last executing test programs: 2m57.401966035s ago: executing program 32 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000007000000000000000000000400000000000000f30e71d0c9f8d175e0be7835ae02000000cf9589e46f92669bc8137d539905b973c5d74758583675374c2e2fd9d6656179b643736be24e304939990423fdfa3ba23f0cdfa198036d7abe8363d7df1cf99e40a5276ab9d9e5f888151cfa7f082aa4e6d8b9690f9909c4af63e244fe14e2174fad370a96345301d1b9f50ca3315fad74c08c1396ce043cef08708f83676fcbc586cea05d6f7473c674eadb2fd0573a1ae6ffb7465ddece5a66ed4322ba927e4128f6c41274ed8b0df23d963a2370f5f6fbdfa355e293c46e87f3ec3c2dd10c5194876b36721afc753ff8e685a8d3008a49341e7c6dcb6ad6e3c9500abea8a7ea9c481469a6220bcf119e4df3e659"], 0x1c}, 0x1, 0x0, 0x0, 0x40c80d4}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m17.244229623s ago: executing program 33 (id=2163): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts={{0x100, 0x29, 0x36, {0x33, 0x1c, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x9, 0xa1, "182711c8eff14f58ff7f5fbaca04b0cefcea59f489919fa3cee6912c361906431596b6d6acbb7e887d42ddd00d49d22ddbf1edcd75d8efb226272fb1d31de3ff894a3b1eb041d9da896d29e1b9ba7f93a51c1690adac6fdfdaa1c588e5b176c284d2d277282ce41b5250841569a5e3447781baa69342709246448026feee6f541e9611a35bfa697977932fa26b2104d2a373ee1f0e9bce5a21d1bf0fccb17635da"}, @generic={0x9b, 0x22, "ddff571cf67b54fd50281c8bf2a3014b4eed5a33dd742e5d474ce6eb6f1bd69ba771"}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x1}, @pad1]}}}, @dstopts_2292={{0x220, 0x29, 0x4, {0x89, 0x41, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3d}, @generic={0x0, 0x9a, "05656cfb0821665151fadc8d75f7ca13d6d2f798a1034094da02f891860ecf085017f09ca1ac896a062792883d8ec0a6f8676cafed6bfdcecb9672616dbab606271a8b4b99ca11db486e88729b41398ff460ea487863336927750deb17810b89d04f8cf33af9facb6b74607e3b024385beb3544ddd4a3c02f006f813da041c09a167ad8d73f1a82d51bacedbf19ff953be59470a41eb60dba645"}, @generic={0x0, 0xf5, "f087892343b65ce347bea2b0d57bce02caa6d4c7875dcfb10832f83a70df090e4f769a18ac6e0ff2c40848686d13cebbb8244352d23dfd7dd76e258d5af30be7c8d00231bfe09cb04b5dc3c6ecaf3e4518babcc86b857b76180887b4c98f5bb3a8805501d7b7d0937001bf11a7903e5ab1bccfb32863b2c463f54cc4d6ff572ad3ceb8a0d9cca3ef0e449ae0aba594b1b1e4e5c48446aa70680889dd76185dc350760901755026668fb0f6e49e718f4f5b93b7ef8818d4b161f284231997960e5fe85e5a4297f2efc56e4ab319954d0c2c97548af900771de73dfe2ef0619c0d8fa249941c5b573cb40f3762fe735845f679746e72"}, @calipso={0x7, 0x58, {0x2, 0x14, 0x0, 0x8, [0x8, 0x7, 0xc26, 0xf6cd, 0x100000001, 0x2, 0x8, 0x5, 0x81, 0xfffffffffffffff9]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x320}}], 0x1, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000100)=0xc, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x3ff, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2m16.19836087s ago: executing program 34 (id=2180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m11.765221093s ago: executing program 6 (id=2385): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="000228bd7000fcdbdf00"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r2 = socket(0x10, 0x6, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c46b9b7e14ff7d84", "0b3ea924c47b25d7624cd362581725d7", "000400", "78cb6e6d9d2574d4"}, 0x2) recvfrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x30160, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f00000000c0)=0x81, 0x4) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x1c082258, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x42) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 2m11.350852404s ago: executing program 35 (id=2438): socket$inet6(0xa, 0x800, 0x7) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3}}, @TCA_CHOKE_STAB={0xfffffcef, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) clock_gettime(0x8, &(0x7f0000006500)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000aabe120400000000009500000000000000ebab8c23f85951abe2d5ea749ddade52e471cda5b39e57439447a5787e3f85e42d97f7e8d8553b2458fd2862d671f6c4390837bf28db45abc65f36b4a83f818fe157081c6f73265928949c7bcc286f6c0bf465f769c338d1a9313e71a329208228dcde15d3a19744fc077b4efe126dbbfede239ca1179be5d79a4c0919c2cb686580f082565ef2eb1b9e79de6c86961d9049ce176c621e0e8a2f99bddba7c1897a7d95b2d5f0fb3babf2cf36fcc480a057306fc7e0f8dbd075b43a577ff02b3c2ade7f6a9eff1c6100c10b9997e812"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) accept4(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000000)=0x80, 0x80000) 2m11.129024919s ago: executing program 36 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r7, 0x0, 0x417}, 0x18) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)={0x430, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfb, {0x1, 0x1, 0x20, [0x2, 0x6, 0x7, 0x0, 0x3af, 0x8, 0x2, 0x2, 0x3, 0x0, 0x2, 0x9, 0xb, 0x2, 0x8, 0xf, 0x1, 0xb69c, 0xff, 0x19a6, 0x3, 0x0, 0x7, 0x38a, 0x1, 0x0, 0x8, 0x5, 0x2, 0xd8d, 0x4, 0x100, 0x8, 0x7, 0x7, 0x61c7, 0x5, 0x4, 0x873, 0x7, 0x400, 0x0, 0x80000001, 0x7fff, 0x8, 0x800, 0x1, 0x0, 0xe8e8, 0x7, 0x49, 0x8, 0x4, 0x6, 0x1, 0xa, 0x81, 0xfff, 0x1, 0x4, 0x8, 0x400, 0x7, 0x3], [0x1, 0x4, 0x4, 0x1, 0x4e8, 0x7, 0x0, 0x9, 0x3, 0x2, 0x7fff, 0x2, 0x2, 0x7ff, 0x8, 0x10, 0x8000, 0xff, 0x1, 0x6, 0x2, 0x4, 0xfffffff7, 0x858e, 0x4, 0x200, 0x1, 0x3, 0x40400000, 0x0, 0xc8, 0x7, 0x9, 0x4, 0x4b, 0x7, 0x4, 0x800, 0x6, 0xfffffffb, 0x3, 0xda, 0xfffffffe, 0x200, 0x6, 0x80000000, 0x8, 0xb21, 0x5, 0x50a, 0x1, 0x6, 0x0, 0x3, 0xe14, 0x1, 0x64c1, 0x401, 0xfffffff7, 0x0, 0x1, 0xfffffff8, 0x7, 0x6], [0x3, 0x8, 0x100, 0x2, 0x9, 0x1, 0x0, 0x1000, 0x80000000, 0x9, 0x4ec3, 0x7fffffff, 0x6, 0xfffffffd, 0x8, 0x4, 0x3, 0x6e1, 0x2, 0x0, 0x13b6, 0xa5, 0x6, 0x400000, 0x0, 0x9, 0x7f, 0x2604716c, 0x80000001, 0x28fb1af4, 0x80000000, 0x58ed, 0x3, 0x8, 0x10000, 0x10000, 0xffffb9ea, 0x0, 0xe, 0x5, 0x2, 0x5, 0x1, 0x8, 0x3, 0x7fff, 0x10001, 0x5c, 0x6, 0x5, 0x2, 0x5, 0x7, 0x2, 0x2, 0x9, 0x1, 0xac, 0x0, 0x0, 0x10001, 0x8, 0x8, 0x9], [0xc, 0x7, 0x3, 0x7f, 0x9bf3, 0x4, 0x6, 0x1000, 0x9, 0x7fff, 0x4, 0x1, 0x5, 0x9, 0x5, 0x5, 0x9, 0x6, 0x161, 0x4, 0x593, 0x2, 0x3, 0x2, 0x9, 0x2, 0x74, 0x9, 0x9, 0x64c3, 0x5, 0x0, 0xd5, 0xc, 0xa, 0x0, 0x1359e351, 0x4, 0x0, 0x81, 0x80000001, 0x9, 0x6, 0x7, 0xeb2c, 0x400, 0x5, 0xfffffffc, 0x4, 0x0, 0x6, 0x5, 0x7fff, 0x1, 0x7, 0x100, 0x8, 0x4, 0x4, 0x101, 0x0, 0x9, 0x2, 0xc4], 0x10, ['syzkaller\x00', '\x00', 'veth\x00']}, ["", "", "", "", ""]}, 0x430}}, 0x400c881) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m11.107880948s ago: executing program 37 (id=2385): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="000228bd7000fcdbdf00"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r2 = socket(0x10, 0x6, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c46b9b7e14ff7d84", "0b3ea924c47b25d7624cd362581725d7", "000400", "78cb6e6d9d2574d4"}, 0x2) recvfrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x30160, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f00000000c0)=0x81, 0x4) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x1c082258, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x42) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1m13.418531395s ago: executing program 8 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x5a, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 1m13.215231816s ago: executing program 8 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @remote}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@delqdisc={0xbc, 0x25, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0x9}, {0xfff1, 0xa}, {0xffe0}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1d}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x400}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m12.596851696s ago: executing program 8 (id=3094): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) (async) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x20000050) (async, rerun: 32) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000740)) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r3, r3], 0x0, 0x10, 0xc}, 0x94) 1m12.069076397s ago: executing program 8 (id=3100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f0000000380)=""/196, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x9, 0x100}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r2, 0x6, 0x30, 0x1, 0xe}, &(0x7f0000000140)=0x18) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="4be2ff49727544b068005cad", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async, rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 32) sendto$inet(r3, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sock_exceed_buf_limit\x00', r1, 0x0, 0x3ff}, 0x18) (async, rerun: 64) recvfrom(r0, &(0x7f0000000480)=""/180, 0xb4, 0x1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x8}}}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) close(0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000680)='cgroup\x00\xa8\x9c(\x1b\xcf\x9fz\xbc\x11\xd7PH\x04l\xd8\xca\xc0\xa2\xdf\xbb\xb4\xe3-\xa7\xfe7F\xf0\x03;\xb7b\xe1\x93\xc7rx\xc6\xe0\xa5\x19I\x99\x87\xd2\xd7\x1f\t\xcap\xb0\x9b'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x9, 0xf, 0x80, 0x20, 0x0, 0x4, 0x40, 0x8, 0x4, [0x0, 0x3, 0x4]}}) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="080000000400000004000000090000000000000028abf82923c7d77c136008b755ad7e4807094d70c69603e0b8f5968eb844640a020490e62a8afc23c8e1091513803385309c450d588e3f441088679de956825c66daf8364784841f1aec664c2fa81e3467bc41da3f1ce2499927f44715a85d0e66eb3a246bd1c5a270f960cc4dbf879abf9a10a0221a6517f30b1fa9489626", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000980)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r7}, &(0x7f00000012c0), &(0x7f0000001300)=r4}, 0x20) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1m11.975809853s ago: executing program 8 (id=3102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000340)=[{0xfffffffffffffffc, 0x0, {}, {0x0, 0x0, 0x3}}], 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m11.844516423s ago: executing program 8 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) (async) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = accept$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="93fc5ef249ff6a58e1e0d8841fd778b2080a1d4312881d3df5e23d82ecefa8e1809dc1feb70ae3398cb21d4be0a5fc2feecd531ad0bca57470cbe3f2a243dafa9a7a83d2f552699a6d05e70a7ae0731d1a73dd85b9ead42fe7a0c5da8ea1b53d7c70dc7219e44a46613563fa8a90295421c133e2bc7255fb250a2b4e11679be0cd31a4bb878d75f999fe73f60733485513d82431acf7a251c85e181277d5732110e4d18486502c5bd7cf81cb620ece94fe581d", @ANYRES16=r6, @ANYBLOB="00082abd7000fbdbdf2505000000440001800c000700100000004d00000008000500020000000600020073000000080009000000000007000600666f000014000300fe8000000000000000000000000000aa38000280080008000000010008000800e304000006000b00020000001400010000000000000000000000ffff0a01010108000600070000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x40) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000000c0)=""/74, &(0x7f0000000140)=0x4a) (async) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000000c0)=""/74, &(0x7f0000000140)=0x4a) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}, 0x48011) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x6, 0x1, 0x400, &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x6, 0x1, 0x400, &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r9, 0x0, 0x3}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r11, 0x0, 0x3}, 0x18) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x9}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r0, 0x34, 0x2, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x45, &(0x7f00000008c0), 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x51, "da27e23de0f2f97d4efe420a537ee26c98d75c52408ebab2d6b0ed7b1af04cb32bb9def561d4c409f708358132743e886cfd52a82e2a3498aef62a5891a12ff6a950ee942fbadacf88838990f39f9eee01"}, &(0x7f0000000040)=0x59) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000280)={r14, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000280)={r14, 0x8}, 0x8) 1m1.591741294s ago: executing program 3 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="25b1000000000000004000070000000072019a00000000009502000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m1.288745525s ago: executing program 3 (id=3262): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) sendfile(r1, r1, 0x0, 0x970b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x9, 0xbb13) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) 1m0.340208394s ago: executing program 3 (id=3268): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0xc, 0x5, 0x28f202cc6102ecae, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x7, @value=r1}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvfrom$rose(r6, 0x0, 0x0, 0x10161, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) 1m0.258913482s ago: executing program 3 (id=3269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff"], 0x3c}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x401c5820, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 59.323377257s ago: executing program 3 (id=3282): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8fdd"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x33, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x24040040}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000200)=0x2, 0x4) 59.076325252s ago: executing program 3 (id=3287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 56.678345444s ago: executing program 38 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) (async) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = accept$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="93fc5ef249ff6a58e1e0d8841fd778b2080a1d4312881d3df5e23d82ecefa8e1809dc1feb70ae3398cb21d4be0a5fc2feecd531ad0bca57470cbe3f2a243dafa9a7a83d2f552699a6d05e70a7ae0731d1a73dd85b9ead42fe7a0c5da8ea1b53d7c70dc7219e44a46613563fa8a90295421c133e2bc7255fb250a2b4e11679be0cd31a4bb878d75f999fe73f60733485513d82431acf7a251c85e181277d5732110e4d18486502c5bd7cf81cb620ece94fe581d", @ANYRES16=r6, @ANYBLOB="00082abd7000fbdbdf2505000000440001800c000700100000004d00000008000500020000000600020073000000080009000000000007000600666f000014000300fe8000000000000000000000000000aa38000280080008000000010008000800e304000006000b00020000001400010000000000000000000000ffff0a01010108000600070000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x40) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000000c0)=""/74, &(0x7f0000000140)=0x4a) (async) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000000c0)=""/74, &(0x7f0000000140)=0x4a) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}, 0x48011) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x6, 0x1, 0x400, &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x6, 0x1, 0x400, &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r9, 0x0, 0x3}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r11, 0x0, 0x3}, 0x18) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x9}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r0, 0x34, 0x2, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x45, &(0x7f00000008c0), 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x51, "da27e23de0f2f97d4efe420a537ee26c98d75c52408ebab2d6b0ed7b1af04cb32bb9def561d4c409f708358132743e886cfd52a82e2a3498aef62a5891a12ff6a950ee942fbadacf88838990f39f9eee01"}, &(0x7f0000000040)=0x59) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000280)={r14, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000280)={r14, 0x8}, 0x8) 51.185943131s ago: executing program 0 (id=3383): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000180)) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="6d0000008a2fdaea37e0810b740e87aa9e2e056e05b0d73e8ee4faffff4bf7228c78ac24b35bbbbd319d2551c0b68ead36d1a6553df43283f540f5286cc9cbd2b8172cfc4f38e3e87dc65156f36e17ccec1a6df4405b49c4d21f65855b7c397a7101506eb8899dc312b061bc063180bd2aa8ad0d59344f3a87675e0baa988cccc0bd938078f62d446c7208d99da7f32a5581b45ecd08561fc77db4efcf5010a4ae28fd6a2ed325717acbe4ea54f5b96204ec", @ANYRES64=r0, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYRES8=r4, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r7, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000002400e0040000000000000000000000000600030081000000f636fa6bf27a07789ee710f6a17264de8c847cbbb6b3ffffffff1e42c7554cefa960bdee8ce7eb92d82601fba488f52a8c9c73a0567858762203f361df5ea9aa80fe4fafa5b6bd017c57e6dbc2d4aa697ac3d1f59a3a550c002e094bff7f14c62bbf4471ac7caaaffa567468a4bb2d97a9925c0824646bb4e8bafefa71e7d5df9e400759f7a5c2f9540e82500236ebb1f30eb16f25495e21a38f8a"], 0x1c}}, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x10001) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001280), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001c00040928bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000202080009004900000005000c000c00000008000700020000000a000200ffffffffffff000008000f00010000000a000200bbbbbbbbbbbb00000a0002000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001080390480000000ffdbdf2500000000025a679954a26bf13fec5aa94df063239dcfdc8a8a7bd548b581e88496675982fc22ec96d0c91978708dfa4d331fb34660e36a15f31f4afba23155793221eb29b0b59c35df8dbafacdc75af1f35f5d8e48d21814b48c83ac625e7293b4804f753c0af3fccf7340b5ef264626ee2c0502fd4a04466ec69a52ef935002a4da1d3b6684f13711824887211dd40ff2a9e4aefde5c0461a968816608cb3f893d6065a217d331aab7562562f5254f8b737a55160442435d21ce9815981ac1c5f06ca1a0e6830b2249a2f22bac2ec2bc12eed02d3f79df08a1bbf5fd6daae13fe81bd50f8e67b0a8419a00e4b169df951aa9229f587e6efe069d86915de", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 50.256983233s ago: executing program 0 (id=3393): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0}, &(0x7f0000000080)=0x60) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @l2={0x1f, 0x6c6, @none, 0x9, 0x2}, @qipcrtr={0x2a, 0x3}, @generic={0x0, "72c68e5cd63f821b54b2dee5f567"}, 0x40, 0x0, 0x0, 0x0, 0xfff9, &(0x7f00000000c0)='sit0\x00', 0x1, 0x4, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@private, @empty, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x0, 0x2, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8000, 0xff, 0x3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @loopback}, &(0x7f00000003c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@multicast1, @empty, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4f, 0x700, 0x7, 0x5, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end, @timestamp={0x44, 0x10, 0x92, 0x0, 0x8, [0x6, 0x2, 0x1]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000700)=0x9, 0x4) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/123, 0x7b}, {&(0x7f00000007c0)=""/112, 0x70}], 0x2) r9 = socket(0xf, 0x80000, 0x6082b062) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r10, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc56}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r12, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r2) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000bc0)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, @ethernet={0x6, @local}, @in={0x2, 0x4e23, @loopback}, 0x8000, 0x0, 0x0, 0x0, 0xe, 0x0, 0xffffffffffff8000, 0xfffffffffffffc35, 0xcd}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r11, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000fc0)={0x0, 0x2, 0xffc0, 0x8, 0xfff, 0x8}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r15, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) 49.924377103s ago: executing program 0 (id=3397): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x80) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r4, 0x1c614000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r3, 0x1) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 49.84711791s ago: executing program 0 (id=3399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x180, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x180}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x180, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x180}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x18, 0x2b, 0xff, @private2, @local, {[@srh={0x73, 0x0, 0x4, 0x0, 0x8b, 0x30, 0xf6}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x0, @val=0x80}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x18, 0x2b, 0xff, @private2, @local, {[@srh={0x73, 0x0, 0x4, 0x0, 0x8b, 0x30, 0xf6}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x0, @val=0x80}}}}}}}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) setsockopt(r2, 0x5, 0x200, &(0x7f0000000540)="efe74eff9d20aa4095ba12686c90f90a", 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24080004}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'dvmrp0\x00', 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r15, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r15, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r16 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) ioctl$F2FS_IOC_GET_PIN_FILE(r16, 0x8004f50e, &(0x7f00000001c0)) 49.349142637s ago: executing program 0 (id=3403): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x10000, 0xfffffffa, 0x0, 0x1, 0x5, 0x5, 0x7fffffff, 0x7}}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delrule={0x54, 0x21, 0x4, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x10, 0xf9, 0x81, 0x0, 0x0, 0x1, 0x10000}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0x6, 0xc, 0x1, 0x0, 0x8}, @FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040491}, 0x4000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0xd0, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x2a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a}}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x3, &(0x7f0000000380)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffd98) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000004010000", @ANYRES32, @ANYBLOB="0000deffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) getsockopt$inet6_tcp_int(r11, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x8) 48.403257432s ago: executing program 0 (id=3414): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db95232"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 46.977378438s ago: executing program 2 (id=3433): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) 46.883620826s ago: executing program 2 (id=3434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0x1}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x18) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 46.569355389s ago: executing program 2 (id=3438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040015) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x1, [@local]}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.702827152s ago: executing program 2 (id=3443): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x26c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) 45.606063843s ago: executing program 2 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) close(0x3) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 44.736023413s ago: executing program 2 (id=3450): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 43.934099647s ago: executing program 39 (id=3287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 33.02817277s ago: executing program 40 (id=3414): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db95232"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 30.148104518s ago: executing program 41 (id=3450): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12.884474648s ago: executing program 5 (id=3855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 12.748688995s ago: executing program 5 (id=3859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) 11.819227648s ago: executing program 5 (id=3873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00a318dba96e92e76032deb494d60b2d0000", @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 11.506763846s ago: executing program 5 (id=3875): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x7817, 0x1, 0x2, 0x6, {{0x2d, 0x4, 0x2, 0x9, 0xb4, 0x66, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@cipso={0x86, 