32fb4d9a9df36aea366"], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000072cfb052c925f32fb4d9a9df36aea366"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000f8ff0000000000008536d575f77430bfe3fc2ff232585e7d0e947c57eb1839ad498ecc19e6b9219f52cdf96dd9c048d6f3357191189f91ee9b0300d6b78d0dfaa2997422f5e4fc86a405ab33754967c89729c1e0947c03e91904d0da3ef604a5ae8b8622595f4553a60560f6fc21fefb0aac29e35f7e548492e97d2a638f2e9834322a277fe55bce2f48e7377b59eebd93ffd46ada4812a92e157b1c073948b01c9e5159e95e0ec9bd19206ec0927751edc5d13c1ad3f55578e1b9a86e1529b6fe68df350045dc0dc8bdc9986bbb42c4d8043cb855", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x21010000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x21010000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) 2m8.319428265s ago: executing program 3 (id=4485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) (async, rerun: 32) ppoll(&(0x7f00000004c0)=[{r1, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_emit_ethernet(0x82, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) 2m8.11010132s ago: executing program 3 (id=4487): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x9, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 2m8.04207643s ago: executing program 3 (id=4488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x27, 0x4, 0x800, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x7fffffff, 0x6}, &(0x7f0000000100)=0x10) write(r2, &(0x7f0000000340)="82926b49d366f4c0a9d42f41376644e81218ca8986357563859c57e8113bb65ce424d2deb4ac8373137dd657d90efd5a3b5cc575c9ba80588e45d372442d83bca44d98f4050940c4f57c2f0519005deb0128739af71e41654a17d1936eb8d0cc94f3ba51dbf3c40d4847cd6eacd6da89bb6c7706a1a2b7f5b608a2b9d36475aca6f05e44fb3e6a80e28ae7e075e359248b4abcbec878eaffe828fb89792695df3cc27e1589e648a442e9f654f9f001c4277ced9948818ff26ad298068638d5c6db2869f9cb6acb25f7f440df1317", 0xce) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={r3, 0xcf, "571181d1d4f84c97abaff0defadb05c771076a4a030bc623e6117153ef9ba04830e880015182a1d384406d85d9f1e307924e3379082da7f6b447497402b0cdc3ce67ae44ebca8cea6591e0cdb3ea1e2e9eaea2bd663ea9f38f123c97f7c6e7e864eb65256c92cdd52849eacb73c584f0c4de99fa589ea4205af0918b4fc76a94678d68709b0ec81105f7416160301417ac28774e6c1604e772a769e93c3af0f5d400ddb87b0e4612d839cacb68d213acdaac79edcb86eb9599883b046033ab9e2520ee9648d351f5ddde7fd7c157a8"}, &(0x7f0000000180)=0xd7) 2m7.892830508s ago: executing program 3 (id=4490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x2, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'bond0\x00'}}, 0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x4000000, {0x4, @local, 'bridge_slave_1\x00'}}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) sendmsg(r2, &(0x7f00000016c0)={&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="51721cbdb057d4aca6b7a1cf9b067744783da9e3ac29d251347b1b01982b9627006934a9da0a52a074d6339b97d19deb427591fa3824da28de2af9b2571fe619c22da5a007883d88517979bd71acfe9a958e48f52272fab2d6ba30783fe8ee5a7facff31900d5f66c4a46182f162bc52aa3c05d99b46ac1cf911f2d393a02641f5799e6085d97993d6abd38661f8159946b5a5ec48dbc04e1935ddc01847b8d227544a35eb91faf0402195e065509c88b2c894c7873cb33f04821175", 0xbc}, {&(0x7f00000001c0)="cd7efb5477dac81fb4a7b4c0b3c1f96a0f62290e30546c54bfbd457fa9ddc35a9376869274a65791e630ca533f4dde922e9eb645c57d58187eae4a7850321ccfb25af75f227febb587a76c03dced1aa772717604e1331f422db0a5e542e94941a285321ed1d4a6692e71d33bf5eb11a09c52dde13d46dd551bc8752ee4b4a9b4fa972fad89dc0ef1bc81e2682e342eb1df324697", 0x94}, {&(0x7f0000000340)="43025385dd43c8300a868174083adb2d5c55cbf5bb4571d58f01bc9e01f104e2108e1741fa62ca7f5e9f599106e8499782", 0x31}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000480)="dc9233676ba015ea8b3f0c23bf603fc1af86ee8bcb09284a8f73ed6f94c70f131569e021a0ae59893e34ab3f4c4d0ab16347bc37ec49c94b321f9d91d79ee065d056a37d911c40c7514c", 0x4a}], 0x5, &(0x7f0000000580)=[{0x58, 0x1, 0x8, "aacd79f09112da65f210cc2a1521709ed22f58879647c68840b8d3f16acd4d648cfaebfedcafc4e33ed6beb63c649c4c83dbff431532c80a03c5b0c72028113ad4c6b46c"}, {0x60, 0x111, 0x9, "0cf1cac81b8833f0c3e9e4bd217ce924a614d681509da591c0e88952711f9b7b96a894e832ec67783b235163b2a87ec79ff7fa8991fc90698497be123f63d1525c7a57303867c3828d8f"}, {0x1010, 0x10c, 0x80000000, "cddcf1650cdce36511a44f6d4c2d8eb950724bfa942f913ce76102d0c373684dfde04142a8f0e4b5a06bfd50bf7410a53071e84dec57de9aeaa7222362c4196208941743c5f6d41c4c39a8e8ca3c3601ae1feee0dac89bd5011debad47b09ae359bfcb0e5b2155eaf300ee75b00efe856627ac325d2633d243e163b8b00c73f2ffe6c8b190140164bb871a4ef31c2c5cd818b312497e96fd28402613fd15d9e55b2f91a6af10a4b758eb337e2eebde336f953b9f586eb11bcbe9784f00769e13368653bca38e6f1ca2f9676b1443630f21683ab542eff34e091f6aaa219b4a25b0ef6a8b007cef0d3cbe48eed29d45f96bc9e6826966a87a0d980ff440730e696d67e7a2d258c6cff2182506602811d6eceb1204894de62f5d04f37222e07d8946284c5e7a20dea681e8fc69e1d34e4a2b289b7694f01ac3a0a3be4c5407f666821a2bdea265a01d0e6e6b4d7b1828c8e19965fe3b1a68dc19dca49930a6388d85338539bc6dfb0240a233d63987bcbea3b9fe8dbee210e1b5fd28390524fc6d1a2e36c048c7065473f23aedf7e5b7b23f4df07915d7d039500550668012babd3376f819e39f21148f4481ee6549ec84e96d5be357e8bdaa00df2fde4ba7dc6f4649fa2eaf2599c63d3b884b7e58fe355bfd0f93757680dae9ef5ef365004240bee64c788b00a530b3a56bee8620de5f5779f96e50b0430f364df81cb5870a1f1481b72332fc07a9c51a89d9bc5bfb415a3150cb60f3d5b0f4992dfc87b1c6b667add39c57fb6c81abf3ad885a54cce502824b9ec12dc85c6e21e0f6f273d0dfb3afbf5989d353eb16fd1d157c8d6ebae810a9ca16e1282bff08234d4aa774f5a4d2ff71db1e7f7981694af1c7bf608800d02e19684ea9e3634372f64aa1d4ba9ee4fca67ea297b04db24de8ae15c92dde037b23172661f1fb96159db21047bf465690b66fe9f41d73f9ee1aa3b71468dd2256d3e17e7523327bf2c89eff2d4643b57bb605add2b1aaee54e0ec4a2d4396f27c5754e2f8dda7a0f43857f24afd1c23aea0a877db3b61033d5210915c1a5871f895f622fecd70dab968045f063a8fe91fa87ef4689bfa6acb260893bb7ab450211092e318d3923d698a505b6f31c8adedf459d00f77aa5b044140ebc0e81fa263168b4a4975a1169ece24a47a7dd46d0d4c1ab13b051ab610b294376c3ba8993129bf324e618425f25e888af6dc22cfb27c23ddb11b44250e83765b7e61e1b7d788bfc14edd7e74db6dd14449a7b14c2ea83a46f42bcc60ac54ca99ec00e33a5b9197986638530cfea2f0a57b4b470ae11d89b8446f5f67e391b5dad82859ac55cbd1d8c60efa18921fc1db45999b625b1341dd80b6c565512b4f5bbdd00041433a99158f87aed3285a04e9b74871ccb2c41e5a376bcfe28eeb1e0fa4894b0d9cc37878b12c41b16abe64cb4e8f91518bdb3418378d12f2c81eb2f0e3efa7ebcd77903b9e687b2a4817cee50201c3af7ed1352baa550f1b88e8e34f90ca2ed841626bd9aaf967084f6a41822b7ece6b1aef17317afc1b0c0524ef0304d2f6cddb5dfd5dc0725213d2c6399f5781bd60bd6426c7db137c0effaeb984cc500d739b1270f88da6b4722296343d12e60eb5532e832c42f9d12bfd35c19d2a4c29fceaf0d603a3634dac569fc79a789fb0a393e564eb847d3671217a305f5f645cf1d4f7ffb1e4447782b52e382ad07dfb591e30ea50524777440959de2163456ac97cc361ebc0e3f9375b9ccd24165cb5fde8c1dd31c5dc3afcbbd670ce16964bedf0caeb7f4c3301e57f40fc65ceebe0dbc40cad6c9624252fcc0d7579332cb2e8256c59aa3b690804bb671edf3727a523a1d22462ec4957d00b3561fb2899f33f07d3b42d0852f60354e0da2d4dadeddd78e9d946150cfda55b60fc9d9c84f0c700111215feebd6d4750984f53d93bb1676595265f9bbdc1e39db59f5190cd1de704f483e9a6e51e5984f0929b694fefb67f4e380703702b9b36281f526318871cbde78cca2e3106ffa21da3b1bffb9374904a21208be195e5eebd733d52139e2cc5317b34d08a228cfaa05273b82340e6ef8d4b0cd296986062c89b68cb134d2e1ddf2382ed0bc52b1da9e28c814919972b60a56178c43a68c2535b925fa97118e7f5a436919e8389fab7bec1a5ea02c0a79822fefab9ae576351bd58e289736a795e4747a903db84e8de8ba13cf8e0dfb6649d96001ce5a2f0ac3dbb03768e85e3be8b3ea9b1c7f2a101e19439a66a604252eeb99d83484ef72ef7fb798ba89a1f0628b7357be6763c02b4b2d2dd67ba2352949a311dd9ff227f968e5e57e898e0695f1ce74e6253608c05cf6ddbb50b0a57bf294aa8adace7c9f9af4e46d405dd2ce8d79d8405124f5e4ac74f59da261e210f3c9bdf01594e925de0d11cd9595466262845ad1ec24988a2fb49381f646f21af3c6c917a1d7892fd17849f5cf21def16156829b8c1c3b699c9c9b66880064093432fffcb9887378c974f2117c8949b9aeb964399a4653c0ae58d59d2af7f26bdfc0a08b0ab3d00bdb50765075240a2b6773672e4f13af60eb528981b56792e636bbf1d547122daf4c007d990bd15d510abd59382af6fc2fda38663451aa3b6cad902497d8559ade35b08f875671efa57a1e9abdb4c5ecd8be6a98747e964f5df9af99868a74d9395f77e015fbe8fbdf65b3ac1598061007318f8a09205cb269813a2644f15a9703e9f5ea1cc22364d384448baddebaa8a9ec47e1c2e52a3719e499777d9bb22093813064bc9db473f70ede9f91661e18df6271c92843eee7ac5b1e61790bc77d8da33b8671f1468f31b56218afb0f1e0b3e56676445cc4045e6299583b4fee9d3090ce250d32667931ab18426ff7db62af93c82e295a812b5cc26cd3c398861d8796cf92b7697d0ea6b8e763c95ab5b8f7465d8584be6df8baf890dded347c9d65ec9d875c639359ca140678448721b155776191160cc2dcb468970100c4502cb554d4cf77c2d1057fd5c7795d3784d186f89450bb92cff31f9525b88034eae0c166e702cf1c137ac3d789ed52d5185d944d2e06ed116132d54067820744a3caecb768f873675b4466541c57a56f0279b047835c9121e8514f6c5c79109d51aa276184026b63d68cc28d3b57dee15bde6cc1af06e05ed3debc9b1fbc3e848e1881c548f053b64a83d97bd00586af1387da8480f7d62297c282c55fecf27d2c907ba7cad3b7a22f9392d83ad9aa6044d349a5856bc86e14766cfa69095703e00040bda596c3bea1e38ee01c3ebfe730104c3c295189fe5b98026c81ff05a0e4e58a6f8f5255a69c5f5a117a2b6a0970e5390287040f5dc89c8efc140331ccfa9a7aca69720ea0557c8a6ecdd09c461810da0e2a71fa6eb53ce44076528310078facd76ee4c6e09cfb5b93fc530893e34acb14f069b836aefab07fc95f346402c7a994cac712bf6fb33d93999facfd41d3a4251d9c491ea2c7f2f679b42ffb09e0af60d60bb202108ecb6e071a2ed589296892faf88001b333867226c2e253bb943de3a1c501c95ab3437047355445949649104f5111b069b40514a115f7e0471771d06e9dbafa866a46c7510dcbad25d67dc2888cb9e1da49772b50b8745d81d7547a0a41087ce10c854b9afa70751cc063b286cedab2a64e3fad42964a8765beb488c29b42cf8e8c4e658431aff78197caf1e6d3af1aaafbc1f46ab67a58a6a1760727943676d7fa48a73e84fa0d2eaa2d43f892cd8fccb23ef741906822639fa6a9a0e2da787d5bf5cca33fad39c9fed5095cf3a234d857f3eb70e98884314937699c4ccc4b8f780eb7f70de65616583f0b26e1d3d49b231cd4949a64fd29f72878f5955f1b23229db96fd6ebb4cc8fd943b1929d81f63023f126874e18b54b8f4f94c915947b760a10607897fbb14fe16bea8ed663fb30f3aaf24e7af80f814db109c3b86df4d009226c4684f95af75ff42c00bfa34bd6d7a34061aa1c574d3801c5f4f08f6e9dd6b2832f99d03bed980480eaa0dc5a9ea7a507d97eff8e9d85aba2da84253580c90fb3c8465e0f3f43358099bdda921052ad5277aedb88fc3e95c59d76dead3cd3fbcd1517bf2cf046fb72f0034bed44f5b1b09587db0e6f67d3dabb516f725b925b3600789933b0dbcffa2ae0361080c877cba9e0921e536d655cb2993e9333686e17dbf3f86a6a4bbf6eacaa94e81d7523ba29dae1f09122a87e348229512591eaa530e07d0d030552e9ef0314570762140bf3e6f3437867472778723a7c51c320442f1b3263815f80b84c00c38e2cf5d46f94dd9ac35be4ac33fc4d461738c38d4a9f4cbbccb3a76b4e53e15b35e6c682d69c418dda09583500de02cf321744dfbe6f363445bfdf32fa45f6a4c2f40ffc746682546478d13ac982b4fb8f9e0eefdb5c1e1395d7aed5fdb48aeed93b946a25aaa98d758010b2d33a934345d9d7a3bb1d24d3b205bfc7227e7f5027256824b442729897806a503d7b6ce457738f8fac210ba49b7121eea1b46df7bdb209d4f28087dd58e7399e6a3dfa6ec35ee54da87ba06129e94554390bcc443a5427d22592339a99e0727354a422818e30c4b3a7b436098b1ed41b3b4bc44edb8f1dd27b0e53441db4ada634c468816f4dd30654b92caff11982c33bcaac4b91703d340accb44c7b9beafbcc85988f3c9de4ece255eaf3f202660b8e06d1e969340d5827af9c76b2f42b9c00ad6e047dd2a03658c2500e1db34c0ac89d60f8ff55086b670c87eb7fd50f74fc0fda721acd046f750c6134a446e3bcc9a0e6b02c8249003d55552d95e289b898b5217fbee25d00b0a9a40385d5743cb292dedf191c7c1804663a7c20ea0784bc130eeeedfed7ec534d12ad863085eb3bde58c682fe1997682a209942201dc4c826d9a37786c2bc9d38de961d9b1db93728178c7f150c38c45657285e687e0af1afea7a810e50f5e83c515f8ae0dce56357ef10c583e275492f8f4478f2f1afd78cbb37aa6eeb53d3f3a786f5f984a8d015fa780137c49faf344b4b035f7edf76d509407efadf540ffdc51eb7c75b58a8771980adb1c09e15bc37db8415abe43f1030220efb1fb289072daa7ab847158c04c1c60bdfe7ac2a3eb5938784fb74823bd8dd4ac3764d9a823feb6cde55c8c1fcd3699e0fa1740453a6248f88f316b817e6fee9f00f949f8a1021e03c4ed70b7a1056658564349cf2377e0cde0b741bb46210f65efc3a873b9a803c001d02cab2b7d0e2fdfb4c53d6a27725576a4e6eefdae76590edf4f3863eb570f1f51a785314b3df0cf0e76746c654172d4df0f4cb6b5c6556b9c855e92a092e1e30a08971ff129fea3204375ad4e9e0f5301960d03c468455138e9755d32bb69ae19363448478e9b343ddd35bd1ff6e2e97efe5ca84bed7e7856d1a5096753449b3b7eb421a4394a6cd04e742975fff293aaffdcbf8a8b1726568534cc6c2f95931e630045e0cb22bce9ac0dc4c4a5e275f7bd9f4853113dfe53b6556eea7ac0948363e2f866a4e87f7801a4fcfba8657da224d598c0f0682fc83caee469927f593811d89005033f64837443c00c3150cd94e85797e8d2905bbbdf6ed00553159e8d3127cad6266fec963470e2619564b741912a524d19de76d7059b40a46be091333ee55a0066aae912b4949b3d398faa98ecf99d2d3963c0da1910c494c298b6aff83d2aa8579e26ebe2e90654bf335a3ecb3975fed1077d6855249075b1965e06bf7b897be459dec7bb9b7ee164bd35ea9b93de8fcffab70e116b2f2ee9b8be7cf17fd"}, {0x68, 0x88, 0x5, "a567d5bc9b51e59bb54139a2223fdb0e9e07eddbbd2c93e7af97e3913eb5eb080873eb3b097b9d7ea18e68634143e2cf3091d46d8769d87e9570b1a2f2062ae9be0c476f05652ddb067ddf6d8681e1af829a67"}], 0x1130}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) 2m7.670439857s ago: executing program 3 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0xc8c1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x8040891) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) 2m7.552215858s ago: executing program 34 (id=4306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x200, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xb17}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x37c0}, {0x6, 0x11, 0xfffc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x901}, {0x6, 0x11, 0xa5e9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x4b}}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4048000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m53.545791186s ago: executing program 35 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001540)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "83aebcda6441bf"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000004c0)={{r5, 0x7, 0x800, 0x4119, 0x4e2, 0x8, 0x0, 0x8, 0xfffffffc, 0xb08b, 0x3, 0x7, 0x1, 0x4, 0x3}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m52.634465038s ago: executing program 36 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0xc8c1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x8040891) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) 1m41.969161007s ago: executing program 6 (id=4749): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r7}]}, 0x24}}, 0x0) 1m41.835194989s ago: executing program 6 (id=4751): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x2, 0x1}) 1m41.104715252s ago: executing program 6 (id=4755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000f700d37ed8297be4d6aee853af9ac0277985000000978a7685e04f0181525deb761b678417278bf33a18675f248403d4f1e65869180995bb6ba94b785cdaf8006c93a27161c0b5b58d6674e930520350758153be15e4abd3a5252f003855a6cae2f25da6eef57eaa273553dc6220766725677aca30e76a9c5227481a8c942d0758e8c0142ccc2893617f889ef254e78e6357355cd553950131dcc9bfc9fe6002ca4ea79611555bcc0afa954cdfccb96e1d3f614a165c491dc406f4bb"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000cc0)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m41.102631807s ago: executing program 6 (id=4758): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m40.546582955s ago: executing program 6 (id=4764): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) recvmsg$unix(r1, &(0x7f0000000ac0)={&(0x7f0000000280), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000b00)=""/93, 0x5d}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000000740)=""/15, 0xf}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000880)=""/75, 0x4b}], 0xa, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x2000) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@default, @null, @remote, @netrom, @default, @netrom, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000140)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5911f0600002300000000000000", 0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="080026006c0900000800fe5fe8270000000000088650e6fdb65ffabd00a10000000000050018010100000087201cb25ede705e02caa156e2"], 0x3c}}, 0x884) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x32, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 1m40.289122945s ago: executing program 6 (id=4770): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) 1m24.991006113s ago: executing program 37 (id=4770): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) 57.970890899s ago: executing program 8 (id=5298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xc, 0x8, 0x2, 0x3}]}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r2, 0x331, 0x2000, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x18) ioctl(r5, 0x5, &(0x7f0000000240)="149da98705ecc243dd4e30e0e18c222ad27ca22050b7b9979b35d564c70b07d5e9050d0416a05e20e8ab1c8ddc36b55409568ffa9af4e5eb21ae4c6790aeeb9861d38e9a7a62f98901b8cd76471e9a172f5cb0c98cc6e7eb57c93460b8f17dfeb0c83be56e5c810e166eb2a17cc04858ef631a90225d29340717e4d5cb8d8ee11b65b120a12d1f863c83c93a652ea3adfa1bd3b089efdd60704c3a3ec1e156d8b89014c37ab74f9c14d5106dfa1ddc") r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r8) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) 57.751607288s ago: executing program 8 (id=5303): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x9, 0x8, 0x2, 0x9}, {0x9, 0x6, 0xfe, 0x8001}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000340)={0x7, 'macsec0\x00', {0x9}, 0x44a8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x7f}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r1, &(0x7f0000001b00)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)="c354529f85", 0x5}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="22c4183dfd15c670ec8bf09c89a30f43c542573f127a3814531bb681780c883cd9bae55455f5180c8f7fe167b60421c22852062a73914c2a61f4c5bd054609a9fef1093ccd974ce3f01c732606c95c88cff8acb1f6a8cefdd7f3da7e43cac15f93b8664cd64e1eaca284381348ae30a3b5c76e6309f656f63ca341d442c2961041fbc472c2037f4f6b28bcd1b93e294d60753ecc166c6b81d3a3c46d0462b96619b78698291d955ebf3dcb5fd58c4196cc4c9c3283b449", 0xb7}, {&(0x7f0000001580)="cb5d865fb4e340bedbd2591b8f26b34e913490eed1d6e277284a38b79427a3b631741c4ad8d8b54b5f0296771f6f516983f537300fd49f571f97754c9b6c0277b36898aee2f69d97b686b01953c58dc68abc3d6fec1e090b8ac59455071e78b52278e34b9c25f99615849780e97ea66dadd3e40e659377ce5e7b8aeca25958e08cc8a71029b39e480191f5c62db0b20dc812a4363c21fc8aa4", 0x99}, {&(0x7f0000001640)="0376d97f9cfe6a8f77dc20885334ffec670057e6c5d869176c137b83e8312c9f877f8bf5437a15c03d26faa852e5a4b075048d467fad13b964016f2cbcd4ab8ece77fcd4020683689e46e7673c34b6df1119c2f5207dd8ca2284e12d3a3ebaf10a9b7cf782645841d4a5df4b98537839cc408e48ebef27dd99498ab8a16e6d65693de1aa8803b0e2f0351375aed99c7253e8", 0x92}, {&(0x7f0000001700)="209d414b0e3304057fe450d2bd501397070e237226e419e87841307d8db35020423534930dcb188b03157b92a51e13194a3238", 0x33}, {&(0x7f0000001740)="32fa3f9b2d2849b7d736c10d35bd6a9431c23ffed1207ceb00f69ee6ba2e3a2f4baca47e2b3dca8585af1220477507deec4eb3040c30c1ca5992df6300ed5ee514c7a1604c03f002c91c26a279d23d1f77c866af3701bb1c0d673ee4f15446ce60d83d2745ac16ff", 0x68}, {&(0x7f00000017c0)="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", 0xfa}, {&(0x7f00000018c0)="c9e04c4c4a85cb142cdc632ac99f04f78b34040aa8e920ae7a91c98ca4a18ce4c165a9bb313e5fed", 0x28}, {&(0x7f0000001900)="1c706f4b3f306e649848bb11f693c8181f458634ced375dd7ab4ada53a257aa6b0145929a26330208b50aedf32be335352c0d4be4f637d30e616bf5d080123d6f24164b1a968a5ffabe02116b8e786f7a55621b61cabf18a02a5db899200f8571fa7142c897d80cbae67f599890bd5c4a5f9cbd342116dd5843b33a28c6d15584a88e283f17db3f88b293922c0756a19a54a180511330ae99457f44177bb7318aa89db92857e750551411c73e67bc624526ea74b90627b227c5410092a2a98887b5ffdf0d1a09e4807b79e872964b0758920b22253dde64f352fa834fd9673fa310715a1a81f68c7067a85b417c1d15a", 0xf0}], 0xa, &(0x7f0000001ac0)=[{0x40, 0x10e, 0xffff, "96d5bc656ce676a1c8a9a8902474b539243d1f6071145b5611de6b85da88bef977502100a242361159cfcffa7b"}], 0x40}, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001b40)='hybla', 0x5) r5 = socket(0x9, 0x2, 0x0) r6 = accept4$x25(r5, &(0x7f0000001b80), &(0x7f0000001bc0)=0x12, 0x800) r7 = socket$inet6(0xa, 0x5, 0xb) recvfrom$inet6(r7, &(0x7f0000001c00)=""/116, 0x74, 0x42, &(0x7f0000001c80)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001d40)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0xc9, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000002200)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f00000020c0)={0xd0, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8810}, 0x44011) socket$netlink(0x10, 0x3, 0x8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r2, 0x84733000) socketpair(0x6, 0x1, 0x5f11, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_NEW(r13, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x72e78876}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000002500)={0x32, @multicast2, 0x4e23, 0x3, 'fo\x00', 0x8, 0x0, 0x4c}, 0x2c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002600)="1a54716a8ce990456c2571e20e8d1329ac027279f071a51aa286cca6cd46c9f2f74040309a468efcd18e313dfbe0165e0ba40889709820db61ac36a9bff6382325f0b0c911bfd7e5c4549f749a0c648379771fe2ba0000444f0204c75706aa4a3a44cb738cd24fe7368f910a41e4ed4635984b8d77ae3617", 0x78}, {&(0x7f0000002680)="ea2f35de265e3bd8ec17d8b7055bb37176b279618ec85f9d3fb5348583284ed3d5caea6cce9dd50fe6fc2293df7139cf5cc4d525e2e2933171e284c90ebeb68f8a2fc7038b11514ac1c18a3fea17e38b053a70b521e9971ae5084f47ed9aa6c66ef8212356d969b24a654c471f554c5f9cd09b82c80a85e3f45b4aef6b193734d0009072024d9da649049aa33e59e96938d9277cb01d1598848cca42779245cd12cfaeaad90d28f86839fb543f45f7af716a9e7240289ce63ec377b63e01781e36e15909e001de4f2ac7bb9f4331ddaf1c0735597e94c80f0e6d855a66195baf6bed38d2705ee0b2bca4d22f62f0da444cb1e26999764a4e", 0xf8}, {&(0x7f0000002780)="d4be9f5efbae57f63e8b9ef79c79d75d3eb0824c350f1c110b4187bdfe2a90e1d9bdeadce174228f6c325a7c5704ceafde7eed25ae", 0x35}, {&(0x7f00000027c0)="b805b9d94c52dda4216e25b60d5809fb6a26bf1bf80aa774e8752b262588779841417de7df5e2f9c60d941f24a6bb2d4341644a2a8aff2b16e662da65279aaaa4cc02ce7cc692bdb29c375bb07bd66c7e5c96b1e221a15b2b8dd9b5ea361834cd7d46993b89e90f6ff51dadda48a06d568a1832e335ef3515c366d8700eb4027d829c1d56ef3c75247643d11bea6267e555732ecb88ae0fae1", 0x99}, {&(0x7f0000002880)="b910e284f6e2eacc420258c2a053ab7ccc9c3d0fae74d206329bf8fdcac78b8b3ebef801617e72d159a22d49edd2e8bd8012927ad560dab67ae9315931a64cd19cf78f6e544a30a7810d12f7389f5cb9", 0x50}, {&(0x7f0000002900)="553431323786", 0x6}], 0x6, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r12, r13]}}], 0x50, 0x4040}, 0x4000000) 57.476402686s ago: executing program 8 (id=5304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004, 0x6230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) write(r1, &(0x7f00000002c0)="40d3011e82ccf5de7b6ecb981738d4267a1bf9859efce7f5295b997017b6ed564baf2f9c7534d96889c31fb55227e14df7b4875b3f6afe5aace393ba66d6b3cf1947c90522c4f75027cdc2aba5e752a4bc9f39b55f320626c06f078502a4d520bbbe1c79dd149682e78594bf851014cee490d6ed5341540c7f309d813d6465ca44e868bf76609b193f5bf3cb0bab712258057fd0f8bd352861c8eca8de8055140100d966e8048c16", 0xa8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 57.425390427s ago: executing program 8 (id=5305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x21, 0x0, [@empty]}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) listen(r0, 0x808f) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x10000, 0x4) read(r2, &(0x7f0000000000)=""/54, 0x36) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x1ff, 0x66, &(0x7f0000000200)="002384a2fc2d55bc8c38f97d9658533bcb6093f7129998b7786f186ea5989e5f61740f07c52db134b4b8c3139f00abe701db05e52a8a9c0d67bb95457f7ac88731d635e0fb2885055f345c5e8f563bbfd76e80d60ee494c3f98db3ed6282fe3afde513416efc", 0x9, 0x2, 0x1, 0x8, 0x8, 0x1, 0x8, 'syz1\x00'}) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000003a00)=""/4103, 0x1007}, {&(0x7f00000015c0)=""/4101, 0x1005}], 0x4}, 0x7fff}], 0x1, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000004c0)={0x1d, r6}, 0x10) 56.532592897s ago: executing program 8 (id=5320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xa) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0x5d, "740ca1b47ae1c9d5c4fbbef73080a69c0559a9999dce6b4316893d0d8f09aafc7d68254d6150d4af77c7378e276545b0aed7f338400c4f9154d82014bef4b48b1bf4988d744cd20e4fe6d1f2d2bdf75b9e244f394ce9397e1525fd4be5"}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000280)=ANY=[@ANYBLOB="febcb8370000aaaaaaaaaa2286dd60010100004d1100fe80000000000000000000000000001cfe8000000000000000000000000000aa00000e22004d9078e206000080000000e997f95b55a9e42d94227e631f169694b1784265b2f3de3aae0aeac9033603eefd26c557df888355342919030c7fc4fc703cc7fa4d0cc98e4665ad4495"], 0x0) 56.395084948s ago: executing program 8 (id=5322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) 41.336575351s ago: executing program 38 (id=5322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) 2.670477777s ago: executing program 1 (id=5963): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000bc0)={r1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x2, 'syz0\x00', @null, 0x8, 0x0, [@default, @default, @default, @bcast, @null, @null, @default, @default]}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r11, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001ffffc1300ff00e71bcc2f0700000000000000964e92e9423c338e87af6e1f096230f60ffb3110b0932d6d06bc2f5fa3e8c59b8a104ff4e3d65d4ef12c7a375b6b24657fa48cacf7bf34c72caeabdab164b89a7919d8ef6f7e4341326b53397926c946a5a716b57b82c91de3fff9689f063f7d72a22688f164da25c6eb03bce2f02911705649a9249848c708f5b0391949f8b8a19a34afc7b4cf81f7f7699d28a3e4b0a1fa0b0719c7b37487ea20448ef1d6e946d43e66f422fe446a1323a5bc5ceda73f31fa44fc103702f77eb4d0a0f164581ae94af4db26fc9b931d7c63438b72afb3d4f9af9e3d898dcaea9d01abb30f2e551af74559f968684f6682b46d6dd33669e7bf0672", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 2.346567503s ago: executing program 2 (id=5969): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff3}, {0xa, 0x4e22, 0x2d0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x0, {[0xffff0000, 0x1, 0xa, 0xfffffff9, 0x5, 0x4, 0x1, 0x10]}}, 0x5c) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.344897404s ago: executing program 1 (id=5970): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xa, 0x9a8, 0xfffffffffffff87d}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.285449352s ago: executing program 9 (id=5972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x2001, 0x0) 2.229103878s ago: executing program 1 (id=5974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) epoll_create1(0x80000) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001200)={0x60000010}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) unshare(0x2040400) socket$inet(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xc, &(0x7f0000000040), 0x4) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4000004, 0x0, 0x0, 0x41100, 0x44, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) close(0x4) 2.228430539s ago: executing program 2 (id=5975): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r7], 0x4) 2.147975401s ago: executing program 9 (id=5976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8916, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8850}, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x1d, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000140a010800000000000000000200000a08000340000000090900010073797a31000000000900010073797a31000000000900020073797a30000000000900010073797a31000000171fad89d8e572fc3100000000040003400000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r4) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000100)={@empty, @broadcast}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0xdc, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x217}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x8c1) accept4$rose(r4, &(0x7f0000000440)=@short={0xb, @dev, @bcast, 0x1, @rose}, &(0x7f0000000480)=0x1c, 0x80800) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = socket(0x25, 0x1, 0x80000000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x12c, r9, 0x200, 0x70bd29, 0x25dddbfe, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x80000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x26fc6349}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @empty, 0x5a}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff62a1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.941476363s ago: executing program 1 (id=5979): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) (async) getsockopt$nfc_llcp(r0, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) (async) recvfrom(r0, &(0x7f0000000080)=""/81, 0x51, 0x40002001, &(0x7f0000000100)=@hci={0x1f, 0x2, 0x4}, 0x80) (async) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 1.911867008s ago: executing program 2 (id=5980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="642b2e85a15a"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd6e5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) socket(0x13, 0x80000, 0x7fffffff) r4 = socket(0x1d, 0x2, 0x6) bind$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) 1.797805526s ago: executing program 9 (id=5982): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002100)={&(0x7f0000000000)="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", &(0x7f0000001000)=""/54, &(0x7f0000001040)="67eade5d814e8def94538617709fb724a67ddd59b02786c542dc6ba320301ad3f23d8c9fa2e2f8f3", &(0x7f0000001080)="0b9ff783bdb4a28ec94e9ccaec7046e54e0bf32d00c390450b72bff92945e3b844178e9bba0164c364aabcd318502ef04e989e8580fb916c75f5809e8bd04ddee34494d14ddbb52a56111c8729656d8f266663f595d3514592bb26aa0a88d9c3c3847c918e84a2161a7b64f09a3c0466fd6819492f5b41df518d8bf590e05c944caecc488c116be69168ba6792199c95c9e3c6f723ad44fc8d9a23d56e3cd0de7558171da9d970c6aecf857651a25494f62bbda0bae0a5727358d35f92865b60100eb12c4b46e23b21233fda7d5382261054fc82d660af9510a7f1813278e439b4d7783f12d57b174459abe337273d6306115a5c92847af8c18904c9fada0240303b2745ec92eea748ad5f994e2fff67a1510ed1ef687305a8eed25a84b0f72ab08cab31dd2aa62b9e96ea94888c81bc87c9049c9c133928f1c42832563f97481ddd9952ead7f350846ab6fd854d3dc8b0e6ca21bc8a558049255b11e51531815eafda5491d74d58daa6fe998c4985a35c41cfabe856e1999de67338eb65882dff6eeaf357a8bc4f3ca46ba600154f2f485ab5781faa2093e910343e9cc6d580ceff67e0d9d0c3ed05ce69e0ff3991e839856d11f8132c7c5cd9a4a664ff949cc00b27f4dbaba17fb21ac74d87c177a3304718736c4dfdf14ad171f604aa21818f428548acf02fa00729cef38786f65c2ec6b056d7d4b57774e70d36f1d6232595e44d7fa4af6dbbc458f053a49a22937545d730e6a4a49f8a31b035ec3b29d2b2f7b37309d552ac6c2234d1b2cfa9f5601680d499c70803adec24da29db13992c2681294319f093d9194bed7433ab3a694ef86c45286392f36763a93af3e64967a76987d55e181ecee6f048812bfb808c51ddda18221d59ca9aa027de7001cabbebdd89ac4d19464459ba8c881956d6c59ef36aefe8153144bc42f6764df43273dd2b0254d4d576a405985da30955fce632f5fdb32b1656a82c797468d9fd556db616fb959b2a46f7c1ca3fe369669104d954564f1c8bf30d3d10572de356c451fd90a484d8348e5a04390310a140eb64553aa8f5f1edbd3b2afe3d2f58646cb446e4592f479a6347fa5d5ed9466b1a50538408604a22e01498b782dafffb33a226722377c9dfc5c3ca0c2d896e613a26ae798ad4b86a62545ea4664a97095eccd95593aa15de4d5d58d05c01663f19aa868314adbe12b21cdde245c87673db759194e4ff34d0ac405300b2d83a5a879a757959f04864c10ca14075f87955ac0c3883ba05bf4ebbf0b52e28b4602c8994c088799ce6760a0b6c8b10cc1f6273b45ff1de42e239999cfbbac844b415a4193dfee88ca9541f9b00177d73d58ab3abc18686d50183f1fca7c506bdee7c5a973c61ff527734c72d6bf9b5a46b9666ffefcdacff0c6bc79779e3106d7d139e1f0675af4ea46b1d9f8f42d5cae5210eeacc351478b9def28ba40afe76c1409ef12257dc6d5cc4f73deba0c25e6ee32c26774760b402cad4fadbe53f4451a32c7aba9ade7174bb2a9734c110d7aaeff07dacf6267b0359718c22512bed41f337247d302c675f8c53346b8fc232258bd5fdf80628c31a79d60a0c3186dfea0ae8214dc27a89a3d35bddf088eced020c0d7e4ee9822e43f4d0e34173f344a26eb6c28d0c1d820dc2fba8148f5704c7f958b015e9cb938d794f23565a0043775acbc1accb3607a6742c0100a4f4bb2afd7d4c83c5d447a5c723058c4899a96f561705889b9fa9f25b4d8b9dcea476bfb9384574c50e4c6bbd7921e7f881cffb415c04f35abc95143db084da705a5e61af867c4b09ca83241b102337ece6df1fe10840dfcae93f8f0f871e051973d77316ae54081eed7797a2bcb8082a832bc400e7057ace967d3ff5d8120b3313239a16f5290b5e1eb7a502152ed138d1b217955446b754ec1768c0949c8b5f818452ada87e08d6607402c3d34d91ca69089e40dc2882016673e6fb8e6fc28f0b86db1dac0f9370394369699726e91e115b4e3d33bcf8d8bd3a99a6492e88a8bd8a4d003b901821b632615a2053797091bd43e1a4df33299689a540962c059b2276b753d05d5591cb6bd752b57f02b27d2f16b298f2c5dcb51cab67d4c445014112fe1b624f8943a15ef7ae4b03b9c68304a3484df8cdee62f4c275c8e5acf7c4a1316ef6bbf6d19c9fceaedaab3ea2b40f7306c9c47a339673d843b7103ab560bb6ad38dc9c7669febc2800c2ee30bd66254cdadeab6077064ac5fd027b1bdcfefc22b00d6d327cea2e9068c51f61ba190363935fb9fbaadc323c2a2a471a603b7d32680217bcccda5f65b4c39a789d642c5f09fcbd5e543bc39f901bfee5428d7ebca66536fe3b5683dbbf66a5402d35c29079867a972e1adff9300cce7faf6bc4a3fbadfb21e54c1940a326b80b395ff7e8525b8c0458916beb48f8be33ba3b74918df9de55cedb1037c4aa35d8b7b0c819f741d1fd01a6f3e3330a508efa0803b2331e6db470bf9117c4a15373946e381b5def05ba7c6ae21f256609311ca4bfefcf862e19981f06d12991e3fad3b3bfbfd30a3872dd94214fab0db50335ddf0cf0524c894e7b3c3afb484359d45ecf1181d81565660f9246100ca9fd8882951c8c1322b0c454dc222581b71f338cca311e2ff33090bce2e0998a66c250790240bdb58005693ed1de34e6da9157862298db675feb650b5cb57d7952521b6149597345a7e9c25cdb5ff5b209e9727fedd7d3d0e1220660f45e15cd019d67256e731e30a3c6c82a87b014c1d105b9ac0e529f8572349f36bd8229a6bdcb0138e7ad26032e8f20b98bda920120554c4441f82540619f4ccfd3ac91eb0d326812562a2eaf088d581483d8d65919c41a4aefbd6fe029bf9982a49f5aaad2bdf5c494e4bd45f61112d927094146cfd025ce0d2ca3db2c8c78232730043e9eba6223f28fcc5a86345298b195c97ab28dce627491a4e317293f6b26a30ebf8e449ae65deb74d0625906c507409213c670808d26de6985e01113b91752ea0b2daee4d5bd3927da26c5cd2f8a91bb45c9097660ed08098130b49cdc17149544218ff113f0f525a42fc58b50ceddc1ab5d5e297db616075dfbaf5a27093b2f1c63c7b9614218d7aaa308f0a849fbeb67c41c3ef75ca7a81ad05e738c4d4a52b9337808708034d2c0013e01442c18ce624d47a144fdd74cf1d913d3ddf285dc52f0757e242f0c5f79b04554b50c8ea2fb3f0f05c53b5ec295587b6f061317d9a24113bad6942e774f9247135a16afd2c62b8652f542190a76063b9a2998db98cc2a0b74dc18260b41c188792926a47ba79c2a356ea59204e979574fc1d7e4c56e83a12e4f9e98c28bbf5f34387ca3ee24f7c78b7e6813c9642c091fb5e6fa97f2a7d73acc8b22d6cc677993032729eb094bdaea20d0ba69cb62539e0f4385419696fc67556cde5b550a7f2fd817125cd99df5eec12572ce3b0996d51d97deea6ba8e5e1bf9a432a2a0ec00337492fbce63c975383926148cbda34c4d389e386522915964138195d291f399d446a81302c4a8bff2a095b9c31ab67495efaa99121b569a9eb9d701df3db9c70af3de838e63c62f56cfb03dd409bb6a54914225ba399a7347339598e665c21a5f7b728d9aba7fbc0c82833b4ea83327dd0dc3f5690912cbf3aa2691d380526f526042bddb922764fb6d53d676de00e574cd5b88f88d9053d8b99d4410c77d26bd39aad3ede329deb1d0d0e78eb4a58e1d9d7d74dc1e1ed8b1f632659bf763fe346be274067c3cca648f82ffd0358df9dbb342b688ac3adfedcaf9c15f000b5ec50a40cfff424655fdbe711c1737e49ea567c26d2ea1e38dc4cac9a423194105bdc5e29f2b0db2972079d03c80a3b21791a89333aea95206c11bcba3b6f90a7634f654428505ba075834a419a8dddbb16b45900c652bc3c9ff0202e00cbf737b7173cbb54ef7fdfe65f02a5ce18a236c37aea6c059badf5c33785d3ad81498c5eee45ff8a20c0d89f911be1745fc5cfadf24109e10c24af6b40fdfaf4b5288477aae8aba2a4d73371bc12ee5bf74cd904e8ace17dcd2ea09b7fc234b617b235c364da77b4cf97dfcb78e95c6a9a88e7d97fea73507ff2ed73804b845d0b335eb2f888a99d784834e2ce386d9c5ffb11697b2257f46b7237a9be6f0471bf8cd208c35fafd204b5f91ca46fb3868e474f76c434697b829552b4fd74aa9d81d2b38167f96a4acab2a9b6455f76ff6f3ab4c541d6f51b998716f5fe2974d02f84cf25a044743d86c57f403dcc26859dc32fb7a6d4a7dbbf4cc2f6e262a596a40c0d942dc7b5d96447abfec462ee6a0a62cd544ff62627fdd5609e81a22ccfdcd8a66d0ca9a753413301795698ce9f88b50e60e8d2cc51b435561ad7aa780b93996314187372362c9723da759b992ca01c71e371537acc580d811e0e2c2fe13793bc8841d0e4c7b92f240d97829f7552cd587fd787361b4d77cc5204d278c2c6bc2dde90a7c31ef87bb2b59cb4ff6fe03db12e8f38de392ea5076e843756a6a286f0386ea6ff1116e2c1ed7efbd67152cde41edd7bee37ab0af285b578b1c0fd61b32311727248ae208170c10bec95e7d9b48c593e472b2cb73ec8196bb83575ae1dfb8469175cdf652e5eee2e2778280f218a59cbacff0034c45cf0dae1178552af7f5cb3d49b0024ab9edef4241815eef76310549aa0f79c24f7ab5ea420ff1abda9b378e8d6022748683c846b360afe52c0f740e491e9629f123610d43d2f30185dc52dfa1cad55aada64184405e84faf186d1839c4f3683613faa39c6524d7d4891f2da86a4c37f4e120b3fb47846d563672aed58074aef35b926a3020bedf2c47c5d71256db26165d6ee646d88895691f1f9a88d043a7e7f2b296a8b59765b55b173adb83116216c38172924df27b8ad8e44f24cd3fb77d41b0b2b2ed24889149f95530becf8ad66a6f11e24b48e43a320e85c2f23b9b9301bc4669f8c9468cad1503dbc074619a0c01870817308718991ddb5d83cf160eeccdf29fe604fb17e5e9099eb1b5f95068cba360705ed5c973b4c62e573153d9a9128891a5ebc8705e5c7b9e6452a1526956215d135ab3e0ff80a894825e181c4691b0549bbbda24f2056c7d6a5769a3dddf5c9572005fe8bf316d08ba686f4b8c3c0aafe912f5e3dde023f29e0c9e67fb75e90ea7c7f12c237f4554a53fadd575844c83d8202adb63e01a0117b3752749f46009b8d6cc3f14199129c68b3240ee07e6f1d971eba9819392d1b46766825c8e4bc348d2094826af92073390938025f0b054c9e1af04cba8c916ddfd64c414c4502704bb7c0869d030717d359bddda3de7d4a80875c2cbd9d1a4ba6eee5030b6bbb549367a741be5f43d0a657bd01e43572daa9d21bf86401dec746591048de8a364f2b4e819f561d8404abba77e05e07c635ed111f9dbe5270edc77b2c39ab5ff1e797fa054c99da4a7cb1c90696cd50e57d3c278ae6468980573e88c770b75b9287daadd647ebeb16b7e9f1bc593b7c0741bc5b0df4472060809df140e2a806123c4d70959f4317ac3ea3a3095125a1a090dc2859bdf9c681c57cd871611f9ef838ed772ebd2a3c4abea7a53885d59c89e39e9ee29054114add61b350da5074cecda292104179acd56c41d9e797cff2bb1e71fa792675357fc546a8474a0d9ecf8d83738e577797e4a8b8cf0bf577ff471e6e4e7c3cd40e3864da44cf94bc183c05c3e7195e26561a1e76255e102c75e714cafebd68c56c0774e6d7c3f5191d6a51f2628f9a4d564eb2c2be2d2b43f9a9189", 0x800000, r0, 0x4}, 0x38) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002240)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000022c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000023c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x24) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002440), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x3c, r9, 0xa22, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002580), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000002840)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002800)={&(0x7f0000003640)={0x2d8, r10, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c0a2a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12c6e1f6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28de909}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5088cbf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db0dfd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4005c476}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c09628}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ddc9551}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4df1bfb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f697f19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a99723a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4fa030}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fcc7d78}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f4185d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ed79d43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50d010bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a3dfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e8e078d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f55ee3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2075216f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac59dcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b14cc0b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43704291}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xba06e97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44c8f0ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54f1346c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c2177eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241f35f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41701a3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ca9a891}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdad9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a44bdc8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4243647c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24fdf6a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ccc8af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x452e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x682eae63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13281fa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5635}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x309d9058}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c7eeb3a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e9c62ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x513d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe690ce3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8741}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a9be30e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20008081}, 0x8014) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002880)='cpuacct.usage_user\x00', 0x0, 0x0) (rerun: 64) sendmsg$NFT_MSG_GETFLOWTABLE(r11, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c00001e170a03000000000000000000000000020800074000000003"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20006884) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x4000004) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x50, r2, 0x300, 0x100, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80040) (async) getsockopt$inet6_tcp_int(r11, 0x6, 0x9, &(0x7f0000002e00), &(0x7f0000002e40)=0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r12, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) sendmsg$NFNL_MSG_ACCT_DEL(r11, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x4048004}, 0x8000004) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x54, r2, 0x47e32ea21a69c5b9, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xffffffffffff0183}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x40408d0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.679107914s ago: executing program 7 (id=5983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff000007000008090002007379"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) 1.641065038s ago: executing program 2 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}}, {@generic={0x88f7}}}}, 0x1a) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0000000800bfffff90cec1c95c788707000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xb5f18344f69fc72a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}}, {@generic={0x88f7}}}}, 0x1a) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0000000800bfffff90cec1c95c788707000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xb5f18344f69fc72a) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) (async) 1.526711673s ago: executing program 4 (id=5985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) 1.523649628s ago: executing program 9 (id=5986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd32936ad234ced2e74e4ad6ea7dc496faeafc97b7e6c44a2ae9de3ee2e6252399cbfaab83bfe7c05ec25b9816da44387027b7ab4d6bde8ec960f7bc136d256000000000080fd1440b92b196ddc631e1405c2b1751059bac64e882735ee5d1f01f1766c9212853b51fe09df9c4dafcd4756a7c9553fa2ac7038dcd44574a62a564f9a2f3674fcf8768a7d9618395b1c5e9698951427297c35dbcefc9f6821bd8d78c6ed291100"/183, 0xb7}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x2001, 0x0) 1.376591064s ago: executing program 9 (id=5987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f00000005c0)="24c953b63aa7367371e40e2f77289af6f77255af4579998d8084439a4f01d08744af804f5c577341527f9016351ca51aca6dc3ee89d01acb5ec2d9aebccf1c787c182c518cf2660d8734193dfadd1bad2f206a9faf061c1bd30e8d728f53bd6c7e2887271ba52e2882753ab7b87d5b45bd5cc93b7cb3b84ad1c5730cfdfbddd4865ec1ef316d70a383eb6da0a7144e94cd", 0x91) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0xfffffffffffffd71, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x50}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x3, 0x4) 1.30028056s ago: executing program 9 (id=5988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) 1.238713267s ago: executing program 7 (id=5989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x100, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "e6ff003b"}, 0x28) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="6e37cff5b582", 0x6}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "4dae5a169d663829", "875a0a915143a804c0f3792f91e29b5c", "f9de9594", "1ddc00c743353199"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) 1.21587324s ago: executing program 7 (id=5990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x2, 0x6}, {0x1, 0x45, 0x9, 0x7}, {0x3, 0x2, 0x5, 0xa}], 0x10, 0x4f}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x8}}}, 0x24}}, 0x40004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x3e, 0x0, 0x1, 0x4863dbfa}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)}, 0x4048081) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb1d488b3a52adb61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000032ca9d04ffffff63873d564b7807609e4d1fb99e732a670be5d64d7d4b654111f05c5180e9ff6ba74cfddb8b0c61f5bcf952a9933a93f66f239063d7ae4d07ae4bb8ef9acb1beaaff5961c43b716e7b6d5b551850caaf00115dfcc439e4b8ebe227729c35733478d207481b928aa5963fc5d4ae5b6c0ec388374ad93067daaa2e811b750300a", @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf25010000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r7, 0x12504000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f00000000c0)=0xa, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000002137c62a3f01cc9f000000000a20000000000a01120000000000007a310000000038000000030a01020000000000000000010000000900030073797a32000000000c00048808800140000000050900010073797a310000000038000000050a01020000000000020000010020000c00024000000000000000010900010073797d31000000000c0004800802b06116e2b1af885879be655a00024044066fa51400"/184], 0xb8}}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.150810182s