last executing test programs: 5m4.616820444s ago: executing program 4 (id=5231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x26020480) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000006c0)='ns/time_for_children\x00') unshare(0x40080) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000004100010026bd700004000000010000000400488010005e800c00108004000580040008800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 5m4.351885563s ago: executing program 4 (id=5236): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@multicast2, @broadcast, 0x0}, &(0x7f0000000380)=0xc) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x7, 0x0}, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xb54, 0x55, &(0x7f00000002c0)=""/85, 0x41100, 0x10, '\x00', r6, @sk_skb=0x26, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x8, 0x3ff, 0x10000}, 0x10, r8, r1, 0x2, &(0x7f0000000600)=[r2, r2, r4, r9, r2, r4], &(0x7f0000000640)=[{0x0, 0x1, 0x8, 0x6}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet_sctp(r0, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="04", 0x1}, {&(0x7f0000000000)="b83f17081468923679c933983ed93cfc4905ee9609be93eda9869e9bb9bf74a8081282faf1", 0x25}, {&(0x7f00000000c0)="b340a180e19a0acd5e46f2e01d88a1e86e8d7826c47da1e037b61b13f038c130e4273a2ce6afa1869fc2955ae6f98d16ad6c81c9a35dfd142413eae5d934c930913a43e39c549c62899da5b49341d0984cd6587e7214ba3b4cc8706b5a4c9f7706cddf44aebc7ae641172b7190517e84ce410ddc4e155b6bfcb24e2b85823327c05fbfcc419fa05ee4cf50a743db138b6785114ed247696de606e7e477139faa272b76e053ab32fc", 0xa8}], 0x3, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) 5m3.02151037s ago: executing program 4 (id=5244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a000000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac14f7aa0c00028005000100000000002400028014000180080001007f00000108000200640101000c000280050001000000000008000740000000003c000e800500028000"], 0xa0}}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0xff, 0x73, 0x0, 0xfffffffc, 0x9, 0x0, 0x7fffffff}) (async, rerun: 64) r1 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 5m2.833349334s ago: executing program 4 (id=5247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000d80)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hopopts={{0x18, 0x29, 0x36, {0x6c}}}, @tclass={{0x14, 0x29, 0x43, 0x1000}}], 0x30}, 0x10010) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4000027}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x20008080) 5m2.567863027s ago: executing program 4 (id=5250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_proto_private(r2, 0x89ec, &(0x7f0000000380)="292042543793ea3e08ad1e00bb95efacd92558b48cde5ca666fb4a585104217bce7d5593b8497449146df64c9cbd3b5949b986ee64b2bf89143a34cbe5506ef75049b80a2a7452aeed750df24a644405dfeb3e7c445fba12758610844a5179300e2ddf13b4edb791494adfab72501dd7d074d181ce30444611c27c28c053c187a27d3fde7ededc880346ca6da7a8aec0716fbd652cace38ab3455caa2b045260bad062dfe7865f5202f400b9c1227d9ed1b1e0e5b3d3b56719c4aad08b9fc344b6e42cf75b6127c92be17921f20c04e0887e9502059c7b035116797f12") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(0x0, r1) bind$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="28df40003ac17859a837738be2531a00000000", @ANYRES16=r4, @ANYBLOB="02002bbd7000fcdbdf2502000000080009000200000008001800ac1414aa0c000f000500000000000000080019000a01010208000c000100000006001c00020e000006001c00400000000500220001000000050012009c00000006001d0003000000"], 0x68}, 0x1, 0x0, 0x0, 0x340008d7}, 0x81) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) listen(0xffffffffffffffff, 0x8001) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000000008500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 5m2.487561798s ago: executing program 4 (id=5251): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0xab0, 0x0, 0x12, 0x60d, 0x8f8, 0x202, 0x9e0, 0x2e8, 0x2e8, 0x9e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x8b0, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x32, 0x1}, {0x9, 0x1}, {0x4, 0x2}, {0xc}, {0x8001}, {0x8001, 0x2}, {0x8, 0x1}, {0x1}, {0xfffffc00, 0x2}, {0x3, 0x1}, {0xb46, 0x3}], [{0x8, 0x6}, {0x9, 0x5}, {0x6, 0x94}, {0x8, 0x9}, {0x401, 0x4}, {0x7f, 0xc}, {0x0, 0xb}, {0x6, 0xfffffffb}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0xe584}], 0x3, 0x9}, {[{0x8, 0x3}, {0x3904}, {0x8, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x10000}, {0x5bf8cbd5, 0x3}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x80000000, 0x2}], [{0xb, 0x8000}, {0x43aa, 0x9}, {0x0, 0x7f}, {0x8000, 0x8}, {0x1}, {0x0, 0x200}, {0x808, 0x6}, {0xfffffff7, 0x4}, {0x6, 0x5}, {0x576, 0x5}, {0x4, 0x6}], 0x3, 0x2}, {[{0x5fa0b8ea, 0x1}, {0x1, 0x1}, {0x41fd4935}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0xfffffffb, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x3eb, 0x3}], [{0x5, 0x3}, {0x5}, {0x5, 0x100}, {0x0, 0x5}, {0x1, 0x9}, {0x8, 0xc54}, {0x7, 0xfffffff9}, {0x7fffffff, 0x5fe}, {0x672ca0a5, 0x8}, {0xffffffff, 0x1}, {0x5, 0x7fff}], 0x5, 0x3}, {[{}, {0x8001}, {0x9, 0x3}, {0x2}, {0x7f}, {0x4}, {0x7, 0x9a4c8d3ffb66c6c5}, {0xfffff09b, 0x2}, {0x4}, {0x0, 0x2}, {0x2, 0x1}], [{0x191, 0x1c}, {0x0, 0x9c07}, {0x24df, 0x2}, {0xfffffa9d, 0x9}, {0x3, 0xff}, {0x80, 0x1}, {0x10000, 0x5}, {0x1, 0x1}, {0x22, 0xac}, {0x3, 0x63bbea2e}, {0x81, 0xabad}], 0x2, 0xb}, {[{0x4, 0x1}, {0xfffffffa, 0x3}, {0x97}, {0x2e400000}, {0x3}, {0x5a93, 0x3}, {0x6, 0x39dd1294ad71c003}, {0x8, 0x3}, {0x3a, 0x1}, {0x5, 0x2}, {0x3d5, 0x3}], [{0x40, 0x4}, {0x1, 0x7ece}, {0x1, 0xf9}, {0x8, 0x7}, {0xc, 0x4}, {0x9, 0x80}, {0x2, 0x4}, {0x5, 0x5}, {0x464e, 0x73}, {0x800, 0x9}, {0x85, 0x38b1}], 0x7, 0x8}, {[{0x8001, 0x2}, {0x7}, {0xc0, 0x2}, {0x7, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x7}, {0xffffffb0}, {0x0, 0x1}, {0x5, 0x1}, {0xb}], [{0x9, 0x1}, {0xce5, 0x2}, {0xffff, 0x7ff}, {0xcc7c, 0x6}, {0xf0, 0x4}, {0x8, 0xb2}, {0x9, 0x5}, {0x6, 0xfff}, {0x7013f9bd, 0x5}, {0x298, 0x2d86}, {0x7b, 0x20b4}], 0x3, 0x6}, {[{0x64c}, {0x0, 0x3}, {0x2, 0x3}, {0x1}, {0x4, 0x1}, {0xffff}, {0x3}, {0x4, 0x3}, {0x5, 0x3}, {0xf, 0x2}, {0xfffffffb}], [{0x6, 0x1}, {0x8, 0x8}, {0x69, 0x7ff}, {0x7, 0x7}, {0x6d62edf, 0x5}, {0x80, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x101, 0x6}, {0x2, 0x6}], 0x3, 0x2}, {[{0x9, 0x3}, {0x8, 0x1}, {0x7, 0x1}, {0x4a9, 0x2}, {0x40, 0x2}, {0x5, 0x3}, {0x9, 0x1}, {0x5}, {0x9, 0x1}, {0xfffffff9, 0x2}, {0x7818b862, 0x1}], [{0x7fff, 0x5}, {0xfe, 0x6}, {0x1, 0x4}, {0x7fff, 0xdd0c}, {0x4}, {0x4, 0x1}, {0x6, 0x7}, {0xfffffff5, 0x3ff}, {0x80000000, 0xfb2}, {0x8}, {0x7, 0x3}], 0x5, 0xa}, {[{0xa, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x2}, {0x25e}, {0x2, 0x3}, {0x0, 0x1}, {0xdf5, 0x3}, {0x0, 0x1}, {0xe, 0x2}], [{0x3, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0xffe00000, 0x4}, {0x10, 0x401}, {0x7, 0x5a}, {0x2}, {0x0, 0x4}, {0x4, 0x10000}, {0x0, 0x101}, {0x9, 0xfffffffa}], 0x0, 0x9}, {[{0x4, 0x2}, {0x4, 0x3}, {0xfffffff8, 0x1}, {0xff, 0x2}, {0x6}, {0x1ff, 0x1}, {0x2, 0x3}, {0xe}, {0x3b51, 0x1}, {0x7, 0x3}, {0x7fff}], [{0xff}, {0x3b2, 0xaaf0}, {0x8, 0xeffe}, {0x80000001, 0x9}, {0x200, 0x7}, {0xf50, 0x7fff}, {0x97, 0x10001}, {0x7, 0x7}, {0x9c37, 0x3}, {0x4, 0x6}, {0x8, 0x5}], 0xb, 0x1}, {[{0xffffff44, 0x3}, {0xfffffffd}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2432787ee9c7eb13}, {0xd, 0x2}, {0xffff8000, 0x3}, {0xedd2, 0x3}, {0x7}, {0x10}, {0x0, 0x3}], [{0xe, 0x5}, {0xc6f, 0x401}, {0x1, 0x2}, {0x5, 0x3}, {0xffff, 0xffff5d63}, {0x3, 0x3}, {0x6, 0x704}, {0x7, 0x86a}, {0x2}, {0x100000, 0x1}, {0x2, 0xd}], 0x8}], 0x9}}, @common=@icmp6={{0x28}, {0xd, "ea98", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x24, "d8a8c8a584f6607ab62735146bd5fc7fc221094cc78e2ee6645f9841b10b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005500ffe894000000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x2, 0x0, 0x0, 0xb, 0x9, 0x7}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000400000061190400006e0000952f5dc1ece6786831972d2cf7d9bf00000000000000b6f380742247ef5d6df5ba3306497f247ad2f720d0f2e4e9610fc111a03e92a9402232d52f4e530f9388f39f9b4d4c315974ae66c4e70a90a2b2ed18dbdb0788b05e35eba2c04e4a8342c9a15e9aad8a25db83e4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe84}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000003c0)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x28, 0x9, 0x2, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6tnl0\x00', r11, 0x4, 0xfc, 0x3, 0x7fff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0xffff0001, 0x2dc}}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 4m47.281027912s ago: executing program 32 (id=5251): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0xab0, 0x0, 0x12, 0x60d, 0x8f8, 0x202, 0x9e0, 0x2e8, 0x2e8, 0x9e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x8b0, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x32, 0x1}, {0x9, 0x1}, {0x4, 0x2}, {0xc}, {0x8001}, {0x8001, 0x2}, {0x8, 0x1}, {0x1}, {0xfffffc00, 0x2}, {0x3, 0x1}, {0xb46, 0x3}], [{0x8, 0x6}, {0x9, 0x5}, {0x6, 0x94}, {0x8, 0x9}, {0x401, 0x4}, {0x7f, 0xc}, {0x0, 0xb}, {0x6, 0xfffffffb}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0xe584}], 0x3, 0x9}, {[{0x8, 0x3}, {0x3904}, {0x8, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x10000}, {0x5bf8cbd5, 0x3}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x80000000, 0x2}], [{0xb, 0x8000}, {0x43aa, 0x9}, {0x0, 0x7f}, {0x8000, 0x8}, {0x1}, {0x0, 0x200}, {0x808, 0x6}, {0xfffffff7, 0x4}, {0x6, 0x5}, {0x576, 0x5}, {0x4, 0x6}], 0x3, 0x2}, {[{0x5fa0b8ea, 0x1}, {0x1, 0x1}, {0x41fd4935}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0xfffffffb, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x3eb, 0x3}], [{0x5, 0x3}, {0x5}, {0x5, 0x100}, {0x0, 0x5}, {0x1, 0x9}, {0x8, 0xc54}, {0x7, 0xfffffff9}, {0x7fffffff, 0x5fe}, {0x672ca0a5, 0x8}, {0xffffffff, 0x1}, {0x5, 0x7fff}], 0x5, 0x3}, {[{}, {0x8001}, {0x9, 0x3}, {0x2}, {0x7f}, {0x4}, {0x7, 0x9a4c8d3ffb66c6c5}, {0xfffff09b, 0x2}, {0x4}, {0x0, 0x2}, {0x2, 0x1}], [{0x191, 0x1c}, {0x0, 0x9c07}, {0x24df, 0x2}, {0xfffffa9d, 0x9}, {0x3, 0xff}, {0x80, 0x1}, {0x10000, 0x5}, {0x1, 0x1}, {0x22, 0xac}, {0x3, 0x63bbea2e}, {0x81, 0xabad}], 0x2, 0xb}, {[{0x4, 0x1}, {0xfffffffa, 0x3}, {0x97}, {0x2e400000}, {0x3}, {0x5a93, 0x3}, {0x6, 0x39dd1294ad71c003}, {0x8, 0x3}, {0x3a, 0x1}, {0x5, 0x2}, {0x3d5, 0x3}], [{0x40, 0x4}, {0x1, 0x7ece}, {0x1, 0xf9}, {0x8, 0x7}, {0xc, 0x4}, {0x9, 0x80}, {0x2, 0x4}, {0x5, 0x5}, {0x464e, 0x73}, {0x800, 0x9}, {0x85, 0x38b1}], 0x7, 0x8}, {[{0x8001, 0x2}, {0x7}, {0xc0, 0x2}, {0x7, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x7}, {0xffffffb0}, {0x0, 0x1}, {0x5, 0x1}, {0xb}], [{0x9, 0x1}, {0xce5, 0x2}, {0xffff, 0x7ff}, {0xcc7c, 0x6}, {0xf0, 0x4}, {0x8, 0xb2}, {0x9, 0x5}, {0x6, 0xfff}, {0x7013f9bd, 0x5}, {0x298, 0x2d86}, {0x7b, 0x20b4}], 0x3, 0x6}, {[{0x64c}, {0x0, 0x3}, {0x2, 0x3}, {0x1}, {0x4, 0x1}, {0xffff}, {0x3}, {0x4, 0x3}, {0x5, 0x3}, {0xf, 0x2}, {0xfffffffb}], [{0x6, 0x1}, {0x8, 0x8}, {0x69, 0x7ff}, {0x7, 0x7}, {0x6d62edf, 0x5}, {0x80, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x101, 0x6}, {0x2, 0x6}], 0x3, 0x2}, {[{0x9, 0x3}, {0x8, 0x1}, {0x7, 0x1}, {0x4a9, 0x2}, {0x40, 0x2}, {0x5, 0x3}, {0x9, 0x1}, {0x5}, {0x9, 0x1}, {0xfffffff9, 0x2}, {0x7818b862, 0x1}], [{0x7fff, 0x5}, {0xfe, 0x6}, {0x1, 0x4}, {0x7fff, 0xdd0c}, {0x4}, {0x4, 0x1}, {0x6, 0x7}, {0xfffffff5, 0x3ff}, {0x80000000, 0xfb2}, {0x8}, {0x7, 0x3}], 0x5, 0xa}, {[{0xa, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x2}, {0x25e}, {0x2, 0x3}, {0x0, 0x1}, {0xdf5, 0x3}, {0x0, 0x1}, {0xe, 0x2}], [{0x3, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0xffe00000, 0x4}, {0x10, 0x401}, {0x7, 0x5a}, {0x2}, {0x0, 0x4}, {0x4, 0x10000}, {0x0, 0x101}, {0x9, 0xfffffffa}], 0x0, 0x9}, {[{0x4, 0x2}, {0x4, 0x3}, {0xfffffff8, 0x1}, {0xff, 0x2}, {0x6}, {0x1ff, 0x1}, {0x2, 0x3}, {0xe}, {0x3b51, 0x1}, {0x7, 0x3}, {0x7fff}], [{0xff}, {0x3b2, 0xaaf0}, {0x8, 0xeffe}, {0x80000001, 0x9}, {0x200, 0x7}, {0xf50, 0x7fff}, {0x97, 0x10001}, {0x7, 0x7}, {0x9c37, 0x3}, {0x4, 0x6}, {0x8, 0x5}], 0xb, 0x1}, {[{0xffffff44, 0x3}, {0xfffffffd}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2432787ee9c7eb13}, {0xd, 0x2}, {0xffff8000, 0x3}, {0xedd2, 0x3}, {0x7}, {0x10}, {0x0, 0x3}], [{0xe, 0x5}, {0xc6f, 0x401}, {0x1, 0x2}, {0x5, 0x3}, {0xffff, 0xffff5d63}, {0x3, 0x3}, {0x6, 0x704}, {0x7, 0x86a}, {0x2}, {0x100000, 0x1}, {0x2, 0xd}], 0x8}], 0x9}}, @common=@icmp6={{0x28}, {0xd, "ea98", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x24, "d8a8c8a584f6607ab62735146bd5fc7fc221094cc78e2ee6645f9841b10b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005500ffe894000000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x2, 0x0, 0x0, 0xb, 0x9, 0x7}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000400000061190400006e0000952f5dc1ece6786831972d2cf7d9bf00000000000000b6f380742247ef5d6df5ba3306497f247ad2f720d0f2e4e9610fc111a03e92a9402232d52f4e530f9388f39f9b4d4c315974ae66c4e70a90a2b2ed18dbdb0788b05e35eba2c04e4a8342c9a15e9aad8a25db83e4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe84}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000003c0)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x28, 0x9, 0x2, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6tnl0\x00', r11, 0x4, 0xfc, 0x3, 0x7fff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0xffff0001, 0x2dc}}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 2m40.673715751s ago: executing program 3 (id=6304): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) syz_emit_ethernet(0x12f0, &(0x7f00000009c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "217bc9", 0x12ba, 0x2f, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x2b, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @srh={0x0, 0xc, 0x4, 0x6, 0x2, 0x40, 0xbd, [@dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00', @loopback, @dev={0xfe, 0x80, '\x00', 0x22}, @empty, @local]}, @fragment={0x29, 0x0, 0x3, 0x1, 0x0, 0x5, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa3, 0x3, [0xd], "c38954a3d63d1990f304bd50c663e7d53e9d61ce0aca3c3d53fa1c93a7946393aae84e5090a5bf269d579c01a4d4862ecb4bb0d092c339cb8d6648c902c6714771818eda2c881cf6a3d648192c194a5cf3360b303de71ecf414779808eb5cbf83f47204fde250039ffabd86af2ebe635c00312bae92cd84f6e7342c877152133651246264ec6e31aa09333820ec34f7520344c3b03410fc128c76e3492764ad32b162c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "286f6ad840c7b9345a68610351a38b8b545a41b624505f753eb5c005eccc3da3f968295932b9b5d0e2b87af982bcc471cedb8e07bdc0b5e7aa030cfd5a29b59f982c08bd42761336995683c23ee2d944ea096f40ed852c3549f7e69ee4797f70b21e45aba1a5ca8fb84db0bacb4fee53f69940883347590f574b461a5c35bd82cf412a5eef71433de7700808"}, {0x8, 0x88be, 0x3, {{0x6, 0x1, 0x47, 0x1, 0x0, 0x2, 0x1, 0xc}, 0x1, {0x17}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x6, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x2, {0x5, 0x3ff, 0x2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a7ef71fd851418c4f05b4789f6523d5d50373b87f04fc5c836e376d5f41d37c07fd0b3eb7fb4dba03b39d080cc829d10e73d4dadcc1b59154b6af9b0a0fd3b158139c50273376beb85d803b368879d9f313066f303c4b29256ac5477790a92412ab2eca8f17b8068115db0747e566be13f1566f59fc2a643361844a8e0353d1d6fce75a5faa7531393bc5da5c730edcc63acfa2e93fd99a477a682cd893f1a2d189f7185bc886169853a8a97b349a0f2ca7661698e0e4cf0fbf54e30dabea37b05b84c589c"}}}}}}}, 0x0) 2m38.10761711s ago: executing program 3 (id=6323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a310000000019000480240001800b00c85483e474686472000014000280080001400000000e08000640000000040900020073797a32140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2m35.953646016s ago: executing program 3 (id=6344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000001c0)=0xd, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'veth0_to_bond\x00', {0x2, 0x0, @multicast1}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) unshare(0xa020480) (async) unshare(0xa020480) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x1298, @none, 0x4, 0x1}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001bdaa9d177713ba0d5d9ec741c19697757eb7792e0d6f65ac11cd133c43ed31725c16f4cff3ea026db6e7bed465dfcdc794246a3381e30fef5aa0065ec653b49cba3e55c6adaba166677559817fa3c4e07cd5451490ca52df4c6ebda105f94204a040c86fa36e3a910b9d05b175bf7b7907cfa2e152e0cd26e5106b85a00"/140], 0x30}}, 0x2000c000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001bdaa9d177713ba0d5d9ec741c19697757eb7792e0d6f65ac11cd133c43ed31725c16f4cff3ea026db6e7bed465dfcdc794246a3381e30fef5aa0065ec653b49cba3e55c6adaba166677559817fa3c4e07cd5451490ca52df4c6ebda105f94204a040c86fa36e3a910b9d05b175bf7b7907cfa2e152e0cd26e5106b85a00"/140], 0x30}}, 0x2000c000) 2m34.984408777s ago: executing program 3 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x20004890) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)={0x24, r7, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'k'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x83, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001100040027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001000000000040018001980140004fa6b1e1d80001c3553b66845e1c719c6b1"], 0x38}, 0x1, 0x0, 0x0, 0xea03238506852936}, 0x4000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xb}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r14, @ANYBLOB="ba4581a7eb5421ab64394072f5b057983c03e45d41324a92", @ANYRES32=r1, @ANYRESDEC=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004c10) 2m30.579971446s ago: executing program 3 (id=6372): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x4c23, @loopback}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r3, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0xad) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 2m29.355537524s ago: executing program 3 (id=6385): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000342f1b000000000000000000"], 0x18}, 0x922bac8556bdad8e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x2c020400) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8935, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r8 = socket(0x400000000010, 0x2, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/166, 0xa6}], 0x4, &(0x7f0000000740)=""/62, 0x3e}, 0x40012001) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xffffff29, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x1a, 0x2c, 0xf23, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xa}, {0x0, 0x2}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c041}, 0x0) 2m13.984477489s ago: executing program 33 (id=6385): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000342f1b000000000000000000"], 0x18}, 0x922bac8556bdad8e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x2c020400) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8935, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r8 = socket(0x400000000010, 0x2, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/166, 0xa6}], 0x4, &(0x7f0000000740)=""/62, 0x3e}, 0x40012001) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xffffff29, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x1a, 0x2c, 0xf23, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xa}, {0x0, 0x2}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c041}, 0x0) 45.928943046s ago: executing program 2 (id=7162): r0 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030520f9dadf2500000000000000", @ANYRES32=0x0, @ANYBLOB="35030200000000002400128009000100626f6e640000000014000280050001000100000008000200", @ANYRES32], 0x44}}, 0x20008080) 45.3457386s ago: executing program 2 (id=7168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x30, 0x5f, 0x2e, 0xbd14b387bbc57796]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0097f9d2ffffff925782a5000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001}, 0x3e) 45.262957321s ago: executing program 2 (id=7170): syz_emit_ethernet(0x50, &(0x7f0000000000)={@remote, @multicast, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'o', '\rJr', 0x88a8, "86f896d7043ee128dde09628b73bcee15a747fbee33af6cf0176d3063c6c8112a21668ec881d906b302d5b9a55b6dda9b253221db7aa0718ed8a"}}}}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x4, &(0x7f00000000c0), 0x8) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x4, &(0x7f00000000c0), 0x8) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) close(r0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140)=0x2) r1 = socket$inet6(0xa, 0xa, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @loopback, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x4, 0x4, 0x8, 0x5d5dd550, 0x4, @private1, @empty, 0x20, 0x8000, 0x40, 0x2}}) r3 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x80000) clock_gettime(0x0, &(0x7f0000000c40)) (async) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000000c00)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/233, 0xe9}], 0x8, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}], 0x1, 0x2040, &(0x7f0000000c80)={r4, r5+10000000}) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0xb, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x82e8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) accept$inet(r15, &(0x7f0000000dc0)={0x2, 0x0, @local}, &(0x7f0000000e00)=0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000e40)={0x71, 0x1ff, 0x1, 0x1ff, 0x4, 0x0, [{0xafe, 0x6, 0x7, '\x00', 0xe03}, {0xfd, 0x4, 0xffffffffffff0000, '\x00', 0x284}, {0xc22, 0xa, 0x4, '\x00', 0x200}, {0x2, 0x7, 0x800, '\x00', 0x4}]}) sendto$inet6(r15, &(0x7f0000000f40)="1661d225cdac0cda52d7c889063602e69d741e017a6d0bf9f638cefedce14878d593ae301505c1250f65c1aaae166d715be546bd33d1a9736bad1d3610e3fc21dbf3a2b3eb2e3f931cb2689bdf46b61e5c7811fbd3e41d91a271d5d54ba1a804485e2d58434133206b2e6521cef74c3df5e66f15c596", 0x76, 0x0, 0x0, 0x0) (async) sendto$inet6(r15, &(0x7f0000000f40)="1661d225cdac0cda52d7c889063602e69d741e017a6d0bf9f638cefedce14878d593ae301505c1250f65c1aaae166d715be546bd33d1a9736bad1d3610e3fc21dbf3a2b3eb2e3f931cb2689bdf46b61e5c7811fbd3e41d91a271d5d54ba1a804485e2d58434133206b2e6521cef74c3df5e66f15c596", 0x76, 0x0, 0x0, 0x0) sendmsg$rds(r13, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f00000020c0)=""/98, 0x62}, {&(0x7f0000002140)=""/111, 0x6f}, {&(0x7f00000021c0)=""/7, 0x7}], 0x5, &(0x7f0000002a40)=[@cswp={0x58, 0x114, 0x7, {{0x1}, &(0x7f0000002280)=0x4, &(0x7f00000022c0)=0x9, 0x4, 0x0, 0x0, 0x80, 0x40}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf8}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x8}, &(0x7f0000002300)=0x7, &(0x7f0000002340)=0xfffffffffffeffff, 0x4, 0x9, 0x8, 0x7, 0x0, 0xfc00000000000000}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0xc3ce}, &(0x7f0000002380), &(0x7f00000023c0)=0x380000, 0x0, 0x5, 0xe, 0x8001, 0x74, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x10}, {&(0x7f0000002400)=""/218, 0xda}, &(0x7f0000002940)=[{&(0x7f0000002500)=""/116, 0x74}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/99, 0x63}, {&(0x7f0000002680)=""/186, 0xba}, {&(0x7f0000002740)=""/229, 0xe5}, {&(0x7f0000002840)=""/23, 0x17}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)}], 0x8, 0x2, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x1}, &(0x7f00000029c0)=0x3, &(0x7f0000002a00)=0x5, 0xbc, 0x2, 0x1b, 0x3, 0xc, 0x80}}], 0x1d8}, 0x40041) (async) sendmsg$rds(r13, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f00000020c0)=""/98, 0x62}, {&(0x7f0000002140)=""/111, 0x6f}, {&(0x7f00000021c0)=""/7, 0x7}], 0x5, &(0x7f0000002a40)=[@cswp={0x58, 0x114, 0x7, {{0x1}, &(0x7f0000002280)=0x4, &(0x7f00000022c0)=0x9, 0x4, 0x0, 0x0, 0x80, 0x40}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf8}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x8}, &(0x7f0000002300)=0x7, &(0x7f0000002340)=0xfffffffffffeffff, 0x4, 0x9, 0x8, 0x7, 0x0, 0xfc00000000000000}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0xc3ce}, &(0x7f0000002380), &(0x7f00000023c0)=0x380000, 0x0, 0x5, 0xe, 0x8001, 0x74, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x10}, {&(0x7f0000002400)=""/218, 0xda}, &(0x7f0000002940)=[{&(0x7f0000002500)=""/116, 0x74}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/99, 0x63}, {&(0x7f0000002680)=""/186, 0xba}, {&(0x7f0000002740)=""/229, 0xe5}, {&(0x7f0000002840)=""/23, 0x17}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)}], 0x8, 0x2, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x1}, &(0x7f00000029c0)=0x3, &(0x7f0000002a00)=0x5, 0xbc, 0x2, 0x1b, 0x3, 0xc, 0x80}}], 0x1d8}, 0x40041) r17 = accept4$bt_l2cap(r9, &(0x7f0000002c80)={0x1f, 0x0, @fixed}, &(0x7f0000002cc0)=0xe, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r17, 0x8982, &(0x7f0000002d00)={0x2, 'veth0_to_bridge\x00', {0x3}, 0xf3b8}) syz_genetlink_get_family_id$l2tp(&(0x7f0000002d40), r14) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000002d40), r14) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002d80), r18) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000002e00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f0000002e40)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f0000002e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000002e80)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000002e80)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r19, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r21}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x40080) (async) sendmsg$NFC_CMD_GET_DEVICE(r19, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r21}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x40080) syz_genetlink_get_family_id$l2tp(&(0x7f0000002f80), r8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) 45.015641025s ago: executing program 2 (id=7173): ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc841) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000200)={0x9, 0x1, 0x5, 0x0, 0x9, 0x3, 0x0, &(0x7f00000001c0)=[{0x5, 0x101, 0x7}, {0x3, 0x100, 0x40004}, {0x4, 0x101, 0x8}]}) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000200)={0x9, 0x1, 0x5, 0x0, 0x9, 0x3, 0x0, &(0x7f00000001c0)=[{0x5, 0x101, 0x7}, {0x3, 0x100, 0x40004}, {0x4, 0x101, 0x8}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0xb, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x12) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000400)={{0x7, 0x5}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000400)={{0x7, 0x5}, 0x100, './file0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000600)={0x1, &(0x7f0000000540)=[{@fixed}]}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000600)={0x1, &(0x7f0000000540)=[{@fixed}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x810, r1, 0x2abcc000) openat$cgroup_ro(r1, &(0x7f0000000640)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r1, &(0x7f0000000640)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x1401, 0x2, 0x70bd2a, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8008810}, 0x48000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x1404, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x8820) unshare(0x20000) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f00000008c0)) (async) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f00000008c0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000900)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000900)) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000c80)={{'\x00', 0x1}, {0x78}, 0xf6, 0x0, 0x0, &(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)="1ea6d2969d3ebc11ca521b606654bb1757ef58edad77ea76f4d300bb52980fbf05a7ff2e5c1474b7a1df31e24c8ef1866c3da53d68596f9c818af4a58f041cabb896a53c0ed7f16a76e94ed33d1ba87a803019b18ed6ddf182a9f6c4dcd56db8c1fcc9509b474ccca90a6b7c7f24340f91ef2bd99803abfc6942a1dd647fe5945de035520f75d109db5410fb99e67fe0ac674d536330d151d2dc2258fedd27644b09b8872bebd8c4321781ff714e08315be31b55211317c28e7266d46203677f4d6327ddc59a980ef2f65b2025391d8cba36c50d06f111805fb3aa7c6ccd00465fd58d2e89799b1139cb680bae0ab00bb394b1222de004e964a92a61037ca80e118798eac0bb1f0aa2a7b4c715aabfc7163d2b4fad981070da801f73b31ba1", 0x11f, 0x0, &(0x7f0000000b00)={0x2, 0x12a, {0x1, 0xc, 0xac, "f6eda0e73abb4f23cea5fc37bf69dff6a303025e412d925d5df5a2f5d5be33fa40489079dab0d99d22e6e59a7daedb42a2720cce2918468285e290e710c332f53a5373f657651bb7af595f130d56a5756527f6c87a130687e5bb86a490c0e37b21ded6d0f8732c42c0122ae2ffc95def123da85aec01f298f8614d6d29bd8df0d90acf50cd6d2ec819d9db5a1893c2fcca0c57726328c1bfdc87798588d7e5d9d9d41fbf0d24699088206147", 0x71, "3e6ed105db479defbda7d9c63a71d4a63e019698b94d712a25dba817b2ae9d1bf7beb10a36d732eeb9bffab681b42a2d21d0df82b02acd5c39206110793b161d9e9246c1492447b42fd1b9c4d8de3b74ccd743a0d62db88c5c3239d7fdc922c649cc49219494ad23638c69e7c050065931"}, 0x41, "1036b881fd48f43d16fe2e35de54e3d2a43e204ae0157405408cb7311aed97546cc4272e8f6d019adcd1e8d5bd3b1c6b2e2773b1a9fd2b76b5005f41696a192c06"}, 0x177}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x100}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_MASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x81) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x100}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_MASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x81) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc085}, 0x5) syz_emit_ethernet(0x185, &(0x7f0000000f00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "1a8579", 0x14f, 0x3a, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {[@srh={0x3a, 0xe, 0x4, 0x7, 0x0, 0x20, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2]}, @fragment={0x33, 0x0, 0x8d, 0x0, 0x0, 0x3, 0x65}, @fragment={0x67, 0x0, 0x9, 0x1, 0x0, 0x1, 0x66}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @empty, [{0x4, 0x13, "d6f357455228b01b22ba4349d43920261b4d39fef8c5d1dcda5686e0986418496bda2274ef251a0cb22e023b69c0e8c101f748135749893c7c7f54940214c71399e6d0442a43fc7610f0c5aace0001742b464aa6ef6af1ef135a1feb591b28c919d1a5a0940419b726d088bd53a5db007c8bb3b4b789e034389a93a71832449914fab92cd3b6f69ede5ca670f814e4e5a8d4f4ba237fb3539ea0c38592"}]}}}}}}, &(0x7f00000010c0)={0x1, 0x2, [0xc6b, 0xb2e, 0x7e1, 0x5c5]}) (async) syz_emit_ethernet(0x185, &(0x7f0000000f00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "1a8579", 0x14f, 0x3a, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {[@srh={0x3a, 0xe, 0x4, 0x7, 0x0, 0x20, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2]}, @fragment={0x33, 0x0, 0x8d, 0x0, 0x0, 0x3, 0x65}, @fragment={0x67, 0x0, 0x9, 0x1, 0x0, 0x1, 0x66}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @empty, [{0x4, 0x13, "d6f357455228b01b22ba4349d43920261b4d39fef8c5d1dcda5686e0986418496bda2274ef251a0cb22e023b69c0e8c101f748135749893c7c7f54940214c71399e6d0442a43fc7610f0c5aace0001742b464aa6ef6af1ef135a1feb591b28c919d1a5a0940419b726d088bd53a5db007c8bb3b4b789e034389a93a71832449914fab92cd3b6f69ede5ca670f814e4e5a8d4f4ba237fb3539ea0c38592"}]}}}}}}, &(0x7f00000010c0)={0x1, 0x2, [0xc6b, 0xb2e, 0x7e1, 0x5c5]}) listen(r5, 0x1000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001140)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001100), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x10, 0x7, {@mac=@multicast, {[0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local, {[0xff, 0x0, 0xff]}}, 0x1, 0x4, 0x988f, 0x6, 0xe0, 0x4, 'ip6erspan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x11}, 0x4, 0xffffffff}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 0x3, 0x5, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x7f, 0x0, 0xff]}}, 0x7, 0xbad, 0x2, 0x7fff, 0x5, 0x3, 'rose0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x3c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private=0xa010102, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001140)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001100), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x10, 0x7, {@mac=@multicast, {[0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local, {[0xff, 0x0, 0xff]}}, 0x1, 0x4, 0x988f, 0x6, 0xe0, 0x4, 'ip6erspan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x11}, 0x4, 0xffffffff}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 0x3, 0x5, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x7f, 0x0, 0xff]}}, 0x7, 0xbad, 0x2, 0x7fff, 0x5, 0x3, 'rose0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x3c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private=0xa010102, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x6}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001600)={r6, 0x3, 0x30}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 44.85724461s ago: executing program 2 (id=7174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a090400000000000000000200400334000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30002000000900020073797a32000000002c000000050a01020000000000000000020300000c00024000000000000000010900010073797a30"], 0xb4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'macvtap0\x00', 0x7ff}) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a090400000000000000000200400334000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30002000000900020073797a32000000002c000000050a01020000000000000000020300000c00024000000000000000010900010073797a30"], 0xb4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'macvtap0\x00', 0x7ff}) (async) socket$kcm(0x29, 0x5, 0x0) (async) 44.688454387s ago: executing program 2 (id=7176): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='):\\:-+#!:-\\_#)^\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x80000001]}, {0xfff, 0x9, 0x2, 0x3}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0xffffffffffffffea) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x73d) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1, 0x0}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20030000130000042abd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="002000000204000014000300767863616e31000000000000000000005c01188014000180050006000e000000060002002e000000180001801400040093ace6ff25acada04203c72fde4572f70c00018005000600030000009400018005000600060000001400040061cc015ef19f996194feb5dbfdb5e383140005005eac9fbfba2149818bc9792098217bd214000500cd45ad820af58995897e7725d15997750500020000000000140005001be1fedb05000200000000001400040085ffc56f78be4fa2d9faf1f61084c5a6140004007edcd973d4281df18295abcf721bcc242000018014000500d1803db127d9a4627cbc418097d174c2060002002a0000003000018008000100ffffffff07000200252900000500020000000000140004003236e22c79cc21ac69e0c508e3d360eb300001800800010054e27e4708000100990000000500060008000000140005009f9b489f4eb51e06f3bf773607aa6ec3"], 0x320}}, 0x2040000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=r5], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10, r5, r0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0xe8, 0x30, 0x1, 0x70bd25, 0xfffffffe, {}, [{0xd4, 0x1, [@m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4e3, 0x400, 0x8, 0x401, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x4, 0x80000001, 0xa9c}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd, 0x30000004, 0x7, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x369, 0x7, 0x8000, 0xa0}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8104, 0x2, 0x3, 0x7fffffff}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="832887dd13d0677893f5ff28f28c24d6343c2c18f949cf1447af1c6eabfcaea5daa9b559ae4b76f792b47aca3588b222", @ANYRES16=r10, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) 29.463734496s ago: executing program 34 (id=7176): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='):\\:-+#!:-\\_#)^\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x80000001]}, {0xfff, 0x9, 0x2, 0x3}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0xffffffffffffffea) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x73d) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1, 0x0}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20030000130000042abd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="002000000204000014000300767863616e31000000000000000000005c01188014000180050006000e000000060002002e000000180001801400040093ace6ff25acada04203c72fde4572f70c00018005000600030000009400018005000600060000001400040061cc015ef19f996194feb5dbfdb5e383140005005eac9fbfba2149818bc9792098217bd214000500cd45ad820af58995897e7725d15997750500020000000000140005001be1fedb05000200000000001400040085ffc56f78be4fa2d9faf1f61084c5a6140004007edcd973d4281df18295abcf721bcc242000018014000500d1803db127d9a4627cbc418097d174c2060002002a0000003000018008000100ffffffff07000200252900000500020000000000140004003236e22c79cc21ac69e0c508e3d360eb300001800800010054e27e4708000100990000000500060008000000140005009f9b489f4eb51e06f3bf773607aa6ec3"], 0x320}}, 0x2040000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=r5], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10, r5, r0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0xe8, 0x30, 0x1, 0x70bd25, 0xfffffffe, {}, [{0xd4, 0x1, [@m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4e3, 0x400, 0x8, 0x401, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x4, 0x80000001, 0xa9c}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd, 0x30000004, 0x7, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x369, 0x7, 0x8000, 0xa0}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8104, 0x2, 0x3, 0x7fffffff}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="832887dd13d0677893f5ff28f28c24d6343c2c18f949cf1447af1c6eabfcaea5daa9b559ae4b76f792b47aca3588b222", @ANYRES16=r10, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) 14.141316543s ago: executing program 6 (id=7324): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1a47604e49ccb308000087c56d721f4c934759c5c586480c3437625bbeb4e368ead0f95425bae1ae06ad00317502309e714c7918383976"], 0x26}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r3, 0x29, 0xd0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x1, @private2, 0xffff}]}, &(0x7f0000000700)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000620700000000000008000000181100008d6124e192535a7ef6c8ab9d2409f9040356a34cec403b0799e831010000003348cc7b3feb0eafcfdbda1a3416c76caf2993d13791ffa0643c90a270642c18a0a5adf777e1e0cacaffaef3b93b3c706526bd", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r6}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40014) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/16], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x8) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000006c00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10c1030000000200050011000300000008002000020000000800200005000000080029002a3101000a000100bbbbbbbbbbbb0000d1451c69e51ceb0e051b49f6bc5e9692bc9aaa5a0d29a5efb5349bb53e5de6705cbc5eee42c33ff2b8e7cc45addf4b26aee1a7004f6d74fce45e3a84a8c12a0ee3a73787c10e1185b53e14abe0fdf845ca23d25a92881f811590c0236810f01c058eb2c3667ceabfc9c3e821d801056cad0d14c5b1ca8efe9b32ac85f930aa5042f15cabdf70d9f9f1a7419e57708a80035f171dab55d5a9"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.848915745s ago: executing program 6 (id=7326): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01072cbd7000fcdbdf250600000008000300a7"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000bc0)="6c1cfa429921c51946dfe64ba30e2dae4a5282a8f5256a2a9b45eca80f4c0f5cef3bf1c88332fc5572e988be17dd665d70e29777526ea9dafc72b6f7f85ae031cd63219b057ddcb9b8f451afe2fa3763b1ef9f915d46e9e766d2be8e3ef7b2ada14de60c5005cf982aeb142cc7ecc32e12f579b09ed309cedc9a905ff8d8b65014fc3072d628680014912710981c91db8a0229d1b9905c7038a8fc2af223d90ef3c99b6f519168d67c29e876f4416b1124e32a11dc5bf1d28f46e039ab455d57a32e97a5a3aeac0c6a1dc22f6feb6bef4ec61f643a9670e77a004217", 0xdc}], 0x1}, 0x93) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/87, 0x57}], 0x6}, 0x161) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r8}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r11, 0x0, 0x6) (async, rerun: 32) recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/5, 0x5}], 0x1}}], 0x2, 0x0, 0x0) (rerun: 32) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x0, 0xa1, 0x56, &(0x7f00000007c0)="7dc0ed3f445bc6365e67cb5c53d76490ebd07247f97bde37ba1624bca2d21c69fee598e04ded32bc48e747589bdb26b8e735d374f833a8e8ef0b97df9857e37d963a0b8f879648b71042d27532c82f99ccb6d071d1a852fc7354b16335c90ec3b13c64bbe992c4d1e6c7b9f9ffb2ed5d21dd3611209cd5d10d2e4ebadf79e07cb365de44a4789820b4e849183eef9bf6fcb1846349bfb56f0e5dc5056f913959dd", &(0x7f0000000ac0)=""/86, 0xaffb, 0x0, 0x1000, 0x8a, &(0x7f0000001c80)="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", &(0x7f0000001b40)="77e5c335ebce902cc3d45ab57660862d3682b14e86ea375aa1c41a2884428b293e66ac5f45f1a7a753d87855d9e6227746343052983b9777a272d4227cb22365e09e6860c466dbff4c286498a74bbb890a93ae5f55f0cc37e2384745323f24a4b0890e0105678297ee1d971c4c8fb95364ebf3c2980d6e3388b494a1cdb3432e911ec01f5550bcba5d80", 0x2, 0x0, 0x800}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000c4b4a4000000002000850070b53d01af664f416ede1e16bdfa14cd00003f000000960029666fd1ff8b6f283cc489bf000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2260302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 12.266964222s ago: executing program 5 (id=7330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000f17460ae60100e1d8ca1bf1303008931305adcb2cc496e3f9203a5ecf58bc6ac281a1d70a3a4cbf35ae02439ff31c090f74b5e077aaee458279e86c4c88b1144c77cb69db4a36c2db6dd603e9491a41b5bf41def64be1b00b2dff61a71fdc2f56c9ad68ca5d198990c8150", @ANYRES64=r5, @ANYRESHEX=r4], 0x28}, 0x1, 0x0, 0x0, 0x20048055}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {0x8, 0xffff}, {0x7, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 7.767487889s ago: executing program 6 (id=7331): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000f9708191f5340000009501000000281400"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 7.520423211s ago: executing program 7 (id=7334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4891}, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01012abd7000ffdbdf250100000008000b00", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(0x0, r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x14, r10, 0x1, 0xfffffffd, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r12, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="01000000000000000030002871037f000000091c0500", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f00000000c0)=[{r4, 0x2001}], 0x1, 0x0, 0x0, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r15, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r16 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r16, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20800}, 0x1) 7.450428341s ago: executing program 5 (id=7335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1a, 0x3, 0x6) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) accept4$inet(r2, 0x0, 0x0, 0x800) accept4$nfc_llcp(r2, 0x0, 0x0, 0x800) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r4, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x5213, 0x8, 0xb, 0x200, 0x6, 0x8, 0x6, r4}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000440)=0x10) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r6], 0x108}}], 0x2, 0xc040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa404000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r9, &(0x7f0000000880)={&(0x7f0000000200)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fec0"], 0x28}, 0x400c000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000004007f00"/38], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtaction={0x164, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x150, 0x1, [@m_mpls={0x102, 0x21, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5, 0xffffffffffffffff, 0x1, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffe, 0x6, 0x3, 0x2, 0x9}, 0x2}}]}, {0xdf, 0x6, "56f81999808a4fe81fc6c3d8074b589db30106c01a8dc846bbb03a5a7bb400c3ba85c5f8ccd772edd648361156462b8ad897b06a7143eb575e1ecebba9efa87b33d34900d6d758674966aeaa0389f0a82b42cc172797b1ec8c4f5fb618d93b3f26f1aaa9eaa8cd051fe98a8ed2f4da1dbaca338cb72aa7c8c45e0f543e6960b4574eaa8562f78c35def79561ff050cac237b9bc15c157c9a112e3ee52760c84a50e151b629b2104187cc35bd8046068be9d34fda43b5291ecce0b42719eb2a1f0f366a9b8bd4cd6e87d51a5ff3d13b5a4a809f49204b992a8aa933"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) 7.25899584s ago: executing program 6 (id=7337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007d0800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c9"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="000000610000bbbbbbbbbbbb88a82e877c8315e66e91f9806560783a008100170008060001080006ffffffffac1414aa"], 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000001c0)="32d540c7f271db785b7d96d00172d5d2c8eabc1f3783ec1d", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000010000000000000000000000000000000000000000000000000f0af1d8ce9447e2a0926731ccd71778bc1d04a762ad4741136"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000ac0)={r5, r4, 0x5, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000480)=':\'\'-\x1d\x9c\xd6s\x9d9\xea\xc6\x9b\xc7\xd6\xc6\x89\xb3W\x00', 0x20000, &(0x7f0000000100)={@_ha_fsid={[0x6ac085fa, 0xfffffff8]}, {0x2, 0x8001, 0x59, 0x7}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0xfffffe4f, r9, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c040) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8d76a4e8c2c23461}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYRES16=r9, @ANYBLOB="00012cbd000300168ba388590492fb5a9b0a7b17a79ee08a786a62d7", @ANYRES32=r6, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x41) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r11}, &(0x7f00000007c0), &(0x7f0000000640)=r10}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r11, &(0x7f0000000300), 0x0}, 0x20) r12 = socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(r12, 0x0, 0x6, 0xf) r13 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r13, &(0x7f0000000340)={0xa, 0x4e19, 0x830, @mcast2, 0xfffffffe}, 0x1c) (async) r14 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r14, 0x1, 0x14, 0x0, 0x0) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r15, &(0x7f0000000180), &(0x7f00000000c0)=@tcp, 0x2}, 0x20) 6.993580859s ago: executing program 6 (id=7338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x12, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000900), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r3, 0x4) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300000000000000c69525ec4c90d2bbab328819", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x8, &(0x7f00000001c0)=""/8, 0x41100, 0xe, '\x00', 0x0, @fallback=0x6, r2, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x7, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, r4], 0x0, 0x10, 0x2}, 0x94) 6.857063977s ago: executing program 1 (id=7339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000002700000018010000646c6c2500000000002020207bfbf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6b}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x2, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x54, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x40, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f772e59f5aeeb4149476500"/52}}}}}}}, 0x66) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r8], 0x20}}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r10], &(0x7f00000005c0)='GPL\x00', 0x719, 0x47, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r12 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004344600080000841b28cfa495031f93", @ANYRES32=0x1, @ANYBLOB="000000000000003930b48204353c430000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r13, 0x25, 0xa, @val=@netkit={@void, @value=r11}}, 0x1c) 6.801013717s ago: executing program 0 (id=7340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x17, 0x100, 0x70bd26, 0x25dfdbfd, {0x8}, [@nested={0x4c, 0xfe, 0x0, 0x1, [@generic, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@multicast1}, @generic="3ec4262207db7a52764741de4dc7e42c0c0b421ae638e4b7da5033bf287eb970cee0d390e13a655d9f8a4437f4fa826ba0592d32", @typed={0x8, 0xf8, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x55}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c250000000000202020739af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.690517146s ago: executing program 6 (id=7341): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x100, &(0x7f0000000080)={@align=0x6, {0xc86, 0x401, 0x5, 0x7fff}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000280)=0x100}, 0x2, &(0x7f0000000400)=[{0x2, 0x3, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="576dd5b41ca80e9fdceba0e7256df6dd746d", 0x12, 0xc}, {0x1, 0x1, &(0x7f0000000340)='\x00', &(0x7f0000000380)="0c021bdd867c9b1435d5fd4d8e0146067c162664952b0d74cfcdd434169083b62074c193a26737c2c194a75e0a477eae96f82564402ec94da346712acd5b7712c82fee82c59a678042beb673f9557949ff1b194b7eeb2720a19cd976c80ad59be74c6b92d70bd4d8cd047d48de", 0x6d, 0x20}]}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xa, 0x9}, &(0x7f0000000140)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000884) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x728, 0x568, 0x568, 0x310, 0x568, 0x0, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x2a, "e5940e4b91112443dee63d22728f303f77fdf65a51032d8da6652f6abfd3"}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@multicast1, 0x2, 0x0, 0x8e}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"e9de"}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a00)={@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @local}, 0x0, 0x3, 0x0, 0x1}}, {&(0x7f0000000980)=""/51, 0x33}, &(0x7f00000009c0), 0x40}, 0xa0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x9, 0x6, 0x80007, 0x7fff, 0x6ca], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) r9 = socket$kcm(0x2, 0xa, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000900)={{0xa, 0x4e20, 0x5, @loopback, 0x80000001}, {0xa, 0x4e21, 0x71, @rand_addr=' \x01\x00', 0xffff0000}, 0x0, {[0xe, 0xef5d, 0x6, 0xdda, 0x8001, 0x6, 0x2, 0xa]}}, 0x5c) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000001300)=@ethtool_rxnfc={0x2e, 0x2, 0x4, {0x10, @usr_ip6_spec={@remote, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast2, @private=0xa010101, 0x0, 0x5}, {0x0, @random, 0x9, 0x46, [0x6, 0xb7]}, 0xff, 0x3}, 0x168}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r10, 0x40047452, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r4, @ANYBLOB="00042abd7000fbdbdf253b000000082c4f00", @ANYRES32=r5, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x4048840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b70300000001000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x20000009}, 0x94) sendto(r6, &(0x7f0000000ac0)="226b6c58a95f7a4cb16cdddd5b7de95130ce2e78fc9789fb696b331601a946133461e5f39e34fac236bce1fe747a64b875c403e9c6cca08247f6c66207bcd8f3f51512baa7d9199b56c320fc82ecbd992e58df728118c020b22c7f6d73854fa3965611f42499de90c375cbbc59112f084e4cc306e44eb51cd21cc56828ed72cf3ed8", 0x82, 0x20000084, 0x0, 0x0) 6.537393194s ago: executing program 0 (id=7342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'ip6erspan0\x00', 'team_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff, 0xffffffff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x64, 0x0, 0x5, 0x0, 0x0, 0x7aa0, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500) r3 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x20048894) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r0}, 