0x47, 0x3, [{0x1, 0x11, "329149f1b4669aacb0a297767c7567"}, {0x7, 0x10, "561adffec4f958b17434bf8cf9db"}, {0x5, 0x9, "a120f52efb93ae"}, {0x0, 0xd, "ab6fa3d683ac70b08d2338"}, {0x5ab11de063eff2df, 0xa, "01b2886571a52f15"}]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x7, [{@broadcast, 0xe9f}, {@private=0xa010100, 0x1}, {@broadcast, 0xf440}]}, @noop, @cipso={0x86, 0x2e, 0x2, [{0x0, 0x4, "56fb"}, {0x0, 0x3, 'v'}, {0x2, 0x11, "f49706cdbedc09d08b5c178714d9af"}, {0x7, 0x10, "36e491a6b4fe2e3cb6569c0ab61c"}]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x4, 0x10000]}]}}}}}) sendto$packet(r0, &(0x7f0000000a00)="77c0c91063ff347ab06c2bfcc4e91abb72e17eb6f5f8f0f32c5a488adafbb3864780485166d9e3eeebc99da7e5ded24d017af98e303f133543babb87d812e82033108eaa41b943c9426b437aa7f3f6b88da01ff51313feaeec7da54429abc871795795e4076399ef00235336bdd6ed0443d9f5653ab579abe943138478c690d20c7f54b10e4c8a53de5170fcbdd93e198af1d9200397905aa3feaef6b8c3a11d96caddc2ab6f90d4ff1f0cfd126cbda75f655d5160f5c43b026328462410eb4f1cc7e859fa2e337f32b7f0192874b27f63a5fe5d6b1cc9d4", 0xd8, 0x4040004, &(0x7f0000000c00)={0x11, 0x17, r1, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)=ANY=[@ANYBLOB="b7000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf25030000000c000180060005004e200000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r5, @ANYBLOB="00042abd7000ffdbdf250f0000004c0001801400020076657468305f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="b30ebe050000000000000000", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006970766c616e3000000000000000000070000180140002006d6163736563300000000000000000001400020070696d36726567000000000000000000080003000000000014000200626f6e645f736c6176655f310000000014000200626f6e64300000000000000000000000140002006e6574706369300000000000000000004400018008000300020000000800030000000000140002006970365f76746930000000000000000008000300010000001400020067656e65766530000000000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r5, @ANYBLOB="00042abd7000ffdbdf250f0000004c0001801400020076657468305f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="b30ebe050000000000000000", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006970766c616e3000000000000000000070000180140002006d6163736563300000000000000000001400020070696d36726567000000000000000000080003000000000014000200626f6e645f736c6176655f310000000014000200626f6e64300000000000000000000000140002006e6574706369300000000000000000004400018008000300020000000800030000000000140002006970365f76746930000000000000000008000300010000001400020067656e65766530000000000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x840}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r8, 0x1, 0x29, 0x0, &(0x7f0000000080)) getsockopt(r7, 0x1000, 0x6, &(0x7f0000000c40)=""/242, &(0x7f0000000d40)=0xf2) (async) getsockopt(r7, 0x1000, 0x6, &(0x7f0000000c40)=""/242, &(0x7f0000000d40)=0xf2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff34, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000080001006e000000080003006e6b050000000000000083c18f75dfe17c61154e07797fe9aaa3628b182d2de3d5847d98d844ca03e54356797424f4d99d20015beda17d5d4088cd4984e5e36fd16ef82b8df60b783c13907d71c134b77e3131c666baacfa0b620a61902bd36f01c3d984e3a72f9713ab1d5afc7c88a793482a68d469d5b9c8b83a7a6fe351977524ceaf4e1a4ca25c767bb354f17144e4f040b47ee337e09d13e5f631c4e2494bc5a9ef99482b97ccff34ca76e996759ce79cccc9db7437a6d67579702bd0cf9f69865c0a2102047dd0a3a608554803ac388e27f99d1213707ed373c19062d8bd1b6491e9a087d33e3ff9aa8eac9838ea1ce4b608431d5fa702de2325c3a1e2738b152c7005a19781eb914d1ac47418400f7c97a49c2d711a8d100fc166cdca46f8cd10d124a847f7082b9ff19bea459c2e6751f38406712c412177939525432f380bb435e46d397ea2b7624346b8c56149ff9b837a6077db9bc112a823db6a408cf5e901b3c64b24a7f8317902666d0ae93a56341069c7fae2cbbe3028ac5143b3fad7534de816bac8d7ff1f9876512ccb67bec8c85ffbf6fa1e91d60e4aa9859330dee5576da5ed89aa54eb96887dc816a48670ef01272886bed28aea3e9afbdbe7fee4e20500547d17a4bd0402b0dee95d1188a44183dd3e5c20571150b30878ee0197a9c2466fc0ae4b603b8946078701126fa3222e91d9bd447db88e91c0b1521dbf4b113ad551f04e480e5917a2647d813066bd71c54e24d48f0153210ed6248054", @ANYRES8, @ANYRES32=r9], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff34, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r9, @ANYBLOB="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", @ANYRES8, @ANYRES32=r9], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x118, 0x118, 0x258, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xfffff889, 0x7, 0x1, [0x3, 0x5, 0xd, 0xfe3, 0x0, 0x3, 0x7, 0xfff1, 0x9, 0x40, 0x1, 0x0, 0x8, 0x5, 0x400, 0x267c], 0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc9, 0xcd4, 0x3}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'netdevsim0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x7f, 0x2, 0x40}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x3, 0x1, [0x0, 0x9, 0x5, 0x4, 0x1, 0x5, 0xfff3, 0x3, 0x6d03, 0x3, 0x0, 0x7, 0x9, 0x0, 0x6, 0x895]}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @REJECT={0x28}}, {{@ipv6={@remote, @empty, [0x0, 0xffffff], [0xffffff00, 0xff, 0xff000000, 0xff], 'veth1_vlan\x00', 'wlan0\x00', {0xff}, {0xff}, 0x2c, 0x1, 0x3, 0x60}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x67, 0x3, 0x2, 0x0, 0xec74, 0x1440, 0x10}}, @common=@unspec=@pkttype={{0x28}, {0x3ff, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x5, 0x4, 0x0, 0x5, 0x10000, 0x2, 0xe0]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) (async) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x118, 0x118, 0x258, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xfffff889, 0x7, 0x1, [0x3, 0x5, 0xd, 0xfe3, 0x0, 0x3, 0x7, 0xfff1, 0x9, 0x40, 0x1, 0x0, 0x8, 0x5, 0x400, 0x267c], 0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc9, 0xcd4, 0x3}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'netdevsim0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x7f, 0x2, 0x40}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x3, 0x1, [0x0, 0x9, 0x5, 0x4, 0x1, 0x5, 0xfff3, 0x3, 0x6d03, 0x3, 0x0, 0x7, 0x9, 0x0, 0x6, 0x895]}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @REJECT={0x28}}, {{@ipv6={@remote, @empty, [0x0, 0xffffff], [0xffffff00, 0xff, 0xff000000, 0xff], 'veth1_vlan\x00', 'wlan0\x00', {0xff}, {0xff}, 0x2c, 0x1, 0x3, 0x60}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x67, 0x3, 0x2, 0x0, 0xec74, 0x1440, 0x10}}, @common=@unspec=@pkttype={{0x28}, {0x3ff, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x5, 0x4, 0x0, 0x5, 0x10000, 0x2, 0xe0]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYRESOCT=0x0, @ANYRES64=r11], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x40840) 11.305253455s ago: executing program 5 (id=3883): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}], 0x20}}], 0x1, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c6565c400101100fc010000000000000000000000000001ff0100000000109078c24b00010000000087f9d8137eab91c573a037bd9508cc0dfae590933ecbbda9b7e51aab535b86f92399e224d516caf98d36ab2af2f73d000004000000005565a6fd158b41b9a730610dfaea8e1594c930e422e9eeffa40fc5de7cec441a092931b9f911f14fdd994291bcb8568ab384b21a656c1f9707a830e9633e"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c6565c400101100fc010000000000000000000000000001ff0100000000109078c24b00010000000087f9d8137eab91c573a037bd9508cc0dfae590933ecbbda9b7e51aab535b86f92399e224d516caf98d36ab2af2f73d000004000000005565a6fd158b41b9a730610dfaea8e1594c930e422e9eeffa40fc5de7cec441a092931b9f911f14fdd994291bcb8568ab384b21a656c1f9707a830e9633e"], 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0xa) (async) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f00000000c0), 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f00000000c0), 0x8) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000004c0)="39000000134700bb5bbd7031cf2720eb3300010000004500000025000000191404000400ad200d00000000008006040000000000dd3132007940658adff6f9b9836d54f4da0f00", 0x39}], 0x128) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x4, 0x2}}, 0x26) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) r7 = accept$inet6(r1, 0x0, &(0x7f0000000280)) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f00000002c0)=0xeba, 0x4) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @multicast1}, 0xc) close(r0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000240)=0x4) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x12, 0x4, 0x0, 0x3e, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x34, 0xb6, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x7}, {@multicast1, 0x8}, {@multicast2}, {@local, 0x3}, {@remote, 0x8}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x12, 0x4, 0x0, 0x3e, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x34, 0xb6, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x7}, {@multicast1, 0x8}, {@multicast2}, {@local, 0x3}, {@remote, 0x8}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 10.655642631s ago: executing program 5 (id=3888): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000210000000000de02cc00"/26], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.033583764s ago: executing program 7 (id=4006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000000)=ANY=[], 0x218}], 0x1, 0x0, 0x0, 0x20000005}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r4 = socket(0x8, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040), 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0xdd86, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x12}], 0x1}, 0x20044001) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa8aaa86dd60f4adf700382c00fe800000000700000000000000000000ff0200000000000000000000000000010228b500fe8000000000000000000000000000aafc0004000000000000000000000000008100907800"/110], 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x3, 0x1, 0x48, @rand_addr=' \x01\x00', @empty, 0x10, 0x10, 0xd, 0x10}}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000dc0)=@delchain={0x1584, 0x65, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x5, 0xe}, {0x4, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x440, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x9, 0x6, 0x9, 0xc, 0x4, 0x4, 0x9, 0x5, 0x6, 0x80, 0x7ff, 0x1, 0x6, 0x80000000, 0x3, 0x5, 0x4, 0x1, 0xfffffff9, 0x400, 0x7, 0x7fffffff, 0x100, 0xffffffff, 0x19, 0x8001, 0x7f, 0x800, 0x6cca1e64, 0x6, 0x0, 0x2bf6, 0xfffffffc, 0xc, 0x898c, 0x40, 0xfffffff9, 0xf, 0x40, 0xfffffff8, 0x3, 0x5, 0x6, 0xffff67e3, 0x8001, 0x5, 0x5, 0x5, 0x2, 0xd45, 0x1, 0x30, 0x1ff, 0xfffffa50, 0x4, 0x1, 0xe, 0x7, 0x6, 0x200, 0xe, 0xffff, 0x10001, 0x2, 0x4, 0x9, 0x0, 0x1, 0x8, 0x800, 0x9, 0x80000000, 0x1000, 0xc, 0x2, 0x7c3, 0x9e80, 0x5, 0x4, 0x4, 0x8, 0x1, 0x3, 0x3, 0x4, 0x80000000, 0x6ad, 0x4, 0x5, 0x68, 0x2, 0xa, 0x6c8, 0x101, 0xc, 0xfffffff9, 0x1c, 0x3ff, 0x2, 0x3, 0x6, 0x2, 0x5, 0x9, 0x3, 0xb3, 0xe000000, 0x87, 0x9, 0x7, 0x0, 0x9, 0x2, 0x8, 0x5, 0x8, 0x0, 0x9, 0xa648, 0x2, 0x3, 0x400000, 0x8, 0x8524, 0x5, 0xa, 0x40, 0x2, 0xff, 0xac, 0x1, 0x6, 0x7, 0x1, 0x0, 0xfffffffe, 0xc4, 0x66bc, 0x5, 0x5c7, 0x0, 0x0, 0x1, 0xfffffffa, 0x9, 0x12540580, 0x1, 0xa, 0x9, 0x4, 0x8b, 0x2, 0x6, 0xd47d, 0x7f, 0xf0000000, 0xfffffe01, 0x8, 0x101, 0xa, 0x6, 0xd, 0x6, 0x2, 0x0, 0x3, 0x3, 0x3, 0x6, 0x36eb, 0xfffffbff, 0x7ff, 0x81, 0x4, 0xffff8001, 0xdd, 0x6, 0x10, 0x8000, 0x9, 0x1, 0x3, 0x5, 0x9, 0x5c25, 0x0, 0x800, 0xe9, 0x7, 0x0, 0x8, 0xf, 0xf, 0x5, 0x82, 0x2, 0x8, 0x7, 0x4, 0x800000, 0x8, 0x9, 0x3, 0x6, 0x4, 0x7f, 0xa2b9, 0x8, 0x7fffffff, 0x7, 0x5, 0xce, 0x4, 0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x167, 0x7fff, 0x3, 0x31e, 0x1, 0x800, 0x4403d2e3, 0x87a9, 0x0, 0xfffffffe, 0x5, 0x7e90, 0x6, 0x5, 0x4, 0x0, 0x693a, 0x9, 0x1ada, 0xc, 0x35, 0xef74, 0x6, 0x4, 0x0, 0x0, 0xe43, 0x3, 0x7c29, 0x8001, 0xffff587c, 0xa26b, 0xff, 0xf, 0xe0, 0x101]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x10f0, 0x2, [@TCA_BASIC_EMATCHES={0x4ec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xad}, {0x7, 0x3, 0x1, 'cF!'}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xe, 0x2, 0x1}, {0x4d, 0x1, 0x0, 'V'}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x81}, {0x5b6, 0xa, 0x3, "8e14f711aa4d30353b17"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x1, 0x4, 0x1, "4639d9ac"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x401, 0x8, 0x1}, {0x3, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x6, 0x4, 0xffff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x0, 0x1}, {0xb, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0xff, 0x2}, {0xa3a, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x11, 0x2}, {0xfe, 0xd, 0x1}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7fff, 0x2, 0x8}, {0x8, 0x8, 0x0, "95f8889760c02150"}}}, @TCF_EM_META={0xa0, 0x2, 0x0, 0x0, {{0x4, 0x4, 0xfff7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7c1, 0x0, 0x1}, {0x5, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0xf1, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_VAR="c4bd5bb68972d6df0906", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="16671486c69a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="84e3", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x10, 0xea, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x5}, {0x401, 0x40}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="9dd14ccd4bacec07", @TCF_META_TYPE_VAR="287b1b", @TCF_META_TYPE_VAR="45af2b03e8f5", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x101}, {0xe, 0x400, 0x9, 0x2, 0x8, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x228, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x3}, {0x7, 0x7, 0x2, 0x2, 0xe, 0x3, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x9, 0x37}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x6}, "84de82e29ae6eb5ec6cca875a05b45fec9fe4aec9712881e00e52800ab268fcf7380e6266307161839e34f1ef36408b7ee9e11c3bfc6053336fbd029ba376f69543d383ca0a90976c1be18685c0caf4ae89ef1791c1230ceaf12c15aecb292c2db5631a51f2b174a7138d4f57fcc0b58068bda97be8e40d4a28231608c092a235eb32d8e0d561d97edbb9b34d2c54b282e7328e2e8a7f384fa77665591ecfacef75d0abf086b4ab54e534c8f2605389722bfa4bd0d358f092e9e82ddadb6e030511f4ec543ddbbd13cfcc88572ff1f61ce021b44b91713e5b54c0a43d97ba74d"}}, @TCF_EM_CANID={0x14, 0x9, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x662, 0x8, 0xfff7}, {0x4, 0x0, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0x88a, 0x0, 0x7ce1}, "6bd035d5d900c0642a7ecb9fb5fdaa6c5641cbb577b77b8f2319f5bfd84858653c5b852351d75b5293193a1f2b67ae86c34847a3031272707c229c64fb9d6e34f97e9190afb4021cf144c41b1f6fb79c89630bdc5ee65ce16afb497e9e668b07373d99772a4cc320ab86e7e060f5e9c3614b7baf8b095b10dcd878a8296a4e4a3376a91fd88e0ee26e1573563223d46cc183d6d82ee18c50a4fbf1255571e1f7dce35bb64f469216abb10dea742957a0da29ac"}}]}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x128, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xf70}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x26, 0x5, "77ba34f026ab213672465997f522561b0592c256888d17345549cb642a3c15a1627e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc2, 0x5, "e115f5dd8e15c03543c3d396aef48c7d66892c07bf8de6b05b017fb04747c82c828545747fe47b75c85e9b9ef04b7e4ca391f22f70e5e6229caed1144f4e83238ab96deaddaf9b03631ff40429a0068bd4f59436d5c07724e12cf371cbd5ac243db0ba005e1301218a28bcdfdef3bc62417e33ff7f81edf853355c57d0f561b8b1f2435dfea9d322cf531c16f8f07e2c087818cb179aa17741f68097851edaa88cb15a908bbd6a301c2f2f7d2bba3c5eb53522cdfca8e8be40f6df82809e"}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xfc01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_BASIC_ACT={0x3c0, 0x3, [@m_sample={0x5c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}]}, {0x1e, 0x6, "4b5cd87a7a0a2ca223b3b02ef33f513dc86ca74890cd2b01977d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x210, 0x7, 0x0, 0x0, {{0x7}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xcf, 0x6, {0x7, 'raw\x00', 0x1, 0x3, "de7c42ef5ad07677b2901031a1fb7027a01ceb14d16f4d7ca768db07ba7fb1be185f768ee4b70faf56658ec4ed3a61a1067e667ecf924f13a50b3b48738b2d0c08f5d3e4a6acff6999771b8077cc2265f4f6d6d0ccea8fc3fd27a7a681eb9552235c63fe1ee9cd69556591d63abb6ce5867b2a9ee6ef6eb1339744a5b7c2850492d72f90e31256a6b36ae68d05a9fad78098be8d66ae1de420a7367957a7cb575c58f0ff8d"}}, @TCA_IPT_TARG={0xe2, 0x6, {0xc691, 'mangle\x00', 0x7, 0xff, "b3eb50f9a391e26beecceab1b933f2fb928a5240ef29b279c0b87c54f5074b7a66415bfe51ace596c2d39fc476c86b165289f1028567dfd81141f27ea2a96d4fffe40754741783991837f3e8c376e0712f99962afa8f93ebc2a5e7977732ce50cd8476efa00e9f8bdc37595704df6bda73b5e8b8660262da4c468416dcb3a61a2dd36ddb2b8abc804c4f71b90d5cd39c480ceafcb1352624e0ffe81a6414d4ad297a35ea588e82be2eedc2a6fac976d508ac4a13db900797"}}]}, {0x34, 0x6, "3b036aa555d32a984afe3cf10274c2e7f102304d148d45193524a25c52a5cefb887d571e41d4b068286eb3984695be05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x150, 0x1b, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x148a, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x800, 0x0, 0x3ff, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0xfffffc00, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x6, 0x6, 0xfffffffe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x139f, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x115, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x8, 0x7f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x11d3, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17d6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0xc9f034819996ac41, 0x25b0, 0x10000000}}]}, {0x7b, 0x6, "00c934f1d348137b7f1e8ebcc735517a7e8814df8abe47ee376d40f098476cdcfeb5e25c2641f7bb1c8cf1b15a0e3936eaa6da1dc7d58c3588fa2765287c6b75f78c5863a42466cc6f2bf2dbd3aa9a9236f6f5d815ddb954d140a167a1cce412bf51d76fa364d9ff35a1d97b10851bb611d9b89e693b4f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_POLICE={0x840, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x4, 0x31f8, 0x8000000, 0x2, 0x1, 0x9, 0xfffffffb, 0x2c, 0x3ff, 0x0, 0x1, 0x400, 0x8, 0x372, 0x7, 0x7, 0x8001, 0x9, 0x1200, 0x7, 0x0, 0x7e48, 0x4, 0xfffffff8, 0x1bc93d4f, 0x7fff, 0x40, 0x2, 0xfffffffb, 0xfffffffa, 0x4, 0x80000000, 0x0, 0x9, 0x8000, 0x8, 0x30, 0x4, 0x8, 0x0, 0x5, 0xa90, 0x5, 0xc0000000, 0x5, 0x80000000, 0x81, 0x44bb, 0x5, 0xb, 0x2, 0x4, 0x401, 0x5, 0x80000000, 0x400, 0x6406, 0x7, 0x6, 0xaf3, 0x4, 0x4, 0x2, 0x54, 0x54, 0x4, 0x871b, 0xb64f, 0x6, 0x6, 0x80, 0x7, 0xffff539f, 0x3, 0x8000, 0x8, 0x6, 0x1ff, 0x2, 0x5, 0xa, 0x7, 0x0, 0x3, 0x1000, 0x2, 0x5, 0x6, 0x3, 0x6, 0x122c, 0x3, 0x5, 0x3ff, 0x7, 0xfffeffff, 0x9, 0x8, 0x795, 0x3, 0x3279, 0x2e, 0x10, 0x6, 0x5e, 0x8, 0x72, 0x81, 0xfffffffc, 0x78f, 0x7, 0x7fff, 0x9, 0xffff, 0xfffffffa, 0x8, 0x1ff, 0x200, 0x9, 0x1, 0x7, 0x6, 0x2, 0x2, 0x2, 0x30e6, 0x4, 0x7, 0x3, 0x3, 0xe, 0xe4, 0x68, 0x0, 0x87, 0x9, 0x4, 0x5, 0x6, 0x6, 0xfffffffe, 0x5, 0x3, 0x4, 0xffffffb7, 0x3a1, 0x1, 0x9, 0x1, 0x4, 0x81, 0x10, 0x2, 0x0, 0x8001, 0x10, 0x80000001, 0x2, 0xcc, 0x4, 0x9, 0xfffffffb, 0xf, 0x3, 0xfff, 0x5, 0x6, 0x0, 0xfffffffd, 0x9, 0x400, 0x401, 0x400, 0xa, 0x81, 0x1b6, 0xfffffff1, 0x2, 0x0, 0xe1e, 0x5, 0x0, 0x8, 0x7, 0x1, 0x3, 0x8, 0x0, 0xe34, 0x9, 0x7ff, 0xe, 0x2, 0x46b, 0x9, 0x3ed3, 0x8, 0x668, 0x0, 0x3, 0x1, 0x3, 0x3, 0x7, 0xfffffff7, 0x2, 0xfffff315, 0x8, 0x818, 0x0, 0xf, 0x6, 0x5, 0x4, 0xfffffff7, 0x4, 0x4, 0x6, 0x6, 0x5, 0x5, 0x58a, 0xffffff7f, 0xb73e, 0x8, 0x2, 0x6, 0x9, 0x3, 0xfffffffe, 0x5, 0x8, 0x3ae, 0xfffffffc, 0x3, 0x200, 0x5, 0xffff, 0x3e, 0xb06, 0x7, 0x7, 0x9, 0x0, 0x9, 0x6, 0x6, 0x1, 0x1, 0x9, 0x5, 0x6, 0xfff, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x5, 0x3ff, 0x9, 0x3, 0x4d4c, 0x80000001, 0x6, 0x1, 0x1, 0x4, 0x8000, 0x5, 0xe, 0x9, 0x9, 0x7fffffff, 0x6, 0x0, 0x3, 0x0, 0x3, 0xa, 0x1, 0x25c, 0x3, 0xf02, 0x401, 0x401, 0x100, 0x4, 0x6463, 0x1, 0x0, 0x6cd, 0x5, 0xfffffff6, 0x8, 0xff, 0x2, 0xa, 0x1, 0x7ff, 0x400, 0xb912, 0x3, 0x1, 0x7, 0xa, 0x8, 0x1, 0x80000000, 0x7ff, 0x800, 0x80000000, 0x78, 0x10000, 0x4, 0x2, 0xb, 0xa844, 0x202, 0xed, 0x5d46, 0x9b, 0x0, 0x5, 0x7, 0xfb23, 0x0, 0x7fff, 0x5c, 0x3, 0x7, 0x9, 0x4, 0x200, 0xa9b6, 0x5, 0x5, 0xfffffff0, 0x9, 0xffffff10, 0x5, 0x0, 0xfffffffd, 0xa0, 0x1a0f, 0x81, 0x6, 0x1, 0x8, 0x62756524, 0x40, 0x8, 0xd2c2407, 0x2, 0x1, 0x200, 0x4d, 0x3de, 0x8, 0x3, 0x5, 0x1, 0x1, 0x0, 0x1, 0x7, 0x2, 0x10, 0x7, 0x1be, 0x1, 0x185, 0x9, 0x0, 0x233, 0x7, 0x8, 0x81, 0x953, 0x147, 0x2, 0x10000000, 0x6, 0x5336, 0x9, 0x4, 0xcaa, 0x7ff, 0x1, 0x7, 0x80, 0x5b6, 0x9, 0x0, 0x401, 0x3, 0x7, 0x2, 0x3, 0x9, 0xa4bd, 0x7, 0xe2, 0x5, 0x7, 0x1, 0x7ff80000, 0x4, 0x3ff, 0xbbcb, 0x401, 0x7, 0x8, 0x8, 0x3, 0xc, 0x9, 0x3, 0x4, 0x593, 0x7, 0x100, 0x5, 0x80, 0xe67, 0x6, 0xf61, 0x4, 0x524, 0x5, 0x5, 0x1, 0x8, 0x9, 0x6, 0x838, 0x1, 0x8, 0xf5, 0x3, 0x8, 0x7, 0x4, 0xccf6, 0x6, 0x8, 0x6, 0x7, 0x2, 0x39, 0x3, 0x800, 0x8d9c, 0x3, 0x6, 0x2, 0x1, 0xbb, 0x5, 0x9, 0x6, 0x2, 0x10, 0x7, 0x8, 0x1c000000, 0x4, 0x5, 0x101, 0x4, 0x9, 0x4, 0x3ff, 0x9, 0x3, 0x1, 0x3, 0xb, 0x10000, 0x1ff, 0x4, 0x4, 0x1, 0x6, 0x7, 0x9000000, 0x7, 0x1, 0x81, 0x1000, 0x8, 0x6, 0x3, 0x0, 0xeb, 0x4, 0x8, 0x1, 0x4, 0x3a2, 0x400, 0x2, 0x2, 0x3, 0x7, 0xd3d3, 0x9, 0xef5, 0x9, 0xa94, 0x2, 0x3, 0x20]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfdc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0xeb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x80}}, @TCA_RATE={0x6, 0x5, {0x40, 0x40}}]}, 0x1584}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000340)="a6141a2ef9f97f57c69febbb2f62e39eecb698c21659e496aeb152b428ad7df820d00ba18e974731a298d10a3fc4774b9746e9f3a2c9c62e4ca5f3f246948c9eceaabf68b5b39c22a124c76850cc4e1fc1f14274b9ed311135a85e2fac974253002c08df6693e3a3c183c8e40d6154b8e963b943df26bd4d4a148831a499fc296c810f0f97519a7db2fad1399815a1e06b5a300cdc1cc1c48f7426129ce7a69debdfdd7e6f63ac50a4945eb66bb3f0044d640b966e14afe9d7344e", &(0x7f0000000400)=""/167, &(0x7f00000004c0)="21921b62b30c5f7d791c809d58af1fae62ff3103e37570c7fcd82d54f80115dfe585eb499ddb24904461d6ca7b", &(0x7f0000000500)="4e890fd1e286d4ec5056c9f3511828d385ba5d3ad0c960e5d6c85f2ff97e58e1c7caefb195ead883fcff03382813a5b6fbe8c4fc77f758a4ce4df7683050a3286b7f6db62709ad7f278a9234db2f7d26367f91c6470ba5a77451d7ad6718e0ad3cd8cda4dcd5576d13922d1bac39e687d111d4a09b45b5044fc54139b2fb08893f8f90e9a65a624c40214941ba77da917aa063986ced47c7c04b87c02f0bf35db107d1de1dd102be56f1494ef0fd909cc962bbcd15cb67abfa52a0646f45457e5c87059f9afc7259d4a87c8647c96f602d4ea5fb6043447bbbaa105fa931056f2e8eb27b00b388e13baa6b0abeaf337b6c192cec276530b4ed", 0x1, r10, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r11, 0x0, 0x0}, 0x10) connect$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x2, @mcast2, 0x1, 0x3}, 0x20) 1.999189729s ago: executing program 1 (id=4007): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000001c0)) (async) r2 = socket$alg(0x26, 0x5, 0x0) listen(r2, 0x7) (async) r3 = socket(0x8, 0x3, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) 1.774506334s ago: executing program 1 (id=4010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="e8a51b48480bfda000", 0x9) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r6, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) writev(r5, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x40e, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x1, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x187, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x8000, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc2, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x46, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x104}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.680284175s ago: executing program 7 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/38, 0x26}}], 0x1, 0x12141, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r1, @ANYRES16=r1, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x6}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.549558598s ago: executing program 1 (id=4015): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)="0100d53a043405725423b0a92cb6", 0xe}, 0x1, 0x0, 0x0, 0x4004814}, 0x0) ppoll(&(0x7f0000000080)=[{}, {}], 0x1f, 0x0, 0x0, 0x0) 1.493274622s ago: executing program 4 (id=4016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.382782467s ago: executing program 4 (id=4017): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "8e7cbeada6400a5c0854bb1601880ba65665c1260868"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000300), 0x4) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f0000000400)="d46724b2613c2476b815a1bcda34a04ffa47d78ae5781631f695687de57237696eeded6671157840e426f06959035c21fb54ce3c75dd34be05a6785ab105a3558c88b61ec7e6c6432b452403cddd121c22429f4aa4167346d0a8cc9ca3f2b6d67244f2af249a1be38bbae1450acdf0563f573d4143ad815412ed71738c0df5b7e54b") r3 = accept4(r1, &(0x7f00000004c0)=@un=@abs, &(0x7f0000000540)=0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x360, r4, 0xa, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xef, 0x2a, [@random_vendor={0xdd, 0x68, "7269574775bab9348acbb8d95483b20187d63b61b754bb303b6ab0ffec94cebbfac69ac5045733bf96a11968b8d4b987f34180d59369f94702815b7197d736af7c0af430a6b7374d9be2486a26b43e1ed1c7bdc53aac8ad771146995e002224708dbd263e395a084"}, @perr={0x84, 0x68, {0x3, 0x6, [{{}, @device_b, 0x7, @void, 0x31}, {{0x0, 0x1}, @broadcast, 0xf, @value=@broadcast, 0x6}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x4d4, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x30}, {{}, @device_b, 0xc, @void, 0x29}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @broadcast}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0xbb, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7}, 0xaf, 0x1, @broadcast, 0xb, 0x9, 0x2}}, @mesh_chsw={0x76, 0x6, {0x9, 0x78, 0x17}}, @random_vendor={0xdd, 0x5e, "c42764defe0f7d12c34afa06a2b6f5d3cb498a7f41fead23cdd5b43871d7120c76476c6a54fcb7fa56117385c11e59e999730b220330f87f681b3ebc0ee3a96bb5f526b77027522203f3b3da8ba62ac2c5dab622fbc1e1a07ead0d95344e"}, @cf={0x4, 0x6, {0x8, 0x8, 0x0, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x381279c8dde7b8dd, 0xd}}, @chsw_timing={0x68, 0x4, {0x6, 0x3}}, @measure_req={0x26, 0x3, {0x6, 0x7, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x3, 0x0, @broadcast, 0x80, 0x0, 0x800}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9d}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x186, 0x2a, [@mic={0x8c, 0x10, {0x6d3, "fbe3d795d738", @short="6b71590cd2d66765"}}, @measure_req={0x26, 0x7c, {0x40, 0x2, 0x5, "d4b69d85c1a478b468056b42906e6dfba2cbe6caca1e6bdcd2f35b0e652eb6fc880ae98607d9defdf793456c72727ba585c3d46dcadf3f6368d2f7965cad218d2785335cb2edd277cbd6d0256545e3d0308fa8d32d18b3df52285d6b5dae3f2a9e100068db455269529828fea14883e740f1dffb5f047b6c4c"}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x0, 0x8}}, @gcr_ga={0xbd, 0x6, @device_b}, @random={0xce, 0xd1, "5cedc8a6115f48580708c0f563538c8381a44f5b2cc1cbd6bcd157f92c7a0e58aa21a08a59d99a4910b3597c84bd20523fffefc0a88bbf944863e9c8975db7c43561e3b8c48e2869a651e02da8d2fe14fe899be746d60a840933389c975a4a497e28bb797e87ae68ed8302daa1aeb07363d0c6efdf94f16d31b95b89a23eaa74a17dcfb67b1dcd11680fbfa0e3b887f68f6675b393936c1166e7581e2e40b87df47ac8c7acb8f799f85df290dd7e1849ea394cc8efbc762c1cf29dff631660f3cfbedcf4ec7f9b98ab855ed61cf5dca7d6"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x9b, 0x8}}, @dsss={0x3, 0x1, 0xed}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xf2, 0x8001, 0x14, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x10, 0x8, 0x8000}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000ac0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) r6 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/3, 0x3}], 0x2, &(0x7f0000001b80)=""/12, 0xc}, 0x5}, {{&(0x7f0000001bc0)=@pppoe, 0x80, &(0x7f0000003280)=[{&(0x7f0000001c40)=""/254, 0xfe}, {&(0x7f0000001d40)=""/98, 0x62}, {&(0x7f0000001dc0)=""/84, 0x54}, {&(0x7f0000001e40)=""/218, 0xda}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)=""/192, 0xc0}, {&(0x7f0000002100)=""/161, 0xa1}, {&(0x7f00000021c0)=""/94, 0x5e}, {&(0x7f0000002240)=""/53, 0x35}, {&(0x7f0000002280)=""/4096, 0x1000}], 0xa}, 0x10}, {{&(0x7f0000003340)=@phonet, 0x80, &(0x7f00000034c0)=[{&(0x7f00000033c0)=""/217, 0xd9}], 0x1, &(0x7f0000003500)=""/239, 0xef}, 0x1}, {{&(0x7f0000003600)=@caif=@dgm, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003680)=""/243, 0xf3}, {&(0x7f0000003780)=""/121, 0x79}, {&(0x7f0000003800)=""/75, 0x4b}, {&(0x7f0000003880)=""/121, 0x79}, {&(0x7f0000003900)=""/65, 0x41}, {&(0x7f0000003980)=""/243, 0xf3}, {&(0x7f0000003a80)=""/131, 0x83}], 0x7, &(0x7f0000003bc0)=""/13, 0xd}, 0x80000001}, {{&(0x7f0000003c00)=@nfc_llcp, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003c80)=""/234, 0xea}, {&(0x7f0000003d80)=""/36, 0x24}, {&(0x7f0000003dc0)=""/228, 0xe4}, {&(0x7f0000003ec0)=""/4096, 0x1000}], 0x4, &(0x7f0000004f00)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000004f40)=""/89, 0x59}, {&(0x7f0000004fc0)=""/4096, 0x1000}], 0x2}, 0x7}], 0x6, 0x40000000, &(0x7f0000006180)={0x0, 0x3938700}) shutdown(r2, 0x1) sendmsg$can_raw(r3, &(0x7f00000062c0)={&(0x7f00000061c0)={0x1d, r5}, 0x10, &(0x7f0000006280)={&(0x7f0000006200)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x3, 0x0, 0x0, "81990b3f7ef723ad6f7b4847dd717666ed169adcd7835ab44f28e654c63dcbf9c41c0fbd2de8d4d3977986539122d406d78c19b6b7b56efada61af79d5afaac1"}, 0x48}}, 0x20) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000006300)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIONCLEX(r7, 0x5450) r8 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000006340)=0xa, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000006380)={0x4, 0x6, 0x80000001, 0x6, 0x7}, 0x14) connect$can_bcm(r3, &(0x7f00000063c0)={0x1d, r5}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000006400)={0x0, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x1, 0x0, 0x2, 0x4}, &(0x7f00000064c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000006500)={r9, 0x7ff}, 0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000006540)=[{{}, {0x2}}, {{0x4}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}}], 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f0000006640)={&(0x7f0000006580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006600)={&(0x7f00000065c0)={0x20, 0x1406, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c004) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000006740)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006700)={&(0x7f00000066c0)={0x14, r0, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000003}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000006780)={'vxcan0\x00'}) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000067c0)=0x9, 0x4) 1.108695175s ago: executing program 9 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041040}, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r5, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r6, &(0x7f0000000440)="6cb7d8fc61082bcaf2f04a0429169a08668b08d8d7c437b794430d443738ccac9c088235cd76058d7682afe6cc70ed858e674434ad39bb720512bd048fd4d3af869957172b25fdb09871ebf007cebfb98096cbb87a7042e4faee6af2c036d1cb08e62591144b138b2c6e64324369da9748078dd71754ae787d139615ea0932fdf30148e9c131ab11bd1af269afc1fb5c2527aa710a9532aeb0500ab4d8a82423589d737e1e201e03a32d0392", 0xac) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1c4, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x57}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @empty, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x174}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe125, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e1a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x88da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000801eba1a311e0266253d8777e9d55bb867eb4fd05b84fa57ea570f6fcc9092382229fed8300de1d7f15eded6039adbeef44e6af6c7b0ca45969d67c45c54a757f79e86a59989c4123a7ee4df2bad4c33ff1a194aa3179aa3760aeba696b1ffd13e43d19e8a3646495be09b087ccd4e7ec49e2bfa90e02929ebbad23267ddf366856bdd22881fa1a13989e99c0c539e3ed1bc16e8b8fe8ea9016929eeffc03b41a5", @ANYRES16=r7, @ANYBLOB="010000000000000400001c000000180001801400020074756e6c3000"/38], 0x2c}}, 0x0) 1.089443588s ago: executing program 7 (id=4020): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x78}}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x1}) 988.707863ms ago: executing program 9 (id=4021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) socketpair(0x27, 0x800, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc, 0x59}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x43}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xe8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x79}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x408c5) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x5, [@datasec={0x2, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x7, 0x3}, {0x3, 0x8001, 0x3}, {0x3, 0x81, 0x1ff}, {0x3, 0x8, 0xafb6}], "adc2"}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @fwd={0x5}, @fwd={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x80000001}}]}, {0x0, [0x5f, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/13, 0x99, 0xd, 0x0, 0x5}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pi6 \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x2, 0xa, 0x10, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x5, 0x2b, &(0x7f0000000500)=""/43, 0x41100, 0x1, '\x00', r6, @fallback=0x24, r7, 0x8, &(0x7f0000000700)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x7, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000a00)=[r8, r9, r10, r11, r12], &(0x7f0000000a40)=[{0x2, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x7}, {0x1, 0x2, 0x10, 0x6}, {0x2, 0x1, 0xf, 0x8}, {0x5, 0x4, 0xa, 0x1}], 0x10, 0xffffff01}, 0x94) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x184, r13, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x11f, 0x2a, [@mic={0x8c, 0x10, {0x846, "4b9aeebcc16a", @short="fca4ba9c3cc97b64"}}, @mic={0x8c, 0x18, {0x805, "7b231a43ef76", @long="74ad266043baaf4eeb53a8b7aed88a58"}}, @preq={0x82, 0x5c, {{0x0, 0x0, 0x1}, 0x0, 0x6, 0xbf, @device_b, 0x2, @void, 0x1, 0x8, 0x6, [{{0x1, 0x0, 0x1}, @broadcast, 0x4e}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0xff}, {{0x1, 0x0, 0x1}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @fast_bss_trans={0x37, 0x7b, {0x9, 0x4, "9655215fae4d9019438e4ba5c8572246", "697de726e7a05ba1a9ca87b962a6648f0b8807a837f63c7c617447d1fbbea63f", "0258fa80c5c609538586623da0d799ecfc69b4d95a4491e7952485814ebdd076", [{0x2, 0x3, "3e1705"}, {0x4, 0xa, "897b6f16171ecf034d3c"}, {0x4, 0x2, "58fa"}, {0x1, 0x12, "01c3fbf44f31c946666e82d5dce4a6dbd22b"}]}}, @link_id={0x65, 0x12, {@initial, @device_b}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) close(r11) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r14, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r3, 0x303, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008011) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r13, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x128}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40890) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r15, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xc0, r16, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x69}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x102}], @key_params=[@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "0f"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d4b71cd0ff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "89e7c52cc908f25bfc8ac2946f"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2353049189947397018e6e9a9f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ff3713e2d30b6e7e1ff845320"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "6fcc8f0654eb7267a04f"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "4e2aab"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl(r2, 0x4, &(0x7f0000001480)="0b2310414e23107de4abad6ba534432ee4d4265f8d1f5dd70352e6f6a80787ad9dadb4db780fe9382f672f27f9a44f15ca24636a5733be49da93006f1dffbde078142315f78ae9dea62f239bcfbf4ad8707d7408b281ec1c1d0a4ace6d066410f47c9cb15ecf66094c563914b1c646c1eff86fb16c3baf897959e7eebf259d0d23774bf6ae511915d3a530df3273f2066c1d191f3850b7dc20") getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000001540), &(0x7f0000001580)=0xc) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xb8, r13, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x94, 0x5b, "420c5cf66790401a33898d92e6067993505198e083ef5b5f4ad18d59e7e3723c66cfd1ff7e0b40eff5a556a63f4315591f1e40d879028317eb3218e0d20abd563c340492aa4f311932c52c85f96730fc4894b5f93a6a0c944fae9c8efa4d84d2da159324afb18843d7d01e0eed91ec000a850ce77929d9e009f592d868cc23c07ab731c04c965b067abb8cda3302ddf1"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0xe4}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x909b}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000017c0)='syzkaller\x00', 0x2, 0x4d, &(0x7f0000001800)=""/77, 0x40f00, 0x1, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000001880)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x9, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001a00)=[r2, r12, r8, r12, r8, r10, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x5, 0x1, 0xd, 0xa}, {0x1, 0x5, 0x6, 0x2}, {0x1, 0x3, 0xc, 0xb}, {0x0, 0x5, 0x8, 0x5}], 0x10, 0x1000}, 0x94) 943.328889ms ago: executing program 9 (id=4022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000001c400000000000000010400000000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 907.639495ms ago: executing program 7 (id=4023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 633.156978ms ago: executing program 9 (id=4024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x4, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x810) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000002400028014000180080001"], 0x168}}, 0x4010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa4, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x6048091}, 0x4000) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x20000, 0xe359ad85c2962f4b}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 632.776801ms ago: executing program 1 (id=4025): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="8670638d82a2d8826aaa7cabb4b9e3d0efa7e77809b2c326f58b46374fdf01ec846e29cafe07c05937f4e5bccc2869f9", 0x30) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) read$alg(r4, &(0x7f0000001140)=""/137, 0x89) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000108000004800880010000400300cd6c4ab9c09b1855585f9fffe865328a0c4763781cb3d10fa8436e8ccbf492e3ec81872c0db923b92749364316bc14bba1f27875ffe1205d79009cb1ab21c3d2670147780b49e0e075884a938df39620c1449e51edc182b23b1cca06fdfe2e307292"], 0x28}}, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040)) 603.650499ms ago: executing program 7 (id=4026): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000040)=""/72, &(0x7f00000000c0)=0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 578.26649ms ago: executing program 1 (id=4027): ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0x6, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) unshare(0x20020000) 527.054616ms ago: executing program 7 (id=4028): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000994000/0x1000)=nil, 0x1000, 0xe, 0x4010, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl(r2, 0x9, &(0x7f00000003c0)="616c1cf8") ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f0"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 502.989529ms ago: executing program 9 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000081866bc19af90000007471a6c54ecce10000000000"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa773a000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000400)={'lo\x00', 0x8000, 0xfffffffb}) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 409.468713ms ago: executing program 4 (id=4030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a01040000000000000000020000020900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 408.749348ms ago: executing program 1 (id=4031): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x4, 0xb}, 0x4) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[], 0x7) clock_gettime(0x0, &(0x7f0000007600)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000073c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, &(0x7f00000017c0)=""/143, 0x8f}, 0x4}, {{&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001880)=""/135, 0x87}, {&(0x7f0000001940)=""/168, 0xa8}, {&(0x7f0000001a00)=""/112, 0x70}], 0x3, &(0x7f0000001a80)=""/168, 0xa8}, 0x5}, {{&(0x7f0000001b40)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000001bc0)=""/99, 0x63}], 0x1, &(0x7f00000003c0)=""/44, 0x2c}, 0x10001}, {{&(0x7f0000001c40)=@phonet, 0x80, &(0x7f0000002180)=[{&(0x7f0000001cc0)=""/130, 0x82}, {&(0x7f0000001d80)=""/183, 0xb7}, {&(0x7f0000001e40)=""/214, 0xd6}, {&(0x7f0000001f40)=""/206, 0xce}, {&(0x7f0000002040)=""/27, 0x1b}, {&(0x7f0000002080)=""/90, 0x5a}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/58, 0x3a}], 0x8}, 0x8000}, {{&(0x7f0000002200)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002280)=""/53, 0x35}, {0xfffffffffffffffc}, {&(0x7f00000022c0)=""/57, 0x39}, {&(0x7f0000002300)=""/244, 0xf4}, {&(0x7f0000002400)=""/12, 0xc}, {&(0x7f0000002440)=""/87, 0x57}, {&(0x7f00000024c0)=""/115, 0x73}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x8}, 0xd}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f00000035c0)=""/58, 0x3a}, {&(0x7f0000003600)=""/139, 0x8b}, {&(0x7f00000036c0)}, {&(0x7f0000003700)=""/214, 0xd6}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/67, 0x43}], 0x7}, 0x4}, {{&(0x7f0000005900)=@phonet, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005980)=""/166, 0xa6}, {&(0x7f0000005a40)=""/132, 0x84}, {&(0x7f0000005b00)=""/80, 0x50}], 0x3, &(0x7f0000005bc0)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000006bc0)=""/195, 0xc3}, {&(0x7f0000006cc0)=""/17, 0x11}], 0x2, &(0x7f0000006d40)=""/174, 0xae}, 0xfffffff8}, {{&(0x7f0000006e00)=@ax25={{0x3, @default}, [@null, @netrom, @bcast, @rose, @default, @default, @netrom, @netrom]}, 0x80, &(0x7f0000007340)=[{&(0x7f0000006e80)=""/61, 0x3d}, {&(0x7f0000006ec0)=""/241, 0xf1}, {&(0x7f0000006fc0)=""/34, 0x22}, {&(0x7f0000007000)=""/66, 0x42}, {&(0x7f0000007080)=""/228, 0xe4}, {&(0x7f0000007180)=""/70, 0x46}, {&(0x7f0000007200)=""/127, 0x7f}, {&(0x7f0000007280)=""/191, 0xbf}], 0x8}, 0xffff0000}], 0x9, 0x0, &(0x7f0000007640)={r4, r5+10000000}) r6 = accept4$llc(r0, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000000)) 177.806827ms ago: executing program 4 (id=4032): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000795"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2a}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64, @ANYRESOCT=r1, @ANYBLOB="40841222e13de147ab6932e192018758cb0316f44e3fb2f6c708479176add189d7e9072575099b0762bb886d82", @ANYBLOB="5a84e0a048cbda3a638e802fbd391e8b76de106032390d433cd236209d92b2c288544e3fdbf3a18a6d4cd8770228cca84ce30936a1f5745b97f8b459af34cf05f8db80ccc21667a9830be30f29b90fd1337986aa4adce81db886cfb914c27cabaa3e27236bdd700b2a069ad384ab13a38536d467434c4701c7ad2f969d6bd3746de343ffef5a0e7bffbb4b3d63f9d951926994d7746e390a9e5b14183110563d8b0e5d6849abc4df76fb84a31cdf4c9b263b52a261df83abe093b713ce5c8fb1421df3081be0a7266b9653f23dc12babe2a8ce73961bd9adf915f183f5701c928205df31068130ed889565ee6a61de4e050e08", @ANYBLOB="4b3de610ffcc3b3ba9705b6ef0e02f44120949681bdd01b0d0dacb49a18f5a255fb2126f476a4a3455a7a8649380333e39949ec6cb4113cd3dfbb8473c1cecb6f73b6b07a102fac2c0b3905ccb34ea191b2154482b9288d2d91df39c1796e7a19b9d81cfe2c4fec2487b273b9da2bf5574fc8f1421e9e3c9007f7fe3c66824a3059b038bfce708a1006ae5322c9d09fa24bad97aec7052026fc4c6ffb1d56e254881505fdfe7c68241df3592b37d971a770fb12624a6fc92fead1529181215f8ef18e88ef9a1eb898a354e8858"], 0x48) poll(&(0x7f0000000280)=[{r3}], 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4010744d, &(0x7f0000000080)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="ad56b685820fae9d6dcd3292ea54c7beef915d564c90c200e2ba1812a1fea84854", 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r5}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000f5ffffff0000000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r8, 0x0, 0x7fffffff}, 0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept(r10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000300)={0x100}, 0x4) sendmmsg$alg(r11, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f", 0x3}], 0x1, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmsg$can_bcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x10003) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES8=r9, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x24040055}, 0xc0) 115.915391ms ago: executing program 4 (id=4033): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x75}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 53.472867ms ago: executing program 9 (id=4034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) 0s ago: executing program 4 (id=4035): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x400d4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r1], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) (async) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @remote}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x400d4) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r1], 0x1c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) kernel console output (not intermixed with test programs): ould impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.380994][T14860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.398392][T15043] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.412448][T13273] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 326.422052][T13273] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 326.433396][T14852] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 326.444707][T14852] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 326.479230][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.521030][T13273] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 326.533123][T13273] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 326.550864][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.566950][T15049] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 326.635358][T15049] 8021q: adding VLAN 0 to HW filter on device bond12 [ 326.702157][T14860] hsr_slave_0: entered promiscuous mode [ 326.712760][T14860] hsr_slave_1: entered promiscuous mode [ 326.719621][T14860] debugfs: 'hsr0' already exists in 'hsr' [ 326.726067][T14860] Cannot create hsr debugfs directory [ 326.746726][T15057] bond12: (slave geneve3): making interface the new active one [ 326.757307][T15057] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 326.770533][T15057] syz.3.2491 (15057) used greatest stack depth: 17832 bytes left [ 326.784032][T14862] team0: Port device team_slave_0 added [ 326.794039][T14862] team0: Port device team_slave_1 added [ 326.862053][T15062] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 326.956886][T15062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.968156][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.975596][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.002557][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.013109][ T51] Bluetooth: hci1: command tx timeout [ 327.023027][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.031144][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.057648][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.111453][T15062] bond6: (slave gretap3): making interface the new active one [ 327.120608][T15062] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 327.160190][T15071] __nla_validate_parse: 1 callbacks suppressed [ 327.160211][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 327.225077][ T51] Bluetooth: hci6: command tx timeout [ 327.231574][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 327.261491][T14862] hsr_slave_0: entered promiscuous mode [ 327.268794][T14862] hsr_slave_1: entered promiscuous mode [ 327.276355][T14862] debugfs: 'hsr0' already exists in 'hsr' [ 327.282273][T14862] Cannot create hsr debugfs directory [ 327.467123][ T51] Bluetooth: hci7: command tx timeout [ 327.642384][T15083] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 