ago: executing program 2 (id=5991): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') ioctl$TUNSETFILTEREBPF(r0, 0x8008b705, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000c18632f629a1fc60f58a665390500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0xfffffffffffffdb2, 0x0}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000240)={0x6, &(0x7f0000000cc0)=[{@fixed}, {}, {@fixed}, {@none}, {@none}, {@none}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x2) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0xfffffffffffffe31, &(0x7f00000001c0)={&(0x7f0000000600)=@newchain={0x0, 0x64, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x1}, {0x10, 0xe}, {0x4, 0xffe0}}, [@TCA_CHAIN={0x0, 0xb, 0xb4}, @filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x8}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x401, 0x80, 0x3, 0x7}]}}, @TCA_BPF_NAME={0x38, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x1}]}}, @TCA_RATE={0x0, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0xf}, @TCA_CHAIN={0x0, 0xb, 0x6}, @TCA_CHAIN={0x0, 0xb, 0x7fff}, @TCA_RATE={0x0, 0x5, {0x0, 0x7f}}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x0, 0x8, 0x1a}, @TCA_FLOWER_KEY_ARP_SHA={0x0, 0x3f, @multicast}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0xff, 0xff, 0xff, 0xff, 0x0, 0x7f]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x0, 0x50, 0x1}, @TCA_FLOWER_KEY_IP_PROTO={0x0, 0x9, 0x1}, @TCA_FLOWER_KEY_TCP_DST_MASK, @TCA_FLOWER_KEY_SCTP_DST, @TCA_FLOWER_KEY_CT_MARK_MASK={0x0, 0x60, 0x6}]}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001d00)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) socket$kcm(0x2, 0xd, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r11) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r12, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.018584105s ago: executing program 2 (id=5992): r0 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) unshare(0x20000400) (async) unshare(0x20000400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) (async) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) vmsplice(r5, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) (async) vmsplice(r5, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'pim6reg0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2c, 0xe, 0x5, 0x2, 0xf8, 0x0, 0xfd, 0xfc, 0xeb, 0x47, 0xbe1f, 0x6, 0x5, 0x9, 0xfe, 0xa, [0xffffffff, 0x9]}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'pim6reg0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2c, 0xe, 0x5, 0x2, 0xf8, 0x0, 0xfd, 0xfc, 0xeb, 0x47, 0xbe1f, 0x6, 0x5, 0x9, 0xfe, 0xa, [0xffffffff, 0x9]}}) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) r9 = socket(0xa, 0x3, 0x3a) bind$unix(r9, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 1.015056489s ago: executing program 1 (id=5993): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c005}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008840}, 0x20008081) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x8000, 0x4) (async) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380)) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async, rerun: 32) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004821) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r3) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000880)={0x6f4, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x650, 0x8, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5e7, @empty, 0x1ff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "71c5c07716009cbb6d3813e321c5d64ebe9037c2a264c7c9c176601f3f00cdee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f1674814c95642dea566f7f1258bf5775b4f0bd4d4cfe8d9aced551f2fb32ad"}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}, {0x1e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xb}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x40, @private1, 0x8}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7d2b3dbaf57ec8e91e85b2facfd0c8884b40b46abcd8e87f6a89a10a2361e32"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a14a4413c8e44ea2019a57191d6f368ce67ed9237667664ca4006439656d27cf"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6a6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2849b4fc10e19e98b4ee2ee0f9af1b04cafacdb9deff56970b08ac0ad7b8b1f3"}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb6de}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "532bb15359e1fae2829dfa2c85d4d5f291b81590d6b8c4e0b39dd2891234757e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffcc0a, @local, 0x229}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @remote, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5cc, @mcast1, 0xffffc146}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x4018041}, 0x44004) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r3) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000080) (async, rerun: 64) r9 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001180)={r3}) recvmmsg$unix(r3, &(0x7f0000002480)=[{{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/54, 0x36}, {&(0x7f00000022c0)=""/223, 0xdf}, {&(0x7f00000023c0)=""/38, 0x26}], 0x5}}], 0x1, 0x10000, &(0x7f00000024c0)={0x0, 0x3938700}) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002500), r11) sendmsg$nl_route(r3, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)=@ipv4_newnexthop={0x20, 0x68, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x810) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x74, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4024004) (async) r12 = accept$unix(r10, &(0x7f0000002780), &(0x7f0000002800)=0x6e) recvmsg$unix(r12, &(0x7f0000002b00)={&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/88, 0x58}, {&(0x7f0000002980)=""/126, 0x7e}, {&(0x7f0000002a00)=""/145, 0x91}], 0x4}, 0x42) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000002b40)=0x8, 0x4) 979.940613ms ago: executing program 7 (id=5994): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) 858.253357ms ago: executing program 1 (id=5995): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r3}, 0xb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xa, 0x1, 0xfffff278, 0x64, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x1, 0x7800, 0xb, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x93, 0x36, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40, 0x7800, 0x1, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x80, 0xb7c6, 0xffffff22, {{0xa, 0x4, 0x0, 0x19, 0x28, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x88, 0x6, "13dfab89"}, @noop, @end, @noop, @noop, @lsrr={0x83, 0x0, 0x6e, [@multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10c0, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 774.660988ms ago: executing program 7 (id=5996): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 656.94438ms ago: executing program 7 (id=5997): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x81}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) (async) openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2, 0xffffffffffffffff}, 0x4) (async) getpeername$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x2, 0x1, 0x2, 0x1, 0xa, 0xffffffffffffffff, 0x4}]}, &(0x7f00000004c0)='GPL\x00', 0x10, 0xd4, &(0x7f0000000500)=""/212, 0x41000, 0x1, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xa, 0x4, 0x1}, 0x10, 0x19552, r3, 0x6, &(0x7f00000006c0)=[r2, r2, r2], &(0x7f0000000700)=[{0x2, 0x4, 0x6, 0x9}, {0x1, 0x3, 0x10}, {0x0, 0x2, 0xb, 0x2}, {0x1, 0x1, 0x8, 0x7}, {0x1, 0x4, 0xd, 0xa}, {0x4, 0x5, 0xe}], 0x10, 0x1}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xcc, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2d6cfecc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6586988a}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xecd0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) (async) sendfile(r6, r7, 0x0, 0x7feff000) (async) r10 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r10, r10, 0x0, 0x200) 600.216212ms ago: executing program 4 (id=5998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) r4 = socket(0x1, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7864, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ffffffc}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 482.787893ms ago: executing program 4 (id=5999): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 438.896487ms ago: executing program 4 (id=6000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7801000017000100e25151892937c9a94e60b324b4ffffff00000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000004f0327fb4c6be74ae26e5d9a97d1398e9d7065b3f614067db43957b7974443cf7604711110451eac314a0a0e844aab50f5a8532b1ef6061a32f2fb35e2556cf0784d389790fa3abb3115adab2a33b2aa13759661670dcadc62db1a980566389314fef453801aabd3f0b181d348dda8576db84408d1bfb70f658791", @ANYRES32=0x0, @ANYBLOB="be424d6d83213c578cdcfeb88dcfe5869006eb377c54721aeefef9ddfb3809a89030d2ef8054e244f6"], 0x178}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dvmrp0\x00', 0x0}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="000000000000000010ee26002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000e039c877734d30d4757ae3a54db352ac7500"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)="9c4f779a90d6608fb95f7b8eba72876eb56e8144835f75d1a13b0bba84ab010f00008023e5337e5a0d52d7", &(0x7f0000000540)="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", 0x1000, r8}, 0x38) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) (rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @private}, &(0x7f0000000400)=0xc) (async) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x34, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x800}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffe, 0xfb}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)={0x10c, r9, 0x20, 0x5, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfd}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24008810}, 0x800) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800058008000200080000003e"], 0x44}}, 0x0) 458.535µs ago: executing program 4 (id=6001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f00000000c0)=""/63, 0x3f, 0x2060, 0x0, 0x0) 0s ago: executing program 4 (id=6002): socket(0x22, 0x2, 0x59) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "a5", "c4b74a", 0x8847, "f4b30fdd7674d0345794245a0bc8c46960e8cdefc72c43219e4a44529a3707897d18236b8b93d560859bd7bf16c333dfbca83c4b69af814ffd229ec7bd2be02c1b27e5dd11c05192ce492396b88d083e09a2428294bc454ed9dd4f7548cc4d3f552b86c088c936fa2acd6d6ea44b06cf72"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x3e9, 0x100, 0x70bd27, 0x25dfdbfb, {0x44, 0x1, 0x0, r3, 0x9, 0x8, 0x8, 0x3, 0x0, 0x9, 0x1d00}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x24000081) kernel console output (not intermixed with test programs): 430 (pid 21393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.216881][T21393] Use struct sctp_sack_info instead [ 391.328263][T21398] bond0: (slave batadv0): Releasing backup interface [ 391.348268][T21398] bridge_slave_0: left allmulticast mode [ 391.358352][T21398] bridge_slave_0: left promiscuous mode [ 391.365803][T21398] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.381162][T21398] bridge_slave_1: left allmulticast mode [ 391.387108][T21398] bridge_slave_1: left promiscuous mode [ 391.394164][T21398] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.410962][T21398] bond0: (slave bond_slave_0): Releasing backup interface [ 391.425474][T21398] bond0: (slave bond_slave_1): Releasing backup interface [ 391.439667][T21398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.447234][T21398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.472365][T21398] bond2: (slave bond3): Releasing backup interface [ 391.484216][T21398] bond4: (slave ip6gretap1): Releasing backup interface [ 391.494859][T21398] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 8e:62:52:b9:d0:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 391.522751][T21398] bond4: (slave veth9): Releasing backup interface [ 391.536926][T21398] bond5: left promiscuous mode [ 391.547359][T21398] bridge0: port 4(bond5) entered disabled state [ 391.666161][T21406] netlink: 'syz.5.4435': attribute type 21 has an invalid length. [ 392.336680][T21426] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.388651][T21429] netlink: 'syz.3.4440': attribute type 11 has an invalid length. [ 392.931457][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.943089][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.952022][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 392.963254][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 392.977174][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.224274][T21458] chnl_net:caif_netlink_parms(): no params data found [ 394.617508][T21507] __nla_validate_parse: 7 callbacks suppressed [ 394.617526][T21507] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4458'. [ 394.644396][T21507] netlink: 'syz.3.4458': attribute type 9 has an invalid length. [ 394.690933][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4458'. [ 394.728465][T21458] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.759347][T21458] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.770969][T21458] bridge_slave_0: entered allmulticast mode [ 394.778913][T21458] bridge_slave_0: entered promiscuous mode [ 394.797681][T21458] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.808296][T21458] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.828871][T21458] bridge_slave_1: entered allmulticast mode [ 394.838828][T21458] bridge_slave_1: entered promiscuous mode [ 394.871807][T21513] netlink: 'syz.1.4459': attribute type 11 has an invalid length. [ 394.925115][T21458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.941234][T21458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.031298][T21458] team0: Port device team_slave_0 added [ 395.043853][T21458] team0: Port device team_slave_1 added [ 395.066349][ T5882] Bluetooth: hci6: command tx timeout [ 395.137534][T21458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.146889][T21458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.212047][T21458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.235604][T21458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.243811][T21458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.276206][T21458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.372428][T21458] hsr_slave_0: entered promiscuous mode [ 395.381764][T21458] hsr_slave_1: entered promiscuous mode [ 395.391028][T21458] debugfs: 'hsr0' already exists in 'hsr' [ 395.396883][T21458] Cannot create hsr debugfs directory [ 395.571574][T21540] netlink: 'syz.5.4469': attribute type 8 has an invalid length. [ 395.757055][T21458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.806228][T21458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.838330][T21458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 395.915489][T21458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.086152][T21458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.126465][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4475'. [ 396.166118][T21458] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.202664][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.209875][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.233727][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.240926][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.478768][T21576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4480'. [ 396.665217][T21458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.681023][T21588] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 396.729465][T21591] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4484'. [ 396.784626][T21591] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 397.149917][ T5882] Bluetooth: hci6: command 0x041b tx timeout [ 397.303471][T21458] veth0_vlan: entered promiscuous mode [ 397.348951][T21458] veth1_vlan: entered promiscuous mode [ 397.418346][T21458] veth0_macvtap: entered promiscuous mode [ 397.437094][T21458] veth1_macvtap: entered promiscuous mode [ 397.468905][T21458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.503032][T21458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.548302][ T4889] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.571198][ T4889] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.594217][ T4889] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.620693][ T4889] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.775491][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.795201][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.855986][T15861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.880587][T15861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.011441][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4497'. [ 398.126855][ T5882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 398.138326][ T5882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 398.146889][ T5882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 398.155314][T21650] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4499'. [ 398.165571][ T5882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 398.174130][ T5882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 398.530556][T21665] delete_channel: no stack [ 398.546408][T21667] netlink: 'syz.6.4503': attribute type 1 has an invalid length. [ 398.555431][T21647] chnl_net:caif_netlink_parms(): no params data found [ 398.874348][T21647] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.884550][T21647] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.896501][T21647] bridge_slave_0: entered allmulticast mode [ 398.923479][T21647] bridge_slave_0: entered promiscuous mode [ 398.961681][T21647] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.969012][T21647] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.977018][T21647] bridge_slave_1: entered allmulticast mode [ 398.987202][T21647] bridge_slave_1: entered promiscuous mode [ 399.093936][T21647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.107455][T21647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.193505][T21647] team0: Port device team_slave_0 added [ 399.211407][T21695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4510'. [ 399.213914][T21647] team0: Port device team_slave_1 added [ 399.230621][ T5876] Bluetooth: hci6: command 0x041b tx timeout [ 399.271981][T21647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.278960][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.305819][T21647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.325090][T21647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.332226][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.360553][T21647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.437471][T21647] hsr_slave_0: entered promiscuous mode [ 399.453585][T21647] hsr_slave_1: entered promiscuous mode [ 399.468852][T21647] debugfs: 'hsr0' already exists in 'hsr' [ 399.477468][T21647] Cannot create hsr debugfs directory [ 399.711455][T21704] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4513'. [ 399.828237][T21647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.847665][T21647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.861022][T21647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.875685][T21647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.062329][T21647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.097712][T21647] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.118448][T15861] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.125662][T15861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.167305][T21722] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 400.167405][T15023] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.189872][T21723] netlink: 'syz.1.4516': attribute type 11 has an invalid length. [ 400.196930][T15023] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.214946][T15858] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.222139][T15858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.236263][T15023] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.260293][ T5876] Bluetooth: hci7: command tx timeout [ 400.270198][T15023] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.605284][T21734] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.625739][T21734] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.710096][T21647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.873493][T21740] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 401.238927][T21647] veth0_vlan: entered promiscuous mode [ 401.277533][T21647] veth1_vlan: entered promiscuous mode [ 401.302340][ T5876] Bluetooth: hci6: command 0x041b tx timeout [ 401.363498][T21647] veth0_macvtap: entered promiscuous mode [ 401.377836][T21647] veth1_macvtap: entered promiscuous mode [ 401.437783][T21647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.442593][T21771] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4527'. [ 401.457976][T21647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.530916][ T7478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.562480][ T7478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.576037][ T7478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.608199][ T7478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.742871][T15023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.765328][T15023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.808383][T15858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.822738][T15858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.907915][T21786] netlink: 'syz.6.4532': attribute type 11 has an invalid length. [ 402.184374][T21785] gtp0: left promiscuous mode [ 402.193312][T21785] veth9: left promiscuous mode [ 402.206268][T21785] ip6erspan0: left promiscuous mode [ 402.255831][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.286385][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.311129][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.325689][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.340660][ T5876] Bluetooth: hci7: command tx timeout [ 402.358875][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.373527][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.386849][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.397178][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.670661][T21819] netlink: 'syz.1.4541': attribute type 10 has an invalid length. [ 402.686587][T21819] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 402.836814][T21823] netlink: 'syz.6.4544': attribute type 33 has an invalid length. [ 403.380732][ T5876] Bluetooth: hci6: command 0x041b tx timeout [ 