last executing test programs: 11.188898453s ago: executing program 1 (id=303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000000)=0x400) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000e00)=0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'ip6gre0\x00', 0x0, 0x4, 0x2a, 0x0, 0x9, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8, 0x7, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@mpls_delroute={0x4c, 0x19, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x20, 0x20, 0x2, 0x0, 0x1, 0xfe, 0x8, 0x200}, [@RTA_DST={0x8, 0x1, {0x70, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x3f9b}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x733e, 0xd, 0x7f}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x3e, 0xb, r7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20) 8.736462042s ago: executing program 1 (id=318): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) r6 = socket(0x8000000010, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'sit0\x00', 0x0, 0x760, 0x20, 0x2f, 0xcf, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xfc, 0x1, 0x1}]}}}}}) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000300)={r1, r0, 0x4, 0xd6, &(0x7f0000000200)="9cd4f87123078fa011223ea696d4ecd50d967c2b69b75452687673704787fe084fb8b343f1e1237dd347eb09777c5192e2e2577c34be2b74beefd32dbb44f47b07091e5cfc84e573ca10556aeefb8f3342ea445fa47defd8ab33681ec2131630c4bad89a8532a9a38e0460db1915cdaa99c01dbdb847bea2d26064300ff2cc6dc77694caa65761bb997753127c1a365dadbf4dfb70ea7b9090947a077bb3b562e83191da44796e5ff69e735e5f477c6e2ca509b13633fcedca5f24ced0a443c1b023f8208b82e4f6caef2cf370b67a3599545f65b776", 0x8, 0x3, 0x7fff, 0x9, 0x2, 0x3, 0x3, 'syz1\x00'}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x200000000000001) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) 8.734471396s ago: executing program 2 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfff7ff0000000008000000300002802800038024000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r7, 0x72b}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x30c, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2de34547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x684bd609}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdb462}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36000bd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1058b204}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3667b72b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18d11217}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x729adedf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f19441d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f571d32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59387d38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65980717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f99f870}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x768d4eda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x732938ad}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531c5798}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f5c2a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75c0959}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c90b3ca}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86f42e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23be5fce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dc7844b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7f77ab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x677e04ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34afc691}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d22ce9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d280faf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdad6523}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41065c92}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eb4b187}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fafdbd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6817d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fffffff}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3381b109}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb0908b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6470a950}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3ddc95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e29717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338cf22e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000002c0)={@rand_addr=0x64010100, @empty, 0x1, "3d94c495e19c6d71a06ea3111d052f0f6a89d76f5cac64e5c5b99f973719dc8d", 0x80, 0x8, 0x4, 0x7}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 8.409976472s ago: executing program 2 (id=322): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5, 0x0, 0x7}, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) r1 = accept(r0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000140)=""/90, 0x5a}, &(0x7f00000001c0), 0x24}, 0xa0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x2c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xd0002}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x7c, &(0x7f0000000580)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0xc74f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000680)={r4, 0x7, 0x10}, &(0x7f00000006c0)=0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000700)={0x0, 0x8, 0x2dbd}) (async) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000740)=0xf, 0x4) (async) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000780)={0x6b, 0x6, 0xa, 0x7, 0x3, 0x81}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000008c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x48, 0x2e}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8085}, 0x44000) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000bc0)={"ba0891064c37c05c1f45e65944dfce8c", 0x0, 0x0, {0x9, 0x9}, {0x5, 0x2}, 0x1, [0x9, 0x10001, 0x80000001, 0x8, 0x5, 0x5, 0xfffffffffffffcc9, 0x1000, 0x5, 0x5, 0x200, 0x1ff, 0x1000, 0x80000000, 0x7, 0x2]}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000cc0)={{r6}, r9, 0x1, @unused=[0x7, 0x800, 0x2, 0x6], @devid}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file1\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001f40)={r10, &(0x7f0000001d40)="83dd56f38cbbdc19456c5b67413e23d5a3b50713e1fb6ca3652d33cc77174fdb189a0e7d7f88e2821ef0b25aa7beee072d276001ed6dd6f8bd325ffc69e60811cf27dfa74e78a27c652ef2723c928ed139181ff0d4d16d8b72c7342561f4fad1d5e556675a4628a0a0add9ebda6b1b074ed2eca299e55f751cecf0eaa6ef0b4ea2d2468698075a9ae28005310ba2abec4ac28f8ced4d6d526f6432c9fad01d02351ddaedd3632757e60983fe551b016a19a52332557730b2a958ab6082a12d206259d914225c92fc935fca7eef9eb8d2270774bf569d8618602d7f78f8e1777f79", &(0x7f0000001e40)=@buf="63ddb63454f185bbccdea494450ad963da7358dcfc56f736b9949609896110a91177f3a678479d4fd99c4bbf7d74a078085837576bf9cb689e51266502c943ef948383a04c3592333cff5890183b17b0f86cba62a5014f0e7d352d68856e9158440372b3bc4d28fab5e91c0381ead3113384a297f4e6e15e8dc49b9237a6e0a3a29f8fec973abb2336aa51f1a7f03530f60a3d9acb4719a5e2fc2154869248c1dfccb9b9fbba7c23340743a15718364e5d633c57a3e424ce609534075a55560346c9a53f8ce994fd9e2aa26679990f0cfcfedf487b48ab", 0x2}, 0x20) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r11, &(0x7f0000001f80)={0xa, 0x4e20, 0x3, @private1, 0x1f3}, 0x1c) 8.212736865s ago: executing program 1 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfff7ff0000000008000000300002802800038024000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r7, 0x72b}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x30c, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2de34547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x684bd609}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdb462}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36000bd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1058b204}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3667b72b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18d11217}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x729adedf}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f19441d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f571d32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59387d38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65980717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f99f870}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x768d4eda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x732938ad}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531c5798}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f5c2a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75c0959}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c90b3ca}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86f42e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23be5fce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dc7844b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7f77ab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x677e04ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34afc691}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d22ce9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d280faf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdad6523}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41065c92}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eb4b187}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fafdbd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6817d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fffffff}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3381b109}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb0908b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6470a950}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3ddc95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e29717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338cf22e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000002c0)={@rand_addr=0x64010100, @empty, 0x1, "3d94c495e19c6d71a06ea3111d052f0f6a89d76f5cac64e5c5b99f973719dc8d", 0x80, 0x8, 0x4, 0x7}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 8.212399293s ago: executing program 2 (id=326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x0, @loopback}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0xfffffffffffffe25, 0x1, 0x1, 0x0, 0x8aea}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="3fe6587946a998a3da3c60607ba0c7d8620b6f6e854d706849fd1f29b185130ef4d512a6cb54f137edb9ddf78554f1a6e7bc25d2cde0acbcd145568bbd977a0c4ecf845498079cc523700919730e50c2c29d1a69ae94bbc8faf7fed5d59bd9343c87b3cfd79254045f00cdeec023a186220d4d3d2e943f38b02903f2729edb02297515e4be3fb5d52feccb07116b2eca3217d1a258b696f0f60ea5996d516ba9eb6a54ab4ce9608ee8f033c84ebf24ae3d69ebb10feafbbbe70d12bbf0eff4dd64d8", 0xc2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffe}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7cd}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c) listen(r4, 