327.688008][T15085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2500'. [ 327.777574][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.793308][T14860] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 327.805784][T15087] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2501'. [ 327.821512][T14860] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 327.889766][T14862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.947312][T14860] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 327.966258][T14860] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 328.010869][T14862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.079202][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.130008][T14862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.172059][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.179308][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.211904][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.219111][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.258074][T14862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.686642][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.712102][T15122] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2508'. [ 328.724241][T15122] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2508'. [ 328.735530][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2509'. [ 328.750451][T14862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.783243][T14862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.796602][T14862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.812982][T14862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.987302][T14860] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.037564][T14852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.064281][ T51] Bluetooth: hci1: command tx timeout [ 329.081947][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.089191][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.138097][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.145413][T13273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.306147][ T51] Bluetooth: hci6: command tx timeout [ 329.362927][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.416251][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.471756][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.479023][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.526915][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.534152][T13273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.546428][ T51] Bluetooth: hci7: command tx timeout [ 329.758888][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 329.776882][T14860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.018762][T14852] veth0_vlan: entered promiscuous mode [ 330.077602][T14852] veth1_vlan: entered promiscuous mode [ 330.220634][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.257356][T14852] veth0_macvtap: entered promiscuous mode [ 330.291816][T14852] veth1_macvtap: entered promiscuous mode [ 330.387208][T14852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.402089][T14862] veth0_vlan: entered promiscuous mode [ 330.428150][T15193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.435804][T15193] IPv6: NLM_F_CREATE should be set when creating new route [ 330.440870][T14852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.459082][T14862] veth1_vlan: entered promiscuous mode [ 330.501760][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.540025][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.555319][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.586192][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.631934][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 330.652117][T14862] veth0_macvtap: entered promiscuous mode [ 330.761019][T15199] netlink: 'syz.2.2517': attribute type 10 has an invalid length. [ 330.775626][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 330.792941][T14862] veth1_macvtap: entered promiscuous mode [ 330.822306][T15199] bridge_slave_1: entered promiscuous mode [ 330.835722][T15199] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 330.888556][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.931128][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.945782][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.973074][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.023017][T14860] veth0_vlan: entered promiscuous mode [ 331.041558][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.052077][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.075626][T12112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.083147][T14860] veth1_vlan: entered promiscuous mode [ 331.084460][T12112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.098366][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.109115][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.190107][T15207] team0: Device gtp0 is of different type [ 331.334841][T14860] veth0_macvtap: entered promiscuous mode [ 331.345948][T12112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.354678][T12112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.417988][T14860] veth1_macvtap: entered promiscuous mode [ 331.496447][T13273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.523907][T13273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.562468][T14860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.612823][T14860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.695933][ T1142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.709157][T15213] lo speed is unknown, defaulting to 1000 [ 331.771462][ T1103] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.795017][ T1103] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.954672][T15229] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0 [ 331.972408][T15229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.984208][T15223] hsr_slave_0 (unregistering): left promiscuous mode [ 332.009674][ T1103] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.345873][T15217] netlink: 'syz.3.2523': attribute type 10 has an invalid length. [ 332.359418][T15217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.376695][T15217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.418373][T15217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.526185][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.564271][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.703560][T12112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.720867][T12112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.771625][T15252] __nla_validate_parse: 5 callbacks suppressed [ 332.771642][T15252] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2537'. [ 332.973521][T15255] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2539'. [ 332.999502][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2441'. [ 333.012599][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 333.343347][T15266] "syz.2.2541" (15266) uses obsolete ecb(arc4) skcipher [ 333.370979][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 333.407037][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 333.574666][T15276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2544'. [ 334.134908][T15317] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.322261][T15317] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.531162][T15317] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.570172][T15332] netlink: 'syz.9.2559': attribute type 1 has an invalid length. [ 334.618250][T15317] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.812713][T12112] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.826068][T15335] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2560'. [ 334.885178][T12112] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.917353][T12112] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.959780][T13273] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.038945][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2562'. [ 335.326405][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2566'. [ 335.401070][T15359] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 335.422696][T15359] bond1 (unregistering): Released all slaves [ 335.512925][T15360] 8021q: VLANs not supported on ip6_vti0 [ 335.520925][T15358] 8021q: VLANs not supported on ip6_vti0 [ 335.760785][T15384] netlink: 'syz.0.2576': attribute type 9 has an invalid length. [ 335.872790][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.892471][T15387] tipc: Started in network mode [ 335.905362][T15387] tipc: Node identity 76e0566cd7af, cluster identity 4711 [ 335.934354][T15387] tipc: Enabled bearer , priority 0 [ 335.941050][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.972208][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.995752][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.030217][T15387] tipc: Resetting bearer [ 336.069334][T15386] tipc: Disabling bearer [ 336.315572][T15420] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 336.360861][T15422] atomic_op ffff88802fd60198 conn xmit_atomic 0000000000000000 [ 336.478751][T15429] tipc: Enabled bearer , priority 0 [ 336.525246][T15428] hsr_slave_0 (unregistering): left promiscuous mode [ 336.538375][T15429] syzkaller0: entered promiscuous mode [ 336.544929][T15429] syzkaller0: entered allmulticast mode [ 336.566114][T15429] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 336.680638][T15429] tipc: Resetting bearer [ 336.764827][T15427] tipc: Resetting bearer [ 336.808900][T15427] tipc: Disabling bearer [ 337.845274][T15489] __nla_validate_parse: 7 callbacks suppressed [ 337.845297][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'. [ 337.876661][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'. [ 337.895515][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'. [ 338.020240][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.030333][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.039931][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.050760][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.060229][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.107517][T15490] lo speed is unknown, defaulting to 1000 [ 338.467879][T15506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2609'. [ 338.482795][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2609'. [ 338.507948][T15508] netlink: 788 bytes leftover after parsing attributes in process `syz.9.2611'. [ 338.634989][T15513] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2611'. [ 339.026879][T15526] syzkaller0: entered promiscuous mode [ 339.036415][T15526] syzkaller0: entered allmulticast mode [ 339.200641][T15537] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2619'. [ 340.108086][ T5840] Bluetooth: hci4: command tx timeout [ 340.816368][T15490] chnl_net:caif_netlink_parms(): no params data found [ 340.923458][T15571] netlink: 'syz.8.2626': attribute type 1 has an invalid length. [ 340.965584][T15571] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2626'. [ 341.050923][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2630'. [ 341.074865][T15579] netlink: 'syz.2.2632': attribute type 10 has an invalid length. [ 341.082997][T15579] netlink: 'syz.2.2632': attribute type 17 has an invalid length. [ 341.123401][T15579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.305723][T15490] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.327612][T15490] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.354898][T15490] bridge_slave_0: entered allmulticast mode [ 341.371395][T15490] bridge_slave_0: entered promiscuous mode [ 341.379370][T15596] xt_limit: Overflow, try lower: 604147548/4200216962 [ 341.406368][T15490] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.426155][T15596] xt_limit: Overflow, try lower: 604147548/4200216962 [ 341.437837][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.448177][T15490] bridge_slave_1: entered allmulticast mode [ 341.467001][T15490] bridge_slave_1: entered promiscuous mode [ 341.674630][T15490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.796776][T15490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.912245][T15490] team0: Port device team_slave_0 added [ 341.948978][T15490] team0: Port device team_slave_1 added [ 342.093311][T15490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.115328][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.158495][T15490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.188394][ T5840] Bluetooth: hci4: command tx timeout [ 342.205550][T15490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.212596][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.269696][T15490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.478664][T15656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.512054][T15490] hsr_slave_0: entered promiscuous mode [ 342.519232][T15490] hsr_slave_1: entered promiscuous mode [ 342.527757][T15490] debugfs: 'hsr0' already exists in 'hsr' [ 342.536168][T15490] Cannot create hsr debugfs directory [ 342.997095][T15490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.008149][T15490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.019350][T15490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 343.033038][T15686] netlink: 'syz.8.2659': attribute type 39 has an invalid length. [ 343.152413][T15490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.162867][T15490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.180049][T15490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 343.277549][T15691] netlink: 'syz.0.2663': attribute type 21 has an invalid length. [ 343.278308][T15490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.291777][T15691] netlink: 'syz.0.2663': attribute type 22 has an invalid length. [ 343.327519][T15490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.338258][T15490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 343.384266][T15691] netlink: 'syz.0.2663': attribute type 23 has an invalid length. [ 343.395630][T15691] netlink: 'syz.0.2663': attribute type 25 has an invalid length. [ 343.420538][T15693] __nla_validate_parse: 7 callbacks suppressed [ 343.420557][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2663'. [ 343.452220][T15691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2663'. [ 343.479922][T15490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.490687][T15490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.515835][T15490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 343.567496][T15691] vxcan1: tx address claim with different name [ 343.991037][T15490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.051994][T15490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.153839][T15490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.175313][T15490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.266211][ T5840] Bluetooth: hci4: command tx timeout [ 344.369249][T15721] netlink: 'syz.9.2670': attribute type 1 has an invalid length. [ 344.432574][T15721] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2670'. [ 344.510672][T15490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.570110][T15490] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.596508][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 344.627964][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.635207][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.647825][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 344.709050][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.709497][T15746] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2676'. [ 344.784595][T15746] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2676'. [ 344.798155][T15746] netlink: 'syz.9.2676': attribute type 5 has an invalid length. [ 344.808971][T15746] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2676'. [ 344.867931][T15738] bridge_slave_1 (unregistering): left allmulticast mode [ 344.875593][T15738] bridge_slave_1 (unregistering): left promiscuous mode [ 344.882893][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.999469][ T5014] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.006702][ T5014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.339990][T15776] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 345.612247][T15490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.750877][T15490] veth0_vlan: entered promiscuous mode [ 345.789269][T15490] veth1_vlan: entered promiscuous mode [ 345.858416][T15490] veth0_macvtap: entered promiscuous mode [ 345.878146][T15490] veth1_macvtap: entered promiscuous mode [ 345.910935][T15490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.940585][T15490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.994669][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.005122][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.058722][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.089604][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.251462][T15815] tipc: Started in network mode [ 346.257506][T15815] tipc: Node identity 2e631e1e91cd, cluster identity 4711 [ 346.268902][T15815] tipc: Enabled bearer , priority 0 [ 346.318991][T15815] tipc: Resetting bearer [ 346.344200][ T5840] Bluetooth: hci4: command tx timeout [ 346.388862][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.435668][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.535950][T15833] netlink: 'syz.8.2694': attribute type 1 has an invalid length. [ 346.548060][T15828] Can't find ip_set type [ 346.548453][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.559314][T15829] Can't find ip_set type [ 346.612773][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.690211][T15814] tipc: Disabling bearer [ 347.126043][T15858] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2704'. [ 347.157284][T15860] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 347.167272][T15858] NCSI netlink: No device for ifindex 0 [ 347.195658][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 347.366769][T15866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.391541][T15866] bond1: (slave bond2): making interface the new active one [ 347.415344][T15866] bond1: (slave bond2): Enslaving as an active interface with an up link [ 347.547337][T15871] veth3: entered promiscuous mode [ 347.552436][T15871] veth3: entered allmulticast mode [ 347.604042][T15872] netlink: 'syz.8.2706': attribute type 4 has an invalid length. [ 347.682296][ T5848] bond0: (slave syz_tun): Releasing backup interface [ 347.722797][ T5848] syz_tun (unregistering): left promiscuous mode [ 347.856581][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.868533][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.877890][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.885091][T12095] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.885150][T12095] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.922643][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.931510][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.029542][T12095] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.051525][T12095] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.128953][T15897] bond3: (slave gre0): Device is not bonding slave [ 348.136741][T15897] bond3: option active_slave: invalid value (gre0) [ 348.148625][T15897] bond3 (unregistering): Released all slaves [ 348.229534][T12095] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.266110][T12095] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.360382][T12095] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.385060][T12095] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.436648][T15893] lo speed is unknown, defaulting to 1000 [ 348.469475][T15912] tipc: Started in network mode [ 348.484161][T15912] tipc: Node identity 9676ec54e9d4, cluster identity 4711 [ 348.491537][T15912] tipc: Enabled bearer , priority 0 [ 348.597628][T15922] __nla_validate_parse: 7 callbacks suppressed [ 348.597650][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2719'. [ 348.654184][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2719'. [ 349.379315][T12095] erspan0 (unregistering): left promiscuous mode [ 349.399798][T12095] gretap0 (unregistering): left promiscuous mode [ 349.429993][T12095] bond3 (unregistering): (slave gretap1): Releasing active interface [ 349.509631][T12095] bond6 (unregistering): (slave gretap3): Releasing active interface [ 349.604798][T10832] tipc: Node number set to 2141383764 [ 349.670895][T12095] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 349.686150][T12095] bridge1 (unregistering): left promiscuous mode [ 349.970400][T12095] bond0 (unregistering): left promiscuous mode [ 349.976714][T12095] bond_slave_0: left promiscuous mode [ 349.982251][T12095] bond_slave_1: left promiscuous mode [ 349.988312][T12095] macvlan2: left promiscuous mode [ 349.993812][T12095] bridge_slave_1: left promiscuous mode [ 350.001567][T12095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.013219][T12095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.023729][ T51] Bluetooth: hci3: command tx timeout [ 350.030371][T12095] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 350.043323][T12095] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 350.057001][T12095] bond0 (unregistering): Released all slaves [ 350.152171][T12095] bond1 (unregistering): (slave bond2): Releasing backup interface [ 350.162844][T12095] bond1 (unregistering): Released all slaves [ 350.255855][T12095] bond2 (unregistering): Released all slaves [ 350.272741][T12095] bond3 (unregistering): Released all slaves [ 350.372588][T12095] bond4 (unregistering): Released all slaves [ 350.468145][T12095] bond5 (unregistering): Released all slaves [ 350.557759][T12095] bond6 (unregistering): Released all slaves [ 350.699053][T15911] tipc: Disabling bearer [ 350.762684][T12095] tipc: Disabling bearer [ 350.786128][T12095] tipc: Left network mode [ 350.914384][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 351.162367][T15962] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 351.188459][T15962] netlink: 784 bytes leftover after parsing attributes in process `syz.0.2731'. [ 351.209387][T15965] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2733'. [ 351.265483][T15969] vlan0: entered promiscuous mode [ 351.315327][T15969] vlan0: entered allmulticast mode [ 351.320669][T15969] veth0_vlan: entered allmulticast mode [ 351.750777][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2738'. [ 351.826440][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2738'. [ 351.882087][T12112] tipc: Subscription rejected, illegal request [ 352.110219][ T51] Bluetooth: hci3: command tx timeout [ 352.130285][T12095] batadv0: left promiscuous mode [ 352.145711][T12095] hsr_slave_1: left promiscuous mode [ 352.156319][T12095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.167852][T12095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.654418][T12095] team0 (unregistering): Port device team_slave_1 removed [ 352.703134][T12095] team0 (unregistering): Port device team_slave_0 removed [ 353.199089][T16005] team0: Device ip6gre1 is of different type [ 353.719097][T15893] chnl_net:caif_netlink_parms(): no params data found [ 353.765321][ T44] IPVS: starting estimator thread 0... [ 353.772875][T16039] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.865020][T16044] IPVS: using max 24 ests per chain, 57600 per kthread [ 354.121675][T16057] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 354.134738][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.146250][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.154619][T15893] bridge_slave_0: entered allmulticast mode [ 354.162957][T15893] bridge_slave_0: entered promiscuous mode [ 354.172608][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.180715][T15893] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.189170][T15893] bridge_slave_1: entered allmulticast