403.814825][T21838] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.828339][T21838] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 403.896475][T21838] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.902988][T21838] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 403.915712][T21838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.924445][T21838] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 403.991503][T21838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.997450][T21838] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 404.037990][T21856] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.4551'. [ 404.040246][T21838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.063118][T21838] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 404.123038][T21838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.130779][T21838] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 404.168378][T21838] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 404.175926][T21838] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 404.212309][T21838] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 404.215542][T21860] netlink: 'syz.6.4552': attribute type 11 has an invalid length. [ 404.218266][T21838] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 404.373458][T21865] netlink: 'syz.7.4553': attribute type 13 has an invalid length. [ 404.389076][T21865] veth0_macvtap: left promiscuous mode [ 404.419964][T21865] macvtap0: entered allmulticast mode [ 404.442603][T21865] macvtap0: refused to change device tx_queue_len [ 404.645095][T21878] netlink: 'syz.7.4558': attribute type 23 has an invalid length. [ 404.738274][T21882] netlink: 'syz.7.4559': attribute type 21 has an invalid length. [ 404.747627][T21882] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4559'. [ 404.758869][T21882] netlink: 'syz.7.4559': attribute type 5 has an invalid length. [ 404.768258][T21882] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4559'. [ 404.784807][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4559'. [ 404.825379][T21884] syzkaller0: entered promiscuous mode [ 404.832957][T21884] syzkaller0: entered allmulticast mode [ 404.988884][T21888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.223385][T21899] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4568'. [ 405.738148][T21920] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4573'. [ 406.034760][T21929] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 406.064078][T21929] netlink: 288 bytes leftover after parsing attributes in process `syz.7.4575'. [ 406.080402][T21932] netlink: 'syz.6.4574': attribute type 11 has an invalid length. [ 406.121081][T21929] tipc: Failed to remove unknown binding: 66,1,1/0:2188147308/2188147310 [ 406.244266][T21941] syzkaller0: entered promiscuous mode [ 406.250339][T21941] syzkaller0: entered allmulticast mode [ 406.265545][T21941] tipc: Enabled bearer , priority 0 [ 406.276434][T21941] tipc: Resetting bearer [ 406.288096][T21940] tipc: Resetting bearer [ 407.285518][ T43] tipc: Node number set to 3847562659 [ 408.585375][T21940] tipc: Disabling bearer [ 408.668178][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4581'. [ 408.759826][T21953] openvswitch: netlink: IP tunnel dst address not specified [ 408.785526][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 408.804956][T21954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4580'. [ 408.863575][T21956] vxcan1: tx address claim with dest, not broadcast [ 408.866936][T21954] geneve2: entered promiscuous mode [ 408.881401][T21954] geneve2: entered allmulticast mode [ 408.978743][T21963] netlink: 'syz.1.4585': attribute type 1 has an invalid length. [ 408.994138][T21963] netlink: 'syz.1.4585': attribute type 3 has an invalid length. [ 409.014144][T21963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4585'. [ 409.026675][T21963] NCSI netlink: No device for ifindex 0 [ 409.274763][T21987] netlink: 'syz.6.4589': attribute type 11 has an invalid length. [ 409.345835][T21991] netlink: 'syz.1.4593': attribute type 1 has an invalid length. [ 409.719948][T22018] netlink: 'syz.7.4600': attribute type 12 has an invalid length. [ 409.736980][T22018] netlink: 'syz.7.4600': attribute type 29 has an invalid length. [ 409.751153][T22018] __nla_validate_parse: 3 callbacks suppressed [ 409.751171][T22018] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4600'. [ 409.766844][T22018] netlink: 59 bytes leftover after parsing attributes in process `syz.7.4600'. [ 409.786181][T22018] netlink: 'syz.7.4600': attribute type 1 has an invalid length. [ 409.805977][T22018] netlink: 'syz.7.4600': attribute type 1 has an invalid length. [ 409.825448][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 409.835470][T22025] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4601'. [ 409.846771][T22025] netlink: 'syz.1.4601': attribute type 5 has an invalid length. [ 410.475648][T22061] netlink: 'syz.6.4611': attribute type 14 has an invalid length. [ 410.675131][T22075] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.070110][T22102] sctp: [Deprecated]: syz.6.4621 (pid 22102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.070110][T22102] Use struct sctp_sack_info instead [ 411.092235][T22102] sctp: [Deprecated]: syz.6.4621 (pid 22102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.092235][T22102] Use struct sctp_sack_info instead [ 411.118160][T22106] sctp: [Deprecated]: syz.6.4621 (pid 22106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.118160][T22106] Use struct sctp_sack_info instead [ 411.136750][T22102] netlink: 'syz.6.4621': attribute type 10 has an invalid length. [ 411.146744][T22106] veth0_vlan: entered allmulticast mode [ 411.168390][T22106] veth0_vlan: left promiscuous mode [ 411.175473][T22106] veth0_vlan: entered promiscuous mode [ 411.184340][T22106] team0: Device veth0_vlan failed to register rx_handler [ 411.202359][T22102] veth0_vlan: left promiscuous mode [ 411.210876][T22102] veth0_vlan: entered promiscuous mode [ 411.220069][T22102] team0: Device veth0_vlan failed to register rx_handler [ 411.235450][T22109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4623'. [ 411.244777][T22109] tipc: Invalid UDP bearer configuration [ 411.244836][T22109] tipc: Enabling of bearer rejected, failed to enable media [ 411.529137][T22116] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.746580][ T5882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 411.755283][ T5882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 411.764857][ T5882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 411.774183][ T5882] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 411.792694][ T5882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 411.812493][ T5876] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 411.824405][ T5876] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 411.834707][ T5876] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 411.844614][ T5876] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 411.862375][ T5876] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 412.088041][T22128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4627'. [ 412.214074][T22118] chnl_net:caif_netlink_parms(): no params data found [ 412.311469][T22118] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.318676][T22118] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.326415][T22118] bridge_slave_0: entered allmulticast mode [ 412.334434][T22118] bridge_slave_0: entered promiscuous mode [ 412.345628][T22118] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.363588][T22118] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.376897][T22118] bridge_slave_1: entered allmulticast mode [ 412.421109][T22118] bridge_slave_1: entered promiscuous mode [ 412.514029][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4628'. [ 412.556286][T22118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.576725][T22118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.694241][T22118] team0: Port device team_slave_0 added [ 412.709030][T22118] team0: Port device team_slave_1 added [ 412.865195][ T5882] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 412.865961][T22118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.897038][T22118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.897697][ T5882] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 412.950818][ T5882] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 412.962355][T22118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.976243][T22118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.983801][T22118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.010444][T22118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.021092][ T5882] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 413.031427][T22155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.053157][ T5882] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 413.079805][T22155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.206795][T22118] hsr_slave_0: entered promiscuous mode [ 413.234525][T22118] hsr_slave_1: entered promiscuous mode [ 413.248034][T22118] debugfs: 'hsr0' already exists in 'hsr' [ 413.256092][T22118] Cannot create hsr debugfs directory [ 413.505457][T22173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.513209][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4639'. [ 413.578524][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4639'. [ 413.602765][T22173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4639'. [ 413.852813][T22175] bond1 (unregistering): Released all slaves [ 413.948276][ T5876] Bluetooth: hci8: command tx timeout [ 414.366678][T22118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 414.381665][T22118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 414.403229][T22118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 414.418997][T22118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 414.432743][T22152] chnl_net:caif_netlink_parms(): no params data found [ 414.554366][T22152] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.562344][T22152] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.570668][T22152] bridge_slave_0: entered allmulticast mode [ 414.577861][T22152] bridge_slave_0: entered promiscuous mode [ 414.585769][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.601002][T22152] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.608183][T22152] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.617399][T22152] bridge_slave_1: entered allmulticast mode [ 414.626736][T22152] bridge_slave_1: entered promiscuous mode [ 414.671316][T22152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.685458][T22152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.743059][T22152] team0: Port device team_slave_0 added [ 414.754005][T22152] team0: Port device team_slave_1 added [ 414.796412][T22152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.804393][T22152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.831460][T22152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.853664][T22152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.860913][T22152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.887466][T22152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.971873][T22152] hsr_slave_0: entered promiscuous mode [ 414.984845][T22152] hsr_slave_1: entered promiscuous mode [ 414.994274][T22152] debugfs: 'hsr0' already exists in 'hsr' [ 415.004298][T22152] Cannot create hsr debugfs directory [ 415.140008][ T5876] Bluetooth: hci9: command tx timeout [ 415.300657][T22118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.310587][T22237] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4656'. [ 415.349841][T22233] tipc: Enabled bearer , priority 0 [ 415.395957][T22240] syzkaller0: entered promiscuous mode [ 415.411173][T22240] syzkaller0: entered allmulticast mode [ 415.538208][T22118] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.557010][T22233] tipc: Resetting bearer [ 415.576128][T22250] netlink: 666 bytes leftover after parsing attributes in process `syz.7.4659'. [ 415.608834][T22232] tipc: Resetting bearer [ 415.636899][T22232] tipc: Disabling bearer [ 415.683083][T15858] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.690298][T15858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.714151][T15858] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.721386][T15858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.980134][T22152] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 416.013816][T22152] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 416.019834][ T5876] Bluetooth: hci8: command tx timeout [ 416.056590][T22152] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 416.101541][T22152] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 416.124866][T22271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.493228][T22118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.502387][T22290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4669'. [ 416.535025][T22152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.642217][T22152] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.700277][T22298] validate_nla: 5 callbacks suppressed [ 416.700294][T22298] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 416.710060][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.721210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.768479][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.775797][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.220086][ T5876] Bluetooth: hci9: command tx timeout [ 417.386600][T22322] tipc: Enabling not permitted [ 417.414623][T22322] tipc: Enabling of bearer rejected, failed to enable media [ 417.543722][T22118] veth0_vlan: entered promiscuous mode [ 417.611859][T22118] veth1_vlan: entered promiscuous mode [ 417.648798][T22335] netlink: 'syz.7.4684': attribute type 3 has an invalid length. [ 417.747012][T22118] veth0_macvtap: entered promiscuous mode [ 417.788516][T22118] veth1_macvtap: entered promiscuous mode [ 417.874783][T22118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.945687][T22118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.965404][T22343] xt_l2tp: invalid flags combination: 8 [ 418.004119][T22152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.042172][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.072618][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.096006][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.101921][ T5876] Bluetooth: hci8: command tx timeout [ 418.136509][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.255068][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'. [ 418.292794][T22353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4690'. [ 418.319975][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'. [ 418.424564][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.463024][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.563377][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4691'. [ 418.586482][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.594876][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.736622][T22368] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4692'. [ 418.776472][T22152] veth0_vlan: entered promiscuous mode [ 418.837134][T22152] veth1_vlan: entered promiscuous mode [ 418.911166][T22152] veth0_macvtap: entered promiscuous mode [ 418.946418][T22152] veth1_macvtap: entered promiscuous mode [ 419.025509][T22152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.054936][T22152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.124187][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.161518][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.190317][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.203709][ T4889] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.253268][T22388] netlink: 'syz.8.4696': attribute type 12 has an invalid length. [ 419.280008][T22388] netlink: 'syz.8.4696': attribute type 29 has an invalid length. [ 419.296044][T22388] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4696'. [ 419.307883][ T5876] Bluetooth: hci9: command tx timeout [ 419.308705][T22388] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4696'. [ 419.518716][T22396] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 419.557318][T22398] netlink: 'syz.8.4703': attribute type 1 has an invalid length. [ 419.595745][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.647455][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.766473][T15860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.778201][T15860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.181051][ T5876] Bluetooth: hci8: command tx timeout [ 420.517044][T22437] lo speed is unknown, defaulting to 1000 [ 420.532832][T22437] lo speed is unknown, defaulting to 1000 [ 420.543503][T22439] __nla_validate_parse: 3 callbacks suppressed [ 420.543522][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4714'. [ 420.543868][T22437] lo speed is unknown, defaulting to 1000 [ 420.591643][T22437] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 420.642324][T22437] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 420.701304][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4716'. [ 420.713177][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4715'. [ 420.752445][T22442] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.841540][T22442] bridge_slave_1 (unregistering): left allmulticast mode [ 420.858740][T22442] bridge_slave_1 (unregistering): left promiscuous mode [ 420.875613][T22442] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.918518][T22456] netlink: 'syz.9.4719': attribute type 1 has an invalid length. [ 420.948925][T22437] lo speed is unknown, defaulting to 1000 [ 420.974301][T22437] lo speed is unknown, defaulting to 1000 [ 421.014108][T22437] lo speed is unknown, defaulting to 1000 [ 421.049919][T22457] gretap1: entered promiscuous mode [ 421.086646][T22437] lo speed is unknown, defaulting to 1000 [ 421.107333][T22460] netlink: 'syz.8.4720': attribute type 11 has an invalid length. [ 421.117542][T22437] lo speed is unknown, defaulting to 1000 [ 421.148849][T22437] lo speed is unknown, defaulting to 1000 [ 421.151226][T22460] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4720'. [ 421.166918][T22437] lo speed is unknown, defaulting to 1000 [ 421.198162][T22437] lo speed is unknown, defaulting to 1000 [ 421.270882][T22437] lo speed is unknown, defaulting to 1000 [ 421.304475][T22437] lo speed is unknown, defaulting to 1000 [ 421.325115][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4723'. [ 421.327483][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4724'. [ 421.372628][T22437] lo speed is unknown, defaulting to 1000 [ 421.383073][ T5876] Bluetooth: hci9: command tx timeout [ 421.388111][T22478] netlink: 'syz.8.4725': attribute type 1 has an invalid length. [ 421.394591][T22437] lo speed is unknown, defaulting to 1000 [ 421.405653][T22437] lo speed is unknown, defaulting to 1000 [ 421.435047][T22478] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4725'. [ 421.495646][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4726'. [ 421.552223][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4726'. [ 421.594797][T22486] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 421.753849][T22502] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4733'. [ 422.355171][T22535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.451020][T22541] syz.9.4745: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.470690][T22541] CPU: 0 UID: 0 PID: 22541 Comm: syz.9.4745 Not tainted syzkaller #0 PREEMPT(full) [ 422.470707][T22541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.470716][T22541] Call Trace: [ 422.470721][T22541] [ 422.470726][T22541] dump_stack_lvl+0x189/0x250 [ 422.470745][T22541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.470757][T22541] ? __pfx__printk+0x10/0x10 [ 422.470771][T22541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 422.470786][T22541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 422.470798][T22541] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 422.470811][T22541] warn_alloc+0x214/0x310 [ 422.470829][T22541] ? __pfx_warn_alloc+0x10/0x10 [ 422.470848][T22541] ? __get_vm_area_node+0x28f/0x300 [ 422.470862][T22541] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 422.470878][T22541] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 422.470904][T22541] ? futex_unqueue+0x22/0x240 [ 422.470914][T22541] ? futex_unqueue+0x22/0x240 [ 422.470926][T22541] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.470939][T22541] ? __futex_wait+0x1d1/0x3e0 [ 422.470954][T22541] ? __futex_wait+0x34f/0x3e0 [ 422.470971][T22541] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 422.470984][T22541] __vmalloc_noprof+0xb1/0xf0 [ 422.470997][T22541] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 422.471012][T22541] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 422.471028][T22541] bpf_prog_alloc+0x3c/0x1a0 [ 422.471048][T22541] bpf_prog_load+0x735/0x1930 [ 422.471068][T22541] ? __pfx_bpf_prog_load+0x10/0x10 [ 422.471092][T22541] ? bpf_lsm_bpf+0x9/0x20 [ 422.471104][T22541] ? security_bpf+0x7e/0x300 [ 422.471120][T22541] __sys_bpf+0x528/0x870 [ 422.471134][T22541] ? __pfx___sys_bpf+0x10/0x10 [ 422.471156][T22541] ? rcu_is_watching+0x15/0xb0 [ 422.471169][T22541] __x64_sys_bpf+0x7c/0x90 [ 422.471181][T22541] do_syscall_64+0xfa/0x3b0 [ 422.471192][T22541] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.471203][T22541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.471212][T22541] ? clear_bhb_loop+0x60/0xb0 [ 422.471224][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.471236][T22541] RIP: 0033:0x7fbd8378eec9 [ 422.471247][T22541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.471255][T22541] RSP: 002b:00007fbd8463c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.471266][T22541] RAX: ffffffffffffffda RBX: 00007fbd839e5fa0 RCX: 00007fbd8378eec9 [ 422.471273][T22541] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 422.471279][T22541] RBP: 00007fbd83811f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.471285][T22541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.471290][T22541] R13: 00007fbd839e6038 R14: 00007fbd839e5fa0 R15: 00007fff5794c938 [ 422.471305][T22541] [ 422.471312][T22541] Mem-Info: [ 422.774223][T22542] netlink: 'syz.9.4745': attribute type 23 has an invalid length. [ 422.777364][T22541] active_anon:5560 inactive_anon:0 isolated_anon:0 [ 422.777364][T22541] active_file:3268 inactive_file:40034 isolated_file:0 [ 422.777364][T22541] unevictable:768 dirty:53 writeback:0 [ 422.777364][T22541] slab_reclaimable:13455 slab_unreclaimable:134099 [ 422.777364][T22541] mapped:54719 shmem:1356 pagetables:1479 [ 422.777364][T22541] sec_pagetables:0 bounce:0 [ 422.777364][T22541] kernel_misc_reclaimable:0 [ 422.777364][T22541] free:1223887 free_pcp:13166 free_cma:0 [ 422.910682][T22541] Node 0 active_anon:22040kB inactive_anon:0kB active_file:13072kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:218876kB dirty:212kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16880kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.958050][T22541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.989802][T22541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.043357][T22541] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 423.067555][T22541] Node 0 DMA32 free:990004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22068kB inactive_anon:0kB active_file:13072kB inactive_file:158368kB unevictable:1536kB writepending:212kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:37284kB local_pcp:20648kB free_cma:0kB [ 423.179406][T22541] lowmem_reserve[]: 0 0 1 1 1 [ 423.184187][T22541] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 423.233123][T22541] lowmem_reserve[]: 0 0 0 0 0 [ 423.237972][T22541] Node 1 Normal free:3889240kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15736kB local_pcp:9200kB free_cma:0kB [ 423.348605][T22541] lowmem_reserve[]: 0 0 0 0 0 [ 423.380109][T22541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.439166][T22541] Node 0 DMA32: 1*4kB (M) 6*8kB (M) 64*16kB (M) 74*32kB (ME) 29*64kB (UME) 1*128kB (U) 11*256kB (ME) 3*512kB (M) 135*1024kB (UME) 3*2048kB (M) 204*4096kB (UM) = 989748kB [ 423.473580][T22541] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 423.550665][T22541] Node 1 Normal: 172*4kB (UE) 31*8kB (UME) 37*16kB (UME) 123*32kB (UME) 36*64kB (UME) 6*128kB (UME) 7*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3889240kB [ 423.569991][T22541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.723928][T22541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.746938][T22587] Unsupported ieee802154 address type: 0 [ 423.761271][T22541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.773819][T22587] tipc: Started in network mode [ 423.815980][T22541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.823189][T22587] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 423.845167][T22587] tipc: Enabling of bearer rejected, failed to enable media [ 423.889615][T22541] 44655 total pagecache pages [ 423.894352][T22541] 0 pages in swap cache [ 423.898520][T22541] Free swap = 124996kB [ 423.932052][T22541] Total swap = 124996kB [ 423.959878][T22541] 2097051 pages RAM [ 423.963736][T22541] 0 pages HighMem/MovableOnly [ 423.968418][T22541] 425672 pages reserved [ 424.009729][T22541] 0 pages cma reserved [ 424.597008][T22622] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 424.628643][T22622] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.826584][T22691] netlink: 'syz.7.4790': attribute type 9 has an invalid length. [ 426.384164][T22713] netlink: 'syz.8.4799': attribute type 1 has an invalid length. [ 426.407952][T22718] netlink: 'syz.9.4800': attribute type 1 has an invalid length. [ 426.417630][T22716] veth3: entered allmulticast mode [ 426.436490][T22713] __nla_validate_parse: 12 callbacks suppressed [ 426.436510][T22713] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4799'. [ 426.480845][T22718] bond1: entered promiscuous mode [ 426.486430][T22718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.568751][T22718] bond1: (slave bridge2): making interface the new active one [ 426.577082][T22718] bridge2: entered promiscuous mode [ 426.586451][T22718] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 426.872996][T22740] Bluetooth: MGMT ver 1.23 [ 427.118358][T22755] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4809'. [ 427.140515][T22756] netlink: 'syz.8.4808': attribute type 1 has an invalid length. [ 427.438244][T22776] netlink: 'syz.8.4814': attribute type 2 has an invalid length. [ 427.462033][T22777] netlink: 'syz.7.4813': attribute type 19 has an invalid length. [ 427.481912][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4813'. [ 427.496393][T22776] netlink: 'syz.8.4814': attribute type 2 has an invalid length. [ 427.525631][T22779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.571884][ T4889] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.583298][T22777] netlink: 'syz.7.4813': attribute type 19 has an invalid length. [ 427.592903][ T4889] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.602565][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4813'. [ 427.607660][ T4889] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.635246][ T4889] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.741465][T22784] veth1_macvtap: left promiscuous mode [ 427.779811][T22787] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4819'. [ 427.810884][T22787] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4819'. [ 427.950906][T22796] netlink: 146780 bytes leftover after parsing attributes in process `syz.7.4820'. [ 428.196182][ T980] IPVS: starting estimator thread 0... [ 428.253991][T22817] netlink: 'syz.7.4829': attribute type 1 has an invalid length. [ 428.289361][T22813] IPVS: using max 32 ests per chain, 76800 per kthread [ 428.297676][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4827'. [ 428.327320][T22812] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 428.340329][T22817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.348036][T22812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.386292][T22822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.395240][T22822] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 428.408077][T22822] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 428.716339][T15840] tipc: Subscription rejected, illegal request [ 428.836891][T22848] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4838'. [ 428.852694][T22848] : renamed from bridge_slave_0 [ 428.860360][T22846] netlink: 'syz.9.4837': attribute type 39 has an invalid length. [ 429.058085][T22859] syzkaller1: entered promiscuous mode [ 429.074575][T22859] syzkaller1: entered allmulticast mode [ 429.102691][T22859] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4842'. [ 429.139862][T22859] netlink: 'syz.8.4842': attribute type 1 has an invalid length. [ 429.515647][T22882] openvswitch: netlink: Flow key attr not present in new flow. [ 429.798595][T22889] lo speed is unknown, defaulting to 1000 [ 430.096488][ T30] audit: type=1800 audit(1758634364.096:10): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4858" name="memory.events" dev="tmpfs" ino=508 res=0 errno=0 [ 430.133380][ T30] audit: type=1804 audit(1758634364.096:11): pid=22911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4858" name="/newroot/96/memory.events" dev="tmpfs" ino=508 res=1 errno=0 [ 431.003031][T22944] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 431.132618][T22951] sctp: [Deprecated]: syz.8.4865 (pid 22951) Use of int in max_burst socket option deprecated. [ 431.132618][T22951] Use struct sctp_assoc_value instead [ 431.176491][T22955] netlink: 'syz.1.4869': attribute type 1 has an invalid length. [ 431.235442][T22955] 8021q: adding VLAN 0 to HW filter on device bond9 [ 431.462921][T22969] gtp0: left allmulticast mode [ 431.469813][T22969] vlan3: left allmulticast mode [ 431.474724][T22969] hsr0: left allmulticast mode [ 431.481750][T22969] hsr_slave_0: left allmulticast mode [ 431.487170][T22969] hsr_slave_1: left allmulticast mode [ 431.494013][T22969] veth3: left allmulticast mode [ 431.501409][T22969] veth5: left allmulticast mode [ 431.511124][T22969] veth7: left allmulticast mode [ 431.517963][T22969] bond5: left allmulticast mode [ 431.528436][T22969] vlan4: left allmulticast mode [ 431.533513][T22969] bond8: left allmulticast mode [ 434.458817][ T4889] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 434.504056][T23029] __nla_validate_parse: 5 callbacks suppressed [ 434.504076][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4887'. [ 435.431836][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.442183][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.448971][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.533376][T23048] netlink: 'syz.7.4892': attribute type 21 has an invalid length. [ 435.557737][T23045] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 435.572674][T23048] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4892'. [ 435.636137][T23055] veth1_to_bond: entered allmulticast mode [ 435.643365][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.652497][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.662342][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.662422][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4893'. [ 435.672595][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.686660][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.694928][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.706957][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.716862][T23056] veth1_to_bond: left allmulticast mode [ 435.724669][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.842033][T23055] bond0: (slave bond_slave_1): Releasing backup interface [ 435.915426][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.936564][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.962201][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.974258][T23045] hsr0 speed is unknown, defaulting to 1000 [ 435.984659][T23045] hsr0 speed is unknown, defaulting to 1000 [ 436.160493][T23067] syzkaller1: entered promiscuous mode [ 436.166178][T23067] syzkaller1: entered allmulticast mode [ 436.177613][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4898'. [ 436.255934][T23071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4900'. [ 436.385796][T23076] tipc: Enabled bearer , priority 0 [ 436.405408][T23076] syzkaller0: entered promiscuous mode [ 436.415576][T23076] syzkaller0: entered allmulticast mode [ 436.433885][T23076] tipc: Resetting bearer [ 436.570333][T23085] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4905'. [ 436.571875][T23087] tipc: Resetting bearer [ 436.661540][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4907'. [ 436.681365][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4907'. [ 436.804607][T23093] tipc: Started in network mode [ 436.810479][T23093] tipc: Node identity 0900000000000000ffffffffffffffff, cluster identity 4711 [ 436.824696][T23093] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.025520][T15861] tipc: Resetting bearer [ 437.163547][T23113] netlink: 'syz.8.4914': attribute type 21 has an invalid length. [ 437.175042][T23113] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4914'. [ 437.187648][T23112] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4915'. [ 437.283421][T23117] netlink: 'syz.8.4917': attribute type 1 has an invalid length. [ 437.315794][T23117] netlink: 'syz.8.4917': attribute type 11 has an invalid length. [ 437.978912][T23156] sctp: [Deprecated]: syz.8.4929 (pid 23156) Use of int in max_burst socket option deprecated. [ 437.978912][T23156] Use struct sctp_assoc_value instead [ 438.005188][T23156] nbd: must specify a size in bytes for the device [ 439.278061][T23202] netlink: 'syz.9.4942': attribute type 1 has an invalid length. [ 439.295790][T23202] netlink: 'syz.9.4942': attribute type 4 has an invalid length. [ 440.190730][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.195522][T23230] __nla_validate_parse: 7 callbacks suppressed [ 440.195541][T23230] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4952'. [ 440.235022][T23230] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4952'. [ 440.474410][T23237] dvmrp0: entered allmulticast mode [ 440.740892][T23251] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4959'. [ 440.837749][ T5882] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 440.863353][ T5882] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 440.888244][ T5882] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 440.897199][ T5882] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 440.923929][ T5882] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.004554][T23251] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4959'. [ 441.144475][T23253] lo speed is unknown, defaulting to 1000 [ 441.171902][T23253] hsr0 speed is unknown, defaulting to 1000 [ 441.458256][T23273] netlink: 'syz.1.4965': attribute type 83 has an invalid length. [ 441.523891][T23253] chnl_net:caif_netlink_parms(): no params data found [ 441.596878][T23277] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 441.680833][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4967'. [ 441.727912][T23282] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4967'. [ 441.745667][T23253] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.756237][T23253] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.770145][T23253] bridge_slave_0: entered allmulticast mode [ 441.783438][T23253] bridge_slave_0: entered promiscuous mode [ 441.797204][T15023] tipc: Subscription rejected, illegal request [ 441.802752][T23253] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.823829][T23253] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.834517][T23253] bridge_slave_1: entered allmulticast mode [ 441.851865][T23253] bridge_slave_1: entered promiscuous mode [ 441.937547][T23253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.957915][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4969'. [ 441.965774][T23253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.075301][T23253] team0: Port device team_slave_0 added [ 442.117318][T23253] team0: Port device team_slave_1 added [ 442.198103][T23253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.215616][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.252096][T23253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.268756][T23253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.298748][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.327816][T23253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.381021][T23303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.392781][T23310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.411135][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4975'. [ 442.477408][T23253] hsr_slave_0: entered promiscuous mode [ 442.485744][T23253] hsr_slave_1: entered promiscuous mode [ 442.493490][T23253] debugfs: 'hsr0' already exists in 'hsr' [ 442.501222][T23253] Cannot create hsr debugfs directory [ 442.850981][T23331] IPVS: set_ctl: invalid protocol: 137 172.20.20.12:20001 [ 442.982503][ T5876] Bluetooth: hci10: command tx timeout [ 443.497640][T23354] netlink: 212388 bytes leftover after parsing attributes in process `syz.8.4988'. [ 443.518010][T23354] openvswitch: netlink: Message has 5 unknown bytes. [ 443.548616][T23253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.825998][T23253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.127805][T23253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.266487][T23387] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 444.396745][T23253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.480068][T23389] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 444.781639][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4999'. [ 444.911583][T23253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.972035][T23253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.004519][T23253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.043001][T23253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.062466][ T5876] Bluetooth: hci10: command tx timeout [ 445.233911][T23433] __nla_validate_parse: 2 callbacks suppressed [ 445.233929][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5003'. [ 445.465459][T23253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.518702][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.557703][T15861] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.564964][T15861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.632689][T15861] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.639922][T15861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.808152][T23449] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20004 [ 445.901361][T23453] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.115085][T23460] !: renamed from dummy0 (while UP) [ 446.150805][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5014'. [ 446.162240][T23468] netlink: 'syz.1.5015': attribute type 39 has an invalid length. [ 446.441685][T23253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.786961][T23505] netem: change failed [ 446.868894][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5027'. [ 446.882084][T23508] netlink: 'syz.7.5027': attribute type 1 has an invalid length. [ 446.894182][T23508] netlink: 'syz.7.5027': attribute type 1 has an invalid length. [ 446.903578][T23508] netlink: 'syz.7.5027': attribute type 2 has an invalid length. [ 446.915000][T23508] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5027'. [ 447.041991][T23253] veth0_vlan: entered promiscuous mode [ 447.061793][T23253] veth1_vlan: entered promiscuous mode [ 447.114301][T23253] veth0_macvtap: entered promiscuous mode [ 447.134955][T23253] veth1_macvtap: entered promiscuous mode [ 447.142478][ T5876] Bluetooth: hci10: command tx timeout [ 447.197003][T23253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.217687][T23253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.257253][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.294079][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.328432][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.343702][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5029'. [ 447.354822][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.544760][T15838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.580423][T15838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.656680][T15861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.665993][T15861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.720904][T23532] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5033'. [ 448.618051][T23549] netem: change failed [ 448.754199][T23552] netlink: 'syz.4.4949': attribute type 18 has an invalid length. [ 448.760882][T23553] netlink: 'syz.9.5039': attribute type 3 has an invalid length. [ 448.851481][T23553] netlink: 216 bytes leftover after parsing attributes in process `syz.9.5039'. [ 448.863001][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5039'. [ 449.105754][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 449.154432][T23570] macvtap1: entered allmulticast mode [ 449.180211][T23570] veth0_macvtap: entered allmulticast mode [ 449.219870][ T5876] Bluetooth: hci10: command tx timeout [ 449.302300][T23593] netlink: 'syz.7.5052': attribute type 10 has an invalid length. [ 449.318973][T23593] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5052'. [ 449.412535][T23593] team0: Port device geneve0 added [ 449.976938][T23619] bond0: (slave bridge_slave_1): Releasing backup interface [ 450.007810][T23619] tipc: Resetting bearer [ 450.260801][T23632] team_slave_0: entered allmulticast mode [ 450.260896][T23633] sctp: [Deprecated]: syz.8.5064 (pid 23633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.260896][T23633] Use struct sctp_sack_info instead [ 450.311264][T23637] __nla_validate_parse: 1 callbacks suppressed [ 450.311283][T23637] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5064'. [ 450.315721][T23633] sctp: [Deprecated]: syz.8.5064 (pid 23633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.315721][T23633] Use struct sctp_sack_info instead [ 450.524883][T23640] nbd2: detected capacity change from 0 to 127 [ 450.545206][ T5876] block nbd2: Receive control failed (result -32) [ 450.743112][T23656] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5070'. [ 450.850916][T23662] tipc: Started in network mode [ 450.869711][T23662] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 450.945641][T23662] tipc: Enabled bearer , priority 10 [ 451.150052][T23662] netlink: 'syz.7.5073': attribute type 1 has an invalid length. [ 451.432375][T23685] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 451.831522][T23698] team0 (unregistering): Port device team_slave_0 removed [ 451.849500][T23698] team0 (unregistering): Port device team_slave_1 removed [ 451.874727][T23698] team0 (unregistering): Port device geneve0 removed [ 451.930603][ T5867] tipc: Node number set to 4269801492 [ 452.024200][T23710] delete_channel: no stack [ 452.155119][T23716] netlink: 'syz.8.5091': attribute type 1 has an invalid length. [ 452.165140][T23717] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5089'. [ 452.180393][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 452.207618][T23717] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5089'. [ 452.258433][T23717] netlink: 'syz.7.5089': attribute type 6 has an invalid length. [ 452.289848][T23717] netlink: 'syz.7.5089': attribute type 5 has an invalid length. [ 452.297627][T23717] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5089'. [ 452.332311][T23716] netlink: 'syz.8.5091': attribute type 1 has an invalid length. [ 452.686168][T23736] netlink: 576 bytes leftover after parsing attributes in process `syz.7.5096'. [ 452.824405][T23741] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 452.884844][T23745] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 452.970387][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5102'. [ 453.178185][T23763] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5105'. [ 453.250720][T23767] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.5108'. [ 453.264291][T15861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.293367][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.304775][T15861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.518997][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.537376][T23788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.577387][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.864432][T23811] vcan0: MTU too low for tipc bearer [ 453.874647][T23811] tipc: Enabling of bearer rejected, failed to enable media [ 453.921963][T23811] netlink: 'syz.4.5119': attribute type 2 has an invalid length. [ 454.187171][T23829] netlink: 'syz.4.5124': attribute type 6 has an invalid length. [ 454.207551][T23829] netlink: 'syz.4.5124': attribute type 7 has an invalid length. [ 454.224074][T23829] netlink: 'syz.4.5124': attribute type 8 has an invalid length. [ 454.384237][T23836] IPVS: Error joining to the multicast group [ 454.387746][T23840] syz.8.5127: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.407988][T23840] CPU: 0 UID: 0 PID: 23840 Comm: syz.8.5127 Not tainted syzkaller #0 PREEMPT(full) [ 