0x6) 7.470058159s ago: executing program 1 (id=328): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000ea6ec3ce0c0000000000000025000a20000000000a0103000000000000000001000000090001007379580000000c0a01020000000000000000010000000900020073797a32000000002c0003802840000000000000000000001c000b801800018007000100637400000c00028008000140000000000900f20073797a3000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0xffffffffffffffdf}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 7.266450135s ago: executing program 2 (id=329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000018"], 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r3, &(0x7f0000000340), 0x11000) (async) write(r3, &(0x7f0000003180)="c442b77cd21e", 0x6) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000100)={@multicast1, @local}) (async, rerun: 32) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) (async, rerun: 32) close(r2) 5.804573702s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.312254066s ago: executing program 2 (id=341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x4008010) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e0000002a010000060000000200000008200500", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500000005000000000000000092bb4dfd450aa7000000", @ANYRES32, @ANYBLOB], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x50000, {{0x3d, 0x4, 0x1, 0xe, 0xf4, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x54, 0x6c, 0x1, 0x0, [{@remote, 0x5}, {@local, 0x8}, {@loopback, 0x2}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x9}, {@broadcast, 0xe}, {@broadcast, 0x1}, {@loopback, 0x101}, {@empty, 0x6}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x1, [{@multicast2, 0x7fff}, {@broadcast, 0x66fc}, {@multicast1, 0x4}, {@local, 0x6}, {@loopback, 0xfffff64a}, {@rand_addr=0x64010102, 0x800}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x5, "f830e7"}, {0x5, 0x3, "8f"}, {0x2, 0x10, "6d01e6563414f3435ab5c5206065"}, {0x5, 0x2}, {0x2, 0x9, "76b14b7be276db"}, {0x6, 0x6, "0d221a57"}, {0x2, 0x9, "693296abb27e21"}, {0x5, 0x2}]}, @rr={0x7, 0x17, 0x9a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @multicast2, @local]}]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x19, 0x0, 0x7, 0xc6c, 0x2091, r7, 0x7, '\x00', r8, r6, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={&(0x7f0000000980)="974ed5d24f465f6bd2a5883a5ff459840519b6b2784fda0dadc2608767b0af84487a7ce7dfcfd6", &(0x7f00000009c0)=""/108, &(0x7f0000000a40)="af0f30ab77e23e3718bc123d67ca4012ca3f57a2d32ccfed2e4c86342d8a81a051ec91cf92f9957a60e9addc7e46a44048197e941d4a39f1aa1cdbc127c1cd", &(0x7f0000000a80)="4a7094ae3028646775ae0cead033f33d0fc19c04873841655b74269721a98161051a", 0x200, r9, 0x4}, 0x38) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0xb, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @datasec={0x5, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x6}], "97b18b"}, @const={0xd}, @restrict={0x3}, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e, 0x30, 0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000500)=""/198, 0x6f, 0xc6, 0x1, 0x4}, 0x28) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8923, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xa4, &(0x7f0000000280)=""/164, 0x410ff, 0x10, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000b80)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r12], &(0x7f00000006c0)=[{0x2, 0x3, 0xb, 0xb}, {0x5, 0x2, 0xf, 0x5}], 0x10, 0x2}, 0x94) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x2d, 0x3, 0x7, 0x72, 0x8, 0x8}, &(0x7f0000000880)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r14, 0x1, 0x29}, &(0x7f0000000900)=0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x403}, 0x8) close(r0) 4.894984142s ago: executing program 32 (id=341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x4008010) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e0000002a010000060000000200000008200500", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500000005000000000000000092bb4dfd450aa7000000", @ANYRES32, @ANYBLOB], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x50000, {{0x3d, 0x4, 0x1, 0xe, 0xf4, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x54, 0x6c, 0x1, 0x0, [{@remote, 0x5}, {@local, 0x8}, {@loopback, 0x2}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x9}, {@broadcast, 0xe}, {@broadcast, 0x1}, {@loopback, 0x101}, {@empty, 0x6}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x1, [{@multicast2, 0x7fff}, {@broadcast, 0x66fc}, {@multicast1, 0x4}, {@local, 0x6}, {@loopback, 0xfffff64a}, {@rand_addr=0x64010102, 0x800}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x5, "f830e7"}, {0x5, 0x3, "8f"}, {0x2, 0x10, "6d01e6563414f3435ab5c5206065"}, {0x5, 0x2}, {0x2, 0x9, "76b14b7be276db"}, {0x6, 0x6, "0d221a57"}, {0x2, 0x9, "693296abb27e21"}, {0x5, 0x2}]}, @rr={0x7, 0x17, 0x9a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @multicast2, @local]}]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x19, 0x0, 0x7, 0xc6c, 0x2091, r7, 0x7, '\x00', r8, r6, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={&(0x7f0000000980)="974ed5d24f465f6bd2a5883a5ff459840519b6b2784fda0dadc2608767b0af84487a7ce7dfcfd6", &(0x7f00000009c0)=""/108, &(0x7f0000000a40)="af0f30ab77e23e3718bc123d67ca4012ca3f57a2d32ccfed2e4c86342d8a81a051ec91cf92f9957a60e9addc7e46a44048197e941d4a39f1aa1cdbc127c1cd", &(0x7f0000000a80)="4a7094ae3028646775ae0cead033f33d0fc19c04873841655b74269721a98161051a", 0x200, r9, 0x4}, 0x38) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0xb, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @datasec={0x5, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x6}], "97b18b"}, @const={0xd}, @restrict={0x3}, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e, 0x30, 0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000500)=""/198, 0x6f, 0xc6, 0x1, 0x4}, 0x28) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8923, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xa4, &(0x7f0000000280)=""/164, 0x410ff, 0x10, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000b80)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r12], &(0x7f00000006c0)=[{0x2, 0x3, 0xb, 0xb}, {0x5, 0x2, 0xf, 0x5}], 0x10, 0x2}, 0x94) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x2d, 0x3, 0x7, 0x72, 0x8, 0x8}, &(0x7f0000000880)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r14, 0x1, 0x29}, &(0x7f0000000900)=0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x403}, 0x8) close(r0) 4.882813218s ago: executing program 0 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x620203, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000007000000004000d0e06d4f64b96fdf7a9e4f1db3f4c0d14e806a0b58943f0de410275ca8f66c782f"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf251d00000008000300", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0, 0x3ff}, 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES64, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r12}, 0x18) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.394258373s ago: executing program 0 (id=346): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000004240)=0x40000006, 0x6e) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x958, @mcast1}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x25a, 0x9, 0x1}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x5, 0x8000, 0x7, 0x7fffffff, 0xf, 0x7, 0xfffffffc, r2}, &(0x7f0000000140)=0x20) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x8012, r1, 0x80000000) 4.087474152s ago: executing program 1 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x73, 0x7c, &(0x7f0000000180)="a89b3033d13f309b3495b9871e2138d572602acd751490893e9981c9279ce217791a6e6dde8ad14c26f75d25a49357ce1765651ac40c47c43f0b1351172411b6837c396c3a97e3394dcb15bee1fce31d6fa05fae90b596480abae73f7b9f771cdcc0d5375c774fac3c8f338f482b4a035a6dc0", &(0x7f0000000280)=""/124, 0x0, 0x0, 0xfa, 0x47, &(0x7f0000000300)="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", &(0x7f00000004c0)="ffda2433e31472f0581fcae87a63af17a95aebd07d1dc663c415c19fda7e5e0d37b8a8a43a2cb589c18d2c5aada4f8574ee66d8cacb4901f44c70f33b505ea83b9dbae4889e731", 0x2, 0x0, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2d, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000000000010000) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000400)=0x7, &(0x7f00000005c0)=0x4) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xa, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="bf29c964153ace1beeb323be7488cdacb4e3f221e033bc203bdc3f2ad85cbbb856a78bbd70eda453879b875c3e80e8fef07c4d7c0cee63b4743f81a3a860db6236b34bee11de59a0b8eb1d48034cfb1e5460", @ANYRESDEC=r0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x8, &(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYBLOB="b9a73d32078bca4bf090583a03989cae342538f4d1461ccf001b9268bbe57b0c4469723edaad5b5b56018e3f0408e0a19147da", @ANYRES8=0x0, @ANYRES8=r8], &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x4000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) 3.613123137s ago: executing program 4 (id=349): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x24008095}, 0x0) (async) recvmmsg(r4, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/17, 0x11}], 0x3}, 0x8}], 0x1, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r6, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xfc29}], 0x1}}], 0x3, 0x400122a0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10e) accept4(r5, &(0x7f0000000180)=@isdn, &(0x7f0000000040)=0x80, 0x80800) getsockname$packet(r5, 0x0, &(0x7f0000001480)) (async) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001d000000000000070000008608000000030102"], 0x18}, 0x4) 3.436543608s ago: executing program 0 (id=350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0xe) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @rand_addr=' \x01\x00', 0x800}, 0x1c) listen(r1, 0x39c) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="280000004000e401feffffff00000000017c0000040042800c00018008000300", @ANYRES32, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 3.332104159s ago: executing program 0 (id=351): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015140300"], 0x18}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getpeername$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) ppoll(&(0x7f0000000280)=[{r4, 0x2000}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x5]}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5a53, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.270088118s ago: executing program 4 (id=353): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) getsockname$unix(r0, &(0x7f0000000a40), &(0x7f0000000700)=0x6e) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c0d0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x45}) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x4041) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000003060104000000000000f9ff0a0000090900020073797a3000000000050001000700000005000100070000000900020073797a32000000000900020073797a30000000000900020073797a32000000000900020073797a30000000009c8c020073797a3200000000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.856366111s