mode [ 354.196713][ T51] Bluetooth: hci3: command tx timeout [ 354.198321][T15893] bridge_slave_1: entered promiscuous mode [ 354.326112][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 354.336994][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 354.359931][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.371180][T16061] netlink: 'syz.0.2758': attribute type 22 has an invalid length. [ 354.385706][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.398803][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'. [ 354.587049][T15893] team0: Port device team_slave_0 added [ 354.741686][T15893] team0: Port device team_slave_1 added [ 354.793824][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2766'. [ 354.811687][T16090] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2767'. [ 354.869453][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.884162][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.912075][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.938489][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.947098][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.982920][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.013081][T16092] syzkaller0: entered promiscuous mode [ 355.018927][T16092] syzkaller0: entered allmulticast mode [ 355.029170][T16094] netlink: 'syz.0.2769': attribute type 9 has an invalid length. [ 355.041748][T16098] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 355.059004][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 355.074503][T16098] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2770'. [ 355.085256][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 355.248403][T15893] hsr_slave_0: entered promiscuous mode [ 355.255578][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 355.266686][T15893] hsr_slave_1: entered promiscuous mode [ 355.281139][T15893] debugfs: 'hsr0' already exists in 'hsr' [ 355.288393][T15893] Cannot create hsr debugfs directory [ 355.543015][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2781'. [ 355.632013][T16126] netlink: 'syz.3.2780': attribute type 58 has an invalid length. [ 356.207005][T16155] netlink: 'syz.3.2791': attribute type 1 has an invalid length. [ 356.275412][ T51] Bluetooth: hci3: command tx timeout [ 356.287101][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 356.311053][T15893] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.338119][T15893] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.396924][T15893] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.478132][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 356.478768][T15893] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.539944][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 356.898152][T15893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.978268][T15893] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.002093][T16182] netlink: 'syz.8.2798': attribute type 1 has an invalid length. [ 357.018329][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.025570][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.097928][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.105193][T13268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.162480][T16156] infiniband syz2: set active [ 357.184754][ T44] vxcan1 speed is unknown, defaulting to 1000 [ 357.187369][T16156] infiniband syz2: added vxcan1 [ 357.208061][T16156] syz2: rxe_create_cq: returned err = -12 [ 357.221238][T16156] infiniband syz2: Couldn't create ib_mad CQ [ 357.228808][T16156] infiniband syz2: Couldn't open port 1 [ 357.288728][T16156] RDS/IB: syz2: added [ 357.295680][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 357.505899][T15893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.589233][T15893] veth0_vlan: entered promiscuous mode [ 357.609763][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 357.610654][T15893] veth1_vlan: entered promiscuous mode [ 357.662284][T15893] veth0_macvtap: entered promiscuous mode [ 357.675779][T15893] veth1_macvtap: entered promiscuous mode [ 357.702047][T15893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.730525][T15893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.750636][ T5014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.760773][ T5014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.775517][ T5014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.789216][ T5014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.957772][T16206] openvswitch: netlink: Message has 5368 unknown bytes. [ 357.996863][T16206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.011169][ T5014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.042255][ T5014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.148339][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 358.164733][T12112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.172602][T12112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.280335][T16215] tls_set_device_offload: netdev not found [ 358.789842][T16218] bridge_slave_0: left allmulticast mode [ 358.795980][T16218] bridge_slave_0: left promiscuous mode [ 358.801967][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.830341][T16218] bridge_slave_1: left allmulticast mode [ 358.841037][T16218] bridge_slave_1: left promiscuous mode [ 358.850143][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.877700][T16218] bond0: (slave bond_slave_0): Releasing backup interface [ 358.901859][T16218] bond0: (slave bond_slave_1): Releasing backup interface [ 358.937064][T16218] team0: Port device team_slave_0 removed [ 358.983146][T16218] team0: Port device team_slave_1 removed [ 358.991637][T16218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.999130][T16218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.010152][T16218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.018559][T16218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.028611][T16218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.046645][T16222] netlink: 'syz.3.2808': attribute type 15 has an invalid length. [ 359.046747][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 359.084273][T16227] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 359.121380][T16222] netlink: 'syz.3.2808': attribute type 15 has an invalid length. [ 359.129656][ T5014] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.129705][ T5014] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.129759][ T5014] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.129796][ T5014] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.521829][T16239] __nla_validate_parse: 10 callbacks suppressed [ 359.521848][T16239] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2811'. [ 359.756220][T16253] tipc: Started in network mode [ 359.761176][T16253] tipc: Node identity 96565f1a9b82, cluster identity 4711 [ 359.786607][T16253] tipc: Enabled bearer , priority 0 [ 359.801251][T16253] syzkaller0: entered promiscuous mode [ 359.814348][T16253] syzkaller0: entered allmulticast mode [ 359.958395][T16266] netlink: 'syz.9.2819': attribute type 15 has an invalid length. [ 359.974279][T16267] tipc: Resetting bearer [ 360.007686][T16250] tipc: Resetting bearer [ 360.045567][T16250] tipc: Disabling bearer [ 360.057505][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 360.139337][T16275] lo: entered allmulticast mode [ 360.171315][T16275] lo: left allmulticast mode [ 360.192971][T16277] tipc: Started in network mode [ 360.202717][T16277] tipc: Node identity be6bf5ac5f45, cluster identity 4711 [ 360.226319][T16277] tipc: Enabled bearer , priority 0 [ 360.249565][T16277] ipvlan1: entered allmulticast mode [ 360.270153][T16281] netlink: 'syz.8.2824': attribute type 1 has an invalid length. [ 360.278046][T16277] tipc: Resetting bearer [ 360.304722][T16281] netlink: 'syz.8.2824': attribute type 1 has an invalid length. [ 360.313958][T16276] tipc: Disabling bearer [ 360.343046][T16283] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 360.609377][T16299] netlink: 'syz.9.2830': attribute type 1 has an invalid length. [ 360.731862][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 361.140630][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2840'. [ 361.207122][T16336] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.238322][T16332] netlink: 'syz.2.2837': attribute type 10 has an invalid length. [ 361.274639][T16332] bridge0: port 3(team0) entered blocking state [ 361.281445][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 361.289595][T16332] bridge0: port 3(team0) entered disabled state [ 361.316482][T16332] team0: entered allmulticast mode [ 361.321647][T16332] team_slave_0: entered allmulticast mode [ 361.336797][T16332] team_slave_1: entered allmulticast mode [ 361.346966][T16332] team0: entered promiscuous mode [ 361.352033][T16332] team_slave_0: entered promiscuous mode [ 361.357999][T16332] team_slave_1: entered promiscuous mode [ 361.365018][T16332] bridge0: port 3(team0) entered blocking state [ 361.371417][T16332] bridge0: port 3(team0) entered forwarding state [ 361.441306][T16317] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 361.449735][T16317] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.696055][T16347] netlink: 'syz.9.2843': attribute type 1 has an invalid length. [ 361.752197][T16347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.831833][T16353] bond1: (slave gretap1): making interface the new active one [ 361.862992][T16353] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 361.898724][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 362.038236][T16361] team0: Device ip6gre1 is of different type [ 362.318934][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 362.325910][T16383] netlink: 'syz.8.2854': attribute type 4 has an invalid length. [ 362.364234][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2854'. [ 362.389505][T16385] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2852'. [ 362.507676][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2853'. [ 362.531297][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 362.634267][T16388] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2853'. [ 362.871761][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2862'. [ 362.901901][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2862'. [ 362.924783][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2862'. [ 362.984683][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 363.825437][T16448] macvtap1: entered promiscuous mode [ 363.830793][T16448] macvtap1: entered allmulticast mode [ 363.966407][T16464] macvtap1: entered promiscuous mode [ 363.986607][T16464] macvtap1: entered allmulticast mode [ 364.102947][T16468] openvswitch: netlink: ufid size 200 bytes exceeds the range (1, 16) [ 364.141051][T16468] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.467923][T16490] netlink: 'syz.2.2884': attribute type 21 has an invalid length. [ 364.641129][ T30] audit: type=1107 audit(1759596599.030:6): pid=16495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 364.875420][T16509] __nla_validate_parse: 9 callbacks suppressed [ 364.875440][T16509] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2890'. [ 365.247500][T16526] netlink: 216 bytes leftover after parsing attributes in process `syz.9.2893'. [ 365.409728][T16538] 8021q: VLANs not supported on vxcan1 [ 365.456189][T16542] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2899'. [ 365.623482][T16545] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2898'. [ 365.635896][T16545] netlink: 35 bytes leftover after parsing attributes in process `syz.8.2898'. [ 365.670132][T16545] netlink: 'syz.8.2898': attribute type 5 has an invalid length. [ 365.672532][T16552] netlink: 'syz.2.2903': attribute type 1 has an invalid length. [ 365.688728][T16552] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2903'. [ 365.701621][T16552] netlink: 'syz.2.2903': attribute type 1 has an invalid length. [ 365.709941][T16545] netlink: 'syz.8.2898': attribute type 6 has an invalid length. [ 365.756581][T16552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2903'. [ 365.773704][T16545] netlink: 35 bytes leftover after parsing attributes in process `syz.8.2898'. [ 365.992093][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2906'. [ 366.049797][T16577] gtp0: entered promiscuous mode [ 366.055298][T16577] gtp0: entered allmulticast mode [ 366.259434][T16583] tipc: Enabled bearer , priority 0 [ 366.316296][T16580] tipc: Disabling bearer [ 366.335631][T16587] netlink: 'syz.3.2910': attribute type 32 has an invalid length. [ 366.351628][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 366.421367][T16587] bond1: option coupled_control: invalid value (52) [ 366.462181][T16587] bond1 (unregistering): Released all slaves [ 366.792325][T16618] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 367.026573][T16627] netlink: 'syz.9.2920': attribute type 12 has an invalid length. [ 367.044651][T16627] netlink: 'syz.9.2920': attribute type 11 has an invalid length. [ 367.635336][T16671] netlink: 'syz.0.2935': attribute type 1 has an invalid length. [ 367.715089][T16671] netlink: 'syz.0.2935': attribute type 2 has an invalid length. [ 368.097996][T16690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.397284][T16818] __nla_validate_parse: 18 callbacks suppressed [ 370.397317][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 371.085390][T16854] lo: entered allmulticast mode [ 371.158092][T16854] lo: left allmulticast mode [ 371.166301][T16860] validate_nla: 3 callbacks suppressed [ 371.166321][T16860] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 371.178399][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 371.607533][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2997'. [ 371.676891][T16890] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2998'. [ 371.887522][T16906] xt_l2tp: v2 tid > 0xffff: 1114244 [ 371.954477][T16913] netlink: zone id is out of range [ 371.960319][T16913] netlink: del zone limit has 8 unknown bytes [ 372.048394][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 372.331155][T16929] team0: Device vti0 is of different type [ 372.362082][T16941] netlink: 'syz.2.3014': attribute type 3 has an invalid length. [ 372.392942][T16935] lo speed is unknown, defaulting to 1000 [ 372.745754][T16954] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 372.782723][T16968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.941917][T16973] netlink: 'syz.9.3022': attribute type 1 has an invalid length. [ 372.973421][T16935] vxcan1 speed is unknown, defaulting to 1000 [ 373.045736][T16973] bond2: entered promiscuous mode [ 373.052985][T16973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.169204][T16982] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 373.187044][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.256773][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3025'. [ 373.379287][T16991] C: renamed from team_slave_0 [ 373.389738][T16991] netlink: 'syz.8.3026': attribute type 1 has an invalid length. [ 373.410169][T16991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 373.734760][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3030'. [ 373.757955][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 373.784001][T17007] delete_channel: no stack [ 373.788739][T17007] delete_channel: no stack [ 373.972162][T17017] netlink: 'syz.0.3033': attribute type 33 has an invalid length. [ 374.537203][T17045] netlink: 'syz.9.3041': attribute type 1 has an invalid length. [ 374.618743][T17043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.689944][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3043'. [ 374.694300][T17045] bond3: entered promiscuous mode [ 374.708011][T17045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.755527][T17055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.762922][T17055] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 374.774746][T17055] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 374.790729][T17055] bond3: (slave wireguard0): making interface the new active one [ 374.798661][T17055] wireguard0: entered promiscuous mode [ 374.806045][T17055] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 374.968641][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3047'. [ 374.980488][T17070] openvswitch: netlink: Duplicate key (type 32). [ 375.252153][T17085] sch_tbf: burst 6 is lower than device team0 mtu (1514) ! [ 375.402455][T17087] can: request_module (can-proto-0) failed. [ 375.467940][T17090] tipc: New replicast peer: 255.255.255.255 [ 375.475149][T17090] tipc: Enabled bearer , priority 10 [ 375.511091][T17094] netlink: 'syz.0.3056': attribute type 11 has an invalid length. [ 375.534674][T17094] __nla_validate_parse: 2 callbacks suppressed [ 375.534692][T17094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3056'. [ 375.755803][ T5909] IPVS: starting estimator thread 0... [ 375.768673][T17109] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 375.773781][T17107] tipc: Enabled bearer , priority 10 [ 375.795297][T17109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3060'. [ 375.828096][T17111] netlink: 'syz.8.3062': attribute type 39 has an invalid length. [ 375.863854][T17108] IPVS: using max 26 ests per chain, 62400 per kthread [ 375.894610][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3062'. [ 376.082164][T17118] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3065'. [ 376.112109][T17124] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3066'. [ 376.279178][T17124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.296048][T17124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.316327][T17124] bond0 (unregistering): Released all slaves [ 376.362166][T17118] bond4 (unregistering): Released all slaves [ 376.638487][T17145] bridge0: mtu greater than device maximum [ 376.685355][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3075'. [ 376.764427][ T5909] tipc: Node number set to 2706331244 [ 376.812163][T17153] netlink: 'syz.8.3076': attribute type 11 has an invalid length. [ 376.872576][T17157] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 376.956072][T17142] lo speed is unknown, defaulting to 1000 [ 377.382474][T17163] syzkaller1: entered promiscuous mode [ 377.395475][T17163] syzkaller1: entered allmulticast mode [ 377.481722][T17181] netlink: 'syz.3.3085': attribute type 2 has an invalid length. [ 377.501243][T17179] mac80211_hwsim hwsim32 ÿ: renamed from wlan1 (while UP) [ 377.557064][T17181] : entered promiscuous mode [ 377.562247][T17187] netlink: 'syz.3.3085': attribute type 2 has an invalid length. [ 377.688799][T17192] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 377.825559][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3091'. [ 378.267052][T17142] vxcan1 speed is unknown, defaulting to 1000 [ 378.642412][T17232] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3096'. [ 378.773508][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 378.888374][T17240] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3098'. [ 378.914918][T17243] openvswitch: netlink: Message has 5372 unknown bytes. [ 378.921957][T17243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.029963][T17251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.221481][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 379.421240][T17273] netlink: 'syz.3.3106': attribute type 4 has an invalid length. [ 380.450504][T17308] netlink: 'syz.3.3117': attribute type 1 has an invalid length. [ 380.519381][T17311] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 380.525636][T17308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.600071][T17314] veth3: entered promiscuous mode [ 380.630341][T17314] bond1: (slave veth3): Enslaving as an active interface with a down link [ 380.660250][T17308] bond1: entered allmulticast mode [ 380.692428][T17325] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 380.810248][T17331] tipc: Enabled bearer , priority 0 [ 380.859941][T17331] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 380.877995][T17331] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 380.897672][T17331] tipc: Resetting bearer [ 380.909059][T17333] __nla_validate_parse: 5 callbacks suppressed [ 380.909078][T17333] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3124'. [ 380.929257][T17333] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3124'. [ 380.939610][T17333] netlink: 'syz.9.3124': attribute type 2 has an invalid length. [ 380.949297][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3124'. [ 380.962473][T17335] netlink: 'syz.3.3125': attribute type 58 has an invalid length. [ 380.971108][T17335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3125'. [ 381.601506][T17364] netlink: 'syz.9.3133': attribute type 39 has an invalid length. [ 381.713401][T17368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3135'. [ 381.731356][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3135'. [ 381.765272][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 381.810069][T17371] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.869666][T17371] bridge_slave_1 (unregistering): left allmulticast mode [ 381.887704][T17371] bridge_slave_1 (unregistering): left promiscuous mode [ 381.904940][ T5909] tipc: Node number set to 3215859230 [ 381.923407][T17371] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.060898][ T5909] IPVS: starting estimator thread 0... [ 382.069947][T17382] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 382.156278][T17383] IPVS: using max 27 ests per chain, 64800 per kthread [ 382.204122][T17389] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 382.243259][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 382.257578][T17389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.292608][T17389] bond4: (slave gretap1): making interface the new active one [ 382.302654][T17389] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 382.318353][T17389] unsupported nla_type 17701 [ 382.459330][T17404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3146'. [ 382.519767][T17406] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 382.930843][T17423] pimreg: entered allmulticast mode [ 382.958506][T17425] sctp: [Deprecated]: syz.9.3153 (pid 17425) Use of int in max_burst socket option. [ 382.958506][T17425] Use struct sctp_assoc_value instead [ 383.243469][T17444] netlink: 'syz.0.3159': attribute type 16 has an invalid length. [ 383.252543][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3159'. [ 383.469758][T17455] syzkaller1: entered promiscuous mode [ 383.476679][T17455] syzkaller1: entered allmulticast mode [ 383.895641][T17478] netlink: 'syz.9.3171': attribute type 14 has an invalid length. [ 384.083839][T17491] netlink: 'syz.9.3177': attribute type 1 has an invalid length. [ 384.142092][T17491] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 384.373513][T17512] netlink: 'syz.2.3183': attribute type 10 has an invalid length. [ 384.405689][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.431581][T17512] bridge_slave_1: left allmulticast mode [ 384.438761][T17512] bridge_slave_1: left promiscuous mode [ 384.445422][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.790148][T17533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.917224][T17533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.941440][T17536] netlink: 'syz.2.3191': attribute type 2 has an invalid length. [ 386.613817][T17614] __nla_validate_parse: 12 callbacks suppressed [ 386.613840][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 386.960501][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3219'. [ 387.192268][T17632] rdma_rxe: rxe_newlink: failed to add lo [ 387.427812][T17641] tipc: Resetting bearer [ 387.601517][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3228'. [ 387.790634][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 387.814045][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 387.888508][T17660] sctp: [Deprecated]: syz.0.3232 (pid 17660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.888508][T17660] Use struct sctp_sack_info instead [ 388.212083][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 388.386278][T17675] netlink: 'syz.2.3236': attribute type 4 has an invalid length. [ 388.436863][T17682] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3239'. [ 388.789220][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 388.819280][T17695] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3244'. [ 389.011479][T17700] tipc: Enabling of bearer rejected, already enabled [ 389.126655][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'. [ 389.262382][T17714] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 389.522877][T17730] bond2: option lp_interval: invalid value (0) [ 389.530568][T17730] bond2: option lp_interval: allowed values 1 - 2147483647 [ 389.541067][T17730] bond2 (unregistering): Released all slaves [ 389.597567][T17734] netlink: 'syz.9.3259': attribute type 4 has an invalid length. [ 389.734159][T17740] lo: entered promiscuous mode [ 389.740003][T17740] tunl0: entered promiscuous mode [ 389.761651][T17740] gre0: entered promiscuous mode [ 389.796555][T17740] gretap0: entered promiscuous mode [ 389.815134][T17740] erspan0: entered promiscuous mode [ 389.829655][T17740] ip_vti0: entered promiscuous mode [ 389.839153][T17740] ip6_vti0: entered promiscuous mode [ 389.849144][T17740] sit0: entered promiscuous mode [ 389.855742][T17740] ip6tnl0: entered promiscuous mode [ 389.864998][T17740] ip6gre0: entered promiscuous mode [ 389.876954][T17740] syz_tun: entered promiscuous mode [ 389.888415][T17740] ip6gretap0: entered promiscuous mode [ 389.899734][T17740] bridge0: entered promiscuous mode [ 389.906272][T17740] vcan0: entered promiscuous mode [ 389.913206][T17740] bond0: entered promiscuous mode [ 389.918911][T17740] bond_slave_0: entered promiscuous mode [ 389.925814][T17740] bond_slave_1: entered promiscuous mode [ 389.938604][T17740] team0: entered promiscuous mode [ 389.945650][T17740] team_slave_0: entered promiscuous mode [ 389.951522][T17740] team_slave_1: entered promiscuous mode [ 389.965103][T17740] dummy0: entered promiscuous mode [ 389.973308][T17740] nlmon0: entered promiscuous mode [ 389.986828][T17740] caif0: entered promiscuous mode [ 389.992383][T17740] batadv0: entered promiscuous mode [ 390.000846][T17740] vxcan0: entered promiscuous mode [ 390.007592][T17740] vxcan1: entered promiscuous mode [ 390.016367][T17740] veth0: entered promiscuous mode [ 390.025858][T17740] veth1: entered promiscuous mode [ 390.035579][T17740] wg0: entered promiscuous mode [ 390.044880][T17740] wg1: entered promiscuous mode [ 390.052737][T17740] wg2: entered promiscuous mode [ 390.063439][T17740] veth0_to_bridge: entered promiscuous mode [ 390.079445][T17740] veth0_to_bond: entered promiscuous mode [ 390.092972][T17740] veth1_to_bond: entered promiscuous mode [ 390.106911][T17740] veth0_to_team: entered promiscuous mode [ 390.118566][T17740] veth1_to_team: entered promiscuous mode [ 390.130652][T17740] veth0_to_batadv: entered promiscuous mode [ 390.140872][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.149394][T17740] batadv_slave_0: entered promiscuous mode [ 390.159742][T17740] veth1_to_batadv: entered promiscuous mode [ 390.169478][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.179142][T17740] batadv_slave_1: entered promiscuous mode [ 390.196265][T17740] xfrm0: entered promiscuous mode [ 390.205493][T17740] veth1_to_hsr: entered promiscuous mode [ 390.221574][T17740] hsr0: entered promiscuous mode [ 390.231028][T17740] veth1_virt_wifi: entered promiscuous mode [ 390.242503][T17740] veth0_virt_wifi: entered promiscuous mode [ 390.251888][T17740] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 390.276597][T17740] vlan0: entered promiscuous mode [ 390.282067][T17740] vlan1: entered promiscuous mode [ 390.288589][T17740] macvlan0: entered promiscuous mode [ 390.296924][T17740] macvlan1: entered promiscuous mode [ 390.305627][T17740] ipvlan0: entered promiscuous mode [ 390.310997][T17740] ipvlan1: entered promiscuous mode [ 390.327261][T17740] macvtap0: entered promiscuous mode [ 390.336378][T17740] macsec0: entered promiscuous mode [ 390.346480][T17740] geneve0: entered promiscuous mode [ 390.356962][T17740] geneve1: entered promiscuous mode [ 390.366552][T17740] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 390.378427][T17740] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 390.388864][T17740] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 390.402459][T17740] tipc: Resetting bearer [ 390.416507][T17740] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 390.431584][T17740] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 390.441511][T17740] vxlan0: entered promiscuous mode [ 390.449905][T17740] ip6tnl1: entered promiscuous mode [ 390.456685][T17740] bond1: entered promiscuous mode [ 390.461765][T17740] bond2: entered promiscuous mode [ 390.469400][T17740] gre1: entered promiscuous mode [ 390.475941][T17740] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 390.483324][T17740] bridge1: entered promiscuous mode [ 390.489512][T17740] bond3: entered promiscuous mode [ 390.499897][T17740] bond4: entered promiscuous mode [ 390.506235][T17740] gretap1: entered promiscuous mode [ 390.516452][T17740] sit1: entered promiscuous mode [ 390.521610][T17740] ip6tnl2: entered promiscuous mode [ 390.552042][ T5974] vxcan1 speed is unknown, defaulting to 1000 [ 390.559260][T12112] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.569684][ T5974] syz2: Port: 1 Link DOWN [ 390.594255][T12112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.609591][T12112] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.644638][T12112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.658708][T12112] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.688522][T17756] netlink: 'syz.9.3265': attribute type 32 has an invalid length. [ 390.696076][T12112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.746983][T17761] nbd: must specify a device to reconfigure [ 390.782683][T17756] bond4: Setting coupled_control to off (0) [ 390.801549][T12112] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.812844][T12112] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.831605][T17761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.859218][T17761] batadv_slave_0: entered promiscuous mode [ 390.872949][T17761] batadv_slave_0: entered allmulticast mode [ 391.194034][T17785] siw: device registration error -23 [ 391.804478][T17819] __nla_validate_parse: 4 callbacks suppressed [ 391.804498][T17819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3282'. [ 391.992314][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3286'. [ 392.077912][T17837] veth5: entered promiscuous mode [ 392.083076][T17837] veth5: entered allmulticast mode [ 392.153470][T17837] veth7: entered promiscuous mode [ 392.158818][T17837] veth7: entered allmulticast mode [ 392.178360][T17843] sctp: [Deprecated]: syz.9.3289 (pid 17843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.178360][T17843] Use struct sctp_sack_info instead [ 392.251829][T17851] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 392.262804][T17851] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3291'. [ 392.275884][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 392.325417][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3293'. [ 392.441287][T17860] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 392.530203][T17865] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3295'. [ 392.541620][ T51] Bluetooth: hci5: link tx timeout [ 392.544506][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3295'. [ 392.550581][ T51] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 392.568522][ T51] Bluetooth: hci5: link tx timeout [ 392.574514][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.577271][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3295'. [ 392.832400][T17883] team0: Device geneve2 is up. Set it down before adding it as a team port [ 393.470757][T17919] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3313'. [ 393.566408][T17924] netlink: 'syz.0.3315': attribute type 19 has an invalid length. [ 393.781514][T17936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3319'. [ 394.124603][T17961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 394.529333][T17971] gretap0: entered promiscuous mode [ 394.563147][T17975] 0ªî{X¹¦: renamed from gretap0 [ 394.584711][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 394.622564][T17975] 0ªî{X¹¦: left promiscuous mode [ 394.629759][T17975] 0ªî{X¹¦: entered allmulticast mode [ 394.640908][T17975] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 395.012081][ T5157] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 395.022561][ T5157] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 395.031821][ T5157] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 395.043430][ T5157] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 395.052783][ T5157] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 395.118666][T17986] lo speed is unknown, defaulting to 1000 [ 395.373418][T17986] vxcan1 speed is unknown, defaulting to 1000 [ 395.399943][T17996] lo: left promiscuous mode [ 395.424637][T17996] tunl0: left promiscuous mode [ 395.429681][T17996] gre0: left promiscuous mode [ 395.445357][T17996] gretap0: left promiscuous mode [ 395.450475][T17996] erspan0: left promiscuous mode [ 395.464452][T17996] ip_vti0: left promiscuous mode [ 395.476357][T17996] ip6_vti0: left promiscuous mode [ 395.482136][T17996] sit0: left promiscuous mode [ 395.487403][T17996] ip6tnl0: left promiscuous mode [ 395.492626][T17996] ip6gre0: left promiscuous mode [ 395.499991][T17996] syz_tun: left promiscuous mode [ 395.506055][T17996] ip6gretap0: left promiscuous mode [ 395.511411][T17996] bridge0: left promiscuous mode [ 395.519065][T17996] vcan0: left promiscuous mode [ 395.554907][T17996] bond0: left promiscuous mode [ 395.560216][T17996] team0: left promiscuous mode [ 395.575772][T17996] dummy0: left promiscuous mode [ 395.580899][T17996] nlmon0: left promiscuous mode [ 395.586944][T17996] caif0: left promiscuous mode [ 395.592284][T17996] batadv0: left promiscuous mode [ 395.598921][T17996] vxcan0: left promiscuous mode [ 395.611869][T17996] vxcan1: left promiscuous mode [ 395.620960][T17996] veth0: left promiscuous mode [ 395.631715][T17996] veth1: left promiscuous mode [ 395.637580][T17996] wg0: left promiscuous mode [ 395.642480][T17996] wg1: left promiscuous mode [ 395.648259][T17996] wg2: left promiscuous mode [ 395.656419][T17996] veth0_to_bridge: left promiscuous mode [ 395.662376][T17996] veth0_to_bond: left promiscuous mode [ 395.669304][T17996] bond_slave_0: left promiscuous mode [ 395.676357][T17996] veth1_to_bond: left promiscuous mode [ 395.746589][T17996] bond_slave_1: left promiscuous mode [ 395.752202][T17996] veth0_to_team: left promiscuous mode [ 395.760416][T17996] team_slave_0: left promiscuous mode [ 395.768960][T17996] veth1_to_team: left promiscuous mode [ 395.777358][T17996] team_slave_1: left promiscuous mode [ 395.783219][T17996] veth0_to_batadv: left promiscuous mode [ 395.791647][T17996] batadv_slave_0: left promiscuous mode [ 395.798141][T17996] veth1_to_batadv: left promiscuous mode [ 395.805961][T17996] batadv_slave_1: left promiscuous mode [ 395.811790][T17996] xfrm0: left promiscuous mode [ 395.817615][T17996] veth1_to_hsr: left promiscuous mode [ 395.825319][T17996] hsr0: left promiscuous mode [ 395.830293][T17996] veth1_virt_wifi: left promiscuous mode [ 395.840981][T17996] veth0_virt_wifi: left promiscuous mode [ 395.852918][T17996] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 395.861637][T17996] vlan0: left promiscuous mode [ 395.869756][T17996] vlan1: left promiscuous mode [ 395.876804][T17996] macvlan0: left promiscuous mode [ 395.882126][T17996] macvlan1: left promiscuous mode [ 395.888674][T17996] ipvlan0: left promiscuous mode [ 395.895315][T17996] ipvlan1: left promiscuous mode [ 395.900884][T17996] macvtap0: left promiscuous mode [ 395.907636][T17996] macsec0: left promiscuous mode [ 395.912835][T17996] geneve0: left promiscuous mode [ 395.918761][T17996] geneve1: left promiscuous mode [ 395.926584][T17996] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 395.934675][T17996] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 395.942021][T17996] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 395.951344][T17996] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 395.960613][T17996] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 395.968519][T17996] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 395.976346][T17996] vxlan0: left promiscuous mode [ 395.981503][T17996] ip6tnl1: left promiscuous mode [ 395.988294][T17996] bond1: left promiscuous mode [ 395.993475][T17996] bond2: left promiscuous mode [ 395.999608][T17996] gre1: left promiscuous mode [ 396.005253][T17996] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 396.012687][T17996] bridge1: left promiscuous mode [ 396.019416][T17996] bond3: left promiscuous mode [ 396.026227][T17996] bond4: left promiscuous mode [ 396.031958][T17996] gretap1: left promiscuous mode [ 396.037925][T17996] sit1: left promiscuous mode [ 396.042948][T17996] ip6tnl2: left promiscuous mode [ 396.415142][T17986] chnl_net:caif_netlink_parms(): no params data found [ 396.653731][T17986] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.673973][T17986] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.686184][T17986] bridge_slave_0: entered allmulticast mode [ 396.698737][T17986] bridge_slave_0: entered promiscuous mode [ 396.729128][T17986] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.737416][T17986] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.754427][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 396.792672][T17986] bridge_slave_1: entered allmulticast mode [ 396.807223][T17986] bridge_slave_1: entered promiscuous mode [ 397.004523][T18030] __nla_validate_parse: 8 callbacks suppressed [ 397.004542][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3351'. [ 397.045033][T17986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.059034][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3351'. [ 397.077938][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3350'. [ 397.091257][T17986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.146974][ T5840] Bluetooth: hci8: command tx timeout [ 397.193148][T17986] team0: Port device team_slave_0 added [ 397.207801][T17986] team0: Port device team_slave_1 added [ 397.339977][T18042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 397.368616][T17986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.377466][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.406603][T17986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.429385][T17986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.436803][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.483966][T17986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.606471][T17986] hsr_slave_0: entered promiscuous mode [ 397.627953][T17986] hsr_slave_1: entered promiscuous mode [ 397.646484][T17986] debugfs: 'hsr0' already exists in 'hsr' [ 397.652354][T17986] Cannot create hsr debugfs directory [ 397.807311][T18070] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 397.826787][T18071] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3361'. [ 397.932425][T18078] delete_channel: no stack [ 398.102070][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.109928][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.391351][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.507380][T18073] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 398.553391][T18073] bond2: left promiscuous mode [ 398.560053][T18073] bond3: left promiscuous mode [ 398.565748][T18073] wireguard0: left promiscuous mode [ 398.614034][ T36] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.626974][ T36] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.665013][T18095] pim6reg: entered allmulticast mode [ 398.672480][ T36] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.698139][ T36] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.772843][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3368'. [ 398.792183][T17986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.818726][T17986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.877137][T18108] tipc: Enabled bearer , priority 0 [ 398.887288][T18107] tipc: Disabling bearer [ 399.003378][T17986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.018136][T17986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.116496][T17986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.129347][T17986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.221190][T17986] batman_adv: batadv0: Removing interface: netdevsim0 [ 399.229053][ T5840] Bluetooth: hci8: command tx timeout [ 399.240373][T17986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.256857][T17986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.582987][T17986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.615740][T17986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.635793][T17986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.667661][T17986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.811582][T18157] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3382'. [ 399.884993][T18157] bond5 (unregistering): Released all slaves [ 399.946813][T18163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3383'. [ 400.008366][T17986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.041728][T17986] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.085578][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.092784][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.127549][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.134771][T13273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.166532][T18171] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 400.217321][T18166] syzkaller1: entered promiscuous mode [ 400.225786][T18166] syzkaller1: entered allmulticast mode [ 400.515416][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 400.691215][T17986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.854956][T18202] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3392'. [ 401.196290][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3396'. [ 401.292153][T17986] veth0_vlan: entered promiscuous mode [ 401.310342][ T5840] Bluetooth: hci8: command tx timeout [ 401.331445][T17986] veth1_vlan: entered promiscuous mode [ 401.397751][T17986] veth0_macvtap: entered promiscuous mode [ 401.427766][T17986] veth1_macvtap: entered promiscuous mode [ 401.590633][T17986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.649544][T17986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.703975][ T5014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.717802][ T5014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.760972][ T5014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.774645][ T5014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.816848][T18248] netlink: 'syz.9.3402': attribute type 9 has an invalid length. [ 401.896684][T18251] netlink: 'syz.0.3403': attribute type 83 has an invalid length. [ 402.084333][T12112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.092252][T12112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.189803][ T5014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.202361][ T5014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.255292][T18262] tipc: Enabled bearer , priority 0 [ 402.275560][T18262] syzkaller0: entered promiscuous mode [ 402.281087][T18262] syzkaller0: entered allmulticast mode [ 402.318657][T18262] tipc: Resetting bearer [ 402.332389][T18261] tipc: Resetting bearer [ 402.356532][T18261] tipc: Disabling bearer [ 402.396159][T18267] dvmrp1: entered allmulticast mode [ 402.543046][T18277] __nla_validate_parse: 2 callbacks suppressed [ 402.543067][T18277] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3411'. [ 402.651174][T18277] nbd: device at index 4 is going down [ 403.047850][T18297] bond5: Removing last arp target with arp_interval on [ 403.092301][T18296] bond6: Removing last arp target with arp_interval on [ 403.172799][T18303] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 403.222538][T18305] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3420'. [ 403.348613][T18309] bond7: (slave bond_slave_1): Device is not our slave [ 403.358337][T18309] bond7: option active_slave: invalid value (bond_slave_1) [ 403.372442][T18309] bond7 (unregistering): Released all slaves [ 403.388021][ T5840] Bluetooth: hci8: command tx timeout [ 403.409209][T18311] netem: change failed [ 403.682480][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3428'. [ 403.758965][T18335] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 403.778374][T18335] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 403.790494][T18335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.977970][T18344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 404.262945][T18356] can: request_module (can-proto-0) failed. [ 404.482589][T18371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3439'. [ 404.492336][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3439'. [ 404.510619][T18374] syzkaller0: entered promiscuous mode [ 404.516839][T18374] syzkaller0: entered allmulticast mode [ 406.204731][T18437] netlink: 'syz.9.3455': attribute type 10 has an invalid length. [ 406.240274][T18437] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 406.473102][T13268] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.482601][T13268] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.496317][T13268] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.517294][T13268] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.567025][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'. [ 406.640318][T18449] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3460'. [ 406.779118][T18455] netlink: 'syz.4.3461': attribute type 9 has an invalid length. [ 406.840598][T18452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3461'. [ 406.991403][T18457] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 407.459347][T18470] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3466'. [ 407.561974][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 407.593943][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 407.604997][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 407.613179][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 407.622125][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 407.671559][T18472] lo speed is unknown, defaulting to 1000 [ 407.708983][T18477] netlink: 'syz.4.3468': attribute type 23 has an invalid length. [ 407.851141][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3469'. [ 407.912719][T18472] vxcan1 speed is unknown, defaulting to 1000 [ 407.919551][T18481] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.547060][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3479'. [ 408.618087][T18472] chnl_net:caif_netlink_parms(): no params data found [ 408.787734][T18472] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.799482][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.807365][T18472] bridge_slave_0: entered allmulticast mode [ 408.817367][T18472] bridge_slave_0: entered promiscuous mode [ 408.828831][T18472] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.837180][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.853053][T18472] bridge_slave_1: entered allmulticast mode [ 408.861630][T18472] bridge_slave_1: entered promiscuous mode [ 408.963321][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3480'. [ 409.023456][T18472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.069059][T18522] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3480'. [ 