454.408016][T23840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.408028][T23840] Call Trace: [ 454.408035][T23840] [ 454.408044][T23840] dump_stack_lvl+0x189/0x250 [ 454.408074][T23840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.408096][T23840] ? __pfx__printk+0x10/0x10 [ 454.408120][T23840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.408142][T23840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.408165][T23840] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 454.408190][T23840] warn_alloc+0x214/0x310 [ 454.408242][T23840] ? stack_depot_save_flags+0x40/0x860 [ 454.408271][T23840] ? __pfx_warn_alloc+0x10/0x10 [ 454.408298][T23840] ? kasan_save_track+0x4f/0x80 [ 454.408321][T23840] ? xskq_create+0x56/0x170 [ 454.408338][T23840] ? xsk_init_queue+0xb0/0x110 [ 454.408360][T23840] ? xsk_setsockopt+0x4dc/0x8d0 [ 454.408383][T23840] ? do_sock_setsockopt+0x17c/0x1b0 [ 454.408403][T23840] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 454.408421][T23840] ? do_syscall_64+0xfa/0x3b0 [ 454.408440][T23840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.408467][T23840] __vmalloc_node_range_noprof+0x125/0x12f0 [ 454.408524][T23840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.408556][T23840] ? __kasan_kmalloc+0x93/0xb0 [ 454.408582][T23840] vmalloc_user_noprof+0xad/0xf0 [ 454.408605][T23840] ? xskq_create+0xbf/0x170 [ 454.408623][T23840] xskq_create+0xbf/0x170 [ 454.408644][T23840] xsk_init_queue+0xb0/0x110 [ 454.408666][T23840] xsk_setsockopt+0x4dc/0x8d0 [ 454.408694][T23840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 454.408719][T23840] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.408748][T23840] ? aa_sock_opt_perm+0xff/0x1b0 [ 454.408770][T23840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 454.408788][T23840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 454.408814][T23840] do_sock_setsockopt+0x17c/0x1b0 [ 454.408841][T23840] __x64_sys_setsockopt+0x13f/0x1b0 [ 454.408866][T23840] do_syscall_64+0xfa/0x3b0 [ 454.408884][T23840] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.408902][T23840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.408924][T23840] ? clear_bhb_loop+0x60/0xb0 [ 454.408946][T23840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.408964][T23840] RIP: 0033:0x7f940df8eec9 [ 454.408982][T23840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.408997][T23840] RSP: 002b:00007f940ee33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.409017][T23840] RAX: ffffffffffffffda RBX: 00007f940e1e5fa0 RCX: 00007f940df8eec9 [ 454.409030][T23840] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 454.409040][T23840] RBP: 00007f940e011f91 R08: 0000000000000004 R09: 0000000000000000 [ 454.409049][T23840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.409058][T23840] R13: 00007f940e1e6038 R14: 00007f940e1e5fa0 R15: 00007ffd19c7dd18 [ 454.409090][T23840] [ 454.768148][T23840] Mem-Info: [ 454.777060][T23840] active_anon:5876 inactive_anon:0 isolated_anon:0 [ 454.777060][T23840] active_file:3268 inactive_file:40048 isolated_file:0 [ 454.777060][T23840] unevictable:768 dirty:93 writeback:0 [ 454.777060][T23840] slab_reclaimable:13806 slab_unreclaimable:138582 [ 454.777060][T23840] mapped:59894 shmem:1356 pagetables:1583 [ 454.777060][T23840] sec_pagetables:0 bounce:0 [ 454.777060][T23840] kernel_misc_reclaimable:0 [ 454.777060][T23840] free:1207311 free_pcp:13477 free_cma:0 [ 454.854397][T23840] Node 0 active_anon:23504kB inactive_anon:0kB active_file:13072kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:239576kB dirty:372kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17276kB pagetables:6184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 454.888526][T23840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 454.941234][T23840] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.059863][T23840] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 455.065694][T23840] Node 0 DMA32 free:923748kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23604kB inactive_anon:0kB active_file:13072kB inactive_file:158432kB unevictable:1536kB writepending:368kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:38932kB local_pcp:19108kB free_cma:0kB [ 455.136888][T23840] lowmem_reserve[]: 0 0 1 1 1 [ 455.145722][T23840] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 455.321818][T23840] lowmem_reserve[]: 0 0 0 0 0 [ 455.326602][T23840] Node 1 Normal free:3890012kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15460kB local_pcp:9204kB free_cma:0kB [ 455.392144][T23869] __nla_validate_parse: 8 callbacks suppressed [ 455.392163][T23869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5137'. [ 455.419809][T23840] lowmem_reserve[]: 0 0 0 0 0 [ 455.426398][T23840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.479270][T23840] Node 0 DMA32: 728*4kB (UME) 349*8kB (UM) 50*16kB (UM) 134*32kB (UME) 68*64kB (UME) 20*128kB (UME) 12*256kB (UM) 4*512kB (UM) 60*1024kB (UM) 3*2048kB (M) 203*4096kB (M) = 921896kB [ 455.562283][T23840] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 455.613315][T23840] Node 1 Normal: 171*4kB (UE) 30*8kB (UME) 38*16kB (UME) 129*32kB (UME) 37*64kB (UME) 6*128kB (UME) 7*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3890012kB [ 455.671277][T23840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.712754][T23840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.736000][T23840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.762705][T23840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.817533][T23840] 46946 total pagecache pages [ 455.826401][T23840] 0 pages in swap cache [ 455.839295][T23840] Free swap = 124996kB [ 455.845374][T23840] Total swap = 124996kB [ 455.864323][T23840] 2097051 pages RAM [ 455.870370][T23840] 0 pages HighMem/MovableOnly [ 455.876794][T23878] netlink: 'syz.1.5138': attribute type 58 has an invalid length. [ 455.897278][T23840] 425672 pages reserved [ 455.901870][T23840] 0 pages cma reserved [ 455.909778][T23878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5138'. [ 456.213880][T23889] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 456.241657][T23890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 456.358891][T23898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5147'. [ 456.516243][T23911] sock: sock_timestamping_bind_phc: sock not bind to device [ 456.576209][T23912] tipc: Started in network mode [ 456.584366][T23912] tipc: Node identity 329f35439bce, cluster identity 4711 [ 456.593877][T23912] tipc: Enabled bearer , priority 0 [ 456.612685][T23912] syzkaller0: entered promiscuous mode [ 456.621332][T23912] syzkaller0: entered allmulticast mode [ 456.705154][T23912] tipc: Resetting bearer [ 456.714480][T23912] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.5150'. [ 456.738155][T23910] tipc: Resetting bearer [ 456.794262][T23910] tipc: Disabling bearer [ 456.830056][T23917] netlink: 'syz.1.5152': attribute type 1 has an invalid length. [ 456.941558][T23917] 8021q: adding VLAN 0 to HW filter on device bond10 [ 457.068178][T23929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 457.112185][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5154'. [ 457.219284][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.514825][T23949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5162'. [ 457.653523][T23960] netlink: 'syz.1.5165': attribute type 10 has an invalid length. [ 457.692577][T23967] netlink: 'syz.9.5167': attribute type 1 has an invalid length. [ 457.803383][T23967] bond2: entered promiscuous mode [ 457.812479][T23973] netlink: 'syz.1.5168': attribute type 12 has an invalid length. [ 457.833389][T23967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.906520][T23971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.918820][T23971] bond2: (slave bond3): making interface the new active one [ 457.938845][T23971] bond3: entered promiscuous mode [ 457.964617][T23971] bond2: (slave bond3): Enslaving as an active interface with an up link [ 458.316750][T23985] syzkaller1: entered promiscuous mode [ 458.344725][T23985] syzkaller1: entered allmulticast mode [ 458.790731][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5179'. [ 458.818739][T24007] netlink: 'syz.4.5180': attribute type 1 has an invalid length. [ 458.844444][T24007] netlink: 'syz.4.5180': attribute type 1 has an invalid length. [ 458.947321][T24012] tipc: Resetting bearer [ 459.100065][ T5987] IPVS: starting estimator thread 0... [ 459.107708][T24011] tipc: Resetting bearer [ 459.222145][T24021] IPVS: using max 30 ests per chain, 72000 per kthread [ 459.327836][T24031] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5190'. [ 459.343497][T24032] netlink: 'syz.1.5189': attribute type 1 has an invalid length. [ 459.423385][T24032] 8021q: adding VLAN 0 to HW filter on device bond11 [ 459.463288][T24042] netlink: 'syz.9.5192': attribute type 1 has an invalid length. [ 459.474999][T24032] veth11: entered promiscuous mode [ 459.532717][T24032] bond11: (slave veth11): Enslaving as an active interface with an up link [ 459.545394][T24050] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5192'. [ 459.561249][T24055] sit0: entered promiscuous mode [ 459.580768][T24055] netlink: 'syz.7.5195': attribute type 1 has an invalid length. [ 459.641921][T24042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.683425][T15840] tipc: Resetting bearer [ 459.903844][T24063] veth3: entered allmulticast mode [ 459.920499][T24061] bridge_slave_1: left allmulticast mode [ 459.926348][T24061] bridge_slave_1: left promiscuous mode [ 459.933477][T24061] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.963426][T24061] bridge_slave_0: left allmulticast mode [ 459.971272][T24061] bridge_slave_0: left promiscuous mode [ 459.977910][T24061] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.083847][T24067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.144488][T24067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.266384][T24071] geneve2: entered promiscuous mode [ 460.275404][T24071] geneve2: entered allmulticast mode [ 460.395996][T24075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.408750][T24075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.444828][T15023] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 460.455266][T15023] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 460.493793][T15860] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 460.630668][T24103] __nla_validate_parse: 4 callbacks suppressed [ 460.630686][T24103] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5206'. [ 460.767391][T24109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5208'. [ 460.825356][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 460.896367][T24114] netlink: 'syz.9.5211': attribute type 29 has an invalid length. [ 460.907901][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 460.917914][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 460.931563][T24112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5210'. [ 460.988410][T24114] netlink: 'syz.9.5211': attribute type 29 has an invalid length. [ 461.254178][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5215'. [ 461.487562][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 461.625652][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5223'. [ 461.698267][T24154] : entered promiscuous mode [ 461.788409][T24154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.825080][T24155] bond1: (slave geneve2): making interface the new active one [ 461.863902][T24155] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 462.080188][T24075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.112174][T24075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.145919][T24075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 462.356865][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 462.465655][T24075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.499294][T24075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.526572][T24075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 462.555257][T24188] erspan0: entered promiscuous mode [ 462.584104][T24188] gretap0: entered promiscuous mode [ 462.591706][T24188] debugfs: '' already exists in 'hsr' [ 462.597361][T24188] Cannot create hsr debugfs directory [ 462.603377][T24188] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 462.617354][T24188] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 462.723788][T24075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.745437][T24075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.762349][T24075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 462.927329][T15838] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.947310][T15838] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 462.967576][T15838] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.016660][T15838] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.040983][T15838] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 463.050170][T15838] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.079359][T15838] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.088382][T15838] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 463.127248][T15838] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.177792][T15838] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.207875][T15838] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 463.240450][T15838] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.338265][T24233] lo speed is unknown, defaulting to 1000 [ 463.367388][T24233] hsr0 speed is unknown, defaulting to 1000 [ 463.519294][T24241] netlink: zone id is out of range [ 463.639676][T24248] validate_nla: 6 callbacks suppressed [ 463.639695][T24248] netlink: 'syz.8.5250': attribute type 1 has an invalid length. [ 463.911054][T24261] netlink: 'syz.8.5253': attribute type 10 has an invalid length. [ 463.926016][T24260] sctp: [Deprecated]: syz.7.5257 (pid 24260) Use of int in maxseg socket option. [ 463.926016][T24260] Use struct sctp_assoc_value instead [ 464.076052][T24261] team0: Device veth1_macvtap failed to register rx_handler [ 464.214056][T24275] netlink: 'syz.9.5260': attribute type 21 has an invalid length. [ 464.280353][T24275] syzkaller1: entered promiscuous mode [ 464.292793][T24275] syzkaller1: entered allmulticast mode [ 464.331273][T24275] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.411153][T24281] tipc: Enabled bearer , priority 0 [ 464.545229][T24280] tipc: Disabling bearer [ 464.644297][T24294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.033743][T24310] openvswitch: netlink: Message has 5 unknown bytes. [ 465.046873][T24316] netlink: 'syz.7.5275': attribute type 21 has an invalid length. [ 465.060677][T24316] netlink: 'syz.7.5275': attribute type 22 has an invalid length. [ 465.070908][T24316] netlink: 'syz.7.5275': attribute type 23 has an invalid length. [ 465.078838][T24316] netlink: 'syz.7.5275': attribute type 25 has an invalid length. [ 465.086890][T24316] netlink: 'syz.7.5275': attribute type 26 has an invalid length. [ 465.139396][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.634858][T24312] bridge_slave_0: left allmulticast mode [ 465.643253][T24312] bridge_slave_0: left promiscuous mode [ 465.651406][T24312] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.683409][T24312] bond0: (slave bond_slave_0): Releasing backup interface [ 465.715805][T24312] bond0: (slave bond_slave_1): Releasing backup interface [ 465.747467][T24312] team_slave_0: left allmulticast mode [ 465.756733][T24312] team0: Port device team_slave_0 removed [ 465.798997][T24312] team0: Port device team_slave_1 removed [ 465.812946][T24312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.843614][T24312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.869852][T24312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.887917][T24312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.213585][T24312] veth3: left allmulticast mode [ 466.245918][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.279213][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.336033][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.369196][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.452249][T24358] __nla_validate_parse: 21 callbacks suppressed [ 466.452270][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 466.540263][T24360] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.615815][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5281'. [ 466.661644][T24357] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5281'. [ 466.742598][T24357] netlink: 14552 bytes leftover after parsing attributes in process `syz.8.5281'. [ 467.301268][T24413] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 467.336633][T24413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.381749][T24413] veth3: entered promiscuous mode [ 467.403343][T24413] bond2: (slave veth3): Enslaving as an active interface with an up link [ 467.453193][T24424] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 468.165711][T24445] bond5 (unregistering): Released all slaves [ 468.213803][T24450] xt_l2tp: v2 sid > 0xffff: 1114112 [ 468.268702][T24453] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 468.382867][T24459] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.516264][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5317'. [ 468.526087][T24471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.643154][T24471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.835341][T24495] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 468.883677][T24499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5323'. [ 468.904022][T24499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5323'. [ 469.001795][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5325'. [ 469.013380][T24509] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5325'. [ 469.031183][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5325'. [ 469.210322][T24508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.533061][T24533] netlink: 'syz.1.5335': attribute type 2 has an invalid length. [ 469.838964][T24543] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 469.857831][T24543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.166841][T24566] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 470.181253][T24566] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 470.573871][T24585] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 470.716611][T24594] vxcan1: tx address claim with dlc 1 [ 470.809010][T24600] netlink: 'syz.7.5356': attribute type 2 has an invalid length. [ 470.948489][T24604] Unsupported ieee802154 address type: 0 [ 471.171799][T24608] syzkaller0: entered promiscuous mode [ 471.203452][T24608] syzkaller0: entered allmulticast mode [ 474.240726][T24629] tipc: Enabling of bearer rejected, already enabled [ 474.401043][T24656] __nla_validate_parse: 16 callbacks suppressed [ 474.401061][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 474.418881][T24656] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 474.430770][T24656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.849419][T24679] tipc: Resetting bearer [ 474.868518][T24679] tipc: Enabling of bearer rejected, already enabled [ 474.898991][T24678] tipc: Resetting bearer [ 475.104634][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 475.128303][T24695] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 475.158702][T24695] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 475.168288][T24695] gretap1: entered promiscuous mode [ 475.171907][T24697] netlink: 'syz.9.5383': attribute type 2 has an invalid length. [ 475.186637][T24695] gretap1: entered allmulticast mode [ 475.192572][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5383'. [ 475.208015][T24697] openvswitch: netlink: Actions may not be safe on all matching packets [ 475.254943][ T7478] tipc: Resetting bearer [ 475.546032][T24710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5389'. [ 475.607404][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 475.981907][T24736] lo speed is unknown, defaulting to 1000 [ 475.991661][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5395'. [ 476.025243][T24739] veth1_macvtap: left promiscuous mode [ 476.134640][T24736] hsr0 speed is unknown, defaulting to 1000 [ 476.446821][T24756] netlink: 'syz.1.5401': attribute type 13 has an invalid length. [ 476.501628][T24756] tipc: Resetting bearer [ 476.624600][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5403'. [ 476.723476][T24767] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5405'. [ 476.740149][ T5876] Bluetooth: hci10: command tx timeout [ 476.802346][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5405'. [ 476.964348][T24778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5406'. [ 477.482838][T24804] netlink: 'syz.1.5415': attribute type 11 has an invalid length. [ 477.653618][T24797] team0 (unregistering): Port device team_slave_0 removed [ 477.686248][T24797] team0 (unregistering): Port device team_slave_1 removed [ 478.666074][T24853] vlan2: entered promiscuous mode [ 478.673515][T24853] bridge0: entered promiscuous mode [ 478.751028][T24860] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 479.307335][T24879] tipc: Started in network mode [ 479.320211][T24879] tipc: Node identity 0637bc9db56b, cluster identity 4711 [ 479.354216][T24879] tipc: Enabled bearer , priority 0 [ 479.363345][T24886] netlink: 'syz.7.5434': attribute type 1 has an invalid length. [ 479.372833][T24882] syzkaller0: entered promiscuous mode [ 479.378433][T24882] syzkaller0: entered allmulticast mode [ 479.400478][T24886] netlink: 'syz.7.5434': attribute type 1 has an invalid length. [ 479.446611][T24868] tipc: Resetting bearer [ 479.483267][T24867] tipc: Resetting bearer [ 479.546462][T24867] tipc: Disabling bearer [ 479.621246][T24897] lo speed is unknown, defaulting to 1000 [ 479.646897][T24897] hsr0 speed is unknown, defaulting to 1000 [ 479.787731][T24909] erspan0: entered promiscuous mode [ 479.805787][T24909] erspan0: entered allmulticast mode [ 479.941547][T24919] tipc: Enabled bearer , priority 12 [ 480.171165][T24929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.187925][T24929] tipc: Resetting bearer [ 480.250108][T24929] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 480.304589][T24928] tipc: Resetting bearer [ 480.380494][T24940] netlink: zone id is out of range [ 480.392204][T24940] netlink: del zone limit has 4 unknown bytes [ 480.420293][T24939] netlink: 'syz.9.5449': attribute type 4 has an invalid length. [ 480.583390][T24949] netlink: 'syz.4.5453': attribute type 11 has an invalid length. [ 480.722898][T24961] netlink: 'syz.4.5458': attribute type 10 has an invalid length. [ 480.738365][T24961] __nla_validate_parse: 12 callbacks suppressed [ 