ago: executing program 0 (id=354): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1d8, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_EXP={0x20, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_CT={0x194, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x539d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x800, 0x8, 0x9, 0x2b75, 0x5]}, @CTA_TUPLE_ORIG={0xc4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x73}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0x3e]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) shutdown(r1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast}) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1d8, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_EXP={0x20, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_CT={0x194, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x539d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x800, 0x8, 0x9, 0x2b75, 0x5]}, @CTA_TUPLE_ORIG={0xc4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x73}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0x3e]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) shutdown(r1, 0x1) (async) 2.722808353s ago: executing program 0 (id=356): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) write$tun(r1, &(0x7f0000000540)=ANY=[], 0x8b) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x8080) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xe}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xbaf6}]}}]}, 0x44}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xd0, r11, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r12, r1, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.616548524s ago: executing program 3 (id=358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) read$nci(0xffffffffffffffff, &(0x7f0000000300)=""/23, 0x17) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x3c, r12, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x4004880) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r11, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0xffffffff, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 1.227947603s ago: executing program 4 (id=359): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014000000008080002"], 0x1ec}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.034163408s ago: executing program 3 (id=360): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x40}}], 0x1, 0x8000004) 860.141893ms ago: executing program 1 (id=361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8000) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) 834.01323ms ago: executing program 3 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfff7ff0000000008000000300002802800038024000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r7, 0x72b}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x30c, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2de34547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x684bd609}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdb462}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36000bd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1058b204}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3667b72b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18d11217}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x729adedf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f19441d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f571d32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59387d38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65980717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f99f870}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x768d4eda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x732938ad}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531c5798}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f5c2a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75c0959}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c90b3ca}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86f42e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23be5fce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dc7844b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7f77ab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x677e04ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34afc691}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d22ce9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d280faf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdad6523}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41065c92}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eb4b187}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fafdbd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6817d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fffffff}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3381b109}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb0908b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6470a950}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3ddc95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e29717}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338cf22e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000002c0)={@rand_addr=0x64010100, @empty, 0x1, "3d94c495e19c6d71a06ea3111d052f0f6a89d76f5cac64e5c5b99f973719dc8d", 0x80, 0x8, 0x4, 0x7}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 503.383835ms ago: executing program 3 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000280)=0xc4, 0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25170000001800018014000200647500000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x7c, 0xa0, 0xffffff01, 0x14, @mcast2, @empty, 0x7, 0x1, 0x4, 0x3f86181b}}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINK={0x8, 0x5, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 360.048099ms ago: executing program 3 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000fa0c00000700000000000000", @ANYRES32, @ANYBLOB="000000000079ac4994064c2fcb9dad660000000000000000008eaf78371d9d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xac}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) close(r4) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b5}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {0x0, 0x6}, {0x1}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8b2c592abdd70aee}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r13, &(0x7f0000000580)=[{{&(0x7f0000000a00)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa4891800000000000000290000"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000640)="92ffa82b8eed672de8d2883ec48b267df946d81ea6", 0x15}], 0x2}}], 0x2, 0x8008801) 200.373053ms ago: executing program 4 (id=365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000d80)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 128.166051ms ago: executing program 4 (id=366): write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @val={0x3, 0x3, 0x8, 0x8001, 0x2, 0x8000}, @x25={0x1, 0x9, 0x0, "50f0a65e033c4fecec2b293ad2666b83f465ba2476955fe4abc8fac5632299b1a0b79cec89b65d06d02e16b5f73cf5a7e5849935ced931719f7a5609e43fdfc79bfa362f2eca1a23070cca69165b1317ebd4bc590a5baff9ef44a66a0cdd11245a25ceac12f312d122e44d15a719faa4a7421c97"}}, 0x81) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d0000008ec4000004000000010000000010"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x4, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7ff, 0x10000005, 0xff6, 0x8001}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0xc0c4) 68.522898ms ago: executing program 3 (id=367): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x8000) socket$inet(0x2, 0x4, 0x199) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20048050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="8ef82f", 0x3) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r7, &(0x7f0000003200)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10) 0s ago: executing program 4 (id=368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x141) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xdfd182dcd395e7a6}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x50e3a154, '\x00', 0x0, r0, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x24, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@map_val={0x18, 0xa, 0x2, 0x0, r0}, @jmp={0x5, 0x1, 0x5, 0x9, 0x6, 0x10, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaec2}}, @cb_func, @jmp={0x5, 0x1, 0x9, 0x0, 0xd, 0x0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdac}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x80, 0xc8, &(0x7f0000000080)=""/200, 0x41100, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x2, 0xfffff7db}, 0x10, 0x0, r1, 0x1, &(0x7f0000000480)=[r0, r0, r3], &(0x7f00000004c0)=[{0x5, 0x3, 0x1}]}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 82.763048][ T5814] cgroup: Unknown subsys name 'net' [ 82.851602][ T5814] cgroup: Unknown subsys name 'cpuset' [ 82.860723][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.583825][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.195129][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.203885][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.211693][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.220463][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.230590][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.291690][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.335193][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.343640][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.368851][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.376601][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.408730][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.428574][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.448083][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.450238][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.464657][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.473799][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.474067][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.482700][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.527360][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.535119][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.547985][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.556874][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.581900][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.591504][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.605701][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.062099][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.329910][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.337274][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.344959][ T5824] bridge_slave_0: entered allmulticast mode [ 88.352729][ T5824] bridge_slave_0: entered promiscuous mode [ 88.411033][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.423773][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.433802][ T5824] bridge_slave_1: entered allmulticast mode [ 88.442767][ T5824] bridge_slave_1: entered promiscuous mode [ 88.511730][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.564773][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.574962][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.605732][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.628642][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.693271][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.759004][ T5824] team0: Port device team_slave_0 added [ 88.783124][ T5824] team0: Port device team_slave_1 added [ 88.935295][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.943039][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.971106][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.002362][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.009842][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.017316][ T5829] bridge_slave_0: entered allmulticast mode [ 89.025755][ T5829] bridge_slave_0: entered promiscuous mode [ 89.033168][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040534][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.047876][ T5828] bridge_slave_0: entered allmulticast mode [ 89.055043][ T5828] bridge_slave_0: entered promiscuous mode [ 89.065932][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.073105][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.099859][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.116865][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.125068][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.132766][ T5834] bridge_slave_0: entered allmulticast mode [ 89.140266][ T5834] bridge_slave_0: entered promiscuous mode [ 89.149008][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.156456][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.164992][ T5829] bridge_slave_1: entered allmulticast mode [ 89.172513][ T5829] bridge_slave_1: entered promiscuous mode [ 89.180253][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.187601][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.198078][ T5828] bridge_slave_1: entered allmulticast mode [ 89.205990][ T5828] bridge_slave_1: entered promiscuous mode [ 89.232889][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240366][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.247495][ T5834] bridge_slave_1: entered allmulticast mode [ 89.255025][ T5834] bridge_slave_1: entered promiscuous mode [ 89.268652][ T52] Bluetooth: hci0: command tx timeout [ 89.356945][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.369816][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.379879][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.388510][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.396238][ T5831] bridge_slave_0: entered allmulticast mode [ 89.404079][ T5831] bridge_slave_0: entered promiscuous mode [ 89.414463][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.439269][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.451642][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.461453][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.469457][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.477112][ T5831] bridge_slave_1: entered allmulticast mode [ 89.484626][ T5831] bridge_slave_1: entered promiscuous mode [ 89.499891][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.581303][ T5824] hsr_slave_0: entered promiscuous mode [ 89.588011][ T52] Bluetooth: hci2: command tx timeout [ 89.588032][ T5841] Bluetooth: hci4: command tx timeout [ 89.588285][ T5839] Bluetooth: hci1: command tx timeout [ 89.595235][ T5824] hsr_slave_1: entered promiscuous mode [ 89.667385][ T5834] team0: Port device team_slave_0 added [ 89.669265][ T5839] Bluetooth: hci3: command tx timeout [ 89.676519][ T5829] team0: Port device team_slave_0 added [ 89.686634][ T5828] team0: Port device team_slave_0 added [ 89.695910][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.709056][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.721097][ T5834] team0: Port device team_slave_1 added [ 89.728977][ T5829] team0: Port device team_slave_1 added [ 89.751064][ T5828] team0: Port device team_slave_1 added [ 89.854374][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.862450][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.890357][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.924008][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.931178][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.958241][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.984565][ T5831] team0: Port device team_slave_0 added [ 89.995329][ T5831] team0: Port device team_slave_1 added [ 90.002033][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.009463][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.036005][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.048831][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.055795][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.082227][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.094556][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.102270][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.129401][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.159427][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.166799][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.195431][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.299892][ T5828] hsr_slave_0: entered promiscuous mode [ 90.306995][ T5828] hsr_slave_1: entered promiscuous mode [ 90.313972][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.319866][ T5828] Cannot create hsr debugfs directory [ 90.326275][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.333974][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.361250][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.373941][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.381013][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.407891][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.479651][ T5829] hsr_slave_0: entered promiscuous mode [ 90.487192][ T5829] hsr_slave_1: entered promiscuous mode [ 90.494287][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.501337][ T5829] Cannot create hsr debugfs directory [ 90.550045][ T5834] hsr_slave_0: entered promiscuous mode [ 90.557186][ T5834] hsr_slave_1: entered promiscuous mode [ 90.564301][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.570412][ T5834] Cannot create hsr debugfs directory [ 90.783237][ T5831] hsr_slave_0: entered promiscuous mode [ 90.791061][ T5831] hsr_slave_1: entered promiscuous mode [ 90.799495][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.805473][ T5831] Cannot create hsr debugfs directory [ 91.150797][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.164561][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.175939][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.199911][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.327862][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.343353][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.355119][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.358151][ T5839] Bluetooth: hci0: command tx timeout [ 91.371610][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.482067][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.513658][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.527059][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.545744][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.554660][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.643361][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.676788][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.684557][ T5839] Bluetooth: hci1: command tx timeout [ 91.684579][ T52] Bluetooth: hci4: command tx timeout [ 91.693686][ T5839] Bluetooth: hci2: command tx timeout [ 91.706868][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.719902][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.746320][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.755202][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.765747][ T5839] Bluetooth: hci3: command tx timeout [ 91.784483][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.870340][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.877595][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.914523][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.963805][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.975703][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.998756][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.011877][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.036527][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.100730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.107940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.157153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.164457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.173084][ T9] cfg80211: failed to load regulatory.db [ 92.221729][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.374578][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.416308][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.423748][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.459024][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.475337][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.483238][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.547294][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.613963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.621528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.640742][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.684493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.691992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.725080][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.759117][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.815316][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.872877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.880277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.900969][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.923468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.931108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.984101][ T5824] veth0_vlan: entered promiscuous mode [ 93.040205][ T5824] veth1_vlan: entered promiscuous mode [ 93.124655][ T5829] veth0_vlan: entered promiscuous mode [ 93.161292][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.182192][ T5829] veth1_vlan: entered promiscuous mode [ 93.235317][ T5824] veth0_macvtap: entered promiscuous mode [ 93.281237][ T5824] veth1_macvtap: entered promiscuous mode [ 93.382843][ T5828] veth0_vlan: entered promiscuous mode [ 93.402043][ T5829] veth0_macvtap: entered promiscuous mode [ 93.415266][ T5829] veth1_macvtap: entered promiscuous mode [ 93.431135][ T5839] Bluetooth: hci0: command tx timeout [ 93.496329][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.504853][ T5828] veth1_vlan: entered promiscuous mode [ 93.526722][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.539415][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.575415][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.585416][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.611721][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.621456][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.631406][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.652057][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.665857][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702486][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.711934][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.737433][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.748081][ T5839] Bluetooth: hci4: command tx timeout [ 93.748390][ T5841] Bluetooth: hci1: command tx timeout [ 93.753637][ T5839] Bluetooth: hci2: command tx timeout [ 93.775999][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828784][ T5839] Bluetooth: hci3: command tx timeout [ 93.898201][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.907401][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.928384][ T5828] veth0_macvtap: entered promiscuous mode [ 93.969924][ T5828] veth1_macvtap: entered promiscuous mode [ 94.010561][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.025923][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.073364][ T5831] veth0_vlan: entered promiscuous mode [ 94.088003][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.096310][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.154685][ T5831] veth1_vlan: entered promiscuous mode [ 94.163537][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.177845][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.238433][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.271705][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.285227][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.374136][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.400819][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.441788][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451347][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.501300][ T5831] veth0_macvtap: entered promiscuous mode [ 94.589686][ T5834] veth0_vlan: entered promiscuous mode [ 94.596061][ T5831] veth1_macvtap: entered promiscuous mode [ 94.666230][ T5950] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 94.734206][ T5834] veth1_vlan: entered promiscuous mode [ 94.754733][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.812682][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.859974][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.878680][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.895965][ T5951] Zero length message leads to an empty skb [ 94.913634][ T4409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.969327][ T4409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.992915][ T4409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005974][ T4409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.024784][ T5834] veth0_macvtap: entered promiscuous mode [ 95.153722][ T5834] veth1_macvtap: entered promiscuous mode [ 95.164408][ T5956] netlink: 'syz.0.6': attribute type 15 has an invalid length. [ 95.194442][ T5958] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 95.195204][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.216673][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260618][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.349150][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.385758][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.476939][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.519584][ T5839] Bluetooth: hci0: command tx timeout [ 95.543232][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.633802][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.670583][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.742100][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762696][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.796661][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.811308][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.828522][ T5839] Bluetooth: hci1: command tx timeout [ 95.834241][ T52] Bluetooth: hci4: command tx timeout [ 95.834294][ T5841] Bluetooth: hci2: command tx timeout [ 95.908379][ T5841] Bluetooth: hci3: command tx timeout [ 95.994107][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.128970][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.137153][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.516169][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.545447][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.908866][ T5992] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10'. [ 97.011219][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.105533][ T43] IPVS: starting estimator thread 0... [ 97.208359][ T6001] IPVS: using max 22 ests per chain, 52800 per kthread [ 97.431186][ T5986] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 97.925821][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 98.009416][ T6022] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 98.249263][ T6025] syzkaller0: entered promiscuous mode [ 98.255088][ T6025] syzkaller0: entered allmulticast mode [ 98.343124][ T6025] tipc: Can't bind to reserved service type 1 [ 98.359938][ T6028] netlink: 120 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.411791][ T6028] netlink: 120 bytes leftover after parsing attributes in process `syz.3.17'. [ 99.548204][ T6057] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 99.739992][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 99.788116][ T6056] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 100.074337][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 100.181518][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'. [ 101.526995][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.606184][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 101.630342][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.877566][ T6105] bridge_slave_0: left allmulticast mode [ 101.906079][ T6105] bridge_slave_0: left promiscuous mode [ 101.942670][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.016214][ T6105] bridge_slave_1: left allmulticast mode [ 102.032954][ T6105] bridge_slave_1: left promiscuous mode [ 102.041277][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.080845][ T6105] bond0: (slave bond_slave_0): Releasing backup interface [ 102.093528][ T6105] bond0: (slave bond_slave_1): Releasing backup interface [ 102.118566][ T6105] team0: Port device team_slave_0 removed [ 102.131211][ T6105] team0: Port device team_slave_1 removed [ 102.138809][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.146947][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.164266][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.172998][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.191497][ T6105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.232877][ T6106] team0: Mode changed to "broadcast" [ 102.869317][ T6126] x_tables: duplicate underflow at hook 2 [ 102.923959][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 102.976761][ T6103] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.33'. [ 103.105763][ T6126] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 103.429517][ T6150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.440456][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 103.573640][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.649990][ T6150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.725424][ T6150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.858363][ T6150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.963525][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805750e000: rx timeout, send abort [ 103.973611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e10000: rx timeout, send abort [ 103.983875][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805750e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.999124][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057e10000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.057250][ T6174] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 104.195896][ T6186] openvswitch: netlink: IP tunnel dst address not specified [ 104.423163][ T6188] netlink: 6 bytes leftover after parsing attributes in process `syz.0.51'. [ 104.525177][ T6192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.581750][ T6188] netlink: 128 bytes leftover after parsing attributes in process `syz.0.51'. [ 104.592207][ T6188] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 104.611523][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.661931][ T168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.813109][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 104.835266][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.874139][ T6208] hsr0: entered allmulticast mode [ 104.882350][ T6208] hsr_slave_0: entered allmulticast mode [ 104.888692][ T6208] hsr_slave_1: entered allmulticast mode [ 104.906465][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.930374][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.954123][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.964305][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.000543][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.016114][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 106.262365][ T6256] tipc: Enabling of bearer rejected, failed to enable media [ 106.675613][ T6271] __nla_validate_parse: 4 callbacks suppressed [ 106.675635][ T6271] netlink: 88 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.699157][ T6273] netlink: 88 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.722116][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.733701][ T6275] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 106.751707][ T6275] ip6erspan0: entered promiscuous mode [ 106.775130][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.776844][ T6276] xt_socket: unknown flags 0x50 [ 107.024447][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 107.647501][ T6304] openvswitch: netlink: IP tunnel dst address not specified [ 108.209596][ T6316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.350603][ T6309] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20004 [ 108.367164][ T6309] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 108.670710][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 109.138626][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 109.279698][ T6352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.318270][ T6362] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 109.707196][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 109.724088][ T6375] FAULT_INJECTION: forcing a failure. [ 109.724088][ T6375] name failslab, interval 1, probability 0, space 0, times 1 [ 109.757919][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT(full) [ 109.757943][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.757953][ T6375] Call Trace: [ 109.757960][ T6375] [ 109.757967][ T6375] dump_stack_lvl+0x189/0x250 [ 109.757997][ T6375] ? __pfx____ratelimit+0x10/0x10 [ 109.758022][ T6375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.758047][ T6375] ? __pfx__printk+0x10/0x10 [ 109.758074][ T6375] ? __pfx___might_resched+0x10/0x10 [ 109.758101][ T6375] should_fail_ex+0x414/0x560 [ 109.758148][ T6375] should_failslab+0xa8/0x100 [ 109.758169][ T6375] kmem_cache_alloc_node_noprof+0x77/0x710 [ 109.758196][ T6375] ? __alloc_skb+0x112/0x2d0 [ 109.758231][ T6375] __alloc_skb+0x112/0x2d0 [ 109.758265][ T6375] netlink_ack+0x146/0xa50 [ 109.758291][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.758333][ T6375] netlink_rcv_skb+0x28c/0x470 [ 109.758358][ T6375] ? __lock_acquire+0xab9/0xd20 [ 109.758378][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.758402][ T6375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.758453][ T6375] ? down_read+0x1ad/0x2e0 [ 109.758483][ T6375] genl_rcv+0x28/0x40 [ 109.758503][ T6375] netlink_unicast+0x82f/0x9e0 [ 109.758540][ T6375] ? __pfx_netlink_unicast+0x10/0x10 [ 109.758569][ T6375] ? netlink_sendmsg+0x642/0xb30 [ 109.758586][ T6375] ? skb_put+0x11b/0x210 [ 109.758619][ T6375] netlink_sendmsg+0x805/0xb30 [ 109.758649][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.758672][ T6375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.758703][ T6375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.758722][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.758742][ T6375] __sock_sendmsg+0x21c/0x270 [ 109.758772][ T6375] ____sys_sendmsg+0x505/0x830 [ 109.758799][ T6375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.758831][ T6375] ? import_iovec+0x74/0xa0 [ 109.758860][ T6375] ___sys_sendmsg+0x21f/0x2a0 [ 109.758883][ T6375] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.758947][ T6375] ? __fget_files+0x2a/0x420 [ 109.758965][ T6375] ? __fget_files+0x3a0/0x420 [ 109.758997][ T6375] __x64_sys_sendmsg+0x19b/0x260 [ 109.759021][ T6375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.759054][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 109.759086][ T6375] ? do_syscall_64+0xbe/0xfa0 [ 109.759122][ T6375] do_syscall_64+0xfa/0xfa0 [ 109.759143][ T6375] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.759165][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.759184][ T6375] ? clear_bhb_loop+0x60/0xb0 [ 109.759209][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.759227][ T6375] RIP: 0033:0x7f6fce98efc9 [ 109.759246][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.759262][ T6375] RSP: 002b:00007f6fcf7b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.759285][ T6375] RAX: ffffffffffffffda RBX: 00007f6fcebe5fa0 RCX: 00007f6fce98efc9 [ 109.759300][ T6375] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 109.759313][ T6375] RBP: 00007f6fcf7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.759325][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.759337][ T6375] R13: 00007f6fcebe6038 R14: 00007f6fcebe5fa0 R15: 00007fff9849ee48 [ 109.759373][ T6375] [ 110.337109][ T6395] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 110.364217][ T6399] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 110.455176][ T6401] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 110.473411][ T6401] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 110.508179][ T6404] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 110.535038][ T6404] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 110.612416][ T6412] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 111.282791][ T6444] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 111.566899][ T6451] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 111.654531][ T6451] team0: Port device syz_tun added [ 111.687374][ T6457] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 111.742344][ T6464] syzkaller0: entered promiscuous mode [ 111.773286][ T6464] syzkaller0: entered allmulticast mode [ 111.793575][ T6461] netlink: 240 bytes leftover after parsing attributes in process `syz.4.118'. [ 111.829099][ T6461] netlink: 'syz.4.118': attribute type 9 has an invalid length. [ 111.856493][ T6472] netlink: 'syz.0.124': attribute type 6 has an invalid length. [ 111.888795][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 111.903266][ T6472] netlink: 'syz.0.124': attribute type 7 has an invalid length. [ 111.912612][ T6472] netlink: 'syz.0.124': attribute type 8 has an invalid length. [ 112.049046][ T6473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.123'. [ 112.206959][ T6481] netlink: 'syz.2.127': attribute type 3 has an invalid length. [ 112.232377][ T6481] netlink: 'syz.2.127': attribute type 3 has an invalid length. [ 112.254023][ T6484] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 112.272736][ T6481] netlink: 'syz.2.127': attribute type 3 has an invalid length. [ 112.325375][ T6486] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 112.538565][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.661568][ T6486] bond1: (slave gretap1): making interface the new active one [ 112.680554][ T6486] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 112.696844][ T6496] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.793806][ T6496] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.814625][ T5844] IPVS: starting estimator thread 0... [ 112.843146][ T6507] FAULT_INJECTION: forcing a failure. [ 112.843146][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.858199][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 112.859472][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 112.859496][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.859506][ T6507] Call Trace: [ 112.859514][ T6507] [ 112.859521][ T6507] dump_stack_lvl+0x189/0x250 [ 112.859551][ T6507] ? __pfx____ratelimit+0x10/0x10 [ 112.859572][ T6507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.859596][ T6507] ? __pfx__printk+0x10/0x10 [ 112.859627][ T6507] should_fail_ex+0x414/0x560 [ 112.859659][ T6507] _copy_to_user+0x31/0xb0 [ 112.859683][ T6507] simple_read_from_buffer+0xe1/0x170 [ 112.859714][ T6507] proc_fail_nth_read+0x1b3/0x220 [ 112.859740][ T6507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.859766][ T6507] ? rw_verify_area+0x2a6/0x4d0 [ 112.859789][ T6507] ? __lock_acquire+0xab9/0xd20 [ 112.859805][ T6507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.859828][ T6507] vfs_read+0x200/0xa30 [ 112.859851][ T6507] ? fdget_pos+0x247/0x320 [ 112.859873][ T6507] ? __pfx___mutex_lock+0x10/0x10 [ 112.859896][ T6507] ? __pfx_vfs_read+0x10/0x10 [ 112.859921][ T6507] ? __fget_files+0x2a/0x420 [ 112.859943][ T6507] ? __fget_files+0x3a0/0x420 [ 112.859966][ T6507] ? __fget_files+0x2a/0x420 [ 112.859992][ T6507] ksys_read+0x145/0x250 [ 112.860018][ T6507] ? __pfx_ksys_read+0x10/0x10 [ 112.860046][ T6507] ? do_syscall_64+0xbe/0xfa0 [ 112.860072][ T6507] do_syscall_64+0xfa/0xfa0 [ 112.860090][ T6507] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.860111][ T6507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.860128][ T6507] ? clear_bhb_loop+0x60/0xb0 [ 112.860151][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.860167][ T6507] RIP: 0033:0x7f087238d9dc [ 112.860184][ T6507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.860198][ T6507] RSP: 002b:00007f08731de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.860219][ T6507] RAX: ffffffffffffffda RBX: 00007f08725e5fa0 RCX: 00007f087238d9dc [ 112.860232][ T6507] RDX: 000000000000000f RSI: 00007f08731de0a0 RDI: 0000000000000027 [ 112.860243][ T6507] RBP: 00007f08731de090 R08: 0000000000000000 R09: 0000000000000000 [ 112.860254][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.860264][ T6507] R13: 00007f08725e6038 R14: 00007f08725e5fa0 R15: 00007ffe08cb1738 [ 112.860296][ T6507] [ 112.918728][ T6505] IPVS: using max 27 ests per chain, 64800 per kthread [ 113.128148][ T6496] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.311661][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 113.465104][ T6518] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 113.495737][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.528185][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.552312][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.569322][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.654680][ T6496] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.883763][ T6531] v: renamed from vlan0 [ 113.910905][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 114.097628][ T6546] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 114.143504][ T6546] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 114.227311][ T79] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.276209][ T79] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.375313][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.464164][ T4409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.866099][ T6550] syz.1.140 (6550) used greatest stack depth: 17832 bytes left [ 115.206218][ T6592] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 115.735785][ T6612] Bluetooth: MGMT ver 1.23 [ 116.143710][ T6630] netlink: 100 bytes leftover after parsing attributes in process `syz.3.154'. [ 116.360820][ T6630] veth3: entered promiscuous mode [ 116.419345][ T6633] x_tables: duplicate underflow at hook 1 [ 116.804275][ T6646] Cannot find del_set index 4 as target [ 116.962987][ T6645] veth3: entered promiscuous mode [ 117.274730][ T6646] bridge2: entered promiscuous mode [ 117.332030][ T6646] bridge2: entered allmulticast mode [ 117.352017][ T6646] team0: Port device bridge2 added [ 117.358582][ T6650] tipc: Started in network mode [ 117.363577][ T6650] tipc: Node identity 82d8cca6fd5a, cluster identity 4711 [ 117.416241][ T6650] tipc: Enabled bearer , priority 0 [ 117.431180][ T6652] syzkaller0: entered promiscuous mode [ 117.436746][ T6652] syzkaller0: entered allmulticast mode [ 117.466419][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 117.640553][ T6642] tipc: Resetting bearer [ 117.751613][ T6678] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 117.773000][ T6642] tipc: Disabling bearer [ 117.828749][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 117.829064][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 118.004086][ T6689] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 118.298706][ T6701] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 118.570576][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.668650][ T6712] bond1: (slave gretap1): making interface the new active one [ 118.747505][ T6712] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.955882][ T6739] ksmbd: Unknown IPC event: 8, ignore. [ 119.120940][ T6743] x_tables: duplicate underflow at hook 2 [ 119.227442][ T6725] xt_CT: No such helper "netbios-ns" [ 119.325596][ T6745] netlink: 'syz.3.175': attribute type 2 has an invalid length. [ 119.406103][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'. [ 120.189602][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 120.209892][ T6767] netlink: 'syz.2.180': attribute type 13 has an invalid length. [ 120.221872][ T6767] netlink: 'syz.2.180': attribute type 17 has an invalid length. [ 120.445606][ T6775] can: request_module (can-proto-0) failed. [ 120.492321][ T6767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.547587][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.610991][ T6790] netlink: 25 bytes leftover after parsing attributes in process `syz.1.185'. [ 120.676124][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.026535][ T6807] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 122.072292][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 122.139000][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 122.161597][ T6834] IPVS: Unknown mcast interface: batadv0 [ 122.496354][ T6844] netlink: 216 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.558761][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.598499][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.764252][ T6851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.202'. [ 122.965333][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.030355][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.128918][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 123.208533][ T6860] netlink: 'syz.4.205': attribute type 13 has an invalid length. [ 123.253159][ T6860] netlink: 'syz.4.205': attribute type 17 has an invalid length. [ 123.686606][ T6860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.711466][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 123.750376][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.966396][ T6880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.235002][ T6880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.256397][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 124.386724][ T6880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.529542][ T6907] raw_sendmsg: syz.3.216 forgot to set AF_INET. Fix it! [ 124.566119][ T6880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.591018][ T6907] x_tables: duplicate underflow at hook 1 [ 124.855297][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.894625][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.937541][ T6925] x_tables: duplicate underflow at hook 1 [ 124.995984][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.004155][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.119676][ T168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.133920][ T168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.187176][ T168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.217052][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.247006][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.285133][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.355958][ T6948] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 126.804040][ T6958] lo: entered promiscuous mode [ 126.812848][ T6958] tunl0: entered promiscuous mode [ 126.821124][ T6958] gre0: entered promiscuous mode [ 126.827371][ T6958] gretap0: entered promiscuous mode [ 126.854464][ T6958] erspan0: entered promiscuous mode [ 126.872015][ T6958] ip_vti0: entered promiscuous mode [ 126.885637][ T6958] ip6_vti0: entered promiscuous mode [ 126.894058][ T6958] sit0: entered promiscuous mode [ 126.904080][ T6958] ip6tnl0: entered promiscuous mode [ 126.919310][ T6958] ip6gre0: entered promiscuous mode [ 126.926248][ T6958] syz_tun: entered promiscuous mode [ 126.933610][ T6958] ip6gretap0: entered promiscuous mode [ 126.943174][ T6958] bridge0: entered promiscuous mode [ 126.949677][ T6958] vcan0: entered promiscuous mode [ 126.955907][ T6958] bond0: entered promiscuous mode [ 126.963251][ T6958] bond_slave_0: entered promiscuous mode [ 126.970200][ T6958] bond_slave_1: entered promiscuous mode [ 126.979150][ T6958] team0: entered promiscuous mode [ 126.984693][ T6958] team_slave_0: entered promiscuous mode [ 126.992007][ T6958] team_slave_1: entered promiscuous mode [ 127.001050][ T6958] dummy0: entered promiscuous mode [ 127.007637][ T6958] nlmon0: entered promiscuous mode [ 127.017332][ T6958] caif0: entered promiscuous mode [ 127.023763][ T6958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.217331][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 127.434628][ T6985] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 128.420869][ T6985] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 128.558605][ T6994] __nla_validate_parse: 1 callbacks suppressed [ 128.558628][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.776427][ T7004] netlink: 'syz.4.236': attribute type 27 has an invalid length. [ 128.973690][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 129.092273][ T7009] bridge2: entered allmulticast mode [ 129.105593][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 129.125913][ T7016] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 129.160436][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 129.288936][ T7018] netlink: 'syz.3.241': attribute type 4 has an invalid length. [ 129.567487][ T7040] Bluetooth: MGMT ver 1.23 [ 129.608639][ T7046] sock: sock_set_timeout: `syz.0.246' (pid 7046) tries to set negative timeout [ 129.845023][ T7047] syzkaller0: entered promiscuous mode [ 129.857493][ T7047] syzkaller0: entered allmulticast mode [ 131.594300][ T7088] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 131.836107][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 131.957863][ T7124] tipc: Started in network mode [ 131.995042][ T7124] tipc: Node identity ac14140f, cluster identity 4711 [ 132.038350][ T7124] tipc: New replicast peer: 255.255.255.255 [ 132.093234][ T7124] tipc: Enabled bearer , priority 10 [ 132.180785][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 132.207964][ T7132] tipc: Disabling bearer [ 132.298275][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.265'. [ 132.302064][ T7143] smc: net device bond0 applied user defined pnetid SYZ0 [ 132.327518][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.2.265'. [ 132.473269][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 132.538359][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 132.648824][ T7148] team0: Port device syz_tun removed [ 133.138200][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.267446][ T7166] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 133.336994][ T7170] Bluetooth: MGMT ver 1.23 [ 133.659650][ T7180] team0: Mode changed to "activebackup" [ 134.263689][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 134.284968][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 134.302628][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 134.509106][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 134.549516][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 134.672794][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 135.079965][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 135.412438][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 135.443430][ T7242] bridge_slave_1: left allmulticast mode [ 135.453591][ T7242] bridge_slave_1: left promiscuous mode [ 135.462206][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.483228][ T7242] bridge_slave_0: left allmulticast mode [ 135.499749][ T7242] bridge_slave_0: left promiscuous mode [ 135.512632][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.619535][ T7246] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 135.848228][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 136.053492][ T7274] ipvlan2: entered promiscuous mode [ 136.198382][ T7280] netlink: 'syz.0.296': attribute type 5 has an invalid length. [ 136.248927][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 136.535670][ T7290] trusted_key: syz.1.300 sent an empty control message without MSG_MORE. [ 137.748337][ T7329] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 138.028416][ T7338] openvswitch: netlink: nsh attr 0 has unexpected len 29281 expected 0 [ 138.066480][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.099580][ T7361] macvlan2: entered promiscuous mode [ 139.105072][ T7361] macvlan2: entered allmulticast mode [ 139.120517][ T7361] bond2: entered promiscuous mode [ 139.131171][ T7361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.142485][ T7361] bond2: left promiscuous mode [ 139.312670][ T7369] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 139.360974][ T7370] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.520484][ T7377] tun0: tun_chr_ioctl cmd 2148553947 [ 139.840079][ T7386] netlink: 'syz.0.323': attribute type 58 has an invalid length. [ 139.856419][ T7386] __nla_validate_parse: 4 callbacks suppressed [ 139.856439][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.323'. [ 139.934332][ T7391] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 139.976617][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 140.131713][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 140.131887][ T7406] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 140.472324][ T7406] team0: left promiscuous mode [ 140.479283][ T7406] team_slave_0: left promiscuous mode [ 140.496311][ T7406] team_slave_1: left promiscuous mode [ 140.560445][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.592938][ T7406] team0: entered promiscuous mode [ 140.600163][ T7406] team_slave_0: entered promiscuous mode [ 140.609916][ T7406] team_slave_1: entered promiscuous mode [ 140.632590][ T7406] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.947866][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 141.149223][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.157606][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.708945][ T7417] bridge2: left allmulticast mode [ 141.720292][ T7422] hsr_slave_0: left promiscuous mode [ 141.726774][ T7422] hsr_slave_1: left promiscuous mode [ 141.831626][ T7443] bridge0: entered promiscuous mode [ 141.880347][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.910754][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.028398][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.088696][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.371525][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 142.562674][ T7485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.629383][ T7483] bond1: (slave batadv0): Opening slave failed [ 142.780718][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.864142][ T7496] tipc: Started in network mode [ 142.891354][ T7496] tipc: Node identity 9200b81a46cb, cluster identity 4711 [ 142.918114][ T7496] tipc: Enabled bearer , priority 0 [ 142.979118][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.030819][ T7497] syzkaller0: entered promiscuous mode [ 143.037147][ T7497] syzkaller0: entered allmulticast mode [ 143.057478][ T7496] tipc: Resetting bearer [ 143.131240][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.188824][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.343'. [ 143.214354][ T7495] tipc: Resetting bearer [ 143.248724][ T7495] tipc: Disabling bearer [ 143.335523][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.752361][ T7515] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 143.761381][ T36] bridge_slave_1: left allmulticast mode [ 143.767477][ T36] bridge_slave_1: left promiscuous mode [ 143.781743][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.814850][ T36] bridge_slave_0: left allmulticast mode [ 143.828689][ T36] bridge_slave_0: left promiscuous mode [ 143.845838][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.861309][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.873486][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.883284][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.895637][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.905310][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.103942][ T7523] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 144.419232][ T36] team0: Port device bridge2 removed [ 144.531096][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.546986][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.576256][ T36] bond0 (unregistering): Released all slaves [ 144.606478][ T36] bond1 (unregistering): Released all slaves [ 144.797039][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 144.846964][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'. [ 144.859121][ T7539] netlink: 128 bytes leftover after parsing attributes in process `syz.4.353'. [ 144.893220][ T7539] x_tables: ip_tables: osf match: only valid for protocol 6 [ 144.991113][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 145.209974][ T7550] warning: `syz.0.354' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.342413][ T36] hsr_slave_0: left promiscuous mode [ 145.349421][ T36] hsr_slave_1: left promiscuous mode [ 145.355449][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.363831][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.373401][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.381108][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.399686][ T36] veth1_macvtap: left promiscuous mode [ 145.406086][ T36] veth0_macvtap: left promiscuous mode [ 145.789522][ T36] team0 (unregistering): Port device team_slave_1 removed [ 145.825123][ T36] team0 (unregistering): Port device team_slave_0 removed [ 145.991744][ T5841] Bluetooth: hci1: command tx timeout [ 146.347379][ T7517] chnl_net:caif_netlink_parms(): no params data found [ 146.578388][ T7579] nbd3: detected capacity change from 0 to 63 [ 146.595703][ T7585] block nbd3: NBD_DISCONNECT [ 146.611911][ T7585] block nbd3: Disconnected due to user request. [ 146.621286][ T7585] block nbd3: shutting down sockets [ 146.642033][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.642036][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 146.642066][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 146.651962][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.678182][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 146.685973][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.695309][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 146.712316][ T5898] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.722964][ T5898] Buffer I/O error on dev nbd3, logical block 0, async page read [ 146.731834][ T5898] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.741994][ T5898] Buffer I/O error on dev nbd3, logical block 1, async page read [ 146.750780][ T5898] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.760070][ T5898] Buffer I/O error on dev nbd3, logical block 2, async page read [ 146.764857][ T7577] bond3: entered promiscuous mode [ 146.769525][ T5898] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.784331][ T5898] Buffer I/O error on dev nbd3, logical block 3, async page read [ 146.788021][ T7577] bond3: entered allmulticast mode [ 146.793069][ T5898] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.808011][ T5898] Buffer I/O error on dev nbd3, logical block 0, async page read [ 146.816402][ T5898] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.826119][ T5898] Buffer I/O error on dev nbd3, logical block 1, async page read [ 146.828296][ T7577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.834152][ T5898] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.853968][ T5898] ldm_validate_partition_table(): Disk read failed. [ 146.863459][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.868622][ T5898] Dev nbd3: unable to read RDB block 0 [ 146.874827][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.886552][ T5898] nbd3: unable to read partition table [ 146.887964][ T7517] bridge_slave_0: entered allmulticast mode [ 146.918365][ T7517] bridge_slave_0: entered promiscuous mode [ 146.926079][ T5898] ldm_validate_partition_table(): Disk read failed. [ 146.941202][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.951961][ T7590] netlink: 56 bytes leftover after parsing attributes in process `syz.4.359'. [ 146.956619][ T5898] Dev nbd3: unable to read RDB block 0 [ 146.969282][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.976563][ T7517] bridge_slave_1: entered allmulticast mode [ 146.982730][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 147.000988][ T7517] bridge_slave_1: entered promiscuous mode [ 147.014254][ T5898] nbd3: unable to read partition table [ 147.374897][ T7597] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 147.404864][ T7517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.427604][ T7517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.546912][ T7517] team0: Port device team_slave_0 added [ 147.559460][ T7517] team0: Port device team_slave_1 added [ 147.631477][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 147.656580][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.663936][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.691565][ T7517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.721955][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.738122][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.766380][ T7517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.988233][ T5915] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 148.000627][ T5915] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 148.009250][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 148.018654][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.028985][ T5915] Workqueue: events l2cap_info_timeout [ 148.034466][ T5915] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 148.040373][ T5915] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 148.060604][ T5915] RSP: 0018:ffffc9000aa87788 EFLAGS: 00010202 [ 148.066691][ T5915] RAX: dffffc0000000000 RBX: ffffffff891ede58 RCX: 63f0536396f0ac00 [ 148.074776][ T5915] RDX: 0000000000000000 RSI: ffffffff891ede58 RDI: 000000000000004c [ 148.083199][ T5915] RBP: ffffffff8a4fa515 R08: 0000000000000001 R09: 0000000000000000 [ 148.091356][ T5915] R10: dffffc0000000000 R11: ffffffff8a4fa4d0 R12: 0000000000000000 [ 148.099789][ T5915] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 148.108416][ T5915] FS: 0000000000000000(0000) GS:ffff888126141000(0000) knlGS:0000000000000000 [ 148.117620][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.124390][ T5915] CR2: 00007fd6d8d156c0 CR3: 0000000032204000 CR4: 00000000003526f0 [ 148.132737][ T5915] Call Trace: [ 148.136173][ T5915] [ 148.139385][ T5915] __kasan_check_byte+0x12/0x40 [ 148.144441][ T5915] lock_acquire+0x8d/0x360 [ 148.148930][ T5915] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.154442][ T5915] ? __cancel_work+0x254/0x2e0 [ 148.159382][ T5915] lock_sock_nested+0x48/0x100 [ 148.164619][ T5915] ? l2cap_sock_ready_cb+0x45/0x140 [ 148.169981][ T5915] l2cap_sock_ready_cb+0x45/0x140 [ 148.175343][ T5915] l2cap_conn_start+0x76d/0xe50 [ 148.180243][ T5915] ? __pfx_l2cap_conn_start+0x10/0x10 [ 148.185647][ T5915] ? __lock_acquire+0xab9/0xd20 [ 148.190768][ T5915] ? __pfx___mutex_lock+0x10/0x10 [ 148.196098][ T5915] ? process_scheduled_works+0x9ef/0x17b0 [ 148.202171][ T5915] l2cap_info_timeout+0x68/0xa0 [ 148.207224][ T5915] ? process_scheduled_works+0x9ef/0x17b0 [ 148.216613][ T5915] process_scheduled_works+0xae1/0x17b0 [ 148.222379][ T5915] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.228567][ T5915] worker_thread+0x8a0/0xda0 [ 148.233173][ T5915] kthread+0x711/0x8a0 [ 148.237511][ T5915] ? __pfx_worker_thread+0x10/0x10 [ 148.242650][ T5915] ? __pfx_kthread+0x10/0x10 [ 148.247253][ T5915] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.252453][ T5915] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.257663][ T5915] ? __pfx_kthread+0x10/0x10 [ 148.262267][ T5915] ret_from_fork+0x4bc/0x870 [ 148.267080][ T5915] ? __pfx_ret_from_fork+0x10/0x10 [ 148.273065][ T5915] ? __switch_to_asm+0x39/0x70 [ 148.278125][ T5915] ? __switch_to_asm+0x33/0x70 [ 148.283175][ T5915] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 148.287983][ T5915] ret_from_fork_asm+0x1a/0x30 [ 148.292852][ T5915] [ 148.295873][ T5915] Modules linked in: [ 148.300591][ T5915] ---[ end trace 0000000000000000 ]--- [ 148.312281][ T5915] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 148.318698][ T5915] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 148.319950][ T5841] Bluetooth: hci1: command tx timeout [ 148.587766][ T5915] RSP: 0018:ffffc9000aa87788 EFLAGS: 00010202 [ 148.593967][ T5915] RAX: dffffc0000000000 RBX: ffffffff891ede58 RCX: 63f0536396f0ac00 [ 148.628149][ T5915] RDX: 0000000000000000 RSI: ffffffff891ede58 RDI: 000000000000004c [ 148.669404][ T5915] RBP: ffffffff8a4fa515 R08: 0000000000000001 R09: 0000000000000000 [ 148.689352][ T5915] R10: dffffc0000000000 R11: ffffffff8a4fa4d0 R12: 0000000000000000 [ 148.718089][ T5915] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 148.726302][ T5915] FS: 0000000000000000(0000) GS:ffff888126141000(0000) knlGS:0000000000000000 [ 148.777792][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.784454][ T5915] CR2: 0000200000000180 CR3: 000000007e9aa000 CR4: 00000000003526f0 [ 148.817812][ T5915] Kernel panic - not syncing: Fatal exception [ 148.824436][ T5915] Kernel Offset: disabled [ 148.828817][ T5915] Rebooting in 86400 seconds..