409.092844][T18472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.185967][T18472] team0: Port device team_slave_0 added [ 409.202677][T18472] team0: Port device team_slave_1 added [ 409.277199][T18472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.286858][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.293870][T18544] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.315074][T18472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.337984][T18472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.347741][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.382281][T18472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.402613][T18544] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3484'. [ 409.419205][T18545] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.492305][T18472] hsr_slave_0: entered promiscuous mode [ 409.507622][T18472] hsr_slave_1: entered promiscuous mode [ 409.514941][T18472] debugfs: 'hsr0' already exists in 'hsr' [ 409.521013][T18472] Cannot create hsr debugfs directory [ 409.704642][ T51] Bluetooth: hci9: command tx timeout [ 409.804228][T18472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.830770][T18565] netlink: 30 bytes leftover after parsing attributes in process `syz.9.3488'. [ 409.941857][T18472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.010965][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 410.022700][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 410.052319][T18472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.096337][T18576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3491'. [ 410.124432][T18472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.829756][T18472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 410.876559][T18472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 410.896323][T18472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 410.929170][T18472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.123328][T18472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.151754][T18472] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.171552][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.178954][T13266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.203027][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.210256][T13266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.571983][T18613] netlink: 'syz.4.3501': attribute type 1 has an invalid length. [ 411.580579][T18613] netlink: 'syz.4.3501': attribute type 2 has an invalid length. [ 411.602778][T18472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.787515][ T51] Bluetooth: hci9: command tx timeout [ 411.899271][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3507'. [ 411.914549][T18634] sctp: [Deprecated]: syz.9.3507 (pid 18634) Use of int in max_burst socket option deprecated. [ 411.914549][T18634] Use struct sctp_assoc_value instead [ 412.139599][T18472] veth0_vlan: entered promiscuous mode [ 412.176438][T18472] veth1_vlan: entered promiscuous mode [ 412.252221][T18472] veth0_macvtap: entered promiscuous mode [ 412.276642][T18472] veth1_macvtap: entered promiscuous mode [ 412.309220][T18472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.336903][T18472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.368695][T12112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.398349][T12112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.412625][T12112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.451177][T12112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.566843][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.583832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.592814][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.638478][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.648577][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.852333][T18668] syzkaller1: entered promiscuous mode [ 412.864665][T18668] syzkaller1: entered allmulticast mode [ 413.109940][T18680] __nla_validate_parse: 1 callbacks suppressed [ 413.109961][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 413.155653][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 413.561176][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3530'. [ 413.571872][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3530'. [ 413.701494][T18727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'. [ 413.720285][T18727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'. [ 413.866325][ T51] Bluetooth: hci9: command tx timeout [ 414.390236][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3545'. [ 414.399883][T18769] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3545'. [ 414.409846][T18769] netlink: 'syz.5.3545': attribute type 5 has an invalid length. [ 415.107565][T18800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3554'. [ 415.195492][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3554'. [ 415.252807][T18802] hsr_slave_1 (unregistering): left promiscuous mode [ 415.650491][T18820] netlink: 'syz.5.3560': attribute type 21 has an invalid length. [ 415.662703][T18820] netlink: 'syz.5.3560': attribute type 1 has an invalid length. [ 415.759678][T18812] 8021q: VLANs not supported on sit0 [ 415.765850][T18813] 8021q: VLANs not supported on sit0 [ 415.944633][ T51] Bluetooth: hci9: command tx timeout [ 416.036248][T18830] syzkaller0: entered promiscuous mode [ 416.041820][T18830] syzkaller0: entered allmulticast mode [ 416.053008][T18830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.082809][T18830] syzkaller0: mtu less than device minimum [ 416.478697][T18844] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.655863][T18844] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.798873][T18844] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.051970][T18844] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.182769][T12110] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.243260][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.278881][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.299044][T13266] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.387598][ T44] IPVS: starting estimator thread 0... [ 417.478411][T18889] IPVS: using max 25 ests per chain, 60000 per kthread [ 418.178844][T18925] netlink: 'syz.5.3592': attribute type 2 has an invalid length. [ 418.199257][T18925] : entered promiscuous mode [ 418.252958][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 418.262836][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 418.272056][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 418.286250][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 418.294514][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 418.330391][T18932] netlink: zone id is out of range [ 418.359757][T18927] lo speed is unknown, defaulting to 1000 [ 418.380885][T18933] __nla_validate_parse: 7 callbacks suppressed [ 418.380905][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3593'. [ 418.514990][T18936] block nbd9: not configured, cannot reconfigure [ 418.538340][T18932] netlink: set zone limit has 8 unknown bytes [ 418.547998][T18936] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3595'. [ 418.680239][T18927] vxcan1 speed is unknown, defaulting to 1000 [ 418.732054][T18944] vlan2: entered promiscuous mode [ 418.741305][T18944] bond0: entered promiscuous mode [ 418.747068][T18944] bond_slave_0: entered promiscuous mode [ 418.753135][T18944] bond_slave_1: entered promiscuous mode [ 419.145702][T18963] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3602'. [ 419.282344][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3605'. [ 419.400488][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3606'. [ 419.496171][T18927] chnl_net:caif_netlink_parms(): no params data found [ 419.544050][T18979] dvmrp1: entered allmulticast mode [ 419.552463][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3606'. [ 419.599929][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3608'. [ 419.681442][T18988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3609'. [ 419.769791][T18996] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3610'. [ 419.845773][T18927] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.853236][T18927] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.862095][T18927] bridge_slave_0: entered allmulticast mode [ 419.870836][T18927] bridge_slave_0: entered promiscuous mode [ 419.880566][T18927] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.892649][T18927] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.924970][T18927] bridge_slave_1: entered allmulticast mode [ 419.935602][T18927] bridge_slave_1: entered promiscuous mode [ 420.042026][T19010] pim6reg1: entered promiscuous mode [ 420.051513][T19010] pim6reg1: entered allmulticast mode [ 420.067285][T18927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.091162][T18927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.170073][T18927] team0: Port device team_slave_0 added [ 420.179525][T19013] 8021q: VLANs not supported on ip6_vti0 [ 420.188901][T18927] team0: Port device team_slave_1 added [ 420.215251][T19020] netlink: 'syz.4.3618': attribute type 4 has an invalid length. [ 420.263308][T18927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.288511][T18927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.320644][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3619'. [ 420.339332][T18927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.355017][ T5840] Bluetooth: hci10: command tx timeout [ 420.391642][T18927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.406615][T18927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.442858][T18927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.579425][T18927] hsr_slave_0: entered promiscuous mode [ 420.602378][T18927] hsr_slave_1: entered promiscuous mode [ 420.616283][T18927] debugfs: 'hsr0' already exists in 'hsr' [ 420.630057][T18927] Cannot create hsr debugfs directory [ 421.149579][T18927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.182218][T18927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.251052][T19066] netlink: 'syz.5.3631': attribute type 2 has an invalid length. [ 421.338005][T18927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.350196][T19068] netlink: 'syz.9.3632': attribute type 1 has an invalid length. [ 421.363076][T18927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.469611][T19070] batadv1: entered allmulticast mode [ 421.539643][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 421.552207][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 421.562006][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 421.572368][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 421.582626][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 421.708753][T18927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.720430][T18927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.773965][T19083] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20001 [ 421.798719][T19076] lo speed is unknown, defaulting to 1000 [ 421.872807][T18927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.886068][T18927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.922316][T19086] netlink: 'syz.9.3638': attribute type 2 has an invalid length. [ 422.113697][T19095] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 422.128103][T19094] dvmrp0: entered allmulticast mode [ 422.195910][T19076] vxcan1 speed is unknown, defaulting to 1000 [ 422.202931][T18927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.230403][T19099] net veth1_virt_wifi .: renamed from virt_wifi0 [ 422.242920][T19094] dvmrp0: left allmulticast mode [ 422.277796][T18927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.318313][T18927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.355332][T18927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.436188][ T51] Bluetooth: hci10: command tx timeout [ 422.804759][T18927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.857169][T19124] netlink: 'syz.9.3647': attribute type 1 has an invalid length. [ 422.891377][T18927] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.925860][T19124] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 423.055880][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.071390][T12110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.151632][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.158983][T12110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.233231][T19150] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 423.316750][T19076] chnl_net:caif_netlink_parms(): no params data found [ 423.450331][T19155] __nla_validate_parse: 10 callbacks suppressed [ 423.450352][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3655'. [ 423.490014][T19161] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3654'. [ 423.601729][T19155] bridge_slave_1: left allmulticast mode [ 423.610718][T19155] bridge_slave_1: left promiscuous mode [ 423.617691][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.621299][T19169] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3655'. [ 423.661532][ T51] Bluetooth: hci11: command tx timeout [ 423.709331][T19155] bridge_slave_0: left allmulticast mode [ 423.716099][T19155] bridge_slave_0: left promiscuous mode [ 423.722040][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.051225][T19076] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.059154][T19076] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.067217][T19076] bridge_slave_0: entered allmulticast mode [ 424.076859][T19076] bridge_slave_0: entered promiscuous mode [ 424.090002][T19076] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.097802][T19076] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.109577][T19076] bridge_slave_1: entered allmulticast mode [ 424.128531][T19076] bridge_slave_1: entered promiscuous mode [ 424.306685][T19076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.330064][T19076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.440500][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3662'. [ 424.490725][T19076] team0: Port device team_slave_0 added [ 424.508371][ T51] Bluetooth: hci10: command tx timeout [ 424.520623][T19076] team0: Port device team_slave_1 added [ 424.597988][T19076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.605048][T19076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.632280][T19076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.653277][T19076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.662508][T19076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.690327][T19076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.840510][T19076] hsr_slave_0: entered promiscuous mode [ 424.855035][T19076] hsr_slave_1: entered promiscuous mode [ 424.876938][T19076] debugfs: 'hsr0' already exists in 'hsr' [ 424.883476][T19076] Cannot create hsr debugfs directory [ 424.909005][T18927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.310302][T19234] netlink: 'syz.5.3674': attribute type 1 has an invalid length. [ 425.462609][T19232] tipc: Enabled bearer , priority 0 [ 425.476178][T19232] syzkaller0: entered promiscuous mode [ 425.491868][T19232] syzkaller0: entered allmulticast mode [ 425.526834][T18927] veth0_vlan: entered promiscuous mode [ 425.569655][T19232] tipc: Resetting bearer [ 425.579812][T19243] netlink: 'syz.5.3675': attribute type 10 has an invalid length. [ 425.596522][T19231] tipc: Resetting bearer [ 425.622004][T19231] tipc: Disabling bearer [ 425.645857][T18927] veth1_vlan: entered promiscuous mode [ 425.704565][ T51] Bluetooth: hci11: command tx timeout [ 425.781510][T19247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.792863][T19247] batadv_slave_1: entered promiscuous mode [ 425.860319][T19076] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.912451][T19076] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.934779][T18927] veth0_macvtap: entered promiscuous mode [ 425.949804][T19076] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.978408][T18927] veth1_macvtap: entered promiscuous mode [ 426.009774][T19076] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.157696][T18927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.194018][T18927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.224281][T12112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.232141][T12112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.257857][T12110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.290985][T12110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.319379][T12110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.339618][T12110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.561189][T19286] netlink: 'syz.9.3688': attribute type 2 has an invalid length. [ 426.585458][ T51] Bluetooth: hci10: command tx timeout [ 426.608098][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.616677][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.776759][T13266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.790460][T13266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.801830][T19076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.899509][T19076] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.948920][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.956140][T13266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.021337][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.028556][T13266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.164755][T19314] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3696'. [ 427.196291][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3696'. [ 427.206526][T19314] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3696'. [ 427.288693][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3696'. [ 427.326565][T19322] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3698'. [ 427.402037][T19327] netlink: 'syz.1.3699': attribute type 21 has an invalid length. [ 427.696869][T19337] netlink: 'syz.4.3703': attribute type 4 has an invalid length. [ 427.788740][ T51] Bluetooth: hci11: command tx timeout [ 427.845385][T19343] openvswitch: netlink: Missing valid actions attribute. [ 427.892344][T19343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.943833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.035390][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 428.056698][T19076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.149442][T19355] bond1: option miimon: invalid value (18446744073709551585) [ 428.160582][T19355] bond1: option miimon: allowed values 0 - 2147483647 [ 428.176785][T19355] bond1 (unregistering): Released all slaves [ 428.192935][T19360] netlink: 'syz.5.3708': attribute type 10 has an invalid length. [ 428.259211][T19360] team0: Port device geneve0 added [ 428.430220][T19368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.533042][T19377] __nla_validate_parse: 4 callbacks suppressed [ 428.533062][T19377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3713'. [ 428.556890][T19377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3713'. [ 428.593147][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3714'. [ 429.112098][T19400] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3718'. [ 429.151555][T19400] nbd: couldn't find a device at index 134217728 [ 429.258347][T19076] veth0_vlan: entered promiscuous mode [ 429.426304][T19076] veth1_vlan: entered promiscuous mode [ 429.630600][T19430] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3721'. [ 429.702037][T19076] veth0_macvtap: entered promiscuous mode [ 429.782596][T19076] veth1_macvtap: entered promiscuous mode [ 429.877563][ T51] Bluetooth: hci11: command tx timeout [ 430.039326][T19076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.097598][T19076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.151043][T12110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.170416][T12110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.192365][T12110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.211417][T12110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.303896][T19450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3728'. [ 430.481955][T19460] netlink: 'syz.5.3731': attribute type 28 has an invalid length. [ 430.513674][T19460] netlink: 'syz.5.3731': attribute type 3 has an invalid length. [ 430.544904][T19460] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3731'. [ 430.574118][T12096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.582993][T12096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.920115][T19463] gretap1: entered promiscuous mode [ 430.928472][T19463] gretap1: entered allmulticast mode [ 430.976922][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.993948][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.269375][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3735'. [ 431.297080][ T1092] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.323319][ T1092] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.365579][ T1092] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.407082][ T1092] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.452214][T19494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3738'. [ 431.681544][T19501] tipc: Enabled bearer , priority 0 [ 431.702519][T19504] netlink: 'syz.5.3741': attribute type 2 has an invalid length. [ 431.717445][T19501] syzkaller0: entered promiscuous mode [ 431.723177][T19504] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3741'. [ 431.739251][T19501] syzkaller0: entered allmulticast mode [ 431.753101][T19504] nbd: must specify at least one socket [ 431.765827][T19501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 431.855602][T19500] tipc: Resetting bearer [ 431.895105][T19500] tipc: Disabling bearer [ 432.103100][T19524] C: renamed from lo [ 432.111225][T19524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 432.296123][T19531] netlink: 'syz.9.3749': attribute type 1 has an invalid length. [ 432.899246][ T5947] IPVS: starting estimator thread 0... [ 433.044346][T19582] netlink: 'syz.5.3764': attribute type 1 has an invalid length. [ 433.055304][T19577] IPVS: using max 25 ests per chain, 60000 per kthread [ 433.115179][T19582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.588238][T19625] __nla_validate_parse: 10 callbacks suppressed [ 433.588259][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3777'. [ 433.832544][T19636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.839864][T19636] IPv6: NLM_F_CREATE should be set when creating new route [ 433.841156][T19637] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3781'. [ 433.882034][T19637] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3781'. [ 434.058110][T19648] netlink: 'syz.9.3784': attribute type 33 has an invalid length. [ 434.084705][T19648] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3784'. [ 434.106225][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 434.144983][T19651] sctp: [Deprecated]: syz.1.3785 (pid 19651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.144983][T19651] Use struct sctp_sack_info instead [ 434.455750][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3790'. [ 434.600858][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 434.785530][T19687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3798'. [ 435.168129][T19697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3801'. [ 435.185119][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3803'. [ 435.521826][T19720] bond2: option lp_interval: invalid value (0) [ 435.528925][T19720] bond2: option lp_interval: allowed values 1 - 2147483647 [ 435.540381][T19720] bond2 (unregistering): Released all slaves [ 435.890361][T19744] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 435.960580][T19748] sch_fq: defrate 0 ignored. [ 436.685475][T19785] sctp: [Deprecated]: syz.4.3829 (pid 19785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.685475][T19785] Use struct sctp_sack_info