480.738679][T24961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5458'. [ 480.790298][T15840] tipc: Resetting bearer [ 480.821583][T24961] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 480.839692][T24961] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 480.854847][T24961] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 480.914563][T24974] lo: Caught tx_queue_len zero misconfig [ 480.924446][T24974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5460'. [ 481.061154][T24345] tipc: Node number set to 2840671555 [ 481.172833][T24986] netlink: 'syz.1.5464': attribute type 1 has an invalid length. [ 481.195804][T24986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5464'. [ 481.210237][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5464'. [ 481.221755][T24988] netlink: 'syz.4.5465': attribute type 83 has an invalid length. [ 481.505768][T25007] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 481.518835][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5472'. [ 481.565819][T25007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5472'. [ 481.698830][T25014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.043599][T25034] netlink: 'syz.4.5479': attribute type 21 has an invalid length. [ 482.064915][T25034] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5479'. [ 482.095807][T25039] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 482.407532][T25055] netlink: 'syz.9.5487': attribute type 12 has an invalid length. [ 482.484305][T25058] netlink: 'syz.9.5488': attribute type 22 has an invalid length. [ 482.494443][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5488'. [ 482.528109][T25058] netlink: 'syz.9.5488': attribute type 22 has an invalid length. [ 482.533228][ T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.550731][ T7478] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.561266][ T7478] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.563916][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5488'. [ 482.586379][ T7478] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.598095][T25060] lo: Caught tx_queue_len zero misconfig [ 482.605122][T25060] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.5489'. [ 482.625357][T25060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 482.715813][T25062] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 482.738072][T25062] netlink: 'syz.9.5490': attribute type 6 has an invalid length. [ 483.149726][T25087] tipc: Resetting bearer [ 484.041667][ T5882] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 484.053338][ T5882] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 484.062048][ T5882] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 484.074828][ T5882] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 484.084037][ T5882] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 484.123339][T25134] lo speed is unknown, defaulting to 1000 [ 484.132565][T25134] hsr0 speed is unknown, defaulting to 1000 [ 484.442741][T25141] xfrm1: entered allmulticast mode [ 484.520203][T25146] syzkaller1: entered promiscuous mode [ 484.525742][T25146] syzkaller1: entered allmulticast mode [ 484.596430][T25134] chnl_net:caif_netlink_parms(): no params data found [ 484.961106][T25134] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.988991][T25134] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.003898][T25134] bridge_slave_0: entered allmulticast mode [ 485.014543][T25134] bridge_slave_0: entered promiscuous mode [ 485.029814][T25134] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.041496][T25134] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.049744][T25134] bridge_slave_1: entered allmulticast mode [ 485.056938][T25134] bridge_slave_1: entered promiscuous mode [ 485.141664][T25134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.167598][T25134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.323770][T25134] team0: Port device team_slave_0 added [ 485.337115][T25186] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.358160][T25134] team0: Port device team_slave_1 added [ 485.582665][T25134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.608084][T25134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.636401][T25134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.667362][T25134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.675282][T25134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.706664][T25134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.863884][T25134] hsr_slave_0: entered promiscuous mode [ 485.894088][T25134] hsr_slave_1: entered promiscuous mode [ 485.908021][T25134] debugfs: 'hsr0' already exists in 'hsr' [ 485.945298][T25134] Cannot create hsr debugfs directory [ 486.177873][T25218] __nla_validate_parse: 8 callbacks suppressed [ 486.177889][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'. [ 486.200014][ T5876] Bluetooth: hci11: command tx timeout [ 486.847133][T15861] bond4 (unregistering): (slave gretap2): Releasing active interface [ 487.427493][T15861] bond0 (unregistering): Released all slaves [ 487.606608][T15861] bond1 (unregistering): Released all slaves [ 487.623639][T15861] bond2 (unregistering): Released all slaves [ 487.638896][T15861] bond3 (unregistering): Released all slaves [ 487.814070][T15861] bond4 (unregistering): Released all slaves [ 487.834101][T15861] bond5 (unregistering): Released all slaves [ 487.982700][T15861] bond6 (unregistering): Released all slaves [ 487.999008][T15861] bond7 (unregistering): (slave bond8): Releasing backup interface [ 488.009999][T15861] bond7 (unregistering): Released all slaves [ 488.184950][T15861] bond8 (unregistering): Released all slaves [ 488.208230][T25228] kthread_run failed with err -4 [ 488.265529][ T5876] Bluetooth: hci11: command tx timeout [ 488.434204][T15861] tipc: Left network mode [ 488.843741][T25134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.868462][T25134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 489.107034][T25134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.130484][T25134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 489.187487][T15861] veth1_macvtap: left promiscuous mode [ 489.200204][T15861] veth0_macvtap: left promiscuous mode [ 489.213997][T15861] veth1_vlan: left promiscuous mode [ 489.428177][T15861] pim6reg (unregistering): left allmulticast mode [ 490.360985][ T5876] Bluetooth: hci11: command tx timeout [ 490.638242][T25134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.687083][T25134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.850127][T25280] lo: entered promiscuous mode [ 490.890061][T25280] validate_nla: 1 callbacks suppressed [ 490.890080][T25280] netlink: 'syz.4.5551': attribute type 2 has an invalid length. [ 490.917246][T25280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.057072][T25134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.089359][T25134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 491.122112][T25282] team0: Caught tx_queue_len zero misconfig [ 491.277541][T25299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5557'. [ 491.376841][T15861] IPVS: stop unused estimator thread 0... [ 491.429388][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5557'. [ 491.591957][T25134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.615819][T25134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.651259][T25313] netlink: 'syz.7.5562': attribute type 1 has an invalid length. [ 491.659024][T25313] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5562'. [ 491.728885][T25134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 491.771083][T25134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.903184][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5565'. [ 491.942115][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5565'. [ 491.970528][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5565'. [ 492.058102][T25329] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5565'. [ 492.068539][T25134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.143306][T25329] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5565'. [ 492.202862][T25134] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.266787][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.274026][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.357800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.365112][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.420441][ T5876] Bluetooth: hci11: command tx timeout [ 492.461267][T25134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.472223][T25134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.689396][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5576'. [ 492.755521][T25376] netlink: 'syz.1.5575': attribute type 1 has an invalid length. [ 492.969352][T25134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.004282][T25383] bridge1: entered promiscuous mode [ 493.144883][T25134] veth0_vlan: entered promiscuous mode [ 493.170904][T25394] netlink: 'syz.1.5581': attribute type 1 has an invalid length. [ 493.184894][T25134] veth1_vlan: entered promiscuous mode [ 493.195834][T25394] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 493.307153][T25134] veth0_macvtap: entered promiscuous mode [ 493.328101][T25134] veth1_macvtap: entered promiscuous mode [ 493.363024][T25134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.402586][T25134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.438860][T15838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.463777][T15838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.504496][T15838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.517659][T15838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.427045][T15838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.467012][T15838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.503257][ T5876] Bluetooth: hci11: command tx timeout [ 494.627276][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5593'. [ 494.691334][T15838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.750010][T15838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.835748][T25453] nbd: must specify an index to disconnect [ 494.885536][T25452] netlink: 'syz.9.5597': attribute type 4 has an invalid length. [ 495.008286][T25459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.443503][T25473] syzkaller0: entered promiscuous mode [ 495.492508][T25473] syzkaller0: entered allmulticast mode [ 495.546552][T25475] tipc: Enabled bearer , priority 0 [ 495.579632][T25484] º: renamed from veth1_vlan (while UP) [ 495.631236][T25473] tipc: Resetting bearer [ 495.708229][T25472] tipc: Resetting bearer [ 495.930991][ T5882] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 495.951225][ T5882] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 495.961116][ T5882] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 495.978963][ T5882] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 495.988356][ T5882] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 496.458716][T25512] netlink: 'syz.9.5617': attribute type 10 has an invalid length. [ 496.468274][T25512] __nla_validate_parse: 3 callbacks suppressed [ 496.468292][T25512] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5617'. [ 498.102949][ T5882] Bluetooth: hci12: command tx timeout [ 499.215563][T25472] tipc: Disabling bearer [ 499.248922][T25512] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 499.260564][T25512] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 499.276048][T25512] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 499.343082][T25536] netlink: 'syz.9.5624': attribute type 1 has an invalid length. [ 499.428246][T25536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.465760][T25546] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5626'. [ 499.537557][T25538] bond5: (slave geneve2): making interface the new active one [ 499.614774][T25538] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 499.745994][T25494] lo speed is unknown, defaulting to 1000 [ 499.782527][T25494] hsr0 speed is unknown, defaulting to 1000 [ 500.180894][ T5882] Bluetooth: hci12: command tx timeout [ 500.805821][T25494] chnl_net:caif_netlink_parms(): no params data found [ 500.842349][T25601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5634'. [ 501.112178][T25494] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.113816][T25612] netlink: 'syz.2.5636': attribute type 1 has an invalid length. [ 501.128429][T25494] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.136101][T25494] bridge_slave_0: entered allmulticast mode [ 501.146072][T25494] bridge_slave_0: entered promiscuous mode [ 501.156193][T25494] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.164040][T25494] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.172463][T25494] bridge_slave_1: entered allmulticast mode [ 501.180987][T25494] bridge_slave_1: entered promiscuous mode [ 501.233354][T25494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.322671][T25494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.473123][T25494] team0: Port device team_slave_0 added [ 501.504065][T25494] team0: Port device team_slave_1 added [ 501.627653][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.641822][T25631] tipc: Enabled bearer , priority 0 [ 501.658344][T25494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.707669][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.838144][T25494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.855974][T25626] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 501.870355][T25626] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 501.883987][T25494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.899849][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.946710][T25494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.991993][T25646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5644'. [ 502.164390][T25652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.202051][T25494] hsr_slave_0: entered promiscuous mode [ 502.239962][T25494] hsr_slave_1: entered promiscuous mode [ 502.260498][ T5882] Bluetooth: hci12: command tx timeout [ 502.271856][T25494] debugfs: 'hsr0' already exists in 'hsr' [ 502.277636][T25494] Cannot create hsr debugfs directory [ 502.696158][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5656'. [ 502.707381][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5656'. [ 502.760135][ T5873] tipc: Node number set to 3009199261 [ 502.917187][T25494] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 503.068979][T25697] netlink: 'syz.4.5662': attribute type 62 has an invalid length. [ 503.443320][T25494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.485317][T25494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.523343][T25494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.572628][T25494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.002940][T25753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5677'. [ 504.068021][T25494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.107334][T25494] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.171800][T15861] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.179071][T15861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.213004][T15861] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.220371][T15861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.269484][T25758] tipc: Enabled bearer , priority 10 [ 504.339979][ T5882] Bluetooth: hci12: command tx timeout [ 504.684137][T25779] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5682'. [ 504.774754][T25494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.895620][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5685'. [ 504.926367][T25785] bridge_slave_1: default FDB implementation only supports local addresses [ 504.986347][T25787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5686'. [ 505.022548][T25494] veth0_vlan: entered promiscuous mode [ 505.057316][T25494] veth1_vlan: entered promiscuous mode [ 505.148012][T25494] veth0_macvtap: entered promiscuous mode [ 505.174874][T25793] 8021q: VLANs not supported on ip6_vti0 [ 505.183538][T25494] veth1_macvtap: entered promiscuous mode [ 505.214649][T25494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.233151][T25791] netlink: 'syz.2.5688': attribute type 7 has an invalid length. [ 505.248190][T25494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.256957][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5688'. [ 505.283098][T15023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.309914][T15023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.348830][T15023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.359860][T15023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.393930][T25801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5691'. [ 505.434884][T25803] netlink: 'syz.2.5691': attribute type 2 has an invalid length. [ 505.524603][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5693'. [ 505.566580][ T7480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.592166][ T7480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.703221][T15023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.721238][T15023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.413599][T25840] netlink: 'syz.7.5702': attribute type 29 has an invalid length. [ 506.824184][T25870] netlink: 'syz.2.5711': attribute type 1 has an invalid length. [ 507.184644][T25889] ip6tnl0: Caught tx_queue_len zero misconfig [ 507.225112][T25882] __nla_validate_parse: 7 callbacks suppressed [ 507.225134][T25882] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5712'. [ 507.716851][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'. [ 507.813660][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5728'. [ 508.307822][T25932] vlan2: entered promiscuous mode [ 508.323166][T25932] vlan2: entered allmulticast mode [ 508.328482][T25932] hsr_slave_1: entered allmulticast mode [ 508.348090][T25930] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 508.484773][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5739'. [ 508.495264][T25953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.506796][T25956] netlink: 'syz.7.5740': attribute type 11 has an invalid length. [ 508.611357][T25953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.912625][T25977] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5747'. [ 509.105087][T25986] lo speed is unknown, defaulting to 1000 [ 509.124207][T25983] sock: sock_set_timeout: `syz.1.5748' (pid 25983) tries to set negative timeout [ 509.135774][T25986] hsr0 speed is unknown, defaulting to 1000 [ 509.283172][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5751'. [ 509.351536][T25991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5752'. [ 509.745841][T26012] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5756'. [ 509.946169][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5760'. [ 509.981645][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5760'. [ 510.077444][T26029] gretap0: entered promiscuous mode [ 510.098503][T24344] IPVS: starting estimator thread 0... [ 510.106120][T26032] IPVS: sed: FWM 3 0x00000003 - no destination available [ 510.117978][T26020] netlink: 'syz.4.5760': attribute type 28 has an invalid length. [ 510.133038][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 510.151075][T26020] netlink: 'syz.4.5760': attribute type 3 has an invalid length. [ 510.164192][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 510.198199][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 510.199304][ T5873] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 510.213663][T26036] IPVS: using max 37 ests per chain, 88800 per kthread [ 510.218505][T26020] 0ªî{X¹¦: renamed from gretap0 [ 510.253989][T26020] 0ªî{X¹¦: left promiscuous mode [ 510.279765][T26020] 0ªî{X¹¦: entered allmulticast mode [ 510.312327][T26020] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 510.464685][T26044] syzkaller1: entered promiscuous mode [ 510.489420][T26044] syzkaller1: entered allmulticast mode [ 510.643709][T26056] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 510.900116][ T5873] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 510.900846][T26071] netlink: 'syz.2.5776': attribute type 30 has an invalid length. [ 510.957828][T26071] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 510.982026][ T980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 511.010255][T26071] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 511.411598][T26094] tipc: Enabled bearer , priority 0 [ 511.423398][T26094] syzkaller0: entered promiscuous mode [ 511.428908][T26094] syzkaller0: entered allmulticast mode [ 511.535593][T26094] tipc: Resetting bearer [ 511.584965][T26093] tipc: Resetting bearer [ 511.635609][T26093] tipc: Disabling bearer [ 511.776541][T26119] netlink: 'syz.2.5795': attribute type 1 has an invalid length. [ 511.962123][T26129] netlink: 'syz.2.5796': attribute type 2 has an invalid length. [ 512.098192][T26137] nft_compat: unsupported protocol 0 [ 512.147855][T26138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.314266][T26148] __nla_validate_parse: 8 callbacks suppressed [ 512.314284][T26148] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.5802'. [ 512.597921][T26157] netlink: 'syz.2.5804': attribute type 7 has an invalid length. [ 512.726353][T26157] : entered promiscuous mode [ 512.734630][T26174] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 513.206052][T26184] netlink: 'syz.4.5810': attribute type 5 has an invalid length. [ 513.473550][T26208] netlink: 'syz.9.5816': attribute type 1 has an invalid length. [ 513.597412][T26208] veth3: entered promiscuous mode [ 513.698209][T26214] bridge0: entered promiscuous mode [ 513.714533][T26214] macsec1: entered promiscuous mode [ 513.728829][T26214] macsec1: entered allmulticast mode [ 513.750064][T26214] bridge0: entered allmulticast mode [ 514.099325][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 514.215535][T26234] netlink: ct family unspecified [ 514.241941][T26234] openvswitch: netlink: Actions may not be safe on all matching packets [ 514.481084][T26252] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5828'. [ 514.586058][T26257] netlink: 'syz.7.5829': attribute type 2 has an invalid length. [ 514.820300][T26272] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5834'. [ 514.912109][T26277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5837'. [ 514.925785][T26278] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5836'. [ 514.951863][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5837'. [ 515.517447][T26300] bridge11: entered promiscuous mode [ 515.552156][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5845'. [ 515.566456][T26300] bridge11: entered allmulticast mode [ 