0xc) 6.473398385s ago: executing program 1 (id=7343): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x0, {0x2, 0xff}, {0x1, 0x1, 0x3}, 0xff, 0xfd}, {0x2, 0x2, {0x2}, {0x1, 0xf1, 0x2}, 0x2, 0xff}, {0x2, 0x2, {0x1, 0x1, 0x1}, {0x0, 0xff, 0x2}, 0xfe, 0xfd}, {0x0, 0x1, {0x0, 0xff, 0x2}, {0x0, 0xf0, 0x4}, 0xfd}, {0x0, 0x1, {0x1, 0x0, 0x2}, {0x0, 0xff}, 0x2, 0xfd}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 6.45205833s ago: executing program 7 (id=7344): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x400, @empty, 0x6}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={r0, @in={{0x2, 0x4e24, @multicast2}}, [0xb1, 0x66cca393, 0x9, 0x7, 0x2, 0x1, 0x1, 0xb, 0x5775, 0x8, 0x100000001, 0x2d16, 0x588f, 0x3ff, 0x6]}, &(0x7f0000000200)=0x100) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) socket$kcm(0x29, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x9275f525722d6211) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$nci(r8, &(0x7f0000000680)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x5, 0x1}, 0x4) r9 = socket(0xa, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', r7, 0x4, 0xc, 0x3, 0x3, 0x12, @mcast2, @remote, 0x8000, 0x40, 0x4, 0x1}}) sendmmsg$inet(r9, &(0x7f00000009c0)=[{{&(0x7f00000006c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000700)="27ab3c7c801558ce20070d042e6a83560e1b5998db1936551c6f70242189ca1e7ca0a62c97b82873b4d7ec8413a0aa8e663340cee1fa6cc7f4be88411a4935388d9d5d45bb235c", 0x47}, {&(0x7f0000000780)="b9e02cfa3b0f24e0a4227ff53f9f50b5b23d5b89ad", 0x15}, {&(0x7f00000007c0)="3ab245fd8f28b9170fa1c05cab83ff2fe81a27f0c40fb7ed794e221d393e747d7fcdf2b190910dc58119dc5bb05c5099acc505b41bb35a5ec8739e60f701cf74eecd4efc1daa1906ee5ed2dfb26ac4e84e2595b44add22fe85c59d24e889289b530b56da0b9137b6d3cc2fb6ad8adf62f56b20882f94c7284756690138035a48a87546b19f1cc4bac7fc01e442e4b41ee9ae9a6f78337adafa2582eef5c32afefb593b43a389229d0dea0272480c31b6a5a1", 0xb2}], 0x3, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x20}}], 0x1, 0x40002) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x40004) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) (async) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0x25, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x4, 0x2, 0xa, 0x8000000000000018, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001240)='GPL\x00', 0x7ff, 0x77, &(0x7f0000001280)=""/119, 0x1e00, 0x4, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x5, 0x3, 0xa00}, 0x10, 0xc336, 0xffffffffffffffff, 0x7, &(0x7f0000001380)=[r9], &(0x7f00000013c0)=[{0x4, 0x4, 0x7, 0x1}, {0x1, 0x5, 0xe, 0xa}, {0x1, 0x5, 0x5, 0x9}, {0x1, 0x2, 0x4, 0x5}, {0x3, 0x5, 0xd, 0x1}, {0x5, 0x5, 0x10}, {0x0, 0x3, 0x2, 0x6}], 0x10, 0xbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x20, &(0x7f0000000c40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r7, @fallback=0x7bf1064f601aee28, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x1, 0x10, 0xd, 0x6}, 0x10, r16, r17, 0x4, 0x0, &(0x7f0000001500)=[{0x5, 0x1, 0xf, 0x2}, {0x1, 0x1, 0xa}, {0x3, 0x3, 0x2, 0xb}, {0x4, 0x5, 0x8, 0x6}], 0x10, 0x7f}, 0x94) (async) recvmsg$can_j1939(r15, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001600)=""/8, 0x8}, {&(0x7f0000001640)=""/52, 0x34}, {&(0x7f0000001680)=""/50, 0x32}, {&(0x7f00000016c0)=""/189, 0xbd}, {&(0x7f0000001780)=""/25, 0x19}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/100, 0x64}, {&(0x7f0000001880)=""/116, 0x74}, {&(0x7f0000001900)=""/57, 0x39}], 0x9, &(0x7f0000001a00)=""/4096, 0x1000}, 0x40010000) (async) r18 = syz_genetlink_get_family_id$nbd(&(0x7f0000002a80), r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000002cc0)={&(0x7f0000002a40), 0xc, &(0x7f0000002c80)={&(0x7f0000002b80)={0xdc, r18, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r19}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x880) 6.393577347s ago: executing program 0 (id=7345): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getnetconf={0x24, 0x52, 0xc00, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_RP_FILTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40882}, 0x2000c811) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="0c01000000000000c9f7d273d5268ea81367fcfbc60106000000000000010100b49ccd1400a2bf4843e427119a7df0968e9860ed56e52a639d31219e63a8e6763a07ce9a17"], 0x18) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="0c01000000000000c9f7d273d5268ea81367fcfbc60106000000000000010100b49ccd1400a2bf4843e427119a7df0968e9860ed56e52a639d31219e63a8e6763a07ce9a17"], 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x8, @remote, 0x10}}}, &(0x7f0000000440)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x8, @remote, 0x10}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={r3, 0x3}, &(0x7f00000004c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) epoll_create1(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) 5.884513013s ago: executing program 5 (id=7346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0xb, 0xf, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x40000) splice(r3, 0x0, r1, 0x0, 0x16a, 0x1200000000000000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r4, r0, 0x91, 0x34, &(0x7f0000000000)="40e8726d1a172b25d85045f9a38ef6584786222459e3777e86f404f8883467bc8a3f50eb60eed94081d06bd55b812af85b61af92", 0x5d, 0x7, 0x8000, 0x23, 0x101, 0x3, 0x88, 'syz0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10000, @local, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0x1c}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @broadcast}], 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) (async) pipe(&(0x7f0000000040)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0xb, 0xf, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x40000) (async) splice(r3, 0x0, r1, 0x0, 0x16a, 0x1200000000000000) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r4, r0, 0x91, 0x34, &(0x7f0000000000)="40e8726d1a172b25d85045f9a38ef6584786222459e3777e86f404f8883467bc8a3f50eb60eed94081d06bd55b812af85b61af92", 0x5d, 0x7, 0x8000, 0x23, 0x101, 0x3, 0x88, 'syz0\x00'}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10000, @local, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0x1c}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @broadcast}], 0x88) (async) 5.760920695s ago: executing program 1 (id=7347): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_FLOW={0x8, 0xb, 0xffffffff}]}, 0x34}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000080000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3bf45c42995560a99952bed40cf5a804000000db7e2378d5afd35f4c16827f55b3af494e39ecfb33020000030090c332b6a99a8d872b8e88a94cb519f5c17631af956a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xffffffff, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 5.509072495s ago: executing program 7 (id=7348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r6, 0x1}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 5.376621992s ago: executing program 1 (id=7349): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x22b, 0x0, "bb071f186b030000009f084524014004009412a6324d6193fcf19b49f3eefb1b56c54dc46d8bc477cd1100a0cc1dc2767bbe000100060000010100000a3200c0aeb3dc986300000000002000000400"}, 0x13c) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r7, 0x25, 0xc, @void}, 0x10) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x0) read$alg(r8, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x4000080) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701000008ffffffb702000008000000b703000085ffffff8500000004000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="55bd734c087912695c524e50d15ecceeae4b3940fb4c3de371682d4d61c0cb2e0ff5c7342af69598177d0cba7834bbd8d38359d5d88003c358750a5508b9f388c50a9ad3e24ba28d2a64dac1d7fe8358c774dc356a919b1745e66ac968604a3629be95fa3e895db05696c7d7d74df208da65a0648e9221", @ANYRESHEX=r6, @ANYRES8=r7, @ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0], 0x38}}, 0x2408e880) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 5.375845529s ago: executing program 5 (id=7350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$can_bcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x20004804) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@deltaction={0x144, 0x31, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x9890}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.728463755s ago: executing program 0 (id=7351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async, rerun: 64) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) (async) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fbdbdf250400000008001a8004000380"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x8004, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300000000000041"], 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 4.52167173s ago: executing program 0 (id=7352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100000000000000000e15b7206b08efbca9cbb6ef6b9995a9601249d9ad406cc4ff6bd80c42644d411465fe8cba15adc64b8384243338b069c7262da9998a527c1eb365616fb5700eb85c662e80117c7252e416b39ad86aaa2e424e820c772ed0e866352c0c98c4ee5", @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100677265001400028006000e000200000006000f0011000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, 0x0, 0x0, 0x10002, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4048010}, 0x604c841) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0)=0x3, 0x4) (async) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000d4b5ead677089c5c068a9a0010000000000000004a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) (async) socket(0x10, 0x803, 0x8) 4.486226838s ago: executing program 7 (id=7353): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xf4, r3, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc7, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x89\xa9\xfe\"T=4\x89\xe6S6G\"\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\rG'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4048000) 427.891822ms ago: executing program 7 (id=7354): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x5, 0x5}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x5}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x7}, {0x0, 0x7}, {0x1, 0x2}, {0x5}, {0x8, 0x7}, {0xf, 0x6}, {0x2e, 0x6}, {0x2, 0x5}, {}, {0x0, 0x6}, {0x7, 0x1}, {0xf, 0x4}, {0x1, 0x6}, {0x8}, {0x8, 0x5}, {0x8, 0xc}], "9c276026b634eb2f"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x5}, {0xe, 0x1}, {0xd, 0x4}, {0x0, 0x1}, {0x7}, {0x31}, {0x5, 0x4}], "4f00c6fc43e2ea84"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x0, 0x1}, {0x9, 0x5}, {0x7, 0x3}, {0x4, 0x1}], "dc2f801a56f410cf"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "29c30ababd541d2c"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4044001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x8001, 0x0, 0x2, 0x4, 0x0, 0x8000}, 0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r3) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x3180a2476641073f, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x3180a2476641073f, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008814}, 0x4004) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4044895) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4044895) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000008c0)={0x3, 0x0, 0x95, &(0x7f0000000800)=""/149}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000009c0)={0x0, 0xb0, &(0x7f0000000900)=[@in6={0xa, 0x4e22, 0x286dfa87, @local, 0x54}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0xf2, @mcast1, 0x101}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000a00)=0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001040)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x408, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "43f73aece6a21904e1b7721166"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x18, 0xfa, "e3d17cf482f0768909599f7c0e59db49acdf75ce"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "6bb01483b15bd89458c73485ce364c1a"}, @NL80211_ATTR_FILS_ERP_REALM={0xdc, 0xfa, "5626ae215cdbba12aee43d0ca635e996ff85904f887959679a975711ac13346003aa7368e7477322a260f4382a0fd6047a3bfca47b902af791bcf92c12566df7ca5c211aa748fdd8c28c6f4e94076040acc86ffede397b2b93c40ff0edba5c39e610681512ea91a7cdc8b3afabf2fb5b1bb75d0bdf27f2332e6afa2dbc21d6b9cf6ab8d15ff3c96159c032cbb15c5b1f24dc12b99334c79d0e9ae9b726826c5854902146b03519830735a1768ba38ec0b5e46fdba13497dacf8663f217cbcb492eeff7e4ebc62d70df1269052841ce351bb3ffe8c35ec568"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "5dd0656f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "bdffd5"}], @NL80211_ATTR_IE={0x2e, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x6d, 0x1}}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x34, 0x7}}, @mesh_chsw={0x76, 0x6, {0x1, 0x8, 0x1d, 0x1ff}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x35, 0x48}}, @mesh_chsw={0x76, 0x6, {0x2f, 0xc0, 0xa, 0x9}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "f4f19f6464a138532c"}], @NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x102, {0x8, 0x10, [{{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x1}, {{}, @broadcast, 0x1, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x10}, {{}, @broadcast, 0x1, @void, 0x36}, {{0x0, 0x1}, @device_b, 0xc, @value, 0x1c}, {{0x0, 0x1}, @broadcast, 0x200, @value=@device_b, 0x16}, {{}, @device_a, 0x40, @void, 0x22}, {{}, @device_b, 0x0, @void, 0x3c}, {{}, @device_b, 0x1, @void, 0x22}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x42}, {{}, @device_b, 0x4, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x2}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x25}, {{}, @device_b, 0x1, @void, 0x23}, {{}, @device_b, 0x9, @void, 0x20}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf7, 0x6, 0xa7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_IE={0xe3, 0x2a, [@ibss={0x6, 0x2, 0x1}, @preq={0x82, 0x41, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x5, 0x7, @broadcast, 0x80000000, @value, 0x2, 0x5, 0x3, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0xfffffff8}, {{0x1}, @device_a, 0xbb}]}}, @perr={0x84, 0x96, {0xa3, 0xa, [{{0x0, 0x1}, @device_b, 0x1000, @value=@device_b, 0x15}, {{}, @broadcast, 0x100, @void, 0x9}, {{}, @broadcast, 0xf, @void, 0x9}, {{}, @device_a, 0x0, @void, 0x41}, {{}, @broadcast, 0x4a, @void, 0x3c}, {{}, @broadcast, 0x1, @void, 0x3f}, {{}, @broadcast, 0x7, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x2d}, {{}, @broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x41}]}}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@perr={0x84, 0x6e, {0x8, 0x6, [{{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x16}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x35}, {{}, @broadcast, 0x5, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x41}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x12}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x28}]}}, @mesh_id={0x72, 0x6}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x14) (async) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa0, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r10 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r10, &(0x7f0000001340), &(0x7f0000001380)=0x20) (async) getpeername$l2tp6(r10, &(0x7f0000001340), &(0x7f0000001380)=0x20) connect$unix(0xffffffffffffffff, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) 374.21514ms ago: executing program 1 (id=7355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1280, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11e8, 0x206, 0x240, 0x11e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x41, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x6, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0xfffffffe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r7, 0xb5d6) (async) r9 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000240)={0x5ac, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async) socket(0x2, 0xa, 0x300) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @multicast2, @loopback}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0x731f}}}}}}}, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000740)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x41, 0x0) 373.608475ms ago: executing program 5 (id=7356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0) sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x1000, "490bc5835cf98383e1a169e0d6367c51e44c7666f196d37c6fe1de3903620019c03d63efb2afad4c8e6536fabd0b18d64f0257af10c923fab8b4c1d414fafbf8a3b1a234500b74d2c835cef4e952289cb2ccd6391b2a38dabbedfd4920a954eb209f8cbcc096cc9589df7acfc106fd9ec22bc68fabb31041c843cd4692de8db25521d2ffb109289a6e6903e8fb11d5f2a1062723653f121cf5a9c371782262c698269189685c9faae085ac643e4ad48e187616f4e1964d9ee729bc71f316d9bcc90a6c6f7437d0716a9c62a81794a0b4de0c6c3158c38fced1f3b442390eda48ffcc89d59b6fd84ed510acf4d9094e87dac21a06a2109ca2803803a4b80d13b37d89b6c73407e6acfeac1a095960d6a9e8049196938baaeda34a2ef009ffcdb5f035c36b7ed05f4c2a3969ba416c6a6ad629512981eb31de05d1a47858ace26809845bda12820ad6361d0212ce1722f6c4560d8e4f766c295da9dd49d66dfb1e9b6a35b150a970abbb8c59c57a93d16eab2a7166864134d17b4d4f090d22cc3d85e8797bfc1b466ff4766034411ec0a96643fec02222560e5ae236f18277c00ccd34a8377eb45d6c36e3e1678c9aa008a5d263edfd3e0e452f2cc1cc362225e415dc61a444e8988c526e0f865eac6afa77447a8240339631cfe1afe46f805c48baac370203c2e2c6bc4a78caf6c577e4393026a7811728f4c0ec68e7e9067de2146fdf2c0a3108a94574a8ea6091a3d7221d38a3e05e30214e716f8e47c719702a9e35705bb02bc25ad604be7a9a38a76aa412c46e7fc29bbdcd5ca210512cff6565529ae7788b15aa3598812a95befb8bf7b26b793ac2fa5fda252c7f78736c028ada6a88d2fa4ecac78ab38053bedf6a11d127472325e08d99c55d277aad91ac0f192416338ec336b2480d1425f91b40dd978a442015fe24b64a752f3c17645a09774ecb96f41e4428d72043aa1372d9a46ec362b78e195a342d0210e086c1a7328e2483c9d39724aafb83d334c1e810db6b0d57552960d020b5a265eb5ebf1b49442c8b69cd059bd2caaaf64473fd4fe1d09c4216ded77080bbf1ec598c100bcbba8e0320c108796d50a731be9595582b63c1c258cfefd201e59c003a4e6de18f8caddbb1d09bbeb11a8622e87cf77c97d08d34ea7ffdb60e183ecd55e33874f479ad3347cd98ab69c135ab5ed907c27f6bf5ab841a0b4eadd9518f3e493c8541bee77260e6c0a77ae37e8d55215b7194206df532c09d98f8b794b24d08ae152e7d50f7a7704f19f65407ca92e483bbfe389b0f48129395db2aa1baf68e03a09cb7a90d4ff64b1b27c9188d5233dcba6897c6c538c052c82272ad8d3fc9afdd0e55be6cd26249a5b3f9a796e14f31ec19991466b89b4fe574b309a69f7246d0895668289dc51dd73054f7c02595c503190a664ee27828e7d2c44c22b6514032f7194f509f8215ba52e7488b8d6131e26fb8b7cd1266f1343b3987ca56a2aa72bad0a8a95be5215ee28843486b34c5b25c11cce071e29f7d6d9589077f3136a3b399d45016b13b472ed80f04443a1d689b9cfac55b3b8e841450ab3c2841ee77a2ac7626b32e6080f6973ae233166b59bee59e46a381353116082b46a6c64cfaa6057c1e21f41a749db7322febf5735227f2ebcfba422d1d75996558f69249e80d9820139b5dbcc92e5d553778f219fa530731e3cf4a55264153489100be366694d31f99bf878a1953d6f3004c1f33c0af369de291b2efe36b1021224373fb40053daf48f47cd2012e81c82f9fbbb32367149b883e9cead421a68433d88af0ce7a67d5fd4200bc51bef208f736292ae5a0ba7b06deb8dd49e854f729114f096371933c81a0a98b9c30be0dbc8b3eb286dec727fed2bcb5411484ed2fa72a4f0ff6889d36ae767e7247188bce7a7d80177450dcea2fed21bb0320c568905545e82229a01b8763b5fbd5bc8269d1be9a1ada636fcef6a301616592987531a0f8fae56bc150173e40e74c9d2b13c29d43e3cb3339679d1faa298ddb848812236a68ccd526329c52ee97dfaa44c332fd54c9540343a42da6ac69a37fec9480b4785bb93b7a91ca8ff1d009bfe19eb25c30ca8702c9515a5d1f82d1e7894109fb34623dff2d4552e1cce63872dbb307c72ef979a04df75a8811ad2ccf3bbfbda35b4fdb1021eb7e8ab7119d3a33d666b4455966412d0ebd95c9dfc36c8047c0e506393a5e264d68285e904390ebd978433b22fc85f9f41cf08fff503964ac2fd20f3cdd46f0c5c3f093e6960b4512c56d2e69195cd67faed65e5036933a421fbbaf7730c3a17b6d44a873a34cab53cac237b4a0d9f6b2817998f0355c86d90c7b3154ea830dcbb31701e3eaa9db04a9f752540cb24b3232b6bbad7dd5a5ab45f941f77d9f844f18d967d9019ce0c9c22f8c0504c69a816e2bd603e88be66d042075f775ca29f7d28e26a201de621faaec0d364158821e1300c108d935068764fe57d6cf0421eb4674d1bd39041774367d4d5b5429cee88780ff417f9dcbd14651b03c9299b4e8551751400b8206b4b1d79daf570cf4f035d4b0f865e6cb33959c1bda2c86daec9548ae1db5b66dcc66f4a5b670d840b800570cc9a164b22e4d74834060acceee70eef1bd8118680468e2f6765079ce2e61aec4b48c1a3e1d9db53ca8d1ef5a19806a271d433e8b706b4aa04f32acc980344a8e91c89a75bda2d326a848dd5a975b0c15c8af42191118bf020f1c1281df8769591567d7d9822ff90649dca9e8faa9b12802c508a31f28c510b547598ab33d39956af9c705701e0818af2fa4e222e52326acbf6af5b82c9e3a4f5be599209ad3f08c349a5394c0a2e7f3a102a8995c53e70da50549c824a8e2220a096bbf0af19d5f99be8c2998a1e51a317b5c6b3a7617deecc461fdcf9b1a043fd63de28f0181f5bff8168769293356ead29ebe7f27a4bab846847d90c567a3dcf5d83549b5ca7f053ef776c89a56e3b59e1d939acc3d453b7c18baf67b6efce1ada42976829c1e8cbdd726a7c431d18772644db819bf62efbff0a5d2e20fa2eafefe17ae494aeb89c3854c557284dbae59f932a992dbd121b474ed01ddf6232e41d17788ea0c650213ef48e427fcdf550cd845cf1a4fef21acea9eef5d6320a5b32896d007025e96004bc3dbd73d4179e9d5f7f7e6ad38b6a51bcf3356bdb9882656649b7e145c08454401335df325d368b04d379cb7da35109efd8b13f7f3a5ed35db4f180064e24ab08ec2669f60c28e58839871cb9ffb79874f5925a6e9e0ccfdca961179ff69d331651e449290cf69cd1070b6a483d32218c174766075af6cf0b1be412f7defbecee97ce79c37a7fee11fa91b7304831cb32ef315f6ab0d8386a5139a0ebde3064e5e0ba6b800969695fa40c8c3a7a0927189fe457389de7b629a2169122548baf38642edbc3b29c5eb93605d66ffa2f690ec41fb28f4b3ef12fa89b55b7c36d3e2c162851e56cffd30426579a78e7d6b17582bda9e4d58243b39f394cfdb0960ca87542b05340f00cda801f725459d2270b60e7c276fee43690941867776d32c63bda259ff0596e3beb270b047c39f22575dc1366c0f37544737b690b21eb10f92cdf7925cd49d8ee7df8c781ac66d866ad854d31ce7ba4c4196bd2edcc46701eaa65772d4d68ec3eee2eebdbd396a5f8b5e045994ed75688968e46042d91d27b6d8635b6a017857054c04a64ed5823887f3915f0aa64012bdeb10477a0cc310464ccfd92f272769efc01c2a78fa8144041ef925abf7d7d47825fbc1be82a0b61adbb3319c5e5b7d3ae2c2c623ca6ccc37834baa91993101fa35492add6b3d9a6d588797dedd92d182acc6c7fb97f94e8dd93dd08100037426a6c50297344b5591be1d5dac25bfbd71f453b3f6bf9bfa059c6963cef0320e187cf24be2ae09226ec5289257d5c8e875129c1d57982a481a649b987c2e47685b469d7d1549d68f6b3b84bd15c21c0f991752067fd3cb9bae822a5ab20288c524b8e68ed7b1c7b84a46b0911495d09044397c6b67936a82d01dfc152b5dfce4278961031ac67eae60bfbbf77e675626b5c1059b3a78e9bc2441eb5a4f0fefad325565050a312032c7495930c0cd359996565ddce776854a60a07176c310f3243486d29529e2cdb3aa22628cb67a61a5e4e8dba04491a5b8778e5213a64bca4b2ef923f24312893ab6b46be7e138971221a450bc2f6188f1c8616e7d43ec6119779546d585de9d48ad997ff5d11796996e666f88aa38c6bdde8f0390e68ba12158935d65d83e798e80488a269ff7b51da178da594a85a5990fafc151870bc4dbe2ffc8f79a8d6c0d097ce9b9ee4b2b77abc1c0440b93b4eee79616230b6ee758498dab22e28934952302ad308ec202556e26b00bd474d3376e58c2d70103d9399a86bff3e23abfcd407376fc1ac241ba969839a8c6b9e8d60b22f52807b5bc9d5e6c52b8baec877c891cd3482eec9dd78cbfcd80cc78b88a0b1b1c75187b19773053853aa04f786ff1b812454c51d3e10723438fce94415911ae7bf77a2ce2eb0dc9491d7962b85b91dbe9bc151ea2d098339f71c7c64b102d4714768e224b55fe32ebcbc9f371ce3d983a9ea56a5650d993c0bfcf0622a166a7bf2aeda8ec0ebe6a282d0b4aeee19891c19fef4108dc031a598130450bb112ccf21bbfd0f9af52eba3b7c5881f12f296479f2e19dd4687a9c7c38e93dcfae6474d6bbaf2bf511e70c3587957e846ad04f3c249ca2c584c9c40a2e17d8439328d667c20c1d01ad2607193badd9742fd97ea19accaeb4e4c36a3178b0c83da32db0cf22a612a9c0133154ff19d48541290e00beb24c456b5b072d28c858735feb476864ab6b2c28f734da431933002d0bcac310be80b5eb0acbeecce0ad1488ceecd3ea24936fa6b68265e564d42a218cda6f95fd05298ad13658396621edd9d7c3639cb04ccd425fd38aaa2e7f913598778d443c3bce1ac5b0ed3424e3ed16eae0ffeaf998f8ad6ac29eaa29dbaccc3c93375a44f4dd0f7990a6dbfb002666feaa467eab98c36d5260c9d94b97fc1657eb4d45457e31a53a3a8d2184d79e77361148b8c8f3354dcce7e4ca22cdc8993663c1e83508b2eb88df96d904015c6d6b095d94debec84ebaa0219e15a0c0582bcb30573d5df7293acbabc185f77a6f2bee8712571a5cd4e142e3da4f71a8c561c95fa3e55d8d55dc17821e2a68b30ea28b3eb7ad27c0ee361d3545bc01bab38ace505484c0c20e83f7f211905cb9f5a9293ae34e522a5e46f9fa1278ed811bc03eae700e304cd93a410ed183f244ec40ef6aeaf1b6eb004ffcb1f6f1edea8f971c4652669db5994f37d05225a72052e76fd90505d3aec353196ae22babe2f8a80f45c4f827b96ae1a3cf77ee4f6cc7b3fc0ada2873a5b9a40b783cf780c934259a7b9868d8a256a7498d463dfc9ad0979f442f79fade14c3f6f71c68a1bb680aeffbaf6e2e00de79d8e4e52c5ce4230529029c66f5f4998e0bb04b87e21ae579750841b56c7f09f442b325eec0c1fd275d873d66d85325d36647f443772693d3a5e178b02b82d7715d8bdd180f101d3a3874fedfea7f7462119f179caed3834ddebfdb6a62bc8ab2303b5d2e0fa4d389e2805c61867df815ad23affb048c83645ac40781f336edc87872badaa680bedc8f515482b800501a8f3028a609336dfa419e1d27471236176d158a5f754dd5c70f70f1cd82c6bcce197af99525c43c1dba708785bbbeb98f41e64b9f4034b1d57bf96a5857de6fed4789245c1860f9922381f7e"}, &(0x7f0000001740)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001840)={r8, 0xb4, &(0x7f0000001780)=[@in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x3ff, @private0, 0xe}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000001880)=0x10) (async) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000050004000000000008000600ac1414000400050008000800ac141400"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r10, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x40) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xdf}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xffffffffffffff84, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xa, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x77, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 32) 265.538626ms ago: executing program 0 (id=7357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@delchain={0x650, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x624, 