instead [ 436.735660][T19785] sctp: [Deprecated]: syz.4.3829 (pid 19785) Use of int in maxseg socket option. [ 436.735660][T19785] Use struct sctp_assoc_value instead [ 436.988136][T19757] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 437.298075][T19822] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 437.397798][T19827] netlink: 'syz.9.3840': attribute type 5 has an invalid length. [ 437.521966][T19831] syzkaller1: entered promiscuous mode [ 437.552305][T19831] syzkaller1: entered allmulticast mode [ 437.581647][T19834] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 437.590598][T19834] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 437.607097][T19834] netlink: 'syz.9.3843': attribute type 10 has an invalid length. [ 437.965654][T19850] hsr_slave_0 (unregistering): left promiscuous mode [ 437.986804][T19856] wg2: entered promiscuous mode [ 437.992697][T19856] wg2: entered allmulticast mode [ 438.265146][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 438.310723][T19873] bridge_slave_1 (unregistering): left allmulticast mode [ 438.319083][T19873] bridge_slave_1 (unregistering): left promiscuous mode [ 438.327939][T19873] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.630728][T19847] delete_channel: no stack [ 438.645822][T19893] __nla_validate_parse: 18 callbacks suppressed [ 438.645844][T19893] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3864'. [ 438.659667][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3863'. [ 438.699701][T19891] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3863'. [ 438.727929][T19891] netlink: zone id is out of range [ 438.737343][T19891] netlink: zone id is out of range [ 438.742636][T19891] netlink: zone id is out of range [ 438.755569][T19891] netlink: zone id is out of range [ 438.760850][T19891] netlink: zone id is out of range [ 438.766427][T19891] netlink: zone id is out of range [ 438.773466][T19891] netlink: zone id is out of range [ 438.780771][T19891] netlink: zone id is out of range [ 438.790750][T19891] netlink: zone id is out of range [ 438.796361][T19891] netlink: zone id is out of range [ 439.062809][T19916] netlink: 'syz.4.3870': attribute type 10 has an invalid length. [ 439.108458][T19916] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.160445][T19916] bridge_slave_1: left allmulticast mode [ 439.188221][T19916] bridge_slave_1: left promiscuous mode [ 439.213147][T19916] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.288920][T19916] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 439.492786][T19941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3876'. [ 439.764129][T19962] netlink: 'syz.1.3882': attribute type 10 has an invalid length. [ 439.926927][T19962] team0: Device ipvlan1 failed to register rx_handler [ 440.007431][T19965] bond2 (unregistering): Released all slaves [ 440.016156][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3881'. [ 440.098044][T19971] tc_dump_action: action bad kind [ 440.238363][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3886'. [ 440.256330][T19971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.495704][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3889'. [ 440.516551][T19988] netlink: 248 bytes leftover after parsing attributes in process `syz.9.3890'. [ 440.710954][T19996] vxcan1: entered allmulticast mode [ 440.916668][T20008] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3896'. [ 440.966246][T20010] veth0_virt_wifi: entered allmulticast mode [ 441.097366][T20012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3898'. [ 441.117472][T20015] xt_HMARK: proto mask must be zero with L3 mode [ 441.127389][T20012] netlink: 'syz.1.3898': attribute type 2 has an invalid length. [ 441.292515][T20026] bond7 (unregistering): Released all slaves [ 441.433192][T20039] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 441.477292][T20040] netlink: 'syz.1.3906': attribute type 64 has an invalid length. [ 441.487638][T20040] netlink: 'syz.1.3906': attribute type 64 has an invalid length. [ 442.422545][T20060] delete_channel: no stack [ 442.801944][T20078] syzkaller1: entered promiscuous mode [ 442.829553][T20078] syzkaller1: entered allmulticast mode [ 443.226148][T20096] netlink: 'syz.4.3922': attribute type 4 has an invalid length. [ 443.246377][T10833] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 443.273747][T10833] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 443.422410][T20111] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 443.443937][T20112] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 443.762978][T20136] team0: Device vti0 is of different type [ 444.270289][T20158] __nla_validate_parse: 7 callbacks suppressed [ 444.270311][T20158] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3938'. [ 444.785476][T20175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3942'. [ 445.392457][T20198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3949'. [ 445.534782][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3953'. [ 445.696556][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3952'. [ 445.779654][T20222] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 445.789979][T20222] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3954'. [ 445.875742][T20225] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3955'. [ 446.230505][T20242] tipc: Started in network mode [ 446.237086][T20242] tipc: Node identity aa39eb1ed866, cluster identity 4711 [ 446.247762][T20242] tipc: Enabled bearer , priority 0 [ 446.261531][T20242] syzkaller0: entered promiscuous mode [ 446.269335][T20242] syzkaller0: entered allmulticast mode [ 446.278779][T20242] syzkaller0: left promiscuous mode [ 446.294980][T20242] syzkaller0: left allmulticast mode [ 446.334331][T20242] tipc: Resetting bearer [ 446.387152][T20241] tipc: Resetting bearer [ 446.432179][T20241] tipc: Disabling bearer [ 446.760058][T20269] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 446.775685][T20269] bond2 (unregistering): Released all slaves [ 446.802856][T20274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 446.984975][T20278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3973'. [ 447.204156][T20294] netlink: 'syz.7.3974': attribute type 1 has an invalid length. [ 447.305045][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 447.311107][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 447.311196][ T5851] Bluetooth: hci7: command 0x0406 tx timeout [ 447.329202][T20301] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3978'. [ 447.540349][T20311] bond2: option lp_interval: invalid value (0) [ 447.548144][T20311] bond2: option lp_interval: allowed values 1 - 2147483647 [ 447.566322][T20311] bond2 (unregistering): Released all slaves [ 447.747920][T20323] net_ratelimit: 6 callbacks suppressed [ 447.747938][T20323] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 448.783413][T20374] netlink: 'syz.9.4000': attribute type 21 has an invalid length. [ 448.880510][T20383] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 448.892857][T20375] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 448.903210][T20383] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 448.915422][T20378] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 448.927456][T20383] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 448.951794][T20383] netlink: 'syz.4.4004': attribute type 2 has an invalid length. [ 448.981073][T20384] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 449.020320][T20384] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 449.050169][T20384] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 449.071867][T20384] netlink: 'syz.4.4004': attribute type 2 has an invalid length. [ 449.356823][T20415] netlink: 'syz.1.4010': attribute type 4 has an invalid length. [ 449.860216][T20435] __nla_validate_parse: 7 callbacks suppressed [ 449.860236][T20435] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4018'. [ 449.962584][T20439] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4020'. [ 450.159916][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4023'. [ 450.175390][T20449] bridge_slave_1: left allmulticast mode [ 450.181250][T20449] bridge_slave_1: left promiscuous mode [ 450.190097][T20449] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.209399][T20449] bridge_slave_0: left allmulticast mode [ 450.221360][T20449] bridge_slave_0: left promiscuous mode [ 450.227772][T20449] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.419042][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4024'. [ 450.594712][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4029'. [ 450.637750][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4030'. [ 450.667899][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4029'. [ 450.747869][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4028'. [ 450.939581][T20481] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4033'. [ 450.985339][ T31] INFO: task syz.4.2163:13921 blocked for more than 143 seconds. [ 451.009183][ T31] Not tainted syzkaller #0 [ 451.016330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.035535][ T31] task:syz.4.2163 state:D stack:25960 pid:13921 tgid:13920 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 451.047750][ T31] Call Trace: [ 451.051160][ T31] [ 451.054687][ T31] __schedule+0x1798/0x4cc0 [ 451.059332][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.064840][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.069768][ T31] ? __pfx___schedule+0x10/0x10 [ 451.074877][ T31] ? schedule+0x91/0x360 [ 451.079179][ T31] schedule+0x165/0x360 [ 451.083390][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.089261][ T31] __mutex_lock+0x7e6/0x1350 [ 451.094182][ T31] ? __mutex_lock+0x5bb/0x1350 [ 451.098986][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 451.104893][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.109961][ T31] ? net_generic+0x1e/0x240 [ 451.115064][ T31] ? net_generic+0x1e/0x240 [ 451.121207][ T31] ? net_generic+0x1e/0x240 [ 451.126721][ T31] ? net_generic+0x1e/0x240 [ 451.131394][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 451.137344][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 451.143045][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.149539][ T31] ? bpf_lsm_capable+0x9/0x20 [ 451.154577][ T31] ? security_capable+0x7e/0x2e0 [ 451.159611][ T31] genl_rcv_msg+0x60e/0x790 [ 451.164204][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.169250][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 451.176001][ T31] netlink_rcv_skb+0x205/0x470 [ 451.180795][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.185726][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.190776][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.197349][ T31] ? down_read+0x1ad/0x2e0 [ 451.201786][ T31] genl_rcv+0x28/0x40 [ 451.206083][ T31] netlink_unicast+0x82c/0x9e0 [ 451.210875][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 451.216351][ T31] ? netlink_sendmsg+0x642/0xb30 [ 451.222415][ T31] ? skb_put+0x11b/0x210 [ 451.228207][ T31] netlink_sendmsg+0x805/0xb30 [ 451.233326][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.240771][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.247212][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.252663][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.258741][ T31] __sock_sendmsg+0x219/0x270 [ 451.264004][ T31] ____sys_sendmsg+0x505/0x830 [ 451.268825][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.275089][ T31] ? import_iovec+0x74/0xa0 [ 451.279633][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 451.284483][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.289833][ T31] ? __fget_files+0x2a/0x420 [ 451.295076][ T31] ? __fget_files+0x3a0/0x420 [ 451.299797][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 451.305012][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.310668][ T31] ? rcu_is_watching+0x15/0xb0 [ 451.315726][ T31] ? do_syscall_64+0xbe/0x3b0 [ 451.321805][ T31] do_syscall_64+0xfa/0x3b0 [ 451.326898][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.332124][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.338466][ T31] ? clear_bhb_loop+0x60/0xb0 [ 451.343172][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.349862][ T31] RIP: 0033:0x7fd4fd58eec9 [ 451.354873][ T31] RSP: 002b:00007fd4fe397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.363338][ T31] RAX: ffffffffffffffda RBX: 00007fd4fd7e5fa0 RCX: 00007fd4fd58eec9 [ 451.371366][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 451.379507][ T31] RBP: 00007fd4fd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.387947][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.396269][ T31] R13: 00007fd4fd7e6038 R14: 00007fd4fd7e5fa0 R15: 00007ffdde290ea8 [ 451.406588][ T31] [ 451.409798][ T31] INFO: task syz.5.2180:13995 blocked for more than 143 seconds. [ 451.418980][ T31] Not tainted syzkaller #0 [ 451.425286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.443978][ T31] task:syz.5.2180 state:D stack:25384 pid:13995 tgid:13993 ppid:12671 task_flags:0x400140 flags:0x00080002 [ 451.467351][ T31] Call Trace: [ 451.472029][ T31] [ 451.475426][ T31] __schedule+0x1798/0x4cc0 [ 451.479989][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.485049][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.490188][ T31] ? __pfx___schedule+0x10/0x10 [ 451.495412][ T31] ? schedule+0x91/0x360 [ 451.499793][ T31] schedule+0x165/0x360 [ 451.505451][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.511041][ T31] __mutex_lock+0x7e6/0x1350 [ 451.518103][ T31] ? __mutex_lock+0x5bb/0x1350 [ 451.522914][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 451.529943][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.535397][ T31] ? __asan_memset+0x22/0x50 [ 451.540017][ T31] ? ____sys_sendmsg+0x505/0x830 [ 451.546487][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 451.551373][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 451.556725][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 451.562491][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 451.568616][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 451.574938][ T31] ? __nla_parse+0x40/0x60 [ 451.579370][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 451.585809][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 451.591413][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.598016][ T31] ? bpf_lsm_capable+0x9/0x20 [ 451.602709][ T31] ? security_capable+0x7e/0x2e0 [ 451.607719][ T31] genl_rcv_msg+0x60e/0x790 [ 451.612281][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.617475][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 451.625281][ T31] ? __asan_memcpy+0x40/0x70 [ 451.631355][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 451.636953][ T31] netlink_rcv_skb+0x205/0x470 [ 451.641738][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.646640][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.651690][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.657492][ T31] ? down_read+0x1ad/0x2e0 [ 451.661976][ T31] genl_rcv+0x28/0x40 [ 451.666064][ T31] netlink_unicast+0x82c/0x9e0 [ 451.670878][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 451.676495][ T31] ? netlink_sendmsg+0x642/0xb30 [ 451.681463][ T31] ? skb_put+0x11b/0x210 [ 451.686020][ T31] netlink_sendmsg+0x805/0xb30 [ 451.690825][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.696288][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.701261][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.706657][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.711998][ T31] __sock_sendmsg+0x219/0x270 [ 451.717255][ T31] ____sys_sendmsg+0x505/0x830 [ 451.722064][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.727453][ T31] ? import_iovec+0x74/0xa0 [ 451.733102][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 451.738018][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.743266][ T31] ? __fget_files+0x2a/0x420 [ 451.748182][ T31] ? __fget_files+0x3a0/0x420 [ 451.752888][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 451.757992][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.763471][ T31] ? rcu_is_watching+0x15/0xb0 [ 451.768350][ T31] ? do_syscall_64+0xbe/0x3b0 [ 451.773303][ T31] do_syscall_64+0xfa/0x3b0 [ 451.778296][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.784013][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.790116][ T31] ? clear_bhb_loop+0x60/0xb0 [ 451.795017][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.801016][ T31] RIP: 0033:0x7f669358eec9 [ 451.805725][ T31] RSP: 002b:00007f66943de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.814373][ T31] RAX: ffffffffffffffda RBX: 00007f66937e5fa0 RCX: 00007f669358eec9 [ 451.822467][ T31] RDX: 0000000020000090 RSI: 0000200000000100 RDI: 0000000000000004 [ 451.830708][ T31] RBP: 00007f6693611f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.840227][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.848323][ T31] R13: 00007f66937e6038 R14: 00007f66937e5fa0 R15: 00007ffedae3b578 [ 451.856596][ T31] [ 451.860020][ T31] [ 451.860020][ T31] Showing all locks held in the system: [ 451.878491][ T31] 1 lock held by khungtaskd/31: [ 451.883380][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 451.893329][ T31] 2 locks held by getty/5598: [ 451.898507][ T31] #0: ffff88814da200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.908367][ T31] #1: ffffc9000362e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 451.918699][ T31] 4 locks held by kworker/u8:11/12095: [ 451.924598][ T31] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 451.937002][ T31] #1: ffffc90019d6fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 451.948182][ T31] #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 451.957948][ T31] #3: ffffffff8dd401c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.967975][ T31] 2 locks held by syz.0.1679/12185: [ 451.973178][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 451.981610][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 451.992263][ T31] 2 locks held by syz.4.2163/13921: [ 451.997678][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.006101][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 452.016528][ T31] 2 locks held by syz.5.2180/13995: [ 452.021729][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.030065][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.041581][ T31] 2 locks held by syz.8.3105/17264: [ 452.047084][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.055419][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.065698][ T31] 2 locks held by syz.3.3287/17835: [ 452.070917][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.079516][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.089778][ T31] 2 locks held by syz.0.3414/18294: [ 452.095331][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.104454][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.114937][ T31] 2 locks held by syz.2.3450/18406: [ 452.120150][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.128619][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.139274][ T31] 2 locks held by syz.5.3888/19983: [ 452.145782][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.154112][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 452.164852][ T31] [ 452.167223][ T31] ============================================= [ 452.167223][ T31] [ 452.178228][ T31] NMI backtrace for cpu 1 [ 452.178250][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.178274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.178287][ T31] Call Trace: [ 452.178295][ T31] [ 452.178305][ T31] dump_stack_lvl+0x189/0x250 [ 452.178340][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.178367][ T31] ? __pfx__printk+0x10/0x10 [ 452.178414][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 452.178466][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 452.178499][ T31] ? __pfx__printk+0x10/0x10 [ 452.178537][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.178562][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 452.178595][ T31] watchdog+0xf93/0xfe0 [ 452.178623][ T31] ? watchdog+0x1de/0xfe0 [ 452.178650][ T31] kthread+0x711/0x8a0 [ 452.178682][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.178702][ T31] ? __pfx_kthread+0x10/0x10 [ 452.178733][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.178765][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.178798][ T31] ? __pfx_kthread+0x10/0x10 [ 452.178827][ T31] ret_from_fork+0x436/0x7d0 [ 452.178854][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.178884][ T31] ? __switch_to_asm+0x39/0x70 [ 452.178913][ T31] ? __switch_to_asm+0x33/0x70 [ 452.178941][ T31] ? __pfx_kthread+0x10/0x10 [ 452.178971][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.179020][ T31] [ 452.179028][ T31] Sending NMI from CPU 1 to CPUs 0: [ 452.340799][ C0] NMI backtrace for cpu 0 [ 452.340816][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 452.340837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.340849][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 452.340902][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 452.340919][ C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 000002c6 [ 452.340936][ C0] RAX: 92aeda22ff7e9b00 RBX: ffffffff81953917 RCX: 92aeda22ff7e9b00 [ 452.340950][ C0] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 452.340963][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 452.340977][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f5b8630 [ 452.340991][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a28 [ 452.341004][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 452.341018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.341031][ C0] CR2: 00007fff946bde68 CR3: 000000007538e000 CR4: 00000000003526f0 [ 452.341048][ C0] Call Trace: [ 452.341055][ C0] [ 452.341062][ C0] default_idle+0x13/0x20 [ 452.341082][ C0] default_idle_call+0x73/0xb0 [ 452.341103][ C0] do_idle+0x1e7/0x510 [ 452.341128][ C0] ? __pfx_do_idle+0x10/0x10 [ 452.341164][ C0] cpu_startup_entry+0x44/0x60 [ 452.341184][ C0] rest_init+0x2de/0x300 [ 452.341208][ C0] start_kernel+0x3ae/0x410 [ 452.341234][ C0] x86_64_start_reservations+0x24/0x30 [ 452.341253][ C0] x86_64_start_kernel+0x143/0x1c0 [ 452.341272][ C0] common_startup_64+0x13e/0x147 [ 452.341308][ C0] [ 452.342516][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 452.523161][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.532284][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.542363][ T31] Call Trace: [ 452.545649][ T31] [ 452.548592][ T31] dump_stack_lvl+0x99/0x250 [ 452.553201][ T31] ? __asan_memcpy+0x40/0x70 [ 452.557804][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.563016][ T31] ? __pfx__printk+0x10/0x10 [ 452.567657][ T31] vpanic+0x281/0x750 [ 452.571653][ T31] ? __pfx_vpanic+0x10/0x10 [ 452.576183][ T31] ? preempt_schedule+0xae/0xc0 [ 452.581069][ T31] ? preempt_schedule_common+0x83/0xd0 [ 452.586561][ T31] panic+0xb9/0xc0 [ 452.590299][ T31] ? __pfx_panic+0x10/0x10 [ 452.594826][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 452.600210][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 452.606375][ T31] watchdog+0xfd2/0xfe0 [ 452.610545][ T31] ? watchdog+0x1de/0xfe0 [ 452.614891][ T31] kthread+0x711/0x8a0 [ 452.619068][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.623752][ T31] ? __pfx_kthread+0x10/0x10 [ 452.628448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.633658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.638874][ T31] ? __pfx_kthread+0x10/0x10 [ 452.643493][ T31] ret_from_fork+0x436/0x7d0 [ 452.648138][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.653302][ T31] ? __switch_to_asm+0x39/0x70 [ 452.658123][ T31] ? __switch_to_asm+0x33/0x70 [ 452.662906][ T31] ? __pfx_kthread+0x10/0x10 [ 452.667510][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.672301][ T31] [ 452.675610][ T31] Kernel Offset: disabled [ 452.679941][ T31] Rebooting in 86400 seconds..