515.590726][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5845'. [ 515.787445][T26320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5848'. [ 515.917241][T26326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5850'. [ 516.312905][T26340] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.404869][T26340] bridge_slave_1 (unregistering): left allmulticast mode [ 516.427773][T26340] bridge_slave_1 (unregistering): left promiscuous mode [ 516.456728][T26340] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.573929][T26401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.656817][T26448] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 518.835734][T26454] __nla_validate_parse: 5 callbacks suppressed [ 518.835752][T26454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5893'. [ 518.953276][T26456] netlink: 'syz.9.5894': attribute type 14 has an invalid length. [ 518.963801][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5894'. [ 519.003351][T26456] netlink: 'syz.9.5894': attribute type 14 has an invalid length. [ 519.022646][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5894'. [ 519.068528][T26458] syzkaller1: entered promiscuous mode [ 519.088670][T26458] syzkaller1: entered allmulticast mode [ 519.106045][T26458] netlink: 'syz.2.5895': attribute type 9 has an invalid length. [ 519.237412][T26461] lo: entered promiscuous mode [ 519.252042][T26461] netlink: 'syz.9.5896': attribute type 2 has an invalid length. [ 519.263734][T26461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.558850][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5902'. [ 519.944241][T26504] netlink: 'syz.1.5911': attribute type 5 has an invalid length. [ 520.031732][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5912'. [ 520.564874][T26545] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5924'. [ 520.636783][T26549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5925'. [ 520.661250][T26546] netlink: 'syz.9.5924': attribute type 28 has an invalid length. [ 520.670467][T26546] netlink: 'syz.9.5924': attribute type 3 has an invalid length. [ 520.678843][T26546] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5924'. [ 520.882136][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5929'. [ 521.075285][T26570] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5933'. [ 521.143386][T26578] tc_dump_action: action bad kind [ 521.159571][T26578] netlink: 'syz.1.5936': attribute type 21 has an invalid length. [ 521.621982][T26603] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 521.739933][T26619] netlink: 'syz.9.5948': attribute type 4 has an invalid length. [ 521.794627][T26619] `: renamed from bond0 (while UP) [ 521.948374][T26629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.105205][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.193191][T26646] netlink: 'syz.9.5959': attribute type 4 has an invalid length. [ 522.221087][T26650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.431866][T26661] netlink: 'syz.1.5963': attribute type 1 has an invalid length. [ 522.432611][T26665] netlink: 'syz.2.5964': attribute type 15 has an invalid length. [ 522.492370][T26661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.605983][T26677] netlink: 'syz.4.5968': attribute type 10 has an invalid length. [ 522.915979][T26695] netlink: 'syz.1.5974': attribute type 9 has an invalid length. [ 523.018050][T26708] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.036622][T26708] bond0: (slave team0): Enslaving as an active interface with an up link [ 523.908492][T26755] syzkaller0: entered promiscuous mode [ 523.914878][T26755] syzkaller0: entered allmulticast mode [ 523.927499][T26757] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 524.055570][T26764] __nla_validate_parse: 13 callbacks suppressed [ 524.055589][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 524.101601][T26765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 524.701173][T26789] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6000'. [ 524.903695][T26796] netlink: 18 bytes leftover after parsing attributes in process `syz.4.6002'. [ 524.955463][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6002'. [ 526.586678][ T31] INFO: task syz.2.4237:20773 blocked for more than 143 seconds. [ 526.595498][ T31] Not tainted syzkaller #0 [ 526.600669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.610090][ T31] task:syz.2.4237 state:D stack:26024 pid:20773 tgid:20768 ppid:16823 task_flags:0x400140 flags:0x00004004 [ 526.623044][ T31] Call Trace: [ 526.626379][ T31] [ 526.629623][ T31] __schedule+0x1798/0x4cc0 [ 526.634295][ T31] ? __lock_acquire+0xab9/0xd20 [ 526.639276][ T31] ? __lock_acquire+0xab9/0xd20 [ 526.645132][ T31] ? __pfx___schedule+0x10/0x10 [ 526.650660][ T31] ? schedule+0x91/0x360 [ 526.654937][ T31] schedule+0x165/0x360 [ 526.660052][ T31] schedule_preempt_disabled+0x13/0x30 [ 526.665885][ T31] __mutex_lock+0x7e6/0x1350 [ 526.670984][ T31] ? __mutex_lock+0x5bb/0x1350 [ 526.675780][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 526.682796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 526.687860][ T31] ? stack_trace_save+0x9c/0xe0 [ 526.692802][ T31] ? stack_depot_save_flags+0x40/0x860 [ 526.698356][ T31] ? __lock_acquire+0x9d1/0xd20 [ 526.703525][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 526.711391][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 526.718059][ T31] ? kmalloc_reserve+0x136/0x290 [ 526.723269][ T31] ? __alloc_skb+0x142/0x2d0 [ 526.728054][ T31] ? netlink_dump+0x1b7/0xe90 [ 526.733378][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 526.738941][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 526.746274][ T31] ? genl_rcv_msg+0x5da/0x790 [ 526.752599][ T31] ? netlink_rcv_skb+0x205/0x470 [ 526.757623][ T31] ? genl_rcv+0x28/0x40 [ 526.761978][ T31] ? netlink_unicast+0x82f/0x9e0 [ 526.767011][ T31] ? netlink_sendmsg+0x805/0xb30 [ 526.772283][ T31] ? __sock_sendmsg+0x219/0x270 [ 526.777296][ T31] ? ____sys_sendmsg+0x505/0x830 [ 526.783641][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 526.788667][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 526.793977][ T31] ? do_syscall_64+0xfa/0x3b0 [ 526.798772][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.805110][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 526.812371][ T31] ? rcu_is_watching+0x15/0xb0 [ 526.817162][ T31] ? trace_kmalloc+0x1f/0xd0 [ 526.822598][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 526.829541][ T31] ? __build_skb_around+0x257/0x3e0 [ 526.834832][ T31] genl_dumpit+0x108/0x1b0 [ 526.839823][ T31] netlink_dump+0x6e4/0xe90 [ 526.844443][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 526.850481][ T31] ? genl_start+0x1c9/0x6c0 [ 526.855040][ T31] ? genl_start+0x499/0x6c0 [ 526.859946][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 526.865340][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 526.871703][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 526.878072][ T31] ? genl_get_cmd+0x496/0x910 [ 526.882970][ T31] ? __pfx_genl_start+0x10/0x10 [ 526.887845][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 526.893079][ T31] ? __pfx_genl_done+0x10/0x10 [ 526.897933][ T31] genl_rcv_msg+0x5da/0x790 [ 526.903280][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.908335][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 526.915013][ T31] ? __asan_memcpy+0x40/0x70 [ 526.919722][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 526.925200][ T31] netlink_rcv_skb+0x205/0x470 [ 526.930667][ T31] ? __lock_acquire+0xab9/0xd20 [ 526.935615][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.940903][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.946349][ T31] ? down_read+0x1ad/0x2e0 [ 526.951853][ T31] genl_rcv+0x28/0x40 [ 526.955970][ T31] netlink_unicast+0x82f/0x9e0 [ 526.961798][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 526.967274][ T31] ? netlink_sendmsg+0x642/0xb30 [ 526.972477][ T31] ? skb_put+0x11b/0x210 [ 526.976772][ T31] netlink_sendmsg+0x805/0xb30 [ 526.981876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.987272][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 526.992855][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.998239][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.003784][ T31] __sock_sendmsg+0x219/0x270 [ 527.008561][ T31] ____sys_sendmsg+0x505/0x830 [ 527.013629][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.020803][ T31] ? import_iovec+0x74/0xa0 [ 527.025341][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 527.030188][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.035605][ T31] ? __fget_files+0x2a/0x420 [ 527.040295][ T31] ? __fget_files+0x3a0/0x420 [ 527.044999][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 527.050639][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.057468][ T31] ? rcu_is_watching+0x15/0xb0 [ 527.063927][ T31] ? do_syscall_64+0xbe/0x3b0 [ 527.068731][ T31] do_syscall_64+0xfa/0x3b0 [ 527.073734][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.078982][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.085254][ T31] ? clear_bhb_loop+0x60/0xb0 [ 527.091119][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.097291][ T31] RIP: 0033:0x7fcc1378eec9 [ 527.102168][ T31] RSP: 002b:00007fcc1466e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.111029][ T31] RAX: ffffffffffffffda RBX: 00007fcc139e6090 RCX: 00007fcc1378eec9 [ 527.119847][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000006 [ 527.128089][ T31] RBP: 00007fcc13811f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.136483][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.145383][ T31] R13: 00007fcc139e6128 R14: 00007fcc139e6090 R15: 00007fffdf1ca8f8 [ 527.155097][ T31] [ 527.158340][ T31] INFO: task syz.0.4306:20989 blocked for more than 143 seconds. [ 527.166876][ T31] Not tainted syzkaller #0 [ 527.172032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.181466][ T31] task:syz.0.4306 state:D stack:26088 pid:20989 tgid:20988 ppid:17201 task_flags:0x400040 flags:0x00004004 [ 527.194711][ T31] Call Trace: [ 527.198231][ T31] [ 527.201377][ T31] __schedule+0x1798/0x4cc0 [ 527.205983][ T31] ? __lock_acquire+0xab9/0xd20 [ 527.210927][ T31] ? __lock_acquire+0xab9/0xd20 [ 527.216585][ T31] ? __pfx___schedule+0x10/0x10 [ 527.231031][ T31] ? schedule+0x91/0x360 [ 527.235929][ T31] schedule+0x165/0x360 [ 527.240876][ T31] schedule_preempt_disabled+0x13/0x30 [ 527.246602][ T31] __mutex_lock+0x7e6/0x1350 [ 527.251952][ T31] ? __mutex_lock+0x5bb/0x1350 [ 527.257657][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 527.263771][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 527.268818][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 527.275607][ T31] ? __nlmsg_put+0xef/0x1b0 [ 527.280758][ T31] ? genlmsg_put+0x137/0x2e0 [ 527.286169][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 527.292163][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.298068][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 527.305680][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 527.312199][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.318414][ T31] genl_rcv_msg+0x60e/0x790 [ 527.323090][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.328273][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 527.334825][ T31] ? __asan_memcpy+0x40/0x70 [ 527.340172][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 527.345650][ T31] netlink_rcv_skb+0x205/0x470 [ 527.350630][ T31] ? __lock_acquire+0xab9/0xd20 [ 527.355517][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.361655][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.366996][ T31] ? down_read+0x1ad/0x2e0 [ 527.372110][ T31] genl_rcv+0x28/0x40 [ 527.376269][ T31] netlink_unicast+0x82f/0x9e0 [ 527.381578][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 527.387220][ T31] ? netlink_sendmsg+0x642/0xb30 [ 527.392505][ T31] ? skb_put+0x11b/0x210 [ 527.396781][ T31] netlink_sendmsg+0x805/0xb30 [ 527.402210][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.407528][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 527.412629][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.417936][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.423507][ T31] __sock_sendmsg+0x219/0x270 [ 527.428230][ T31] ____sys_sendmsg+0x505/0x830 [ 527.433637][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.438964][ T31] ? import_iovec+0x74/0xa0 [ 527.443714][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 527.448452][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.453849][ T31] ? __fget_files+0x2a/0x420 [ 527.458458][ T31] ? __fget_files+0x3a0/0x420 [ 527.464899][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 527.470081][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.475575][ T31] ? rcu_is_watching+0x15/0xb0 [ 527.480416][ T31] ? do_syscall_64+0xbe/0x3b0 [ 527.485109][ T31] do_syscall_64+0xfa/0x3b0 [ 527.490545][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.496082][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.502621][ T31] ? clear_bhb_loop+0x60/0xb0 [ 527.507452][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.513591][ T31] RIP: 0033:0x7fd13a38eec9 [ 527.518252][ T31] RSP: 002b:00007fd13b22f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.527191][ T31] RAX: ffffffffffffffda RBX: 00007fd13a5e5fa0 RCX: 00007fd13a38eec9 [ 527.535846][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000004 [ 527.545012][ T31] RBP: 00007fd13a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.553876][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.561966][ T31] R13: 00007fd13a5e6038 R14: 00007fd13a5e5fa0 R15: 00007ffdaa1f1e98 [ 527.571019][ T31] [ 527.586166][ T31] [ 527.586166][ T31] Showing all locks held in the system: [ 527.603135][ T31] 1 lock held by khungtaskd/31: [ 527.608193][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 527.619971][ T31] 2 locks held by getty/5625: [ 527.624907][ T31] #0: ffff88814d2da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.636069][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 527.646467][ T31] 3 locks held by kworker/u8:11/7480: [ 527.652150][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.664283][ T31] #1: ffffc9001c6f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.676718][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 527.686355][ T31] 2 locks held by kworker/u8:16/15023: [ 527.692042][ T31] 3 locks held by kworker/u8:23/15838: [ 527.697595][ T31] #0: ffff88802fa6c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.710509][ T31] #1: ffffc9001ca37bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.724585][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 527.734315][ T31] 2 locks held by syz.4.3954/19766: [ 527.740236][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.748459][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 527.758718][ T31] 3 locks held by syz.2.4237/20773: [ 527.764166][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.774579][ T31] #1: ffff888068dad6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 527.785706][ T31] #2: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 527.796538][ T31] 2 locks held by syz.0.4306/20989: [ 527.802556][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.810879][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 527.821341][ T31] 2 locks held by syz.5.4479/21572: [ 527.826549][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.835382][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 527.845721][ T31] 2 locks held by syz.3.4492/21623: [ 527.851089][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.862603][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 527.874205][ T31] 2 locks held by syz.6.4770/22620: [ 527.879684][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.888914][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 527.899915][ T31] 2 locks held by syz.8.5322/24493: [ 527.905348][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.913962][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 527.925043][ T31] 2 locks held by syz.9.5988/26752: [ 527.931741][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 527.941206][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 527.952522][ T31] 1 lock held by syz.2.5992/26763: [ 527.957804][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 527.967445][ T31] 1 lock held by syz.1.5995/26777: [ 527.973134][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 527.983644][ T31] 4 locks held by syz.7.5997/26781: [ 527.988861][ T31] #0: ffff88807b9c8428 (sb_writers#10){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 528.001824][ T31] #1: ffff88806b79cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 528.012282][ T31] #2: ffff88805ba653c8 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 528.023426][ T31] #3: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: write_priomap+0xff/0x210 [ 528.033758][ T31] 1 lock held by syz.4.6002/26796: [ 528.039008][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: fib_delrule+0x3c5/0x1e00 [ 528.049455][ T31] 2 locks held by syz.4.6002/26797: [ 528.054659][ T31] #0: ffffffff8fa56fa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 528.064841][ T31] #1: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 528.074860][ T31] [ 528.078215][ T31] ============================================= [ 528.078215][ T31] [ 528.087322][ T31] NMI backtrace for cpu 0 [ 528.087344][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 528.087382][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.087404][ T31] Call Trace: [ 528.087415][ T31] [ 528.087430][ T31] dump_stack_lvl+0x189/0x250 [ 528.087484][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.087525][ T31] ? __pfx__printk+0x10/0x10 [ 528.087605][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 528.087658][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 528.087700][ T31] ? __pfx__printk+0x10/0x10 [ 528.087751][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 528.087802][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 528.087854][ T31] watchdog+0xf93/0xfe0 [ 528.087913][ T31] ? watchdog+0x1de/0xfe0 [ 528.087965][ T31] kthread+0x70e/0x8a0 [ 528.087998][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.088018][ T31] ? __pfx_kthread+0x10/0x10 [ 528.088039][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.088056][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.088070][ T31] ? __pfx_kthread+0x10/0x10 [ 528.088089][ T31] ret_from_fork+0x439/0x7d0 [ 528.088107][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.088127][ T31] ? __switch_to_asm+0x39/0x70 [ 528.088144][ T31] ? __switch_to_asm+0x33/0x70 [ 528.088161][ T31] ? __pfx_kthread+0x10/0x10 [ 528.088180][ T31] ret_from_fork_asm+0x1a/0x30 [ 528.088215][ T31] [ 528.088224][ T31] Sending NMI from CPU 0 to CPUs 1: [ 528.248202][ C1] NMI backtrace for cpu 1 [ 528.248220][ C1] CPU: 1 UID: 0 PID: 15840 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 528.248239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.248250][ C1] Workqueue: bat_events batadv_nc_worker [ 528.248282][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 528.248303][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b 22 b6 f5 cc [ 528.248316][ C1] RSP: 0018:ffffc9001ca278e8 EFLAGS: 00000086 [ 528.248329][ C1] RAX: 0000000000000001 RBX: 0000000000000002 RCX: d8e8ebdb39d60300 [ 528.248340][ C1] RDX: 0000000000000000 RSI: ffff88804487c740 RDI: ffff88804487bc00 [ 528.248350][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47e7f2 [ 528.248361][ C1] R10: dffffc0000000000 R11: ffffffff8b47e720 R12: 00000000b79cbaae [ 528.248372][ C1] R13: ffff88804487c6f0 R14: ffff88804487c740 R15: ac961c40d7ee66f6 [ 528.248384][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 528.248396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.248407][ C1] CR2: 000055557c5655c8 CR3: 0000000074446000 CR4: 00000000003526f0 [ 528.248421][ C1] Call Trace: [ 528.248428][ C1] [ 528.248434][ C1] __lock_acquire+0xab9/0xd20 [ 528.248460][ C1] ? batadv_nc_worker+0xd2/0x610 [ 528.248478][ C1] lock_acquire+0x120/0x360 [ 528.248496][ C1] ? batadv_nc_worker+0xd2/0x610 [ 528.248518][ C1] ? batadv_nc_worker+0xd2/0x610 [ 528.248536][ C1] ? batadv_nc_worker+0xd2/0x610 [ 528.248555][ C1] batadv_nc_worker+0xef/0x610 [ 528.248572][ C1] ? batadv_nc_worker+0xd2/0x610 [ 528.248592][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 528.248608][ C1] process_scheduled_works+0xae1/0x17b0 [ 528.248633][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.248655][ C1] worker_thread+0x8a0/0xda0 [ 528.248680][ C1] kthread+0x70e/0x8a0 [ 528.248698][ C1] ? __pfx_worker_thread+0x10/0x10 [ 528.248712][ C1] ? __pfx_kthread+0x10/0x10 [ 528.248729][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.248743][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.248756][ C1] ? __pfx_kthread+0x10/0x10 [ 528.248773][ C1] ret_from_fork+0x439/0x7d0 [ 528.248790][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 528.248807][ C1] ? __switch_to_asm+0x39/0x70 [ 528.248825][ C1] ? __switch_to_asm+0x33/0x70 [ 528.248841][ C1] ? __pfx_kthread+0x10/0x10 [ 528.248858][ C1] ret_from_fork_asm+0x1a/0x30 [ 528.248881][ C1] [ 528.249686][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 528.249702][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 528.249721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.249732][ T31] Call Trace: [ 528.249740][ T31] [ 528.249748][ T31] dump_stack_lvl+0x99/0x250 [ 528.249771][ T31] ? __asan_memcpy+0x40/0x70 [ 528.249791][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.249814][ T31] ? __pfx__printk+0x10/0x10 [ 528.249847][ T31] vpanic+0x281/0x750 [ 528.249869][ T31] ? __pfx_vpanic+0x10/0x10 [ 528.249888][ T31] ? preempt_schedule+0xae/0xc0 [ 528.249907][ T31] ? preempt_schedule_common+0x83/0xd0 [ 528.249929][ T31] panic+0xb9/0xc0 [ 528.249947][ T31] ? __pfx_panic+0x10/0x10 [ 528.249967][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 528.249995][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 528.250030][ T31] watchdog+0xfd2/0xfe0 [ 528.250056][ T31] ? watchdog+0x1de/0xfe0 [ 528.250083][ T31] kthread+0x70e/0x8a0 [ 528.250107][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.250127][ T31] ? __pfx_kthread+0x10/0x10 [ 528.250148][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.250164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.250180][ T31] ? __pfx_kthread+0x10/0x10 [ 528.250201][ T31] ret_from_fork+0x439/0x7d0 [ 528.250220][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.250243][ T31] ? __switch_to_asm+0x39/0x70 [ 528.250262][ T31] ? __switch_to_asm+0x33/0x70 [ 528.250279][ T31] ? __pfx_kthread+0x10/0x10 [ 528.250300][ T31] ret_from_fork_asm+0x1a/0x30 [ 528.250334][ T31] [ 528.661734][ T31] Kernel Offset: disabled [ 528.666112][ T31] Rebooting in 86400 seconds..