0x2, [@TCA_BPF_ACT={0x620, 0x1, [@m_bpf={0x134, 0x11, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x5, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036c"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf0, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x79, 0x6, "51719d53a2b05eda58a80a40d29b013901000000d9ef9fd5f41ea347cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ec79f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_nat={0x180, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @multicast1, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x9}, @rand_addr=0x64090102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @multicast1, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @local, @remote, 0xff000000, 0x1}}]}, {0x3d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="582a0500231a0500340012800e00010069703665727370616e00000020000280060003003000f133140007001502000000000000000000000000000108000a00", @ANYRES32], 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x1cb8}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x32, 0xfffff7fe, {0x77359400}, {}, {0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "9d56e564b54c6ec5965ffb577ab1f1d5172c72a6b33da4c7ee236005b9644b514e9c0ec4cc9ef0973050bcc407ea464f0a8a6e7f1751a229a940cb10bd0df63b"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket(0x3, 0xa, 0x0) 123.225086ms ago: executing program 7 (id=7358): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fe7ee2b49e33538afa8af92347514f0b56a20ff27fff8ada2d1e08d7f3f8d117f2", 0x89}], 0x1}, 0x24000804) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20000, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0xaa0f1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r9, 0x4, r5}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00009f8000/0x1000)=nil, 0x1000, 0x200000e, 0x11, r10, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) 121.230705ms ago: executing program 5 (id=7359): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000680)="e5786a0d000000000000003b", 0xc, 0x4004041, &(0x7f0000000240)={0x2, 0x0, @remote, 0x2006}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x3, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x2004, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000200)='\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x6]}, {0x7fff, 0x6, 0xffffffff, 0x4}}, 0xa20, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x9}, 0x3, &(0x7f0000000600)=[{0x1, 0x3a6f, &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)="5fc124e39759c99e29f25ba996306435a6c7c748ec179d96d1c6c2677d4364e2ed5ff346eaa5347c0c3632b4899309d02bee79985539c2248ca5ac52adb23a68e0c17492f35f6f452f9616a145b2", 0x4e, 0x3f8bb72815115713}, {0x2, 0x4, &(0x7f0000000440)='GPL\x00', &(0x7f0000000480)="5b458192defbd544aff295ebd322dfb90422354652b1cf521ee1ddb551651005fa09ab03c4959e334cbb8b745a398b164aecf40c570f493fe5fbae7ae4848ce966f9d6b80aa86550f1e8c41950250a4795fa439755bfa550d653286427543bedd33a3bc1884f463547f81b2ae76a8d9e4a65acf55917fd1271ed956ea30d78ca034f0c24c7364bb0968c663e62e9cbb867274e5beaf4cc73b4cbc7a4c03f415b24", 0xa1, 0x2}, {0x3, 0x8, &(0x7f0000000540)='syzkaller\x00', &(0x7f0000000580)="96a289a742b18f9ed7ce4d879b2d7dfd06bce7c9ce2356f1addd830666859757dab1901ffa3027d9151eadc472afc23ff58ba231470aa18ce67c4fd6f1feb7d08b85549692bc7883bdf5db3c194e733abc940367", 0x54, 0x10}]}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x190, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x305}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48b7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000011}, 0x40820) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004800000000000000000000711001000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 0s ago: executing program 1 (id=7360): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r3, 0x5}, &(0x7f0000000540)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): [ 899.005930][T28885] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5675'. [ 899.018416][T28885] netlink: 'syz.5.5675': attribute type 58 has an invalid length. [ 899.032672][T28885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5675'. [ 899.183936][T28895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5677'. [ 899.238298][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5678'. [ 901.097163][T28930] netlink: 'syz.0.5687': attribute type 3 has an invalid length. [ 901.624084][T28942] team0: Device vlan4 is already an upper device of the team interface [ 901.880778][T28949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5691'. [ 902.584792][T28904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.015659][T28963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5697'. [ 903.340107][T28968] erspan0: entered promiscuous mode [ 903.726924][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 903.763235][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 903.772025][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 903.785468][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 903.794723][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.054779][T28967] erspan0: left promiscuous mode [ 904.229017][T28980] netlink: 'syz.5.5701': attribute type 4 has an invalid length. [ 904.255943][T28980] netlink: 'syz.5.5701': attribute type 4 has an invalid length. [ 904.393144][ T7264] bridge0: entered promiscuous mode [ 904.446399][T28971] lo speed is unknown, defaulting to 1000 [ 904.728250][T28993] syzkaller0: entered promiscuous mode [ 904.734165][T28993] syzkaller0: entered allmulticast mode [ 905.525340][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5707'. [ 905.888717][ T5636] Bluetooth: hci1: command tx timeout [ 906.358708][T28953] Set syz1 is full, maxelem 65536 reached [ 907.973534][ T5636] Bluetooth: hci1: command tx timeout [ 909.280956][T28971] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.290202][T28971] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.297515][T28971] bridge_slave_0: entered allmulticast mode [ 909.305883][T28971] bridge_slave_0: entered promiscuous mode [ 909.321177][T28971] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.330396][T28971] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.337805][T28971] bridge_slave_1: entered allmulticast mode [ 909.349438][T28971] bridge_slave_1: entered promiscuous mode [ 909.509222][T29059] can: request_module (can-proto-0) failed. [ 909.599256][T28971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.632875][T28971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.807401][T28971] team0: Port device team_slave_0 added [ 909.816165][T29073] openvswitch: netlink: Missing valid actions attribute. [ 909.844708][T29073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.855998][T28971] team0: Port device team_slave_1 added [ 910.048783][ T5636] Bluetooth: hci1: command tx timeout [ 910.135297][T28971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.159408][T28971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.220989][T28971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.242618][T28971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.270125][T28971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.316523][T28971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.400339][T29097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5723'. [ 910.429382][T29071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5718'. [ 910.432352][T28971] hsr_slave_0: entered promiscuous mode [ 910.445498][T28971] hsr_slave_1: entered promiscuous mode [ 910.452459][T28971] debugfs: 'hsr0' already exists in 'hsr' [ 910.458258][T28971] Cannot create hsr debugfs directory [ 910.498161][T29101] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5724'. [ 910.712725][T29110] batman_adv: batadv0: Adding interface: dummy0 [ 910.722608][T29110] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.748749][T29110] batman_adv: batadv0: Interface activated: dummy0 [ 911.001083][T29113] lo speed is unknown, defaulting to 1000 [ 911.024927][T29113] lo speed is unknown, defaulting to 1000 [ 911.033840][T29113] lo speed is unknown, defaulting to 1000 [ 911.300816][T29113] infiniband syz1: set active [ 911.305674][T29113] infiniband syz1: added lo [ 911.327644][T29113] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 911.355015][T29113] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 911.373109][T29113] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 911.399509][ T5781] lo speed is unknown, defaulting to 1000 [ 911.424876][T29113] RDS/IB: syz1: added [ 911.433197][T29113] smc: adding ib device syz1 with port count 1 [ 911.439715][T29113] smc: ib device syz1 port 1 has no pnetid [ 911.446000][ T5781] lo speed is unknown, defaulting to 1000 [ 911.455827][T29113] lo speed is unknown, defaulting to 1000 [ 911.540530][T29130] netlink: 'syz.0.5733': attribute type 11 has an invalid length. [ 911.549514][T29130] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5733'. [ 911.578264][T29130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5733'. [ 911.605314][T29132] netlink: 'syz.0.5733': attribute type 11 has an invalid length. [ 911.627145][T29132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5733'. [ 911.667836][T29131] lo speed is unknown, defaulting to 1000 [ 911.876175][T29141] netlink: 'syz.0.5736': attribute type 1 has an invalid length. [ 911.926939][T29141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 911.961081][T29139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.976601][T29144] bond2: (slave gretap1): making interface the new active one [ 911.994078][T29144] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 912.003292][T29113] lo speed is unknown, defaulting to 1000 [ 912.130495][ T5636] Bluetooth: hci1: command tx timeout [ 912.188149][T29146] syzkaller0: entered promiscuous mode [ 912.220000][T29146] syzkaller0: entered allmulticast mode [ 912.233653][T28971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.252805][T28971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.336446][T28971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.347683][T28971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.355802][T28971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.371764][T28971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 912.390791][T28971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 912.431323][T28971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 912.581162][T29131] lo speed is unknown, defaulting to 1000 [ 912.606502][T28971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.648389][T28971] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.664587][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.671840][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.699196][T14838] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.706423][T14838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.876920][T29170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 912.894057][T29170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 912.904951][T29170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 912.918903][T29170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 913.264566][T29113] lo speed is unknown, defaulting to 1000 [ 913.282809][T29183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5743'. [ 913.298278][T29183] l2tp_ppp: sess 2/0: no socket in recv [ 913.396982][T29186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5744'. [ 913.598407][T28971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.609649][T29113] lo speed is unknown, defaulting to 1000 [ 914.013902][T28971] veth0_vlan: entered promiscuous mode [ 914.044571][T29201] netlink: 'syz.0.5749': attribute type 1 has an invalid length. [ 914.056478][T28971] veth1_vlan: entered promiscuous mode [ 914.075256][T29113] lo speed is unknown, defaulting to 1000 [ 914.110623][T28971] veth0_macvtap: entered promiscuous mode [ 914.142291][T28971] veth1_macvtap: entered promiscuous mode [ 914.192333][T28971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.217648][T28971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.565977][T18609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.576360][T18609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.685749][T29211] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 914.717611][T29211] bond3 (unregistering): Released all slaves [ 914.797452][T29113] lo speed is unknown, defaulting to 1000 [ 914.806321][T18609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.839097][T18609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.870301][T29211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5751'. [ 914.944877][T29217] lo speed is unknown, defaulting to 1000 [ 915.114927][ T769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.144439][ T769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.365869][T29113] lo speed is unknown, defaulting to 1000 [ 915.375203][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.387670][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.583228][T29231] bond3: option arp_all_targets: invalid value (3) [ 915.594354][T29231] bond3 (unregistering): Released all slaves [ 915.698698][T29235] netlink: 'syz.1.5756': attribute type 5 has an invalid length. [ 915.792555][T29217] lo speed is unknown, defaulting to 1000 [ 916.020908][T29244] syzkaller0: entered promiscuous mode [ 916.034599][T29244] syzkaller0: entered allmulticast mode [ 916.282236][T29113] lo speed is unknown, defaulting to 1000 [ 916.329122][T29253] pimreg: entered allmulticast mode [ 916.414983][T29253] pimreg: left allmulticast mode [ 916.462912][T29257] x_tables: duplicate underflow at hook 2 [ 916.644908][T29266] sock: sock_set_timeout: `syz.1.5766' (pid 29266) tries to set negative timeout [ 916.734014][T29113] lo speed is unknown, defaulting to 1000 [ 916.743967][T29271] SET target dimension over the limit! [ 917.122566][T29113] lo speed is unknown, defaulting to 1000 [ 917.412889][T29113] lo speed is unknown, defaulting to 1000 [ 917.723055][T29113] lo speed is unknown, defaulting to 1000 [ 918.282378][T29298] __nla_validate_parse: 5 callbacks suppressed [ 918.282401][T29298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5772'. [ 918.362838][ T5781] lo speed is unknown, defaulting to 1000 [ 919.082759][T29321] netlink: 'syz.0.5781': attribute type 1 has an invalid length. [ 919.340265][T29321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 919.437523][T29327] bond3: (slave dummy0): making interface the new active one [ 919.451488][T29327] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 919.754079][T29348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5787'. [ 919.786681][T29346] erspan0: entered promiscuous mode [ 919.800070][T29346] erspan0: entered allmulticast mode [ 919.950743][T29351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'. [ 919.966732][T29356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5790'. [ 920.036396][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5790'. [ 920.060966][T29358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5790'. [ 920.217558][T29362] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 920.251040][T29362] bond2: (slave vti0): Error -95 calling set_mac_address [ 920.533040][T29379] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5796'. [ 920.637991][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 920.764992][T29388] netlink: 'syz.5.5799': attribute type 1 has an invalid length. [ 920.779161][T29388] netlink: 'syz.5.5799': attribute type 2 has an invalid length. [ 920.789348][T29388] xt_l2tp: v2 sid > 0xffff: 262144 [ 921.020272][T29399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5803'. [ 921.674518][T29028] udevd[29028]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 922.018897][T29422] lo speed is unknown, defaulting to 1000 [ 922.046583][T29422] lo speed is unknown, defaulting to 1000 [ 922.548278][T29453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5816'. [ 922.603646][T29457] vlan3: left promiscuous mode [ 922.618817][T29457] bridge_slave_0: left promiscuous mode [ 922.629161][T29457] bridge0: port 1(vlan3) entered disabled state [ 923.341720][T29470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 923.358214][T29472] tipc: Started in network mode [ 923.370238][T29472] tipc: Node identity ac1414aa, cluster identity 4711 [ 923.392554][T29472] tipc: Enabled bearer , priority 10 [ 923.709945][T29484] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 923.762012][T29485] __nla_validate_parse: 5 callbacks suppressed [ 923.762036][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 923.765384][T29484] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5821'. [ 923.778954][T29485] netlink: 'syz.0.5820': attribute type 30 has an invalid length. [ 923.805617][T29485] netlink: 'syz.0.5820': attribute type 29 has an invalid length. [ 923.829363][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'. [ 923.867332][T29475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 924.094171][T29494] netlink: 'syz.2.5824': attribute type 1 has an invalid length. [ 924.103562][T29494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5824'. [ 924.150212][T29495] netlink: 'syz.2.5824': attribute type 4 has an invalid length. [ 924.159911][T29495] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5824'. [ 924.282023][T29500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5826'. [ 924.509376][ T7266] tipc: Node number set to 2886997162 [ 924.842714][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5835'. [ 924.902643][T29539] erspan0: entered promiscuous mode [ 925.453694][T29558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.463206][T29558] bridge0: port 3(bond1) entered blocking state [ 925.482055][T29558] bridge0: port 3(bond1) entered disabled state [ 925.490660][T29558] bond1: entered allmulticast mode [ 925.499671][T29558] bond1: entered promiscuous mode [ 925.505755][T29558] bridge0: port 3(bond1) entered blocking state [ 925.512242][T29558] bridge0: port 3(bond1) entered forwarding state [ 925.566759][T14838] bridge0: port 3(bond1) entered disabled state [ 925.595187][ T30] audit: type=1800 audit(1784080114.664:15): pid=29565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5841" name="memory.events" dev="tmpfs" ino=826 res=0 errno=0 [ 925.756929][T29571] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5845'. [ 925.830341][T29575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5843'. [ 926.161578][ T5759] IPVS: starting estimator thread 0... [ 926.168340][T29588] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 926.193916][T29588] xt_hashlimit: size too large, truncated to 1048576 [ 926.201616][T29588] xt_hashlimit: max too large, truncated to 1048576 [ 926.268009][T29590] IPVS: using max 27 ests per chain, 64800 per kthread [ 926.780517][T29625] batman_adv: batadv0: Interface deactivated: dummy0 [ 926.805980][T29625] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 926.861898][T29628] siw: device registration error -23 [ 926.985778][T29634] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 926.999144][T29634] bond1 (unregistering): Released all slaves [ 927.326978][T29648] lo speed is unknown, defaulting to 1000 [ 927.350578][T29648] lo speed is unknown, defaulting to 1000 [ 927.433689][T29656] netlink: 'syz.2.5867': attribute type 1 has an invalid length. [ 927.520484][T29656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 927.583675][T29658] bond1: (slave dummy0): making interface the new active one [ 927.597954][T29658] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 927.622083][T29659] syzkaller0: entered promiscuous mode [ 927.637299][T29659] syzkaller0: entered allmulticast mode [ 927.662335][T29656] : renamed from dummy0 (while UP) [ 927.676337][ T7267] IPVS: starting estimator thread 0... [ 927.804656][T29665] IPVS: using max 26 ests per chain, 62400 per kthread [ 928.000631][T29675] tipc: Enabled bearer , priority 0 [ 928.018307][T29674] tipc: Enabling of bearer rejected, already enabled [ 928.034162][T29675] syzkaller0: entered promiscuous mode [ 928.042259][T29675] syzkaller0: entered allmulticast mode [ 928.126689][T29674] tipc: Resetting bearer [ 928.234204][T29681] netlink: 'syz.5.5873': attribute type 13 has an invalid length. [ 928.242471][T29681] netlink: 'syz.5.5873': attribute type 17 has an invalid length. [ 928.555426][T29673] tipc: Resetting bearer [ 928.584677][T29673] tipc: Disabling bearer [ 928.812039][T29704] __nla_validate_parse: 10 callbacks suppressed [ 928.812068][T29704] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5879'. [ 928.930256][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5878'. [ 929.352762][T29716] netlink: 'syz.0.5880': attribute type 1 has an invalid length. [ 929.361660][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5880'. [ 929.381364][T29714] syzkaller0: entered promiscuous mode [ 929.387043][T29714] syzkaller0: entered allmulticast mode [ 929.400908][T29714] Cannot find set identified by id 0 to match [ 929.432553][T29714] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5881'. [ 929.463359][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5881'. [ 929.474335][T29721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5882'. [ 929.496180][T29721] xt_hashlimit: size too large, truncated to 1048576 [ 929.940101][ T3291] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.966200][ T3291] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.990858][ T3291] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.024074][ T3291] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.495069][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5893'. [ 930.550510][T29765] netlink: 'syz.5.5895': attribute type 8 has an invalid length. [ 930.639332][T29768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5898'. [ 930.706641][T29774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 930.718964][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5899'. [ 930.882526][T29781] netlink: 'syz.2.5901': attribute type 1 has an invalid length. [ 930.932261][ T7267] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 930.963775][T29781] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 931.730807][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.896509][T29837] netlink: 'syz.2.5917': attribute type 1 has an invalid length. [ 931.926420][T29841] x_tables: duplicate underflow at hook 2 [ 931.947706][T29837] bond2: entered promiscuous mode [ 931.953663][T29837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 931.975873][T29837] vlan2: entered allmulticast mode [ 931.981417][T29837] bond2: entered allmulticast mode [ 932.003489][T29837] bond2: (slave bridge1): making interface the new active one [ 932.011314][T29837] bridge1: entered promiscuous mode [ 932.018954][T29837] bridge1: entered allmulticast mode [ 932.026138][T29837] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 932.317628][T29854] tipc: Started in network mode [ 932.338714][T29854] tipc: Node identity 4246, cluster identity 4711 [ 932.371083][T29854] tipc: Node number set to 16966 [ 932.387096][T29854] tipc: Cannot configure node identity twice [ 932.409440][T29862] netlink: 'syz.5.5926': attribute type 8 has an invalid length. [ 932.447574][T29854] syzkaller0: entered promiscuous mode [ 932.466756][T29854] syzkaller0: entered allmulticast mode [ 932.690525][T29878] hsr0: entered promiscuous mode [ 932.841319][T27091] block nbd7: Receive control failed (result -32) [ 932.861618][ T5636] block nbd7: Receive control failed (result -32) [ 932.861624][ T4939] block nbd7: Receive control failed (result -32) [ 933.239891][T29895] NCSI netlink: No device for ifindex 566712438 [ 933.774445][T29911] syzkaller0: entered promiscuous mode [ 933.789616][T29911] syzkaller0: entered allmulticast mode [ 934.050264][ T3291] wlan0: Trigger new scan to find an IBSS to join [ 934.213585][T29924] __nla_validate_parse: 12 callbacks suppressed [ 934.213609][T29924] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5941'. [ 934.318999][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5941'. [ 934.375738][T29931] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5941'. [ 934.526996][T29941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5943'. [ 934.645087][T29945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5944'. [ 934.794200][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5942'. [ 937.094490][T14855] wlan0: Trigger new scan to find an IBSS to join [ 937.354554][T29924] gretap0: entered promiscuous mode [ 937.439334][T29932] syzkaller0: entered promiscuous mode [ 937.444970][T29932] syzkaller0: entered allmulticast mode [ 937.454023][T29945] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 937.455028][T29947] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 937.528356][T29957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5946'. [ 937.590588][T29959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5947'. [ 940.059841][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.658079][T29972] IPVS: Scheduler module ip_vs_sip not found [ 940.901905][ T4939] block nbd8: Receive control failed (result -32) [ 941.337621][T30013] netlink: 'syz.5.5964': attribute type 1 has an invalid length. [ 941.368105][T30015] netlink: 'syz.5.5964': attribute type 1 has an invalid length. [ 941.484501][T30011] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 941.493117][T30011] syzkaller1: linktype set to 778 [ 941.629878][T30031] bond2: entered allmulticast mode [ 941.696855][T30032] macvlan2: entered promiscuous mode [ 941.731853][T30032] macvlan2: entered allmulticast mode [ 941.760258][T30032] bond2: (slave macvlan2): Opening slave failed [ 942.234671][T30059] netlink: 'syz.0.5976': attribute type 1 has an invalid length. [ 942.335358][T30059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 942.432442][T30062] bond3: option arp_all_targets: invalid value (3) [ 942.479503][T30062] bond3 (unregistering): Released all slaves [ 942.695327][T30064] bond3: (slave dummy0): Releasing active interface [ 942.733914][T30064] bond4: (slave dummy0): making interface the new active one [ 942.743748][T30064] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 943.140420][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5980'. [ 943.160524][T30087] netlink: 'syz.5.5980': attribute type 30 has an invalid length. [ 943.182907][ T769] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.195114][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5980'. [ 943.205134][ T769] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.233178][T30090] netlink: 'syz.5.5980': attribute type 30 has an invalid length. [ 943.255054][ T769] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.269541][ T769] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.300450][T30093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5984'. [ 943.312208][T30090] tipc: Started in network mode [ 943.319865][T30090] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 943.344626][T30090] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 943.355332][T30094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5984'. [ 943.371151][T30090] tipc: Enabled bearer , priority 10 [ 943.404337][T30093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5984'. [ 943.584776][T30097] syzkaller0: entered promiscuous mode [ 943.610508][T30097] syzkaller0: entered allmulticast mode [ 944.131948][T30133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5992'. [ 946.963345][T28300] tipc: Node number set to 1 [ 947.053225][T30145] bond3 (unregistering): Released all slaves [ 947.878087][T30185] netlink: 'syz.0.6006': attribute type 1 has an invalid length. [ 947.906731][T30179] erspan0: left promiscuous mode [ 948.218003][T30179] batman_adv: batadv0: Interface activated: dummy0 [ 948.759805][T30179] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 948.788188][T30185] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 948.795473][T30189] gretap2: entered allmulticast mode [ 948.832278][T30184] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.6005'. [ 948.842237][T30184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6005'. [ 948.853938][T30184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6005'. [ 948.869164][T30184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6005'. [ 949.158013][T30221] netlink: 'syz.5.6013': attribute type 1 has an invalid length. [ 949.230075][T30225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.321444][T30221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 949.470971][T30223] bond3: (slave veth5): Enslaving as an active interface with a down link [ 949.519306][T30228] bond3 (unregistering): (slave veth5): Releasing active interface [ 949.545453][T30228] bond3 (unregistering): Released all slaves [ 949.581088][T30230] bridge_slave_1: left allmulticast mode [ 949.586887][T30230] bridge_slave_1: left promiscuous mode [ 949.598320][T30230] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.639584][T30230] bridge_slave_0: left allmulticast mode [ 949.650164][T30230] bridge_slave_0: left promiscuous mode [ 949.668853][T30230] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.793502][T30241] syzkaller0: entered promiscuous mode [ 949.804540][T30241] syzkaller0: entered allmulticast mode [ 949.825400][T30227] lo speed is unknown, defaulting to 1000 [ 949.848395][T30227] lo speed is unknown, defaulting to 1000 [ 949.984482][T30248] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 950.001931][T30248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6021'. [ 950.142412][T30250] tipc: Enabled bearer , priority 0 [ 950.224641][T30255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6022'. [ 950.246398][T30250] syzkaller0: entered promiscuous mode [ 950.252038][T30250] syzkaller0: entered allmulticast mode [ 950.258297][T30250] tipc: Resetting bearer [ 950.780334][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6029'. [ 950.882803][T30277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6028'. [ 951.145574][T14838] tipc: Resetting bearer [ 951.163961][T30271] bridge0: entered promiscuous mode [ 951.173453][T30271] bridge0: entered allmulticast mode [ 951.261735][T30249] tipc: Resetting bearer [ 954.264118][T30249] tipc: Disabling bearer [ 954.282563][T30279] team0: entered promiscuous mode [ 954.287758][T30279] team_slave_0: entered promiscuous mode [ 954.335225][T30279] team_slave_1: entered promiscuous mode [ 954.342128][T30279] team0: entered allmulticast mode [ 954.347406][T30279] team_slave_0: entered allmulticast mode [ 954.354298][T30279] team_slave_1: entered allmulticast mode [ 954.366633][T30279] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.384058][T30279] bond2: (slave team0): Enslaving as an active interface with an up link [ 954.646529][T30300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6034'. [ 955.051399][T30313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6037'. [ 955.225133][T30302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.241804][T30302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.386086][T30302] bond2: left promiscuous mode [ 955.391896][T30302] bridge1: left promiscuous mode [ 955.400233][T30302] vlan2: left allmulticast mode [ 955.405233][T30302] bond2: left allmulticast mode [ 955.411364][T30302] bridge1: left allmulticast mode [ 955.433293][T30302] bridge0: left promiscuous mode [ 955.438324][T30302] bridge0: left allmulticast mode [ 955.447582][ T7259] lo speed is unknown, defaulting to 1000 [ 955.454520][ T7259] syz1: Port: 1 Link DOWN [ 955.483846][T30327] Set syz1 is full, maxelem 65536 reached [ 955.529175][T14856] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.549488][T14856] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.583712][ T7257] lo speed is unknown, defaulting to 1000 [ 955.592208][T14856] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.605836][T14856] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.883720][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6041'. [ 956.306522][T30363] netlink: 328 bytes leftover after parsing attributes in process `syz.5.6051'. [ 956.328696][T30363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6051'. [ 956.356246][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 956.372816][T30365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6052'. [ 956.379452][T30361] netlink: 688 bytes leftover after parsing attributes in process `syz.5.6051'. [ 956.391843][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 956.401286][T30365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6052'. [ 956.463328][T30361] lo speed is unknown, defaulting to 1000 [ 956.480984][T30361] lo speed is unknown, defaulting to 1000 [ 956.657643][T30378] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 956.678780][T30378] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 956.826111][T30383] netlink: 'syz.1.6057': attribute type 13 has an invalid length. [ 956.890751][T30383] netlink: 'syz.1.6057': attribute type 13 has an invalid length. [ 957.183391][T30392] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 957.204302][T30392] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.212256][T30392] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.678264][T14855] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 957.856228][T30414] Set syz1 is full, maxelem 65536 reached [ 958.055174][T30419] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 958.182026][T30419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 958.221700][T30424] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 958.242844][T30428] bridge0: port 1(vlan3) entered blocking state [ 958.249550][T30428] bridge0: port 1(vlan3) entered disabled state [ 958.256045][T30428] vlan3: entered allmulticast mode [ 958.261509][T30428] geneve0: entered allmulticast mode [ 958.274763][T30430] pimreg1: renamed from bridge0 (while UP) [ 958.284562][T30430] pimreg1: entered allmulticast mode [ 958.291956][T30430] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 958.515751][T30431] bond3: entered promiscuous mode [ 958.523049][T30431] bond3: entered allmulticast mode [ 958.703223][T30419] macvlan2: entered promiscuous mode [ 958.709192][T30419] macvlan2: entered allmulticast mode [ 958.717245][T30419] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 959.275928][T30467] team0: Port device syz_tun added [ 959.313075][T30471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.347987][T30470] lo speed is unknown, defaulting to 1000 [ 959.360592][T30470] lo speed is unknown, defaulting to 1000 [ 959.755253][T30472] dvmrp0: entered allmulticast mode [ 962.057239][T30459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 962.261612][T30498] ip6t_srh: unknown srh invflags BA61 [ 962.273647][T30496] __nla_validate_parse: 10 callbacks suppressed [ 962.273668][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 962.420831][T30507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6090'. [ 962.474126][T30511] Set syz1 is full, maxelem 65536 reached [ 962.543974][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 962.560855][T30505] xt_hashlimit: size too large, truncated to 1048576 [ 962.649053][T30519] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 962.679035][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 962.964676][T30533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6096'. [ 963.003042][T30533] block nbd9: Unsupported socket: should be TCP or UNIX. [ 963.069286][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 963.080839][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 963.144793][T30550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6100'. [ 963.162147][T30550] ip6tnl1: entered allmulticast mode [ 963.200225][T30536] lo speed is unknown, defaulting to 1000 [ 963.247217][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6097'. [ 963.279823][T30536] lo speed is unknown, defaulting to 1000 [ 963.685856][T30562] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 963.886041][T30574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6106'. [ 964.077387][T30580] syzkaller0: entered promiscuous mode [ 964.091636][T30580] syzkaller0: entered allmulticast mode [ 964.180612][T30580] openvswitch: netlink: Duplicate key (type 6). [ 964.529999][ T4939] Bluetooth: hci3: command 0x0406 tx timeout [ 964.886182][T30611] netlink: 'syz.0.6116': attribute type 1 has an invalid length. [ 965.035417][T30611] bond5: entered promiscuous mode [ 965.064234][T30611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.192959][T30618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.210681][T30618] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 965.235676][T30618] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 965.262374][T30618] bond5: (slave vti0): making interface the new active one [ 965.270133][T30618] vti0: entered promiscuous mode [ 965.277269][T30618] bond5: (slave vti0): Enslaving as an active interface with an up link [ 965.698809][T30645] bond1: (slave ): Releasing active interface [ 965.736320][T30645] bond0: (slave bond_slave_0): Releasing backup interface [ 965.774579][T30645] bond0: (slave bond_slave_1): Releasing backup interface [ 965.787087][T30645] team0: Port device team_slave_0 removed [ 965.796581][T30645] team0: Port device team_slave_1 removed [ 965.806485][T30645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.815402][T30645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.825216][T30645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 965.861892][T30647] team0: Mode changed to "activebackup" [ 965.868147][T30649] tipc: Started in network mode [ 965.876097][T30649] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 965.881697][T30651] x_tables: duplicate underflow at hook 1 [ 965.885637][T30649] tipc: Enabled bearer , priority 0 [ 966.034830][T30654] gretap0: left promiscuous mode [ 966.441028][T30654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.457897][T30654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.659794][T30654] bond2: left allmulticast mode [ 966.697739][ T1165] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.710639][ T1165] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.719953][ T1165] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.729927][ T1165] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.740634][ T1165] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.749857][ T1165] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.828922][ T1165] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.848786][ T1165] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.878678][ T7257] tipc: Node number set to 11578026 [ 966.886971][T30690] tipc: Enabled bearer , priority 0 [ 966.895924][T30690] syzkaller0: entered promiscuous mode [ 966.902329][T30690] syzkaller0: entered allmulticast mode [ 966.916867][T30690] tipc: Resetting bearer [ 966.926552][T30689] tipc: Resetting bearer [ 966.972535][T30689] tipc: Disabling bearer [ 967.119625][T30693] netlink: set zone limit has 4 unknown bytes [ 967.130176][T30694] netlink: 'syz.3.6136': attribute type 1 has an invalid length. [ 967.145585][T30693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.155226][T30693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 967.343348][T30705] syzkaller0: entered promiscuous mode [ 967.350423][T30705] syzkaller0: entered allmulticast mode [ 967.367019][T30705] __nla_validate_parse: 6 callbacks suppressed [ 967.367042][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6140'. [ 968.136059][T30712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6142'. [ 968.149693][T30712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6142'. [ 971.565095][T30758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'. [ 971.665422][T30758] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 971.702994][T30758] bond3 (unregistering): Released all slaves [ 971.779753][T30771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6159'. [ 971.894440][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6159'. [ 972.427511][T30805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 972.463448][T30805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 972.854514][T30829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6174'. [ 972.866625][T30829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6174'. [ 973.111282][T30840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6181'. [ 973.124077][T30840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6181'. [ 973.148405][T30838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6179'. [ 973.162322][T30840] bond0: entered promiscuous mode [ 973.168323][T30840] bond_slave_0: entered promiscuous mode [ 973.184319][T30840] bond_slave_1: entered promiscuous mode [ 973.201541][T30840] gretap0: entered promiscuous mode [ 973.214511][T30840] debugfs: 'hsr1' already exists in 'hsr' [ 973.226912][T30840] Cannot create hsr debugfs directory [ 973.236089][T30840] hsr1: entered promiscuous mode [ 974.162418][T30889] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6197'. [ 974.404431][T30901] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 974.513925][T30903] netlink: 'syz.5.6202': attribute type 15 has an invalid length. [ 974.576787][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6204'. [ 975.305534][T30942] tipc: Enabled bearer , priority 0 [ 975.333203][T30942] syzkaller0: entered promiscuous mode [ 975.357969][T30942] syzkaller0: entered allmulticast mode [ 975.467451][T30951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6214'. [ 975.486678][T30942] xt_hl: Unknown Hop Limit match mode: 206 [ 975.516105][T30942] tipc: Resetting bearer [ 975.611003][T30941] tipc: Resetting bearer [ 975.689925][T30941] tipc: Disabling bearer [ 975.859492][T30968] netlink: 'syz.0.6218': attribute type 1 has an invalid length. [ 975.871804][T30963] syzkaller0: entered promiscuous mode [ 975.877983][T30963] syzkaller0: entered allmulticast mode [ 975.903984][T30967] netlink: 'syz.1.6219': attribute type 1 has an invalid length. [ 975.946892][T30958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.074272][T30958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.582867][T30996] Cannot find add_set index 0 as target [ 977.213828][T31013] netlink: 'syz.2.6223': attribute type 1 has an invalid length. [ 977.225165][T31013] Bluetooth: MGMT ver 1.23 [ 977.581741][T31022] __nla_validate_parse: 2 callbacks suppressed [ 977.581767][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 978.054863][T30983] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 978.143250][T30983] mac80211_hwsim hwsim55 wlan1: left promiscuous mode [ 978.159152][T30983] vlan3: left allmulticast mode [ 978.164301][T30983] bridge_slave_0: left allmulticast mode [ 978.270538][T30983] bond5: left promiscuous mode [ 978.279083][T30983] vti0: left promiscuous mode [ 978.302511][T30982] gretap1: entered allmulticast mode [ 978.316513][T30982] bond3: (slave gretap1): making interface the new active one [ 978.325447][T30982] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 978.505336][T31030] pimreg1: port 2(bridge_slave_1) entered disabled state [ 978.513157][T31030] pimreg1: port 1(bridge_slave_0) entered disabled state [ 978.550277][T31030] batman_adv: batadv0: Interface deactivated: dummy0 [ 978.682388][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.874136][T14856] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.884040][T14856] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.931147][T31047] ip6gre2: entered allmulticast mode [ 979.029061][T14856] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.038278][T14856] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.152223][T14856] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.178273][T14856] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.211691][T14856] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.244655][T14856] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.274176][T31064] erspan0: entered promiscuous mode [ 979.285401][T31064] erspan0: entered allmulticast mode [ 979.299200][T14856] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.322352][T14856] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.353450][T14856] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.398058][T14856] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.409602][T31080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6239'. [ 979.424586][T31079] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 979.444980][T31075] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 979.475193][T31080] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 979.488062][T31080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 979.762585][T31096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6245'. [ 980.693631][T31144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6258'. [ 980.706836][T31144] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 980.711045][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6251'. [ 980.726591][T31137] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6256'. [ 980.736277][T31137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6256'. [ 980.952099][T31149] netlink: 'syz.1.6259': attribute type 1 has an invalid length. [ 981.204103][T31165] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6264'. [ 981.674088][T31188] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6271'. [ 982.188843][T31213] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 982.205861][T31222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6280'. [ 982.656415][T31242] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 982.686269][T31242] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 982.718591][T31242] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 983.874246][T31282] __nla_validate_parse: 1 callbacks suppressed [ 983.874267][T31282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'. [ 984.040111][T31288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6296'. [ 984.109161][T31291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6295'. [ 984.147602][T31294] netlink: 'syz.2.6297': attribute type 1 has an invalid length. [ 984.155901][T31294] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6297'. [ 984.166062][T31293] netlink: 'syz.2.6297': attribute type 1 has an invalid length. [ 984.177164][T31293] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6297'. [ 984.304426][T31291] bond4: (slave dummy0): Releasing active interface [ 984.564240][T31306] xt_ipcomp: unknown flags 1D [ 984.964756][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6303'. [ 984.992231][T31315] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 985.009781][ T4939] Bluetooth: hci5: command 0x0405 tx timeout [ 985.767569][T31330] block nbd0: NBD_DISCONNECT [ 986.412098][T31346] lo speed is unknown, defaulting to 1000 [ 986.440821][T31346] lo speed is unknown, defaulting to 1000 [ 987.187542][T31356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6304'. [ 987.253335][T31365] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6318'. [ 987.307221][T31365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6318'. [ 987.450129][T31368] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6319'. [ 987.465904][T31241] Set syz1 is full, maxelem 65536 reached [ 987.635558][T31369] can: request_module (can-proto-0) failed. [ 988.090645][T31396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 988.116353][T31398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 988.906905][T31441] netlink: 'syz.5.6336': attribute type 2 has an invalid length. [ 989.480777][T31458] syzkaller0: entered promiscuous mode [ 989.488956][T31458] syzkaller0: entered allmulticast mode [ 989.643073][T31464] netlink: 'syz.0.6341': attribute type 4 has an invalid length. [ 989.655524][T31464] __nla_validate_parse: 10 callbacks suppressed [ 989.655543][T31464] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6341'. [ 989.742338][T31469] pim6reg1: entered promiscuous mode [ 989.749442][T31469] pim6reg1: entered allmulticast mode [ 990.067814][T31485] netlink: 296 bytes leftover after parsing attributes in process `syz.2.6343'. [ 990.138211][T31487] Set syz1 is full, maxelem 65536 reached [ 993.190168][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 994.028697][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 994.051381][T31533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6356'. [ 994.095798][T31535] Set syz1 is full, maxelem 65536 reached [ 994.297966][T31546] netlink: 'syz.2.6359': attribute type 1 has an invalid length. [ 994.654578][T31573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6364'. [ 994.891567][T31583] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 995.067554][T14838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 995.108612][T14838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 995.281312][T31592] tipc: Enabling of bearer rejected, failed to enable media [ 995.293919][T14838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 995.317725][T31599] Set syz1 is full, maxelem 65536 reached [ 995.610875][T31621] geneve1: entered promiscuous mode [ 995.726480][T31627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6377'. [ 996.046955][T31635] syzkaller0: entered promiscuous mode [ 996.053441][T31635] syzkaller0: entered allmulticast mode [ 997.590104][T31575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 997.654634][T31695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6397'. [ 997.772914][T31575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 997.811442][T31698] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 997.818871][T31698] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 997.895989][T31703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6400'. [ 997.914298][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6401'. [ 997.951980][T31575] bond0: (slave netdevsim0): Releasing backup interface [ 997.976334][T31575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 998.024176][T31705] tipc: New replicast peer: 255.255.255.255 [ 998.033467][T31705] tipc: Enabled bearer , priority 10 [ 998.118280][T31714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6403'. [ 998.138730][T31714] netlink: 'syz.1.6403': attribute type 7 has an invalid length. [ 998.148182][T31714] netlink: 'syz.1.6403': attribute type 8 has an invalid length. [ 998.160970][T31714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6403'. [ 998.172452][T31714] netlink: 'syz.1.6403': attribute type 1 has an invalid length. [ 998.180771][T31714] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6403'. [ 998.298282][T31722] SET target dimension over the limit! [ 998.356467][T14856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 998.462398][T14838] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 998.489291][T14856] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 998.555245][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1000.033127][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1000.042818][T31766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1000.053154][T31766] netlink: 'syz.2.6418': attribute type 20 has an invalid length. [ 1000.074267][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1000.083753][T31766] netlink: 'syz.2.6418': attribute type 20 has an invalid length. [ 1000.219890][T31772] netlink: 'syz.2.6420': attribute type 3 has an invalid length. [ 1000.242289][T31773] netlink: 'syz.2.6420': attribute type 3 has an invalid length. [ 1000.418133][T31783] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1000.563156][T31785] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 1000.583788][T31785] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 1000.591928][T31785] veth0_virt_wifi: entered allmulticast mode [ 1000.600174][T31785] veth0_virt_wifi: entered promiscuous mode [ 1000.717864][T31787] siw: device registration error -23 [ 1000.912379][T31792] __nla_validate_parse: 5 callbacks suppressed [ 1000.912400][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1000.930732][T31792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1000.941974][T31792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1001.040221][T31794] lo speed is unknown, defaulting to 1000 [ 1001.048305][T31794] lo speed is unknown, defaulting to 1000 [ 1002.165477][T31804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6430'. [ 1002.538661][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1002.578215][T31817] lo speed is unknown, defaulting to 1000 [ 1002.621026][T31817] lo speed is unknown, defaulting to 1000 [ 1002.888698][T31823] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6435'. [ 1003.869933][T31850] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6438'. [ 1004.437139][T31866] syzkaller0: entered promiscuous mode [ 1004.471913][T31866] syzkaller0: entered allmulticast mode [ 1004.546069][T31863] syzkaller1: entered promiscuous mode [ 1004.556242][T31863] syzkaller1: entered allmulticast mode [ 1005.083423][T31781] Set syz1 is full, maxelem 65536 reached [ 1005.254218][T31898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1005.277470][T31898] netlink: 'syz.2.6446': attribute type 10 has an invalid length. [ 1005.305667][T31898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1005.348114][T31898] geneve3: entered promiscuous mode [ 1005.360379][T31898] geneve3: entered allmulticast mode [ 1005.371099][T14838] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1005.402813][T14838] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1005.431694][T14838] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1005.447805][T14838] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1005.569989][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1005.762949][T31905] macvlan0: entered promiscuous mode [ 1005.784147][T31907] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1006.088730][T31927] __nla_validate_parse: 2 callbacks suppressed [ 1006.088752][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1006.105130][T31929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1006.115730][T31930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1006.132478][T31927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1006.168021][T31933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1006.178073][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1006.204236][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6459'. [ 1006.250200][T31929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1006.330978][T31943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1006.348752][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1006.503509][T31948] bond3: (slave bond_slave_1): Device is not our slave [ 1006.511352][T31948] bond3: option active_slave: invalid value (bond_slave_1) [ 1006.524350][T31948] bond3 (unregistering): Released all slaves [ 1006.614226][T31958] bond3: (slave bond_slave_1): Device is not our slave [ 1006.622110][T31958] bond3: option active_slave: invalid value (bond_slave_1) [ 1006.634069][T31958] bond3 (unregistering): Released all slaves [ 1006.802603][T31971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1007.202870][T31999] IPv6: NLM_F_CREATE should be specified when creating new route [ 1007.233989][T32005] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1007.551968][T32017] netlink: 'syz.1.6477': attribute type 14 has an invalid length. [ 1008.415778][ T30] audit: type=1107 audit(1784080197.504:16): pid=32041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='øÂ;õ¨ÉP 3D(Õ¼üÄ.šqÕ-˜élÀ“vƒïµü,ñûû½ëM mcoÄ»áóSï:Ëø,¶J”TëŠÐþ-¬5Y*Êy}ØïŸÑ"œü¾5í‰ÛTûAìÈ‘±èr×Cµï Ë쮌Òzôñ0–Ò%V”øœó¼¬„¯ÑòÃmÐê ßÞ;šŸN±eâÏ' [ 1009.032528][T32074] bond3: entered promiscuous mode [ 1009.099623][T32074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.727382][T32106] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1009.752264][T32108] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1009.788189][T32106] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1010.378345][T32138] Set syz1 is full, maxelem 65536 reached [ 1010.508396][T32143] netlink: 'syz.0.6504': attribute type 1 has an invalid length. [ 1010.536310][T32143] netlink: 'syz.0.6504': attribute type 2 has an invalid length. [ 1010.628093][ T5636] Bluetooth: hci6: command 0x0406 tx timeout [ 1010.965035][T32166] xt_hashlimit: size too large, truncated to 1048576 [ 1010.973242][T32163] syzkaller0: entered promiscuous mode [ 1010.979044][T32163] syzkaller0: entered allmulticast mode [ 1011.744442][T32173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.834063][T32175] lo speed is unknown, defaulting to 1000 [ 1011.954864][T32175] lo speed is unknown, defaulting to 1000 [ 1012.085973][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.111136][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.123429][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.133057][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.141295][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.436442][T32212] __nla_validate_parse: 5 callbacks suppressed [ 1012.436463][T32212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6521'. [ 1012.527839][T32212] lo speed is unknown, defaulting to 1000 [ 1012.565570][T32212] lo speed is unknown, defaulting to 1000 [ 1012.945629][T32229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6524'. [ 1013.102746][T32198] lo speed is unknown, defaulting to 1000 [ 1013.141251][T32198] lo speed is unknown, defaulting to 1000 [ 1013.829062][T32255] vlan0: entered allmulticast mode [ 1013.834434][T32255] bond0: entered allmulticast mode [ 1014.161138][T32270] netlink: 'syz.1.6533': attribute type 19 has an invalid length. [ 1014.169473][T32270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1014.208966][ T4939] Bluetooth: hci0: command tx timeout [ 1014.274546][T32270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1014.300541][T32270] netlink: 'syz.1.6533': attribute type 19 has an invalid length. [ 1014.316733][T32270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1014.401387][T32273] bridge4: entered promiscuous mode [ 1014.406823][T32273] bridge4: entered allmulticast mode [ 1014.439223][ T769] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.453114][ T769] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.467000][ T769] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.478862][ T769] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.834228][T32266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1014.848961][T32266] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1014.920440][T32266] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1014.930597][T32198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.945415][T32266] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1014.966017][T32198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.993532][T32198] bridge_slave_0: entered allmulticast mode [ 1015.003865][T32198] bridge_slave_0: entered promiscuous mode [ 1015.025866][T32266] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1015.036008][T32198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.043849][T32266] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1015.051946][T32198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.060289][T32198] bridge_slave_1: entered allmulticast mode [ 1015.077852][T32198] bridge_slave_1: entered promiscuous mode [ 1015.186452][T32266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1015.205577][T32198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.206310][T32266] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1015.231011][T32198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.327381][T32198] team0: Port device team_slave_0 added [ 1015.392356][T32198] team0: Port device team_slave_1 added [ 1015.400374][T32304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.413028][T32266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1015.425135][T32266] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1015.484699][T32198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.518942][T32198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.575679][T32198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.604432][T32198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.626000][T32198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.731634][T32198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.786879][T32311] ipip0: entered promiscuous mode [ 1015.797751][T32318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.866377][T32318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6544'. [ 1015.899198][T32318] netlink: 'syz.0.6544': attribute type 7 has an invalid length. [ 1015.928726][T32318] netlink: 'syz.0.6544': attribute type 8 has an invalid length. [ 1015.936629][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6544'. [ 1015.951861][T32198] hsr_slave_0: entered promiscuous mode [ 1015.962275][T32198] hsr_slave_1: entered promiscuous mode [ 1015.969507][T32198] debugfs: 'hsr0' already exists in 'hsr' [ 1015.977094][T32198] Cannot create hsr debugfs directory [ 1015.989937][T32323] netlink: 'syz.0.6544': attribute type 1 has an invalid length. [ 1016.018714][T32323] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6544'. [ 1016.336312][T32328] veth1_to_hsr: entered promiscuous mode [ 1016.352549][T32328] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6546'. [ 1016.370264][T32328] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1016.809414][T32361] Set syz1 is full, maxelem 65536 reached [ 1017.304201][T32389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1017.333871][T32389] siw: device registration error -23 [ 1017.443420][T32198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1017.469049][T32198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.490748][T32198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1017.521663][T32198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.530370][T32198] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1017.557253][T32198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.575077][T32198] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1017.603127][T32198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.733324][T32409] Set syz1 is full, maxelem 65536 reached [ 1017.794532][T32413] __nla_validate_parse: 1 callbacks suppressed [ 1017.794565][T32413] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6566'. [ 1017.913141][T32198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.997289][T32198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.042478][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.049842][T14856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.127207][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.134519][T14855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.195282][T32423] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6569'. [ 1018.798074][T32448] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1018.815478][T32441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6572'. [ 1019.285330][T32463] block nbd0: not configured, cannot reconfigure [ 1019.353454][T32464] Set syz1 is full, maxelem 65536 reached [ 1019.693342][T32480] netlink: 'syz.0.6580': attribute type 3 has an invalid length. [ 1019.719733][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'. [ 1019.763441][T32198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.960102][T32499] netlink: 'syz.1.6584': attribute type 1 has an invalid length. [ 1020.000737][T32499] gretap2: entered allmulticast mode [ 1020.047829][T32501] netlink: 'syz.1.6584': attribute type 1 has an invalid length. [ 1020.745656][T32539] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1020.754873][T32539] bridge2: entered allmulticast mode [ 1020.874970][T32198] veth0_vlan: entered promiscuous mode [ 1020.908141][T32198] veth1_vlan: entered promiscuous mode [ 1020.975645][T32550] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1020.992769][T32198] veth0_macvtap: entered promiscuous mode [ 1021.040238][T32198] veth1_macvtap: entered promiscuous mode [ 1021.139822][T32198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.199871][T32198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.280309][T14838] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.320649][T14838] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.346188][T32569] netlink: 'syz.2.6601': attribute type 12 has an invalid length. [ 1021.369881][T14838] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.397845][T14838] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.744911][T14838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.774232][T14838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.919333][T14856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.937394][T14856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.264068][T32605] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6609'. [ 1022.524623][T32614] Set syz1 is full, maxelem 65536 reached [ 1022.581654][T32617] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6613'. [ 1022.626530][T32619] netlink: 'syz.6.6516': attribute type 1 has an invalid length. [ 1022.761603][T32623] vlan2: entered allmulticast mode [ 1022.775697][T32623] veth0_to_bond: entered allmulticast mode [ 1023.031984][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6619'. [ 1023.058236][T32645] netlink: 'syz.2.6619': attribute type 20 has an invalid length. [ 1023.080583][T32645] netlink: 'syz.2.6619': attribute type 21 has an invalid length. [ 1023.236980][T32657] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6623'. [ 1023.670536][T32677] netlink: 'syz.5.6629': attribute type 2 has an invalid length. [ 1025.676783][T32622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1025.943050][T32690] netlink: 'syz.5.6633': attribute type 8 has an invalid length. [ 1025.958620][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6633'. [ 1025.976248][T32687] veth5: entered allmulticast mode [ 1026.021995][T32694] netlink: 'syz.0.6634': attribute type 7 has an invalid length. [ 1026.053606][T32694] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 1026.062827][T32694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1026.075905][T32694] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1026.123200][T32690] bond0: entered promiscuous mode [ 1026.129720][T32690] bond_slave_0: entered promiscuous mode [ 1026.135918][T32690] bond_slave_1: entered promiscuous mode [ 1026.146387][T32690] gretap0: entered promiscuous mode [ 1026.164757][T32690] bond0: left promiscuous mode [ 1026.171420][T32690] bond_slave_0: left promiscuous mode [ 1026.177325][T32690] bond_slave_1: left promiscuous mode [ 1026.187975][T32690] gretap0: left promiscuous mode [ 1026.202721][T32694] netlink: 'syz.0.6634': attribute type 1 has an invalid length. [ 1026.285484][T32700] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1026.314433][T32700] bond7 (unregistering): Released all slaves [ 1026.747208][T32718] netlink: 'syz.0.6639': attribute type 1 has an invalid length. [ 1026.822835][T32718] syzkaller0: entered promiscuous mode [ 1026.834663][T32718] syzkaller0: entered allmulticast mode [ 1026.844012][T32722] syzkaller1: entered promiscuous mode [ 1026.858640][T32722] syzkaller1: entered allmulticast mode [ 1026.945762][T32724] syzkaller0: entered promiscuous mode [ 1026.951921][T32724] syzkaller0: entered allmulticast mode [ 1027.240404][T32731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6643'. [ 1027.279219][T32727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6643'. [ 1027.464737][T32740] netlink: 'syz.0.6647': attribute type 1 has an invalid length. [ 1027.508819][T32740] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1027.548338][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1027.620223][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1027.915818][T32748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1028.032486][T32751] macvlan2: entered promiscuous mode [ 1028.053579][T32751] macvlan2: entered allmulticast mode [ 1028.071431][T32751] bond5: entered promiscuous mode [ 1028.089902][T32751] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1028.117768][T32751] bond5: left promiscuous mode [ 1028.355194][T32759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1028.414313][T32761] netlink: 'syz.1.6651': attribute type 1 has an invalid length. [ 1028.497258][T32761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1028.535097][T32767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1028.556186][T32764] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1028.579205][T32767] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1028.592582][T32767] bridge0: entered allmulticast mode [ 1028.608268][T32767] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1028.736109][ T305] Bluetooth: MGMT ver 1.23 [ 1028.841732][ T310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6655'. [ 1028.851641][ T311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6655'. [ 1029.024592][ T315] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.6656'. [ 1029.102494][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1029.266903][ T321] bond7: (slave macvlan1): Enslaving as an active interface with an up link [ 1029.342563][ T330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6660'. [ 1029.806259][ T7269] IPVS: starting estimator thread 0... [ 1029.812471][ T343] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1029.837180][ T343] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1029.920051][ T344] IPVS: using max 27 ests per chain, 64800 per kthread [ 1029.931177][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.939000][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.600205][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.665410][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.444198][ T1165] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.464105][ T1165] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.484534][ T1165] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.495220][ T1165] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.766104][ T353] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6665'. [ 1031.911050][ T358] netlink: 'syz.1.6667': attribute type 10 has an invalid length. [ 1031.925547][ T358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.934915][ T358] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1031.945596][ T358] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1033.365152][ T400] vlan2: entered promiscuous mode [ 1033.377940][ T400] bridge0: entered promiscuous mode [ 1033.954505][ T402] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1033.975906][ T402] bridge0: left allmulticast mode [ 1033.990911][ T402] vlan0: left allmulticast mode [ 1034.006196][ T402] bond0: left allmulticast mode [ 1034.337063][ T417] __nla_validate_parse: 3 callbacks suppressed [ 1034.337085][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1034.356594][ T429] netlink: 'syz.6.6685': attribute type 21 has an invalid length. [ 1034.390149][ T417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1034.433946][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1034.465060][ T417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1035.080409][ T447] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6690'. [ 1035.525864][ T463] bridge3: entered promiscuous mode [ 1035.532121][ T463] bridge3: entered allmulticast mode [ 1035.575135][ T465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6695'. [ 1035.663041][ T470] netlink: 'syz.5.6696': attribute type 29 has an invalid length. [ 1035.836551][ T476] netlink: 'syz.1.6698': attribute type 1 has an invalid length. [ 1035.913980][ T476] bond8: (slave veth5): Enslaving as an active interface with a down link [ 1035.962427][ T478] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1035.995335][ T476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6698'. [ 1036.014833][ T476] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.192509][ T483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1036.229286][ T483] bond0: (slave bond_slave_0): Releasing backup interface [ 1036.249359][ T483] bond_slave_0: left promiscuous mode [ 1036.293295][ T483] bond_slave_0: entered promiscuous mode [ 1036.308696][ T483] bond_slave_0: entered allmulticast mode [ 1036.366287][ T1165] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1036.376909][ T1165] bond6: (slave veth0_to_bond): making interface the new active one [ 1036.392999][ T1165] bond6: active interface up! [ 1037.955943][T32688] Set syz1 is full, maxelem 65536 reached [ 1038.086614][ T489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6701'. [ 1038.096527][ T489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.520964][ T465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1038.769143][ T502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6704'. [ 1039.324068][ T528] xt_hashlimit: size too large, truncated to 1048576 [ 1039.358105][ T535] __nla_validate_parse: 1 callbacks suppressed [ 1039.358127][ T535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6717'. [ 1039.612091][ T542] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6718'. [ 1040.014202][ T551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1040.046767][ T551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1041.476625][ T595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6729'. [ 1041.511330][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6729'. [ 1041.553012][ T595] netlink: 'syz.6.6729': attribute type 18 has an invalid length. [ 1042.182736][ T612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6732'. [ 1042.310360][ T615] syzkaller0: entered promiscuous mode [ 1042.328589][ T615] syzkaller0: entered allmulticast mode [ 1042.470348][ T617] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 1042.489414][ T617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1042.553471][ T617] lo speed is unknown, defaulting to 1000 [ 1042.592790][ T617] lo speed is unknown, defaulting to 1000 [ 1044.326158][ T635] ip6tnl2: entered allmulticast mode [ 1044.475731][ T644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1044.508660][ T644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1044.607998][ T648] netlink: 'syz.0.6742': attribute type 5 has an invalid length. [ 1044.616157][ T648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6742'. [ 1044.658897][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1044.688883][ T650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1044.837933][ T657] x_tables: duplicate entry at hook 1 [ 1045.664322][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1046.110512][ T692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1046.121796][ T692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1046.391212][ T696] lo speed is unknown, defaulting to 1000 [ 1046.399693][ T696] lo speed is unknown, defaulting to 1000 [ 1046.995180][ T707] lo speed is unknown, defaulting to 1000 [ 1047.170425][ T707] lo speed is unknown, defaulting to 1000 [ 1048.393318][ T734] bond8: option ad_user_port_key: invalid value (65535) [ 1048.409305][ T734] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 1048.434218][ T734] bond8 (unregistering): Released all slaves [ 1048.771305][ T737] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1048.859925][ T737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1048.933233][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6770'. [ 1051.486767][ T778] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1051.952416][ T759] Cannot find add_set index 2 as target [ 1051.959354][ T517] Set syz1 is full, maxelem 65536 reached [ 1052.094835][ T781] xt_hashlimit: size too large, truncated to 1048576 [ 1052.605886][ T811] netlink: 'syz.2.6788': attribute type 2 has an invalid length. [ 1052.733301][ T815] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1052.762642][ T812] bond4: Unable to set up delay as MII monitoring is disabled [ 1052.778873][ T812] bond4 (unregistering): Released all slaves [ 1053.027902][ T811] : entered promiscuous mode [ 1053.217189][ T839] gretap1: entered promiscuous mode [ 1053.557946][ T861] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1053.583129][ T863] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1053.873196][ T881] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6804'. [ 1053.897639][ T882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6802'. [ 1054.252790][ T882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.288336][ T882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.298019][ T882] tipc: Resetting bearer [ 1054.307929][ T882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.378152][ T882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.389959][ T882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.409962][ T882] veth1_vlan: left promiscuous mode [ 1054.417285][ T882] veth0_vlan: left promiscuous mode [ 1054.426241][ T882] veth0_vlan: entered promiscuous mode [ 1054.436638][ T882] veth1_vlan: entered promiscuous mode [ 1054.457408][ T882] veth1_macvtap: left promiscuous mode [ 1054.464888][ T882] veth0_macvtap: left promiscuous mode [ 1054.473080][ T882] veth0_macvtap: entered promiscuous mode [ 1054.480545][ T882] veth1_macvtap: entered promiscuous mode [ 1054.512649][ T882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.521381][ T882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.533253][ T882] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1054.550292][ T7269] lo speed is unknown, defaulting to 1000 [ 1054.560523][ T7269] syz1: Port: 1 Link ACTIVE [ 1054.611256][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.635972][ T904] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6808'. [ 1054.704085][ T5759] geneve0: entered promiscuous mode [ 1054.757475][ T7269] lo speed is unknown, defaulting to 1000 [ 1054.998812][ T920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6812'. [ 1055.068240][ T926] xt_NFQUEUE: number of total queues is 0 [ 1055.959748][ T975] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1056.059373][ T975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6821'. [ 1056.958226][ T999] lo speed is unknown, defaulting to 1000 [ 1056.998845][ T999] lo speed is unknown, defaulting to 1000 [ 1057.004188][ T1000] syzkaller0: entered promiscuous mode [ 1057.025669][ T1000] syzkaller0: entered allmulticast mode [ 1057.051814][ T1000] tipc: Enabled bearer , priority 0 [ 1057.247274][ T996] tipc: Resetting bearer [ 1057.336502][ T996] tipc: Disabling bearer [ 1057.741084][ T1037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1058.435487][ T1072] nbd: must specify at least one socket [ 1059.555948][ T1087] syzkaller0: entered promiscuous mode [ 1059.571388][ T1087] syzkaller0: entered allmulticast mode [ 1059.994105][ T1098] syzkaller0: entered promiscuous mode [ 1060.019761][ T1098] syzkaller0: entered allmulticast mode [ 1060.043277][ T1106] tipc: Enabled bearer , priority 0 [ 1060.222006][ T1106] syzkaller0: entered promiscuous mode [ 1060.227533][ T1106] syzkaller0: entered allmulticast mode [ 1060.250368][ T1106] tipc: Resetting bearer [ 1060.264172][ T1117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.322075][ T1104] tipc: Resetting bearer [ 1060.367311][ T1113] netlink: 'syz.2.6854': attribute type 11 has an invalid length. [ 1060.402604][ T1113] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.6854'. [ 1060.442052][ T1113] netlink: 'syz.2.6854': attribute type 2 has an invalid length. [ 1060.471112][ T1113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6854'. [ 1063.649477][ T1104] tipc: Disabling bearer [ 1063.663346][ T1123] netlink: 'syz.1.6855': attribute type 2 has an invalid length. [ 1063.696519][ T1113] ¿: entered promiscuous mode [ 1063.808035][ T1142] netlink: 'syz.6.6861': attribute type 27 has an invalid length. [ 1063.973223][ T1153] netlink: 212 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1064.000770][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1064.036392][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1064.046578][ T1150] veth3: entered promiscuous mode [ 1064.054539][ T1150] veth3: entered allmulticast mode [ 1064.254293][ T1172] xt_hashlimit: size too large, truncated to 1048576 [ 1064.292327][ T1172] xt_hashlimit: invalid interval [ 1064.322037][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1065.022872][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1065.207937][ T1196] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6878'. [ 1065.672703][ T1210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1065.960610][ T1216] batman_adv: batadv0: Adding interface: macvtap1 [ 1065.977544][ T1216] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.061316][ T1216] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1066.075927][ T1196] netlink: 732 bytes leftover after parsing attributes in process `syz.5.6878'. [ 1066.113030][ T1196] netlink: 732 bytes leftover after parsing attributes in process `syz.5.6878'. [ 1066.724460][ T1243] lo speed is unknown, defaulting to 1000 [ 1066.757086][ T1243] lo speed is unknown, defaulting to 1000 [ 1066.893780][ T1263] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1066.933363][ T1263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1067.039267][ T1263] xt_hashlimit: size too large, truncated to 1048576 [ 1067.125662][ T1265] lo speed is unknown, defaulting to 1000 [ 1067.838175][ T1265] lo speed is unknown, defaulting to 1000 [ 1067.941263][ T1275] syzkaller0: entered promiscuous mode [ 1067.955562][ T1275] syzkaller0: entered allmulticast mode [ 1067.991135][ T1273] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6898'. [ 1068.344246][ T1279] bridge0: entered promiscuous mode [ 1068.363550][ T1279] bridge0: entered allmulticast mode [ 1068.821038][ T1290] netlink: 'syz.6.6904': attribute type 15 has an invalid length. [ 1068.977832][ T1292] can: request_module (can-proto-0) failed. [ 1068.990681][ T1299] SET target dimension over the limit! [ 1068.997620][ T1304] SET target dimension over the limit! [ 1069.127468][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1069.214088][ T1311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1069.248025][ T1311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1069.328317][ T1292] hsr0: entered promiscuous mode [ 1069.370380][ T1306] hsr_slave_0: left promiscuous mode [ 1069.417502][ T1306] hsr_slave_1: left promiscuous mode [ 1069.505333][ T1306] hsr0 (unregistering): left promiscuous mode [ 1070.085190][ T1335] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6913'. [ 1070.559804][ T1341] netlink: 'syz.6.6916': attribute type 6 has an invalid length. [ 1070.706163][ T1346] atomic_op ffff888092813998 conn xmit_atomic 0000000000000000 [ 1070.861849][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.873007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.906359][T14849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.917786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.930393][T14855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.106683][ T1356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6921'. [ 1071.140287][ T1363] lo speed is unknown, defaulting to 1000 [ 1071.148248][ T1363] lo speed is unknown, defaulting to 1000 [ 1071.757486][ T1365] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1073.042300][ T1402] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1076.559294][T14849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.580339][T14849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.619638][ T1434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6938'. [ 1076.646542][ T1434] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1076.706602][ T1443] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1076.758955][ T1443] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1076.803351][ T1442] netlink: 'syz.6.6939': attribute type 39 has an invalid length. [ 1076.900940][ T1451] netlink: 'syz.5.6942': attribute type 10 has an invalid length. [ 1076.997711][ T1453] lo speed is unknown, defaulting to 1000 [ 1077.011508][ T1453] lo speed is unknown, defaulting to 1000 [ 1077.310684][ T1460] bond4: option lacp_rate: invalid value (3) [ 1077.350141][ T1460] bond4 (unregistering): Released all slaves [ 1077.433936][ T1466] bridge0: left promiscuous mode [ 1077.447279][ T1466] bridge0: left allmulticast mode [ 1077.493469][ T1466] gretap1: left promiscuous mode [ 1077.953109][ T1484] macsec3: entered promiscuous mode [ 1078.183273][ T1490] netlink: 'syz.6.6952': attribute type 21 has an invalid length. [ 1078.217421][ T1490] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6952'. [ 1078.849467][ T1505] syzkaller0: entered promiscuous mode [ 1078.875029][ T1505] syzkaller0: entered allmulticast mode [ 1078.913272][ T1505] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6956'. [ 1078.931769][ T1505] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6956'. [ 1078.947991][ T1505] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6956'. [ 1079.273717][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6960'. [ 1079.319309][ T1523] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6960'. [ 1079.343870][ T1526] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1079.377365][ T1526] syzkaller1: entered promiscuous mode [ 1079.399369][ T1526] syzkaller1: entered allmulticast mode [ 1079.980542][ T1563] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1080.008201][ T1563] x_tables: duplicate underflow at hook 1 [ 1080.487678][T14855] dvmrp0: left allmulticast mode [ 1080.511378][T14855] pimreg9: left allmulticast mode [ 1080.780254][T14855] team0: Port device xfrm0 removed [ 1080.953654][T14855] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1081.169214][T14855] bond0 (unregistering): Released all slaves [ 1081.181574][T14855] bond1 (unregistering): Released all slaves [ 1081.209995][T14855] bond2 (unregistering): Released all slaves [ 1081.228216][T14855] bond3 (unregistering): (slave veth3): Releasing active interface [ 1081.237286][T14855] bond3 (unregistering): Released all slaves [ 1081.260395][T14855] bond4 (unregistering): Released all slaves [ 1081.277543][T14855] bond5 (unregistering): Released all slaves [ 1081.296585][T14855] bond6 (unregistering): Released all slaves [ 1081.325039][T14855] bond7 (unregistering): Released all slaves [ 1081.343460][ T1579] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1081.463000][ T1605] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1081.682606][ T1618] __nla_validate_parse: 6 callbacks suppressed [ 1081.682625][ T1618] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1081.714778][T14855] : left promiscuous mode [ 1081.933210][T14855] tipc: Disabling bearer [ 1081.975199][T14855] tipc: Disabling bearer [ 1082.045523][T14855] tipc: Left network mode [ 1082.111225][ T1645] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6992'. [ 1082.419281][ T1653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6994'. [ 1082.467945][ T1657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6994'. [ 1082.523400][ T1651] syzkaller0: entered promiscuous mode [ 1082.539236][ T1651] syzkaller0: entered allmulticast mode [ 1082.776832][ T1669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6999'. [ 1083.403574][ T1701] vxcan3: entered allmulticast mode [ 1083.625266][ T1711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7009'. [ 1083.987671][T14855] hsr_slave_0: left promiscuous mode [ 1084.002657][ T30] audit: type=1804 audit(1784080273.094:17): pid=1727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7011" name="/newroot/289/cgroup.controllers" dev="tmpfs" ino=1500 res=1 errno=0 [ 1084.029080][T14855] hsr_slave_1: left promiscuous mode [ 1084.066676][ T30] audit: type=1800 audit(1784080273.124:18): pid=1727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7011" name="cgroup.controllers" dev="tmpfs" ino=1500 res=0 errno=0 [ 1085.557390][ T1758] netlink: 'syz.5.7020': attribute type 9 has an invalid length. [ 1085.701457][T14855] IPVS: stop unused estimator thread 0... [ 1086.019340][ T1781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 1086.300893][ T1786] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7025'. [ 1086.311425][ T1785] 8021q: VLANs not supported on ipvlan0 [ 1086.314936][ T1788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1086.436367][ T1791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7025'. [ 1086.518159][ T1800] bond0: (slave bond_slave_1): Releasing backup interface [ 1086.536518][ T1800] bond_slave_1: left promiscuous mode [ 1087.113638][ T1837] __nla_validate_parse: 2 callbacks suppressed [ 1087.113660][ T1837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1087.203178][ T1843] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7039'. [ 1087.235869][ T1837] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1087.277968][ T1834] ip6erspan0: entered allmulticast mode [ 1087.327609][ T1834] netlink: 'syz.2.7034': attribute type 83 has an invalid length. [ 1087.448746][ T1851] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7042'. [ 1087.458718][ T1851] openvswitch: netlink: Message has 512 unknown bytes. [ 1088.084774][ T1863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7044'. [ 1088.205841][ T30] audit: type=1800 audit(1784080277.294:19): pid=1865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7045" name="memory.events" dev="tmpfs" ino=1997 res=0 errno=0 [ 1088.751739][ T1890] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7054'. [ 1088.802514][ T1897] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7054'. [ 1089.083183][ T1904] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7055'. [ 1089.115011][ T1904] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7055'. [ 1089.194069][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7057'. [ 1090.032971][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.286945][ T1944] ip_vti0: Master is either lo or non-ether device [ 1090.973650][ T1979] netlink: 'syz.6.7074': attribute type 1 has an invalid length. [ 1091.055147][ T1979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.577853][ T2000] netlink: 'syz.1.7078': attribute type 21 has an invalid length. [ 1091.609610][ T2000] netlink: 'syz.1.7078': attribute type 5 has an invalid length. [ 1091.639901][ T2000] netlink: 'syz.1.7078': attribute type 6 has an invalid length. [ 1091.854393][ T2013] geneve1: entered promiscuous mode [ 1091.868211][T14849] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1091.881319][ T2013] geneve1: entered allmulticast mode [ 1091.922100][ T2007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1091.950524][ T1876] Set syz1 is full, maxelem 65536 reached [ 1092.172628][ T2023] __nla_validate_parse: 5 callbacks suppressed [ 1092.172644][ T2023] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7085'. [ 1092.470245][ T2037] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1092.475664][ T2038] syzkaller0: entered promiscuous mode [ 1092.484989][ T2038] syzkaller0: entered allmulticast mode [ 1092.733842][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1092.764423][ T2052] netlink: 'syz.5.7093': attribute type 4 has an invalid length. [ 1092.779034][ T2052] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7093'. [ 1092.818715][ T2055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7093'. [ 1093.400991][ T2059] sch_tbf: peakrate 9 is lower than or equals to rate 15747313429047136836 ! [ 1093.437085][ T2067] bond0: entered promiscuous mode [ 1093.452661][ T2067] bridge_slave_0: entered promiscuous mode [ 1093.463672][ T2067] debugfs: 'hsr1' already exists in 'hsr' [ 1093.478585][ T2067] Cannot create hsr debugfs directory [ 1093.711332][ T7253] IPVS: starting estimator thread 0... [ 1093.760341][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.771351][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.779739][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.787162][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.805014][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.828152][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.842101][ T2086] IPVS: using max 29 ests per chain, 69600 per kthread [ 1093.848283][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.873637][ T2092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7101'. [ 1093.882885][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.899722][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.919158][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.920862][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.930557][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.941019][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.958980][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.962066][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1093.974927][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1093.985722][ T2095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7104'. [ 1094.018573][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.033012][ T2088] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1094.068637][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.095959][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.109774][ T2106] syzkaller1: entered promiscuous mode [ 1094.116864][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.130048][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.136589][ T2106] syzkaller1: entered allmulticast mode [ 1094.188601][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.207443][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.221847][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.235098][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.242816][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.250115][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.256833][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.263569][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.270452][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.277216][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.315368][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.342859][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.367370][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.397568][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.432722][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.462536][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1094.486305][ T2083] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1095.006802][ T2121] bond0: (slave bond_slave_1): Releasing backup interface [ 1095.060311][ T2121] tc action pedit offset 132 out of bounds [ 1095.068347][ T2121] tc action pedit offset 132 out of bounds [ 1095.074293][ T2121] tc action pedit offset 132 out of bounds [ 1095.080170][ T2121] tc action pedit offset 132 out of bounds [ 1095.086006][ T2121] tc action pedit offset 132 out of bounds [ 1095.091897][ T2121] tc action pedit offset 132 out of bounds [ 1095.097757][ T2121] tc action pedit offset 132 out of bounds [ 1095.103658][ T2121] tc action pedit offset 132 out of bounds [ 1095.109538][ T2121] tc action pedit offset 132 out of bounds [ 1095.115734][ T2121] tc action pedit offset 132 out of bounds [ 1095.225526][ T2126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7113'. [ 1095.463613][ T2144] sctp: [Deprecated]: syz.5.7117 (pid 2144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.463613][ T2144] Use struct sctp_sack_info instead [ 1095.494676][ T2148] netlink: 'syz.0.7118': attribute type 7 has an invalid length. [ 1095.505129][ T2144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7117'. [ 1095.531679][ T2144] ip6gre2: entered promiscuous mode [ 1095.537328][ T2144] ip6gre2: entered allmulticast mode [ 1095.942651][ T2159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1096.073753][ T2162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.091118][ T2164] syzkaller0: entered promiscuous mode [ 1096.096813][ T2164] syzkaller0: entered allmulticast mode [ 1096.156714][ T2167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.424906][ T2179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.721341][ T2197] syzkaller0: entered promiscuous mode [ 1096.726986][ T2197] syzkaller0: entered allmulticast mode [ 1096.750049][ T2198] lo speed is unknown, defaulting to 1000 [ 1096.769319][ T2198] lo speed is unknown, defaulting to 1000 [ 1097.110335][ T2210] vlan2: entered allmulticast mode [ 1097.135397][ T2210] bond0: entered allmulticast mode [ 1097.335135][ T2201] dvmrp0: entered allmulticast mode [ 1097.355115][ T2201] netlink: 'syz.6.7133': attribute type 10 has an invalid length. [ 1097.391741][ T2201] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1097.621633][ T2221] netlink: 'syz.0.7139': attribute type 15 has an invalid length. [ 1097.678935][ T2221] xt_hashlimit: size too large, truncated to 1048576 [ 1098.524809][ T2247] __nla_validate_parse: 4 callbacks suppressed [ 1098.524830][ T2247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7147'. [ 1098.572299][ T2251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7148'. [ 1098.753826][ T2255] syzkaller0: entered promiscuous mode [ 1098.769825][ T2255] syzkaller0: entered allmulticast mode [ 1098.788354][ T2255] netlink: 'syz.1.7149': attribute type 1 has an invalid length. [ 1098.862193][ T2261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1098.943971][ T2261] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1099.043823][ T2261] batman_adv: batadv0: Removing interface: dummy0 [ 1099.426963][ T2286] syzkaller0: entered promiscuous mode [ 1099.438854][ T2286] syzkaller0: entered allmulticast mode [ 1099.782841][ T2293] xt_recent: Unsupported userspace flags (000000c5) [ 1100.168187][ T2305] netlink: 'syz.6.7164': attribute type 48 has an invalid length. [ 1100.177697][ T2302] bond7 (unregistering): Released all slaves [ 1100.233017][ T2305] tipc: Started in network mode [ 1100.238228][ T2305] tipc: Node identity e0000001, cluster identity 4711 [ 1100.248195][ T2305] tipc: Enabling of bearer rejected, failed to enable media [ 1100.449941][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7166'. [ 1101.006936][ T2324] veth9: entered allmulticast mode [ 1101.407020][ T2354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7178'. [ 1101.507224][ T2361] syzkaller0: entered promiscuous mode [ 1101.533925][ T2361] syzkaller0: entered allmulticast mode [ 1101.586110][ T2365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7177'. [ 1101.713532][ T2376] netlink: 'syz.0.7181': attribute type 11 has an invalid length. [ 1101.734700][ T2376] netlink: 'syz.0.7181': attribute type 11 has an invalid length. [ 1101.758775][ T2376] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7181'. [ 1101.947874][ T2384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7184'. [ 1102.162075][ T2389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7186'. [ 1102.321823][ T2385] net_ratelimit: 59 callbacks suppressed [ 1102.321843][ T2385] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1102.384939][ T2397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.484929][ T2397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.520302][ T2401] xt_hashlimit: size too large, truncated to 1048576 [ 1102.893278][ T2414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.541880][ T2440] __nla_validate_parse: 3 callbacks suppressed [ 1103.541903][ T2440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7196'. [ 1103.577224][ T2440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7196'. [ 1104.288840][ T2464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7204'. [ 1104.545046][ T2475] syzkaller1: entered promiscuous mode [ 1104.567009][ T2475] syzkaller1: entered allmulticast mode [ 1105.482021][ T2508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1105.503838][ T2509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1105.721738][ T2521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1105.883405][ T2523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7214'. [ 1106.050538][ T2525] netlink: 'syz.6.7215': attribute type 1 has an invalid length. [ 1106.105419][ T2527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7215'. [ 1106.210736][ T2525] bond2: entered promiscuous mode [ 1106.217503][ T2525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.263598][ T2527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.286608][ T2527] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1106.324041][ T2527] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1106.378723][ T2527] bond2: (slave ip6gre1): making interface the new active one [ 1106.405658][ T2527] ip6gre1: entered promiscuous mode [ 1106.440172][ T2527] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1106.919236][ T2556] openvswitch: netlink: IP tunnel dst address not specified [ 1107.263557][ T2566] netlink: 'syz.5.7222': attribute type 1 has an invalid length. [ 1107.418665][ T2566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1107.548175][ T2569] bond4: (slave gretap3): making interface the new active one [ 1107.597610][ T2569] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 1108.802886][ T2599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7227'. [ 1110.184470][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7233'. [ 1110.288194][ T2625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7234'. [ 1111.521575][ T2668] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 1111.737773][ T2677] netlink: 'syz.6.7247': attribute type 12 has an invalid length. [ 1111.750671][ T2677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7247'. [ 1111.761014][ T2677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7247'. [ 1111.777958][ T2677] syz_tun: entered promiscuous mode [ 1111.789085][ T2677] syz_tun: left promiscuous mode [ 1111.807790][ T2682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7247'. [ 1111.841079][ T2682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7247'. [ 1111.984474][ T2682] syz_tun: entered promiscuous mode [ 1112.004130][ T2682] syz_tun: left promiscuous mode [ 1114.520306][ T2749] netlink: 'syz.0.7264': attribute type 11 has an invalid length. [ 1114.644363][ T2749] netlink: 'syz.0.7264': attribute type 11 has an invalid length. [ 1114.900305][ T2750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.924566][ T2750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.084976][ T2750] veth1_vlan: left promiscuous mode [ 1115.116368][ T2750] veth0_vlan: left promiscuous mode [ 1115.145075][ T2750] veth0_vlan: entered promiscuous mode [ 1115.179607][ T2750] veth1_vlan: entered promiscuous mode [ 1115.244679][ T2750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.274531][ T2750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.310364][ T2750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.324543][ T2750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.352440][ T2750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.374484][ T2749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.444489][ T2750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1115.471229][ T2750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1115.486770][ T2750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1115.502485][ T2750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1115.515701][ T2750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1115.528218][ T2750] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1115.697724][ T3291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.736325][ T3291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.042620][ T2797] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1116.059301][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.080039][ T3291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.093508][T14855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1116.104447][T14855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1116.113951][ T3291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.124706][ T5781] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1116.138242][ T2798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1116.139800][T14855] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1116.168190][ T7266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1116.178869][T14855] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1116.199605][ T7267] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1116.244277][ T3291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.259343][ T3291] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.288063][ T3291] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.310058][ T3291] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.386556][ T5781] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1116.713858][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1116.733446][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1116.747515][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1116.772586][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1116.782799][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1116.849294][ T7266] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1117.016932][ T7266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1117.407064][ T2801] lo speed is unknown, defaulting to 1000 [ 1117.427987][ T2801] lo speed is unknown, defaulting to 1000 [ 1118.043030][ T2801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.053696][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.061153][ T2801] bridge_slave_0: entered allmulticast mode [ 1118.069659][ T2801] bridge_slave_0: entered promiscuous mode [ 1118.081033][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.089177][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.096484][ T2801] bridge_slave_1: entered allmulticast mode [ 1118.105996][ T2801] bridge_slave_1: entered promiscuous mode [ 1118.173080][ T2801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.187538][ T2801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.247354][ T2801] team0: Port device team_slave_0 added [ 1118.263866][ T2801] team0: Port device team_slave_1 added [ 1118.274020][ T2778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1118.587225][ T2801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.595060][ T2801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.634809][ T2801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.663886][ T2826] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7272'. [ 1118.685936][ T2801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.694943][ T2801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.723193][ T2827] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7272'. [ 1118.759066][ T2801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.819061][ T2830] netlink: 'syz.1.7274': attribute type 1 has an invalid length. [ 1118.851153][ T4939] Bluetooth: hci7: command tx timeout [ 1118.876529][ T2826] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 1118.950161][ T2842] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7274'. [ 1118.984725][ T2830] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1119.020409][ T2842] bond0 (unregistering): left promiscuous mode [ 1119.037125][ T2842] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1119.099892][ T2842] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1119.181943][ T2842] bond0 (unregistering): Released all slaves [ 1119.299597][ T2827] syzkaller0: entered promiscuous mode [ 1119.305629][ T2827] syzkaller0: entered allmulticast mode [ 1119.326535][ T2801] hsr_slave_0: entered promiscuous mode [ 1119.345195][ T2801] hsr_slave_1: entered promiscuous mode [ 1119.361660][ T2801] debugfs: 'hsr0' already exists in 'hsr' [ 1119.371839][ T2801] Cannot create hsr debugfs directory [ 1119.840310][ T2861] tipc: Enabled bearer , priority 0 [ 1119.954411][ T2860] tipc: Disabling bearer [ 1120.928740][ T4939] Bluetooth: hci7: command tx timeout [ 1120.991821][ T2916] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1121.426032][ T2931] x_tables: unsorted underflow at hook 4 [ 1122.780659][ T2948] netlink: 'syz.0.7293': attribute type 16 has an invalid length. [ 1122.808620][ T2948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1122.833980][ T2949] netlink: 'syz.0.7293': attribute type 16 has an invalid length. [ 1122.848487][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1123.009490][ T4939] Bluetooth: hci7: command tx timeout [ 1123.299704][ T2348] Set syz1 is full, maxelem 65536 reached [ 1125.094191][ T4939] Bluetooth: hci7: command tx timeout [ 1126.800302][ T2801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1126.860278][ T2801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.896446][ T2801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1126.927150][ T2801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.946563][ T2801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1126.987362][ T2801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1127.017417][ T2801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1127.095329][ T2801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.207401][ T2976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7297'. [ 1127.265042][ T2977] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1127.321255][ T2977] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7300'. [ 1127.615698][ T2801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.961450][ T2801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.059886][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.067189][T14849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.210342][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1128.210403][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1128.265230][ T3003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7305'. [ 1128.280244][ T3004] netlink: 34 bytes leftover after parsing attributes in process `syz.6.7304'. [ 1128.323248][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.330520][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.490296][ T3009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7308'. [ 1128.825676][ T3027] netlink: 'syz.5.7311': attribute type 10 has an invalid length. [ 1128.849844][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1128.869709][ T3027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.908164][ T3027] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1128.961023][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1129.466724][ T3041] netlink: 'syz.5.7315': attribute type 5 has an invalid length. [ 1130.125197][ T3050] lo speed is unknown, defaulting to 1000 [ 1130.153592][ T2801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.164602][ T3050] lo speed is unknown, defaulting to 1000 [ 1130.592721][ T3071] netlink: 'syz.0.7321': attribute type 1 has an invalid length. [ 1130.614829][ T3071] netlink: 'syz.0.7321': attribute type 1 has an invalid length. [ 1130.645704][ T3068] lo speed is unknown, defaulting to 1000 [ 1130.977249][ T3068] lo speed is unknown, defaulting to 1000 [ 1131.144835][ T2801] veth0_vlan: entered promiscuous mode [ 1131.177724][ T2801] veth1_vlan: entered promiscuous mode [ 1131.252666][ T2801] veth0_macvtap: entered promiscuous mode [ 1131.277373][ T2801] veth1_macvtap: entered promiscuous mode [ 1131.435091][ T3075] dvmrp0: entered allmulticast mode [ 1131.456701][ T2801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.488365][ T2801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.547138][T14849] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.597838][T14849] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.669384][T14849] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.701400][T14849] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.190190][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.220901][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.502363][ T3097] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1132.921493][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.953313][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.675327][ T3115] netlink: 'syz.5.7330': attribute type 1 has an invalid length. [ 1133.803280][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7330'. [ 1137.952547][ T3115] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1138.078254][ T3125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1138.146800][ T3128] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1138.157526][ T3125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.492308][ T3134] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1138.543347][ T3134] bond8 (unregistering): Released all slaves [ 1138.767231][ T3139] geneve0: entered promiscuous mode [ 1138.824968][ T3139] macvlan2: entered promiscuous mode [ 1138.937415][ T3162] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7335'. [ 1139.272547][ T3173] xt_hashlimit: overflow, rate too high: 0 [ 1139.492955][ T3175] lo speed is unknown, defaulting to 1000 [ 1139.584886][ T3175] lo speed is unknown, defaulting to 1000 [ 1139.602595][ T3183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7343'. [ 1140.729927][ T3220] syzkaller0: entered promiscuous mode [ 1140.749919][ T3220] syzkaller0: entered allmulticast mode [ 1140.795446][ T3223] tipc: Enabled bearer , priority 0 [ 1141.165052][ T3212] tipc: Resetting bearer [ 1142.928809][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1145.252284][ T3212] tipc: Disabling bearer [ 1145.490002][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1145.866135][ T3260] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1146.063207][ T3260] ip6erspan0: entered allmulticast mode [ 1146.109055][ T30] audit: type=1804 audit(1784080335.184:20): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7358" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=50 res=1 errno=0 [ 1146.141599][ T31] INFO: task syz.3.6385:31653 blocked for more than 143 seconds. [ 1146.156028][ T3272] nftables ruleset with unbound set [ 1146.162671][ T31] Not tainted syzkaller #0 [ 1146.174203][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1146.187752][ T30] audit: type=1800 audit(1784080335.204:21): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7358" name="cgroup.controllers" dev="tmpfs" ino=50 res=0 errno=0 [ 1146.201930][ T31] task:syz.3.6385 state:D stack:26840 pid:31653 tgid:31652 ppid:23893 task_flags:0x400140 flags:0x00080002 [ 1146.247335][ T31] Call Trace: [ 1146.252496][ T31] [ 1146.255491][ T31] __schedule+0x17d9/0x56c0 [ 1146.262958][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1146.269780][ T31] ? __pfx___schedule+0x10/0x10 [ 1146.275452][ T31] ? schedule+0x90/0x2b0 [ 1146.279757][ T31] schedule+0x164/0x2b0 [ 1146.285741][ T31] schedule_preempt_disabled+0x13/0x30 [ 1146.293626][ T31] __mutex_lock+0x7bf/0x1550 [ 1146.299512][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1146.304350][ T31] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 1146.313360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1146.318465][ T31] ? net_generic+0x1e/0x240 [ 1146.325779][ T31] ? net_generic+0x1e/0x240 [ 1146.330552][ T31] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 1146.339642][ T31] ? __kmalloc_noprof+0x375/0x720 [ 1146.345220][ T31] ? __asan_memset+0x22/0x50 [ 1146.350853][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 1146.357168][ T31] ? do_syscall_64+0x174/0x580 [ 1146.363011][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.370085][ T31] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1146.377776][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1146.384463][ T31] ? rcu_is_watching+0x15/0xb0 [ 1146.390203][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1146.395384][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1146.403908][ T31] ? __nla_parse+0x40/0x60 [ 1146.408410][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1146.416455][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1146.423659][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1146.430212][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1146.437822][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1146.443354][ T31] ? security_capable+0x7e/0x2c0 [ 1146.449711][ T31] genl_rcv_msg+0x614/0x7a0 [ 1146.454982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.460065][ T31] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1146.468585][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1146.474087][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.480158][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.486186][ T31] ? down_read+0x2be/0x330 [ 1146.491528][ T31] genl_rcv+0x28/0x40 [ 1146.496179][ T31] netlink_unicast+0x7bb/0x940 [ 1146.502175][ T31] netlink_sendmsg+0x813/0xb40 [ 1146.507007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.514992][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1146.521151][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.526487][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1146.534031][ T31] ____sys_sendmsg+0x54e/0x850 [ 1146.541211][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.547296][ T31] ? import_iovec+0x73/0xa0 [ 1146.552629][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1146.557400][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.564079][ T31] ? futex_wake+0x51b/0x5f0 [ 1146.569350][ T31] ? __pfx_do_futex+0x10/0x10 [ 1146.574107][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1146.580330][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.586457][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.593375][ T31] do_syscall_64+0x174/0x580 [ 1146.598544][ T31] ? clear_bhb_loop+0x40/0x90 [ 1146.603276][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.611562][ T31] RIP: 0033:0x7f20e899de59 [ 1146.616732][ T31] RSP: 002b:00007f20e989a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.628115][ T31] RAX: ffffffffffffffda RBX: 00007f20e8c25fa0 RCX: 00007f20e899de59 [ 1146.637475][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000b [ 1146.647239][ T31] RBP: 00007f20e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1146.657331][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.666847][ T31] R13: 00007f20e8c26038 R14: 00007f20e8c25fa0 R15: 00007ffeb9280218 [ 1146.676242][ T31] [ 1146.680314][ T31] [ 1146.680314][ T31] Showing all locks held in the system: [ 1146.699507][ T31] 1 lock held by khungtaskd/31: [ 1146.705121][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1146.735159][ T31] 2 locks held by getty/5378: [ 1146.746240][ T31] #0: ffff8880320b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1146.776339][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1146.796707][ T31] 3 locks held by kworker/u8:17/6386: [ 1146.806928][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.820318][ T31] #1: ffffc9000d617c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.853298][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1146.871457][ T31] 1 lock held by kworker/u8:38/14838: [ 1146.877879][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1146.889533][ T31] 2 locks held by kworker/u8:47/14849: [ 1146.895536][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.909134][ T31] #1: ffffc90003c4fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.923461][ T31] 3 locks held by kworker/u8:50/14855: [ 1146.929828][ T31] #0: ffff888031f5e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.942801][ T31] #1: ffffc90003b0fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1146.957244][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1146.967073][ T31] 2 locks held by syz.4.5251/27176: [ 1146.972794][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1146.981685][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1146.992049][ T31] 2 locks held by syz.3.6385/31653: [ 1146.997279][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1147.005728][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 1147.017009][ T31] 2 locks held by syz.6.7341/3175: [ 1147.023792][ T31] #0: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1147.035062][ T31] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1147.046009][ T31] 2 locks held by syz.0.7357/3260: [ 1147.051634][ T31] #0: ffffffff90592aa8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1147.064910][ T31] #1: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1147.076644][ T31] 1 lock held by syz.0.7357/3273: [ 1147.083004][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1147.094941][ T31] 3 locks held by syz.7.7358/3267: [ 1147.100407][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x990 [ 1147.111207][ T31] #1: ffffffff9002fb40 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 1147.123886][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1147.135608][ T31] 4 locks held by syz.7.7358/3272: [ 1147.141740][ T31] #0: ffff88803ed2ef80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1147.152309][ T31] #1: ffffffff9009ab08 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1147.164046][ T31] #2: ffff8880834100d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 1147.175121][ T31] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1147.187174][ T31] [ 1147.190904][ T31] ============================================= [ 1147.190904][ T31] [ 1147.204154][ T31] NMI backtrace for cpu 0 [ 1147.204177][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1147.204203][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1147.204216][ T31] Call Trace: [ 1147.204226][ T31] [ 1147.204236][ T31] dump_stack_lvl+0xe8/0x150 [ 1147.204274][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1147.204369][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1147.204404][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1147.204436][ T31] sys_info+0x135/0x170 [ 1147.204460][ T31] watchdog+0xfd7/0x1030 [ 1147.204495][ T31] ? watchdog+0x1c7/0x1030 [ 1147.204529][ T31] kthread+0x388/0x470 [ 1147.204561][ T31] ? __pfx_watchdog+0x10/0x10 [ 1147.204585][ T31] ? __pfx_kthread+0x10/0x10 [ 1147.204618][ T31] ret_from_fork+0x514/0xb70 [ 1147.204652][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.204684][ T31] ? __switch_to+0xc89/0x1420 [ 1147.204714][ T31] ? __pfx_kthread+0x10/0x10 [ 1147.204747][ T31] ret_from_fork_asm+0x1a/0x30 [ 1147.204793][ T31] [ 1147.204911][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1147.335170][ C1] NMI backtrace for cpu 1 [ 1147.335190][ C1] CPU: 1 UID: 0 PID: 3260 Comm: syz.0.7357 Not tainted syzkaller #0 PREEMPT(full) [ 1147.335211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1147.335224][ C1] RIP: 0010:kasan_check_range+0x1ce/0x2c0 [ 1147.335259][ C1] Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e <41> 5f 5d e9 4a 0d 9e 09 cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 [ 1147.335276][ C1] RSP: 0018:ffffc900040772a8 EFLAGS: 00000256 [ 1147.335293][ C1] RAX: ffffffff8209a601 RBX: ffffea0001d44800 RCX: ffffffff8209a63b [ 1147.335308][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001d44800 [ 1147.335321][ C1] RBP: ffffc90004077390 R08: ffffea0001d44807 R09: 1ffffd40003a8900 [ 1147.335336][ C1] R10: dffffc0000000000 R11: fffff940003a8901 R12: 0000000000000000 [ 1147.335349][ C1] R13: dffffc0000000000 R14: 1ffff9200080ee5c R15: 1ffffd40003a8900 [ 1147.335364][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 1147.335380][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1147.335393][ C1] CR2: 00007f41f2bef4b8 CR3: 000000007c904000 CR4: 00000000003526f0 [ 1147.335411][ C1] Call Trace: [ 1147.335419][ C1] [ 1147.335429][ C1] folio_mark_accessed+0x1cb/0x8b0 [ 1147.335455][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1147.335480][ C1] ? page_table_check_clear+0x124/0x500 [ 1147.335504][ C1] ? page_table_check_clear+0x49d/0x500 [ 1147.335527][ C1] ? page_table_check_clear+0x124/0x500 [ 1147.335553][ C1] __zap_vma_range+0x20f2/0x4f10 [ 1147.335612][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1147.335652][ C1] ? mas_find+0xab1/0xcf0 [ 1147.335720][ C1] ? unmap_vmas+0x1b9/0x550 [ 1147.335747][ C1] unmap_vmas+0x390/0x550 [ 1147.335778][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1147.335823][ C1] exit_mmap+0x293/0x9f0 [ 1147.335846][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1147.335889][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1147.335925][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1147.335961][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 1147.335989][ C1] __mmput+0x118/0x420 [ 1147.336014][ C1] exit_mm+0x221/0x2d0 [ 1147.336049][ C1] do_exit+0x6cd/0x2360 [ 1147.336088][ C1] ? __pfx_do_exit+0x10/0x10 [ 1147.336120][ C1] ? cgroup1_freezing+0x20/0x350 [ 1147.336143][ C1] ? cgroup1_freezing+0x20/0x350 [ 1147.336172][ C1] do_group_exit+0x22d/0x2f0 [ 1147.336204][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1147.336262][ C1] get_signal+0x121b/0x12c0 [ 1147.336304][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1147.336337][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1147.336365][ C1] ? __x64_sys_sendmsg+0x25d/0x290 [ 1147.336416][ C1] exit_to_user_mode_loop+0x104/0x730 [ 1147.336446][ C1] ? rcu_is_watching+0x15/0xb0 [ 1147.336481][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.336506][ C1] do_syscall_64+0x353/0x580 [ 1147.336541][ C1] ? clear_bhb_loop+0x40/0x90 [ 1147.336569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.336592][ C1] RIP: 0033:0x7fcd81b9de59 [ 1147.336609][ C1] Code: Unable to access opcode bytes at 0x7fcd81b9de2f. [ 1147.336618][ C1] RSP: 002b:00007fcd82a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.336643][ C1] RAX: 000000000000005c RBX: 00007fcd81e25fa0 RCX: 00007fcd81b9de59 [ 1147.336656][ C1] RDX: 0000000000009080 RSI: 0000200000000200 RDI: 0000000000000009 [ 1147.336668][ C1] RBP: 00007fcd81c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1147.336680][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.336692][ C1] R13: 00007fcd81e26038 R14: 00007fcd81e25fa0 R15: 00007ffe65e24768 [ 1147.336718][ C1] [ 1147.749966][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1147.756880][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1147.766045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1147.776135][ T31] Call Trace: [ 1147.779444][ T31] [ 1147.782400][ T31] vpanic+0x56c/0xa60 [ 1147.786416][ T31] ? __pfx___schedule+0x10/0x10 [ 1147.791308][ T31] ? __pfx_vpanic+0x10/0x10 [ 1147.795946][ T31] ? irqentry_exit+0x218/0x8f0 [ 1147.800770][ T31] panic+0xc5/0xd0 [ 1147.804546][ T31] ? __pfx_panic+0x10/0x10 [ 1147.809030][ T31] watchdog+0x1030/0x1030 [ 1147.813432][ T31] ? watchdog+0x1c7/0x1030 [ 1147.817880][ T31] kthread+0x388/0x470 [ 1147.821978][ T31] ? __pfx_watchdog+0x10/0x10 [ 1147.826694][ T31] ? __pfx_kthread+0x10/0x10 [ 1147.831321][ T31] ret_from_fork+0x514/0xb70 [ 1147.835940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.841076][ T31] ? __switch_to+0xc89/0x1420 [ 1147.845773][ T31] ? __pfx_kthread+0x10/0x10 [ 1147.850394][ T31] ret_from_fork_asm+0x1a/0x30 [ 1147.855206][ T31] [ 1147.858936][ T31] Kernel Offset: disabled [ 1147.863271][ T31] Rebooting in 86400 seconds..